Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/62ky16b24se5vgRQcbsWB75_SK4.roa
File: 62ky16b24se5vgRQcbsWB75_SK4.roa (raw, json)
Hash identifier: brI2ny8zKf3ZnOiKeTyrbhPXhpBZed5bXTVyVszFsfU=
Subject key identifier: EB:69:32:D7:A6:F6:E2:C7:B9:BE:04:50:71:BB:16:07:BE:7F:48:AE
Certificate issuer: /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial: 018CC3B6E7A94E68C1C27287FF2B1BE16DDF
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/62ky16b24se5vgRQcbsWB75_SK4.roa
Signing time: Mon 01 Jan 2024 06:29:53 +0000
ROA not before: Mon 01 Jan 2024 06:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8529
IP address blocks: 213.202.0.0/21 maxlen: 21
134.0.216.0/22 maxlen: 22
82.178.32.0/24 maxlen: 24
82.178.33.0/24 maxlen: 24
134.0.220.0/22 maxlen: 22
185.200.124.0/24 maxlen: 24
185.200.125.0/24 maxlen: 24
82.178.158.0/24 maxlen: 24
82.178.159.0/24 maxlen: 24
82.178.158.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e7:a9:4e:68:c1:c2:72:87:ff:2b:1b:e1:6d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
Validity
Not Before: Jan 1 06:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb6932d7a6f6e2c7b9be045071bb1607be7f48ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:35:64:be:a1:14:7c:66:83:79:09:9a:3d:b6:
f3:03:af:37:cb:eb:0b:97:7b:88:8f:75:6f:06:a0:
87:4a:1c:00:1f:8f:11:89:d7:07:fc:86:f3:c4:3f:
e7:52:f6:04:70:47:d8:3e:9b:4e:3e:7e:43:f1:1f:
f5:c2:3c:87:d4:2e:7a:8e:f3:99:f3:f2:98:a1:79:
79:f7:46:26:bd:d8:3d:ef:cb:05:12:e0:d3:63:93:
ec:47:22:43:1a:b3:97:f0:8f:9a:7a:ef:8e:b0:44:
5e:da:dc:2b:b8:27:b3:9c:b6:63:e5:20:2c:a8:f3:
e3:25:2e:28:9a:ff:ce:1e:61:8d:41:d8:14:00:ed:
0f:d9:76:2a:37:a8:85:41:36:61:2b:b8:49:bd:a2:
20:dc:bb:06:28:af:82:dd:97:f9:9e:7f:9c:5b:7f:
9c:b0:71:79:cf:23:6d:ca:8e:20:48:42:89:c7:91:
68:8d:3d:1c:12:b9:0a:33:f5:8d:e5:c1:2b:6f:5b:
29:c9:b4:2c:9a:89:b4:e3:df:cb:84:86:b7:0d:a6:
92:ea:32:d8:f0:a8:33:6e:09:ac:21:c6:7e:0b:61:
ca:71:f3:87:3d:3a:d8:6a:fc:42:13:cb:b2:ca:ad:
f7:d5:dd:e0:6f:8d:11:2c:d9:c2:7a:63:91:aa:1b:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:69:32:D7:A6:F6:E2:C7:B9:BE:04:50:71:BB:16:07:BE:7F:48:AE
X509v3 Authority Key Identifier:
keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/62ky16b24se5vgRQcbsWB75_SK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.178.32.0/23
82.178.158.0/23
134.0.216.0/21
185.200.124.0/23
213.202.0.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:9a:ce:cf:25:02:40:15:05:59:ec:da:47:d1:86:1c:39:b2:
