Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/KCgran3VmlSKteusskKgBFLAUhg.roa
File: KCgran3VmlSKteusskKgBFLAUhg.roa (raw, json)
Hash identifier: avNQKeqc28dyMqJoMrjAmstWg10TkAlmO4KownnzU4I=
Subject key identifier: 28:28:2B:6A:7D:D5:9A:54:8A:B5:EB:AC:B2:42:A0:04:52:C0:52:18
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018216660FA9CFA0022430B9D25D0C2D79B1
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/KCgran3VmlSKteusskKgBFLAUhg.roa
Signing time: Tue 19 Jul 2022 12:19:23 +0000
ROA not before: Tue 19 Jul 2022 12:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.50.188.0/23 maxlen: 23
194.50.206.0/23 maxlen: 23
195.138.96.0/19 maxlen: 24
194.50.200.0/23 maxlen: 23
2.57.152.0/22 maxlen: 22
45.140.32.0/22 maxlen: 22
91.214.200.0/22 maxlen: 22
45.128.20.0/22 maxlen: 22
194.50.184.0/23 maxlen: 23
91.242.81.0/24 maxlen: 24
194.35.52.0/22 maxlen: 22
95.214.152.0/22 maxlen: 22
91.242.105.0/24 maxlen: 24
91.242.100.0/23 maxlen: 23
91.242.108.0/22 maxlen: 22
91.242.107.0/24 maxlen: 24
45.150.168.0/22 maxlen: 22
91.242.120.0/21 maxlen: 21
45.150.180.0/22 maxlen: 22
2.56.0.0/22 maxlen: 22
185.173.244.0/22 maxlen: 24
193.46.211.0/24 maxlen: 24
91.242.64.0/22 maxlen: 22
2.57.212.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:66:0f:a9:cf:a0:02:24:30:b9:d2:5d:0c:2d:79:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 19 12:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28282b6a7dd59a548ab5ebacb242a00452c05218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:f6:51:7e:ec:a9:11:c6:5b:34:35:48:3e:
8c:42:ce:80:f6:12:c6:e2:5c:85:e2:9f:24:1d:bb:
f6:32:a7:86:1f:53:a3:59:31:9b:77:62:d6:c3:91:
ad:8b:9a:ac:3b:d8:fc:04:a8:73:8b:ed:d4:c3:cf:
16:6e:62:81:5a:fa:01:ac:ef:4d:7c:fd:27:37:40:
e8:fe:c8:ae:75:c4:6d:07:c5:f3:a3:88:4b:eb:a4:
82:90:ab:ca:ca:61:ce:5f:e9:1c:f1:95:81:30:4b:
49:90:7f:97:b9:69:09:a6:9c:f5:df:61:6c:a2:5f:
4b:67:40:3c:4e:46:da:a3:2a:eb:91:4e:af:f4:6a:
5e:2f:d1:d2:cb:5c:bb:40:86:5b:82:32:3b:67:08:
87:25:d7:5b:88:05:65:d6:c9:9f:1c:1b:1e:0d:50:
bc:b8:bf:4c:a3:c6:a3:8f:45:9b:99:f8:85:ab:fe:
f0:53:85:1f:99:33:ed:f2:06:b0:dd:b5:1e:8a:c0:
b5:d2:07:ff:77:21:f7:8b:6c:8d:c9:37:af:6d:6a:
9f:1c:cb:fb:89:4a:91:4b:d6:6b:9a:dd:6d:e0:33:
e3:1a:b7:cd:a9:df:cb:64:8f:67:ef:c1:d3:65:f8:
d7:5e:6b:8d:e9:d6:50:59:37:68:4b:54:9f:bb:db:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:28:2B:6A:7D:D5:9A:54:8A:B5:EB:AC:B2:42:A0:04:52:C0:52:18
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/KCgran3VmlSKteusskKgBFLAUhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
2.57.152.0/22
2.57.212.0/22
45.128.20.0/22
45.140.32.0/22
45.150.168.0/22
45.150.180.0/22
91.214.200.0/22
91.242.64.0/22
91.242.81.0/24
91.242.100.0/23
91.242.105.0/24
91.242.107.0-91.242.111.255
91.242.120.0/21
95.214.152.0/22
185.173.244.0/22
193.46.211.0/24
194.35.52.0/22
194.50.184.0/23
194.50.188.0/23
194.50.200.0/23
194.50.206.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:13:db:04:53:60:be:af:19:62:b0:dd:23:7e:25:79:a1:ac:
ac:fb:9e:e8:4c:d8:62:ab:e8:02:8f:de:e3:ec:99:bd:6d:ac:
d9:13:ff:56:24:71:51:8d:ad:dd:aa:68:de:8e:33:23:76:db:
91:13:f2:49:76:47:c3:db:9a:8c:75:fe:8b:d5:47:10:ad:e0:
e3:49:c4:de:59:4d:1b:fa:37:2f:f5:a9:23:24:f0:3e:75:6d:
6a:5b:2b:18:da:d9:e5:67:9d:ac:c8:6c:86:d2:92:52:9f:9e:
a7:90:55:d5:02:4b:25:26:1f:a9:b9:4d:02:99:56:00:ba:40:
8d:75:a7:fb:15:03:25:9b:d4:8c:53:0b:d5:28:f7:c0:7f:40:
9b:00:20:9b:94:27:a5:8c:a8:f7:2a:db:9c:0c:29:3c:d4:2f:
7d:60:c7:c6:3a:d0:4a:02:1d:7e:67:2f:20:7c:fb:7a:2d:ff:
93:00:ba:ab:6a:da:91:11:b1:bf:6a:02:18:56:13:bd:76:1d:
8d:88:48:a5:ee:59:e3:6d:47:80:09:1d:c0:3b:9e:7a:6c:6f:
1d:41:94:24:4c:1f:88:f4:f2:ea:b6:0d:9f:84:7a:7c:5d:b3:
08:91:b7:40:fb:66:49:05:30:db:34:94:4c:6e:73:43:43:4b:
b6:74:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org