Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/mif68IA-i80FoCOjt0OP4kTL6So.roa
File: mif68IA-i80FoCOjt0OP4kTL6So.roa (raw, json)
Hash identifier: PMXR7K8PzCEpi7fY1N4+rGT+46z45Hv40jD3B0V12QM=
Subject key identifier: 9A:27:FA:F0:80:3E:8B:CD:05:A0:23:A3:B7:43:8F:E2:44:CB:E9:2A
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 01848E57494F45ED20200EFFF4AC8ECFC78F
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/mif68IA-i80FoCOjt0OP4kTL6So.roa
Signing time: Sat 19 Nov 2022 05:23:15 +0000
ROA not before: Sat 19 Nov 2022 05:23:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57497
IP address blocks: 195.226.223.0/24 maxlen: 24
45.135.240.0/24 maxlen: 24
45.135.243.0/24 maxlen: 24
45.135.241.0/24 maxlen: 24
45.135.242.0/24 maxlen: 24
45.93.168.0/24 maxlen: 24
45.93.171.0/24 maxlen: 24
45.93.169.0/24 maxlen: 24
45.93.170.0/24 maxlen: 24
158.58.191.0/24 maxlen: 24
158.58.190.0/23 maxlen: 23
158.58.189.0/24 maxlen: 24
158.58.190.0/24 maxlen: 24
158.58.188.0/24 maxlen: 24
158.58.188.0/23 maxlen: 23
158.58.187.0/24 maxlen: 24
158.58.184.0/24 maxlen: 24
158.58.185.0/24 maxlen: 24
158.58.184.0/22 maxlen: 22
158.58.186.0/24 maxlen: 24
185.2.14.0/23 maxlen: 24
185.2.12.0/22 maxlen: 22
185.2.12.0/23 maxlen: 24
5.63.10.0/24 maxlen: 24
5.63.11.0/24 maxlen: 24
5.63.8.0/24 maxlen: 24
5.63.10.0/23 maxlen: 23
5.63.9.0/24 maxlen: 24
5.63.13.0/24 maxlen: 24
5.63.14.0/24 maxlen: 24
5.63.14.0/23 maxlen: 23
5.63.12.0/24 maxlen: 24
2a01:4ac0:3::/48 maxlen: 48
2a01:4ac0:2::/48 maxlen: 48
2a01:4ac0::/48 maxlen: 48
2a01:4ac0:1::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8e:57:49:4f:45:ed:20:20:0e:ff:f4:ac:8e:cf:c7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Nov 19 05:23:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a27faf0803e8bcd05a023a3b7438fe244cbe92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:46:41:c7:35:0b:d3:f6:20:05:09:a7:d5:
49:c6:e5:80:2d:44:12:08:20:47:8c:38:b8:21:41:
b1:4c:ab:d9:49:42:27:af:3c:43:6a:63:36:c7:43:
92:33:64:f0:b9:96:9f:5a:3a:ae:2a:9d:66:c7:8e:
76:a3:aa:2c:20:49:f4:49:87:bf:3c:e1:3a:ed:be:
f7:66:2d:53:9d:b9:b0:17:61:d9:75:28:66:6c:a4:
42:dd:ab:01:7c:1b:54:7e:58:4e:57:23:5d:ea:a6:
23:82:24:4a:08:30:7c:e1:91:58:30:1f:32:05:69:
4e:cd:ac:f8:01:b1:7a:d8:fd:df:be:e9:4a:9c:00:
14:18:76:8f:1a:39:a4:74:06:fc:35:45:b4:af:24:
fb:34:7d:c4:c3:68:84:34:7c:a2:5a:9b:a4:80:4e:
03:d9:2b:e5:91:00:87:d2:ac:27:c4:a6:40:af:99:
3b:88:ee:65:41:31:73:41:25:33:a8:a7:f9:55:76:
c7:9d:11:1c:d2:a9:4a:8b:00:e2:9f:bc:10:fb:b3:
d4:84:58:fa:5d:11:af:70:40:a4:2c:81:2f:c2:8a:
e4:20:9b:ac:3c:f8:ed:56:d7:1d:74:41:02:59:34:
90:69:d7:3f:65:c8:46:19:3f:9f:b7:55:1e:55:d2:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:27:FA:F0:80:3E:8B:CD:05:A0:23:A3:B7:43:8F:E2:44:CB:E9:2A
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/mif68IA-i80FoCOjt0OP4kTL6So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.8.0/21
45.93.168.0/22
45.135.240.0/22
158.58.184.0/21
185.2.12.0/22
195.226.223.0/24
IPv6:
2a01:4ac0::/46
Signature Algorithm: sha256WithRSAEncryption
07:61:8f:a5:89:c1:c1:6e:82:95:98:0f:7a:94:fa:13:4e:e4:
f6:96:bc:71:20:7c:cb:0c:ad:ef:bd:dd:71:0f:67:76:36:72:
55:14:a6:ae:52:f6:c3:44:6c:f6:23:70:b7:d5:dd:80:d2:99:
72:e8:fa:57:d0:ad:a1:8c:99:a8:df:00:b3:0c:5d:28:61:a7:
75:eb:58:4e:ae:e8:6b:e2:62:81:4e:c8:fd:a6:46:b2:d4:6f:
42:0f:88:af:de:40:77:6d:45:9b:15:fc:4b:44:f1:1d:dd:12:
90:5e:d4:ec:45:89:d6:af:f0:d6:68:25:86:70:b2:79:6a:5b:
6c:c9:bc:f3:b4:1e:e8:aa:05:21:a0:76:d2:6f:bf:f9:f5:62:
23:f2:3c:63:67:ab:a7:a6:56:a3:3a:4e:3c:5c:e9:9e:e0:5a:
33:a7:64:ba:17:c3:b9:e8:fc:8a:b8:94:92:3c:c2:02:45:28:
89:20:58:f7:2b:3d:2a:f5:7c:db:4d:bc:1c:62:65:ce:05:21:
04:5a:1c:3a:94:80:94:1b:20:4b:30:55:87:b1:81:12:82:5d:
59:5a:32:73:85:c7:00:7d:6b:78:8c:28:f8:cf:48:9b:69:f4:
d6:2a:05:07:35:9a:53:ca:cc:4c:b3:82:a9:68:37:1e:76:1e:
fa:9d:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:39 2023 by rpki-client on console-ams.rpki-client.org