Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/s0qGYKHKEhsZzPWAIRA3pY197oU.roa
File: s0qGYKHKEhsZzPWAIRA3pY197oU.roa (raw, json)
Hash identifier: 7WZTnpP5gq6ML0Q9k0XGTsmMJLxzC6LLNoywxYD3KyQ=
Subject key identifier: B3:4A:86:60:A1:CA:12:1B:19:CC:F5:80:21:10:37:A5:8D:7D:EE:85
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 0189D94AB26B49B00FF3276853F07F5F6DFC
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/s0qGYKHKEhsZzPWAIRA3pY197oU.roa
Signing time: Wed 09 Aug 2023 07:54:58 +0000
ROA not before: Wed 09 Aug 2023 07:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48265
IP address blocks: 91.210.137.0/24 maxlen: 24
91.210.138.0/24 maxlen: 24
91.210.136.0/24 maxlen: 24
91.210.139.0/24 maxlen: 24
109.104.131.0/24 maxlen: 24
109.104.132.0/24 maxlen: 24
109.104.129.0/24 maxlen: 24
109.104.130.0/24 maxlen: 24
109.104.128.0/24 maxlen: 24
109.104.136.0/24 maxlen: 24
109.104.137.0/24 maxlen: 24
109.104.135.0/24 maxlen: 24
109.104.133.0/24 maxlen: 24
109.104.134.0/24 maxlen: 24
109.104.145.0/24 maxlen: 24
109.104.144.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
109.104.157.0/24 maxlen: 24
109.104.158.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:4a:b2:6b:49:b0:0f:f3:27:68:53:f0:7f:5f:6d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Aug 9 07:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b34a8660a1ca121b19ccf580211037a58d7dee85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:3f:ce:e7:4e:a3:82:d4:51:d9:c9:33:bb:
a4:9e:56:d0:b8:f6:91:15:cd:3b:03:bf:46:ff:13:
4e:ba:10:54:41:bd:46:03:52:de:d0:bf:d1:01:f3:
06:9a:5a:bb:22:96:44:1a:76:0d:4e:dd:13:c2:cd:
14:4c:ee:80:a8:ce:4f:fd:63:8e:b0:97:f4:66:27:
12:77:2c:51:7f:a2:47:ae:87:d9:84:45:76:ed:51:
c1:8a:33:54:28:83:0f:5b:3f:3c:73:09:58:08:f5:
80:4d:e6:15:2b:0a:3c:36:b5:d6:eb:68:c2:37:2a:
53:de:70:b9:b8:78:8c:39:69:82:9f:35:21:4e:28:
7e:f8:08:3e:ec:97:3e:0d:e7:ca:ee:8d:45:31:f6:
a2:18:da:b3:e6:dc:fc:ee:76:89:27:b3:58:98:00:
a5:41:25:9b:78:05:db:7a:36:ef:0b:4d:29:a8:04:
71:33:5e:9f:01:c6:f9:08:28:a3:58:09:5e:74:e1:
97:36:ef:f4:c9:e4:36:85:01:f1:6e:95:da:7f:9b:
21:a4:72:55:28:33:9f:b6:3e:04:c3:6d:0f:84:82:
0a:b6:55:92:8d:68:e7:d0:87:cf:61:68:44:7f:23:
31:67:9f:08:92:a2:a7:39:90:62:d9:dc:70:64:87:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4A:86:60:A1:CA:12:1B:19:CC:F5:80:21:10:37:A5:8D:7D:EE:85
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/s0qGYKHKEhsZzPWAIRA3pY197oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.136.0/22
109.104.128.0-109.104.137.255
109.104.144.0/23
109.104.157.0-109.104.159.255
Signature Algorithm: sha256WithRSAEncryption
d1:fd:21:df:a8:75:aa:d0:c3:9f:38:51:80:69:7f:1f:f8:fb:
91:6f:9e:82:aa:e2:d4:bf:cc:9f:78:26:95:d8:93:34:77:1d:
f5:22:08:d2:1e:be:c5:33:74:72:62:91:46:b7:84:d6:cd:be:
eb:17:a1:20:ba:04:b9:fa:13:60:f2:a1:23:b4:9b:59:f8:36:
f9:73:7b:1c:f9:13:25:af:7f:ab:7f:13:08:82:bc:dd:dd:a1:
f4:15:5c:8d:81:ce:9d:80:af:bf:9d:6a:41:d8:b8:72:38:4d:
c2:fb:dd:4e:1c:d1:ec:04:95:75:fe:00:ad:92:5a:6a:24:52:
56:7b:af:f2:b7:78:e9:d6:88:bc:19:6d:ba:d9:93:98:d9:fd:
82:ed:cb:29:c4:2d:dd:78:79:0d:b9:f4:ae:74:80:a0:ac:04:
2d:c5:4c:d6:4f:3c:20:9b:a2:1a:31:95:19:c3:15:88:db:34:
1a:55:45:c6:1d:f8:33:38:26:ab:57:e2:d8:86:12:83:53:6c:
1a:7e:2f:a0:84:c7:16:ad:30:e9:3f:80:ef:fa:2a:23:3a:9d:
b8:47:a4:b2:56:1a:23:3a:09:16:35:45:44:ae:45:bf:65:8c:
16:9d:9a:27:2f:85:35:d6:c5:d0:91:10:2b:4f:52:6d:2a:3b:
2c:45:12:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:26 2024 by rpki-client on console-fra.rpki-client.org