d8:b3:6e:6f:7c:2c:17:6d:0d:af:fa:bc:86:46:32:d2:96:f0:
be:74:16:be:81:87:fa:c5:5d:10:44:c6:94:e6:52:61:48:79:
a1:39:2c:d6:ea:73:bc:8f:0b:10:73:03:d3:13:9d:36:d3:bb:
25:6d:b2:95:fc:78:eb:d8:00:7b:1a:82:31:d2:82:46:18:94:
ad:d0:fb:97:64:bd:2a:03:d7:d2:f4:f4:38:34:9c:51:27:9f:
ec:c7:71:59:3c:b2:a9:83:07:e6:1b:07:e4:59:13:84:a8:32:
60:32:60:7c:f0:2c:61:28:cd:3a:4c:a5:31:24:78:8e:72:48:
7d:40:ee:70:ab:f7:94:41:99:ed:56:3b:fc:73:2d:6c:2b:37:
9c:92:81:3b:35:97:fe:fa:88:fe:ba:1a:5e:19:5d:0a:0d:ce:
34:7f:fe:e5:00:d6:5b:8c:6f:f1:a3:f1:28:f9:f2:d5:a7:9c:
ad:00:b3:bc:b9:e0:78:02:19:81:0e:1e:0a:27:f1:9d:ae:3a:
9f:84:80:6c:ba:64:a1:c7:06:06:a9:45:92:1e:0b:2a:a7:77:
97:4c:f9:a2:86:9c:7b:5f:43:5f:59:00:f4:9a:ec:8e:2d:46:
77:ba:be:fa
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzDtuepTmjBwnKH/ysb4W3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMzQwNjhiNWU5ZjczMTQyNzdlMmJlOTcyNmM3MzIxMzFi
MTc1NmMwHhcNMjQwMTAxMDYyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjY5MzJkN2E2ZjZlMmM3YjliZTA0NTA3MWJiMTYwN2JlN2Y0OGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzVkvqEUfGaDeQmaPbbzA683y+sL
l3uIj3VvBqCHShwAH48RidcH/IbzxD/nUvYEcEfYPptOPn5D8R/1wjyH1C56jvOZ
8/KYoXl590Ymvdg978sFEuDTY5PsRyJDGrOX8I+aeu+OsERe2twruCeznLZj5SAs
qPPjJS4omv/OHmGNQdgUAO0P2XYqN6iFQTZhK7hJvaIg3LsGKK+C3Zf5nn+cW3+c
sHF5zyNtyo4gSEKJx5FojT0cErkKM/WN5cErb1spybQsmom049/LhIa3DaaS6jLY
8KgzbgmsIcZ+C2HKcfOHPTrYavxCE8uyyq331d3gb40RLNnCemORqhvMRQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOtpMtem9uLHub4EUHG7Fge+f0iuMB8GA1UdIwQY
MBaAFBA0Boten3MUJ34r6XJscyExsXVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURRR2kxNmZjeFFuZml2cGNteHpJVEd4ZFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMDQ1MGUtNTYzNC00NThkLTkxOGYt
MTAzZDkzZDI1MWFiLzEvNjJreTE2YjI0c2U1dmdSUWNic1dCNzVfU0s0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hMDQ1MGUtNTYzNC00NThkLTkxOGYtMTAzZDkzZDI1MWFi
LzEvRURRR2kxNmZjeFFuZml2cGNteHpJVEd4ZFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBUrIgAwQB
UrKeAwQDhgDYAwQBuch8AwQD1coAMA0GCSqGSIb3DQEBCwUAA4IBAQBvms7PJQJA
FQVZ7NpH0YYcObLYs25vfCwXbQ2v+ryGRjLSlvC+dBa+gYf6xV0QRMaU5lJhSHmh
OSzW6nO8jwsQcwPTE50207slbbKV/Hjr2AB7GoIx0oJGGJSt0PuXZL0qA9fS9PQ4
NJxRJ5/sx3FZPLKpgwfmGwfkWROEqDJgMmB88CxhKM06TKUxJHiOckh9QO5wq/eU
QZntVjv8cy1sKzeckoE7NZf++oj+uhpeGV0KDc40f/7lANZbjG/xo/Eo+fLVp5yt
ALO8ueB4AhmBDh4KJ/GdrjqfhIBsumShxwYGqUWSHgsqp3eXTPmihpx7X0NfWQD0
muyOLUZ3ur76
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:47 2024 by rpki-client on console-ams.rpki-client.org