Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/kr63mYGkRRrOkPV1x0MWI0d4AIc.roa
File: kr63mYGkRRrOkPV1x0MWI0d4AIc.roa (raw, json)
Hash identifier: U1wKG1sufkVnqLPT7ueTW+BL5OELYE0nrRg3L2rzUzg=
Subject key identifier: 92:BE:B7:99:81:A4:45:1A:CE:90:F5:75:C7:43:16:23:47:78:00:87
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 02673071
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/kr63mYGkRRrOkPV1x0MWI0d4AIc.roa
Signing time: Sat 01 Jan 2022 10:59:37 +0000
ROA not before: Sat 01 Jan 2022 10:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56694
IP address blocks: 94.198.50.0/23 maxlen: 32
188.127.224.0/20 maxlen: 32
185.9.144.0/22 maxlen: 32
94.198.52.0/22 maxlen: 32
188.127.240.0/21 maxlen: 32
188.127.253.0/24 maxlen: 32
188.127.248.0/22 maxlen: 32
188.127.254.0/23 maxlen: 32
185.130.248.0/22 maxlen: 32
152.89.216.0/22 maxlen: 32
2a06:dd00::/29 maxlen: 128
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40317041 (0x2673071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Jan 1 10:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92beb79981a4451ace90f575c743162347780087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:71:7a:41:87:c7:db:09:3c:71:f2:2f:2e:
89:a9:12:30:69:90:32:17:05:17:e5:8f:0f:09:2b:
b5:92:bd:a5:d1:4d:94:89:f7:1b:01:e5:a6:a7:57:
21:28:4b:24:8f:44:e1:68:93:52:57:92:2d:0f:a7:
e2:0f:02:64:0d:03:d8:f6:8d:dd:f5:65:af:25:46:
52:62:c4:99:ec:1d:3a:ed:a3:7b:45:64:f5:d1:81:
3c:46:fc:d1:8c:c2:21:b8:13:7e:5a:70:80:48:c0:
76:22:da:5d:68:b2:ba:55:a6:66:aa:50:3e:89:4c:
51:77:6b:87:e1:b3:5b:2f:40:ca:f0:71:18:bf:42:
b8:d5:83:75:43:40:22:1f:36:33:0e:2c:15:c7:e0:
eb:e8:0f:b6:7c:b3:fb:4c:07:34:0a:85:5c:2d:04:
08:ef:f0:85:1c:cf:0d:ee:8c:03:f0:7b:f7:54:f8:
3d:dc:19:0d:fb:52:ce:01:d6:31:4f:34:bf:2b:71:
bd:be:d9:bd:d2:11:11:93:8d:76:73:c0:ba:20:90:
6c:dd:8f:c6:8b:f6:9e:e5:3e:c5:5f:ee:79:96:c4:
21:f5:0d:12:97:49:68:27:a6:94:a1:06:3b:18:cd:
3e:5e:07:6b:81:ad:01:5a:80:70:b8:4c:a0:d2:4a:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:B7:99:81:A4:45:1A:CE:90:F5:75:C7:43:16:23:47:78:00:87
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/kr63mYGkRRrOkPV1x0MWI0d4AIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.50.0-94.198.55.255
152.89.216.0/22
185.9.144.0/22
185.130.248.0/22
188.127.224.0-188.127.251.255
188.127.253.0-188.127.255.255
IPv6:
2a06:dd00::/29
Signature Algorithm: sha256WithRSAEncryption
59:97:44:31:b2:7d:54:72:46:34:d0:eb:c9:73:4e:65:49:4f:
2c:bb:9c:ba:b4:f8:05:db:82:78:9a:08:65:8a:ce:ba:12:5c:
fa:63:85:05:5c:dc:73:a9:c7:12:ba:35:e6:e7:5c:dd:82:9f:
bb:17:03:49:fb:46:02:a3:f2:29:48:c6:0c:53:50:91:dc:25:
ef:b7:ec:32:4d:b3:fa:0e:d1:13:77:a7:e9:3a:28:24:e9:ae:
96:ac:26:ac:2f:42:6a:5b:bc:7a:d8:73:67:ca:13:eb:88:62:
0c:29:0e:3c:2f:57:5c:e5:19:35:5b:65:80:44:1e:27:b0:3f:
c3:37:64:ef:7a:fe:af:20:f0:58:25:29:e7:1b:66:2a:e5:17:
63:35:c1:cc:42:07:01:f0:d7:0b:f0:2c:b6:88:01:5e:49:95:
33:5e:98:d4:7e:c9:7b:be:07:fe:a4:bb:d1:83:a3:e5:c8:c9:
7a:10:6e:64:5c:d6:4f:ea:6d:42:37:72:88:53:cd:b1:1c:80:
7b:50:cf:fd:11:22:08:37:17:e6:bf:30:07:38:d6:cd:a7:bd:
72:be:99:eb:f9:bd:9a:0a:b5:e3:ff:23:dc:f4:82:87:d0:32:
d3:d3:bc:10:62:09:32:ce:f8:27:06:df:52:7d:2b:1a:47:8a:
cb:95:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:53 2024 by rpki-client on console-fra.rpki-client.org