Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/RkVzPoY9vSif5DaizTVLqi1fpME.roa
File: RkVzPoY9vSif5DaizTVLqi1fpME.roa (raw, json)
Hash identifier: kz2ztNnV1D20E/ys+279LX9vt8Rg7mPbLkLQJU3FINc=
Subject key identifier: 46:45:73:3E:86:3D:BD:28:9F:E4:36:A2:CD:35:4B:AA:2D:5F:A4:C1
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 01907DA0C67AB459935BBC4D8578D956A6E1
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/RkVzPoY9vSif5DaizTVLqi1fpME.roa
Signing time: Thu 04 Jul 2024 12:03:26 +0000
ROA not before: Thu 04 Jul 2024 12:03:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42708
IP address blocks: 5.178.72.0/21 maxlen: 21
31.192.224.0/21 maxlen: 24
31.192.228.0/24 maxlen: 24
37.152.56.0/21 maxlen: 24
46.21.96.0/20 maxlen: 24
46.21.100.0/24 maxlen: 24
46.246.0.0/17 maxlen: 24
79.99.0.0/21 maxlen: 24
80.67.0.0/20 maxlen: 24
91.213.246.0/24 maxlen: 24
91.217.189.0/24 maxlen: 24
91.223.232.0/24 maxlen: 24
91.228.193.0/24 maxlen: 24
91.228.194.0/23 maxlen: 24
94.247.168.0/21 maxlen: 24
109.74.0.0/20 maxlen: 24
159.253.24.0/21 maxlen: 24
159.253.28.0/24 maxlen: 24
159.253.29.0/24 maxlen: 24
178.73.192.0/18 maxlen: 24
178.73.224.0/19 maxlen: 19
185.11.96.0/22 maxlen: 22
185.21.88.0/22 maxlen: 22
185.39.144.0/22 maxlen: 24
185.118.36.0/22 maxlen: 22
185.157.220.0/22 maxlen: 24
188.126.64.0/19 maxlen: 24
193.108.196.0/24 maxlen: 24
193.201.96.0/24 maxlen: 24
194.54.164.0/22 maxlen: 24
195.20.206.0/23 maxlen: 24
195.149.101.0/24 maxlen: 24
195.238.76.0/23 maxlen: 24
195.246.120.0/23 maxlen: 24
212.112.0.0/19 maxlen: 24
2a00:1a28::/32 maxlen: 48
2a02:750::/29 maxlen: 48
2a02:750:8::/48 maxlen: 48
2a02:750:10::/48 maxlen: 48
2a02:750:14::/48 maxlen: 48
2a02:e400::/29 maxlen: 29
2a03:5e00::/32 maxlen: 32
2a04:1a00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:a0:c6:7a:b4:59:93:5b:bc:4d:85:78:d9:56:a6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jul 4 12:03:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4645733e863dbd289fe436a2cd354baa2d5fa4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:cf:22:d7:77:dd:51:41:83:07:f7:a5:8d:
2c:3b:56:dc:6c:68:28:f2:45:af:e0:ec:d9:ce:56:
7d:3a:4c:9b:db:5b:09:da:91:ef:f5:40:06:c3:23:
a8:8e:dc:22:b7:44:c4:b4:74:7d:a1:ca:67:e9:76:
ed:f2:2f:ff:c4:be:02:ad:49:15:51:44:f0:de:e5:
68:6d:73:68:15:d7:3b:cf:f3:f9:40:96:20:08:8e:
6b:b2:40:de:e0:b5:b8:3b:26:64:45:95:e4:c5:9d:
d0:7a:37:fc:4e:08:6d:76:9d:2b:1d:e1:27:0f:6f:
ad:35:70:19:dd:0d:27:62:19:c3:fd:43:8f:d0:be:
b7:09:6d:c3:7e:07:bc:71:0c:89:20:86:7e:b6:0b:
5b:44:af:b2:c1:cc:5c:88:d4:04:da:ef:ed:5e:ea:
93:24:2f:ae:80:fa:ef:07:88:66:f5:ec:99:6b:9b:
f7:c1:e9:94:26:e0:b3:73:87:4e:b8:a6:82:cb:71:
1f:85:8b:85:df:66:65:43:6a:53:fe:e6:0b:c7:9d:
32:c0:64:5b:24:d4:af:db:c3:b7:85:2f:fe:22:2e:
7c:45:f8:0c:be:e9:4f:c1:fc:a1:8e:c9:5a:2a:8d:
1c:c0:be:c4:60:39:35:6d:c9:76:c4:3d:00:64:1c:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:45:73:3E:86:3D:BD:28:9F:E4:36:A2:CD:35:4B:AA:2D:5F:A4:C1
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/RkVzPoY9vSif5DaizTVLqi1fpME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.72.0/21
31.192.224.0/21
37.152.56.0/21
46.21.96.0/20
46.246.0.0/17
79.99.0.0/21
80.67.0.0/20
91.213.246.0/24
91.217.189.0/24
91.223.232.0/24
91.228.193.0-91.228.195.255
94.247.168.0/21
109.74.0.0/20
159.253.24.0/21
178.73.192.0/18
185.11.96.0/22
185.21.88.0/22
185.39.144.0/22
185.118.36.0/22
185.157.220.0/22
188.126.64.0/19
193.108.196.0/24
193.201.96.0/24
194.54.164.0/22
195.20.206.0/23
195.149.101.0/24
195.238.76.0/23
195.246.120.0/23
212.112.0.0/19
IPv6:
2a00:1a28::/32
2a02:750::/29
2a02:e400::/29
2a03:5e00::/32
2a04:1a00::/29
Signature Algorithm: sha256WithRSAEncryption
63:45:5a:7d:bb:04:1b:42:26:e9:39:b4:f5:9d:dc:fd:95:78:
7a:ff:5a:ca:e4:9f:21:49:c8:f8:c2:a3:4d:fd:94:e0:be:b6:
61:43:a6:e7:8d:bf:70:7b:db:4c:89:db:a0:8a:96:3a:33:d2:
dc:27:08:85:92:eb:b8:f7:f1:79:2c:1b:55:e8:42:31:e4:cf:
0e:88:d6:ce:14:7b:7a:01:c3:bd:a4:93:17:fb:9b:73:6c:b9:
b7:06:ae:59:77:df:4f:16:c4:79:5d:4f:91:3f:3c:3f:fe:8d:
4e:5a:9a:f0:d7:0b:a4:d7:57:70:9f:f5:f4:5c:a4:9e:95:5e:
57:03:d0:b1:e9:60:a7:91:34:7c:68:42:c1:4c:5f:f0:02:19:
aa:1f:41:47:5d:ee:1e:a7:f0:4f:00:6a:32:51:64:d2:50:f3:
6e:90:2e:c7:69:85:2c:a5:7b:7d:d2:80:a1:21:07:eb:0d:85:
30:9e:a4:e6:e8:48:cb:ca:69:28:1f:2d:30:f2:a2:4a:bc:87:
a3:3a:e8:d1:46:bc:9d:4e:d0:16:9d:60:24:bd:dc:83:e0:7c:
fd:08:0d:1b:d0:1e:b2:dd:12:2a:a5:f1:f6:e7:54:57:01:07:
9b:bd:a9:37:90:86:60:48:cd:b8:48:4a:b8:e6:20:7b:9e:00:
82:95:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 13:23:26 2024 by rpki-client on console-fra.rpki-client.org