Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/EjJ9RCiVesy0d2VbYftdBB8xmdQ.roa
File: EjJ9RCiVesy0d2VbYftdBB8xmdQ.roa (raw, json)
Hash identifier: E/ScGgJD3RXkb0i/fIlJ69amD3lyj74PoH/HCmEM03M=
Subject key identifier: 12:32:7D:44:28:95:7A:CC:B4:77:65:5B:61:FB:5D:04:1F:31:99:D4
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01830E777BA746B699C38028A682C5151DB4
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/EjJ9RCiVesy0d2VbYftdBB8xmdQ.roa
Signing time: Mon 05 Sep 2022 16:24:14 +0000
ROA not before: Mon 05 Sep 2022 16:24:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 91.214.200.0/22 maxlen: 22
45.88.124.0/22 maxlen: 22
194.56.152.0/23 maxlen: 24
91.242.81.0/24 maxlen: 24
5.180.4.0/22 maxlen: 22
185.212.11.0/24 maxlen: 24
194.35.52.0/22 maxlen: 22
91.242.105.0/24 maxlen: 24
91.242.108.0/22 maxlen: 22
91.242.107.0/24 maxlen: 24
91.242.120.0/21 maxlen: 21
193.46.211.0/24 maxlen: 24
91.242.64.0/22 maxlen: 22
5.182.28.0/22 maxlen: 22
194.50.188.0/23 maxlen: 23
194.50.206.0/23 maxlen: 23
195.138.96.0/19 maxlen: 24
194.50.200.0/23 maxlen: 23
2.57.152.0/22 maxlen: 22
45.140.32.0/22 maxlen: 22
45.128.20.0/22 maxlen: 22
194.50.184.0/23 maxlen: 23
95.214.152.0/22 maxlen: 22
45.150.168.0/22 maxlen: 22
45.150.180.0/22 maxlen: 22
2.56.0.0/22 maxlen: 22
185.173.244.0/22 maxlen: 24
185.173.247.0/24 maxlen: 24
2.57.212.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:77:7b:a7:46:b6:99:c3:80:28:a6:82:c5:15:1d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 5 16:24:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12327d4428957accb477655b61fb5d041f3199d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:a0:c6:07:47:db:89:74:24:77:6b:e9:cb:
06:ed:94:42:b0:8d:71:35:05:20:f5:65:0e:03:7c:
12:a1:b9:f6:00:29:6b:3d:fa:08:db:66:29:87:51:
56:55:a8:41:3c:8e:8e:f0:9b:6e:51:83:f9:1e:55:
77:ce:6e:02:0d:d9:e6:a3:03:cc:9c:57:b3:b3:1a:
8f:d1:3c:10:84:52:f1:c6:46:36:af:4e:ec:7a:14:
6b:87:e9:dc:88:f1:9f:82:33:c8:be:1f:50:05:72:
72:d8:8a:c8:9e:e7:0b:70:c8:57:f4:81:3f:5d:1e:
e8:f7:b7:f5:23:27:17:ea:8f:7e:f0:64:e3:29:42:
6d:65:5c:84:43:b9:99:4b:cd:a4:51:75:bc:ba:5f:
c1:7a:fc:49:cf:c5:2d:21:9d:d2:b1:bd:71:4b:55:
6a:61:b8:ca:a6:13:ae:d5:86:47:4f:0c:f3:15:75:
b8:9c:0a:12:38:43:6b:96:93:fa:c1:46:4d:6c:2b:
8a:f6:4d:95:b1:9d:52:b0:f5:90:fd:e0:dd:57:c9:
ab:fb:b0:66:21:46:dd:3f:48:24:c3:13:38:3a:90:
89:0f:8f:ef:e8:23:c4:4d:01:dd:0e:24:12:3c:58:
66:28:a4:67:fe:51:95:0f:5c:d6:38:4d:bb:1e:37:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:32:7D:44:28:95:7A:CC:B4:77:65:5B:61:FB:5D:04:1F:31:99:D4
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/EjJ9RCiVesy0d2VbYftdBB8xmdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
2.57.152.0/22
2.57.212.0/22
5.180.4.0/22
5.182.28.0/22
45.88.124.0/22
45.128.20.0/22
45.140.32.0/22
45.150.168.0/22
45.150.180.0/22
91.214.200.0/22
91.242.64.0/22
91.242.81.0/24
91.242.105.0/24
91.242.107.0-91.242.111.255
91.242.120.0/21
95.214.152.0/22
185.173.244.0/22
185.212.11.0/24
193.46.211.0/24
194.35.52.0/22
194.50.184.0/23
194.50.188.0/23
194.50.200.0/23
194.50.206.0/23
194.56.152.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
83:77:91:35:68:1c:68:76:48:7f:10:e5:69:2b:bf:f0:c7:c9:
34:3f:c0:8a:8f:40:e1:9e:9b:c3:c0:fc:60:01:ec:49:8e:44:
a7:ab:18:de:47:d7:3c:41:b9:ea:94:fa:36:d2:67:1c:fe:53:
c7:79:55:8f:be:92:13:ee:c6:97:45:b2:43:13:1f:7d:77:d7:
b3:f2:37:f1:02:d1:1f:ae:fb:f7:c9:b6:25:ab:5e:ab:1a:64:
fa:52:2e:88:96:8b:bf:04:e7:13:97:10:d9:bb:14:66:53:70:
c1:52:64:43:d1:3b:a7:c5:ae:94:14:50:09:c0:8a:2f:90:57:
63:94:e3:3b:06:d6:af:a9:33:45:7d:d6:4e:7f:84:2c:85:19:
fb:4c:2b:6c:d8:cd:e3:3f:b7:28:2d:3b:03:df:fd:e8:7e:77:
fa:e2:d9:fd:4b:eb:17:1c:b3:11:15:b8:60:b2:c7:da:42:80:
8c:2e:c6:e5:97:25:36:e8:1a:68:03:0a:35:5a:0e:c9:bd:cd:
0a:c7:a9:1d:e3:c5:ad:80:61:eb:69:f4:5c:34:23:e0:57:12:
61:7d:4d:bb:b3:3a:96:45:fe:cd:d3:99:2e:de:df:0d:79:db:
79:0a:ec:ce:e7:e1:cf:51:3b:f0:13:ba:8e:d4:d9:2b:2f:9a:
04:56:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org