Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/u9ohYsaDwkR1tKk-n9gRgWx0N2M.roa
File: u9ohYsaDwkR1tKk-n9gRgWx0N2M.roa (raw, json)
Hash identifier: 6b83FcjSnR66XnPoN8p9c8OWHaowmYgJaQtLUo22Fnw=
Subject key identifier: BB:DA:21:62:C6:83:C2:44:75:B4:A9:3E:9F:D8:11:81:6C:74:37:63
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 0185F7E96B26AF86636622AF57AAF89D9345
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/u9ohYsaDwkR1tKk-n9gRgWx0N2M.roa
Signing time: Sat 28 Jan 2023 10:25:47 +0000
ROA not before: Sat 28 Jan 2023 10:25:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 178.130.132.0/22 maxlen: 24
178.130.136.0/21 maxlen: 21
109.172.74.0/23 maxlen: 23
109.172.74.0/24 maxlen: 24
109.172.84.0/22 maxlen: 24
109.172.88.0/22 maxlen: 24
109.172.92.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f7:e9:6b:26:af:86:63:66:22:af:57:aa:f8:9d:93:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Jan 28 10:25:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbda2162c683c24475b4a93e9fd811816c743763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:e3:54:f9:aa:0c:d0:63:df:b5:df:2f:12:
97:43:d2:dd:d2:c8:c7:e2:6e:b8:96:b7:dc:e0:d5:
3e:cf:c5:10:90:65:ad:b6:54:39:38:73:43:04:8e:
b7:18:1a:64:f3:da:4b:b8:53:99:a6:6f:58:1d:53:
a3:c2:34:3a:1e:3c:7b:29:e2:d8:7c:89:dd:80:1c:
df:ab:51:98:95:6e:70:3e:64:02:57:60:44:af:a2:
11:89:d2:eb:fe:01:9c:5d:0a:5c:78:64:7d:be:f8:
36:34:49:42:d6:84:01:d0:eb:c3:58:78:14:96:97:
ce:93:94:b7:41:96:7e:3d:ee:c1:fb:c3:e3:b9:45:
ad:1d:2d:b9:21:a1:04:e3:ca:63:ea:30:72:fc:b1:
45:d8:ad:ea:c7:bf:d1:ca:f6:59:79:15:a9:72:54:
41:ab:eb:34:6e:44:47:b1:b8:d2:6b:28:ba:77:6c:
6b:27:98:ed:fc:d9:0f:73:a3:5b:5f:81:87:22:1c:
6e:42:26:6e:3f:ae:ff:bb:d7:68:93:d5:ec:82:ae:
95:e5:ec:83:ac:8e:a2:c4:cd:d5:b6:64:88:a1:ae:
3c:74:95:5f:cd:01:08:62:e5:a5:ee:92:1d:f0:6a:
11:81:b7:e3:c7:1a:d6:90:ad:94:81:6f:04:d9:ca:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:21:62:C6:83:C2:44:75:B4:A9:3E:9F:D8:11:81:6C:74:37:63
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/u9ohYsaDwkR1tKk-n9gRgWx0N2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.74.0/23
109.172.84.0-109.172.95.255
178.130.132.0-178.130.143.255
Signature Algorithm: sha256WithRSAEncryption
73:a6:ea:05:30:ec:a5:5c:88:4f:f3:fd:b1:04:63:f4:99:50:
eb:7e:25:88:6b:12:47:16:00:92:20:f7:8f:f1:eb:be:66:97:
9b:86:9d:e7:9f:a1:0e:4a:86:55:f0:50:c9:b4:01:35:3d:67:
ce:00:a6:e6:d0:b0:7d:23:69:95:f9:b2:48:51:a4:64:a1:18:
6c:95:8c:d3:c7:6c:0e:54:7e:36:33:89:3e:83:c1:61:5a:5d:
8a:87:bd:fe:37:42:28:43:ef:f0:b1:e5:d4:52:f9:bc:d1:ed:
36:61:30:0c:d8:b5:12:bb:f6:57:e2:0c:02:c4:8e:80:28:6b:
8d:99:bf:ec:c3:38:0d:22:a8:f9:bf:56:28:c1:84:9e:62:62:
45:de:9b:4f:01:f0:70:55:ad:1e:be:61:b8:31:ff:53:bf:c0:
84:0b:c7:59:7f:e9:2d:91:af:21:d2:d9:a4:7a:ef:26:a2:9f:
12:89:b0:46:6c:ea:d2:d6:83:de:fc:c8:ec:f6:62:c7:63:2a:
12:f3:f7:58:bb:2c:14:27:f6:49:b8:6e:e7:3e:e4:d4:62:4a:
78:c6:c7:56:11:13:84:9e:88:1a:f2:2c:93:4b:d6:5f:58:b0:
9f:23:94:0a:5c:d6:c2:2a:24:72:d3:85:97:56:0d:5a:98:5a:
85:9a:73:c3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYX36Wsmr4ZjZiKvV6r4nZNFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZWQ0OWVmYWM5Nzk1OTg3NzcxYWNkYzc3YTBlMjI4OTA0
Mjc3YWQwHhcNMjMwMTI4MTAyNTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmRhMjE2MmM2ODNjMjQ0NzViNGE5M2U5ZmQ4MTE4MTZjNzQzNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRHjVPmqDNBj37XfLxKXQ9Ld0sjH
4m64lrfc4NU+z8UQkGWttlQ5OHNDBI63GBpk89pLuFOZpm9YHVOjwjQ6Hjx7KeLY
fIndgBzfq1GYlW5wPmQCV2BEr6IRidLr/gGcXQpceGR9vvg2NElC1oQB0OvDWHgU
lpfOk5S3QZZ+Pe7B+8PjuUWtHS25IaEE48pj6jBy/LFF2K3qx7/RyvZZeRWpclRB
q+s0bkRHsbjSayi6d2xrJ5jt/NkPc6NbX4GHIhxuQiZuP67/u9dok9Xsgq6V5eyD
rI6ixM3VtmSIoa48dJVfzQEIYuWl7pId8GoRgbfjxxrWkK2UgW8E2cpCewIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLvaIWLGg8JEdbSpPp/YEYFsdDdjMB8GA1UdIwQY
MBaAFDftSe+sl5WYd3Gs3Heg4iiQQnetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTi0xSjc2eVhsWmgzY2F6Y2Q2RGlLSkJDZDYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yMTcxYmUtYjA4My00NzliLWE1ODAt
NmEwNmI3NTAyYmQ3LzEvdTlvaFlzYUR3a1IxdEtrLW45Z1JnV3gwTjJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yMTcxYmUtYjA4My00NzliLWE1ODAtNmEwNmI3NTAyYmQ3
LzEvTi0xSjc2eVhsWmgzY2F6Y2Q2RGlLSkJDZDYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQBbaxKMAwD
BAJtrFQDBAVtrEAwDAMEArKChAMEBLKCgDANBgkqhkiG9w0BAQsFAAOCAQEAc6bq
BTDspVyIT/P9sQRj9JlQ634liGsSRxYAkiD3j/HrvmaXm4ad55+hDkqGVfBQybQB
NT1nzgCm5tCwfSNplfmySFGkZKEYbJWM08dsDlR+NjOJPoPBYVpdioe9/jdCKEPv
8LHl1FL5vNHtNmEwDNi1Erv2V+IMAsSOgChrjZm/7MM4DSKo+b9WKMGEnmJiRd6b
TwHwcFWtHr5huDH/U7/AhAvHWX/pLZGvIdLZpHrvJqKfEomwRmzq0taD3vzI7PZi
x2MqEvP3WLssFCf2Sbhu5z7k1GJKeMbHVhEThJ6IGvIsk0vWX1iwnyOUClzWwiok
ctOFl1YNWphahZpzww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:02 2024 by rpki-client on console-ams.rpki-client.org