Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/XBfeDoi1mwJbyMk5LZOaugndtyU.roa
File: XBfeDoi1mwJbyMk5LZOaugndtyU.roa (raw, json)
Hash identifier: o0PWe7H6k1AZOQAMmrrCYJLqBxblq4scCynEpn4MSWs=
Subject key identifier: 5C:17:DE:0E:88:B5:9B:02:5B:C8:C9:39:2D:93:9A:BA:09:DD:B7:25
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 157793B4
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/XBfeDoi1mwJbyMk5LZOaugndtyU.roa
Signing time: Wed 22 Jun 2022 10:43:32 +0000
ROA not before: Wed 22 Jun 2022 10:43:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.50.188.0/23 maxlen: 23
194.50.206.0/23 maxlen: 23
195.138.96.0/19 maxlen: 24
194.50.200.0/23 maxlen: 23
2.57.152.0/22 maxlen: 22
185.115.92.0/22 maxlen: 22
2.59.204.0/22 maxlen: 22
91.214.200.0/22 maxlen: 22
45.128.20.0/22 maxlen: 22
194.50.184.0/23 maxlen: 23
91.242.81.0/24 maxlen: 24
194.35.52.0/22 maxlen: 22
95.214.152.0/22 maxlen: 22
91.242.105.0/24 maxlen: 24
91.242.100.0/23 maxlen: 23
91.242.108.0/22 maxlen: 22
91.242.107.0/24 maxlen: 24
45.150.168.0/22 maxlen: 22
91.242.120.0/21 maxlen: 21
45.15.244.0/22 maxlen: 22
2.56.0.0/22 maxlen: 22
185.173.244.0/22 maxlen: 24
91.242.64.0/22 maxlen: 22
2.57.212.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360158132 (0x157793b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 22 10:43:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c17de0e88b59b025bc8c9392d939aba09ddb725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:95:0e:9a:dd:5a:da:3f:5b:1a:72:1e:03:
17:b2:d1:6e:e9:07:ba:6e:09:cb:a2:0a:c3:74:62:
d8:35:f4:99:e2:b9:96:99:77:89:b6:1f:98:91:61:
e8:d6:e6:0f:db:f5:05:1c:49:ff:33:f9:ce:77:48:
4c:59:6b:9f:f3:6e:73:51:78:c9:20:ec:c0:83:ac:
7d:ba:95:c0:bb:4b:b8:aa:e1:3d:41:e7:74:7a:cc:
67:d4:f5:e3:7e:5d:48:10:e8:9f:70:80:70:ad:bd:
3c:1b:e9:a3:ac:52:dc:e2:6f:eb:78:51:c7:d6:49:
dc:c8:ba:4f:49:52:11:25:68:e2:c5:3d:b6:1b:55:
ce:e5:8f:5a:50:f4:e9:82:26:66:e5:df:27:8a:42:
bc:9b:de:29:61:9c:54:b6:8a:0f:1a:b7:71:3e:40:
46:33:a6:e9:40:a1:0e:52:da:b3:b1:16:e8:2e:1c:
f6:1d:db:29:b9:dc:f8:ad:08:7b:10:1f:3d:1a:bd:
28:1a:e8:f7:46:92:cd:91:77:fa:b2:08:50:b9:e8:
3f:19:1e:23:6b:eb:c7:82:4c:d5:8e:ea:c8:16:8f:
0f:eb:0b:53:10:d7:fe:1f:d3:b4:7d:a1:ed:39:aa:
d4:08:8f:98:d3:6f:b5:fe:49:a1:7c:ba:fe:6d:92:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:17:DE:0E:88:B5:9B:02:5B:C8:C9:39:2D:93:9A:BA:09:DD:B7:25
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/XBfeDoi1mwJbyMk5LZOaugndtyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
2.57.152.0/22
2.57.212.0/22
2.59.204.0/22
45.15.244.0/22
45.128.20.0/22
45.150.168.0/22
91.214.200.0/22
91.242.64.0/22
91.242.81.0/24
91.242.100.0/23
91.242.105.0/24
91.242.107.0-91.242.111.255
91.242.120.0/21
95.214.152.0/22
185.115.92.0/22
185.173.244.0/22
194.35.52.0/22
194.50.184.0/23
194.50.188.0/23
194.50.200.0/23
194.50.206.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
51:27:f7:16:33:72:d4:da:8b:64:a0:a3:98:01:0a:32:69:4e:
73:92:07:fd:2c:79:f9:03:97:ab:4a:62:b7:94:53:67:3d:7f:
f0:cb:6e:2b:24:b5:a1:38:39:84:a6:a2:f4:5e:81:56:58:07:
8d:fd:e0:8e:d5:c6:6a:4e:25:43:c7:85:93:4a:4b:14:fe:fa:
2b:e1:dc:da:4e:71:22:4e:8c:a4:24:1f:87:29:98:f4:39:1c:
22:61:13:b2:77:e2:8a:ac:fa:02:0b:44:ce:4a:fa:3e:16:12:
f0:04:73:35:be:19:5c:77:72:c2:3a:d0:5e:3b:f7:da:76:fe:
b0:9a:c0:e3:7a:51:2e:8d:0b:e9:f7:e6:d0:a8:3f:51:f4:71:
bd:ec:7b:d2:5b:55:41:ab:69:29:7c:5a:c7:3d:22:47:13:59:
da:d8:15:32:c0:6c:87:cc:7b:b8:b0:bc:e7:82:bd:84:07:6e:
a4:c6:5e:9b:b1:02:a1:de:df:44:61:a7:25:ab:39:10:f8:24:
e9:aa:b9:d4:5e:fe:fb:46:a6:b8:94:65:c0:ea:7c:0a:96:68:
95:47:96:59:cc:f0:d0:46:3c:29:a5:08:64:9d:0a:ad:4f:3f:
f9:85:8b:39:0a:e3:80:2c:98:54:ef:e0:67:55:3c:f0:de:47:
43:9c:dd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:26 2024 by rpki-client on console-ams.rpki-client.org