Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/Nc2CLmPcmV3uPMyMMim5_u5XwRQ.roa
File: Nc2CLmPcmV3uPMyMMim5_u5XwRQ.roa (raw, json)
Hash identifier: 50YQFUrdAlII1UZnfsNXj0ZR4V00n9umJxjgcT2u/z4=
Subject key identifier: 35:CD:82:2E:63:DC:99:5D:EE:3C:CC:8C:32:29:B9:FE:EE:57:C1:14
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 0183122E3CC93813D93D2D866141378F0445
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/Nc2CLmPcmV3uPMyMMim5_u5XwRQ.roa
Signing time: Tue 06 Sep 2022 09:42:43 +0000
ROA not before: Tue 06 Sep 2022 09:42:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 166.108.216.0/23 maxlen: 23
166.108.218.0/23 maxlen: 23
166.108.224.0/23 maxlen: 23
166.108.226.0/23 maxlen: 23
166.108.220.0/23 maxlen: 23
166.108.222.0/23 maxlen: 23
166.108.230.0/23 maxlen: 23
166.108.232.0/23 maxlen: 23
166.108.228.0/23 maxlen: 23
166.108.238.0/23 maxlen: 23
166.108.234.0/23 maxlen: 23
166.108.236.0/23 maxlen: 23
166.108.240.0/23 maxlen: 23
166.108.244.0/24 maxlen: 24
166.108.245.0/24 maxlen: 24
166.108.246.0/24 maxlen: 24
166.108.242.0/23 maxlen: 23
166.108.251.0/24 maxlen: 24
166.108.252.0/24 maxlen: 24
166.108.253.0/24 maxlen: 24
166.108.247.0/24 maxlen: 24
166.108.248.0/24 maxlen: 24
166.108.249.0/24 maxlen: 24
166.108.250.0/24 maxlen: 24
166.108.254.0/24 maxlen: 24
166.108.255.0/24 maxlen: 24
166.108.160.0/22 maxlen: 22
166.108.164.0/22 maxlen: 22
166.108.168.0/22 maxlen: 22
166.108.172.0/22 maxlen: 22
166.108.176.0/22 maxlen: 22
166.108.180.0/22 maxlen: 22
166.108.184.0/22 maxlen: 22
166.108.188.0/22 maxlen: 22
166.108.192.0/22 maxlen: 22
166.108.196.0/22 maxlen: 22
166.108.200.0/22 maxlen: 22
166.108.204.0/22 maxlen: 22
166.108.208.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:2e:3c:c9:38:13:d9:3d:2d:86:61:41:37:8f:04:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Sep 6 09:42:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35cd822e63dc995dee3ccc8c3229b9feee57c114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:fc:f4:a8:c5:8e:72:c7:e6:93:cb:43:80:
b5:31:f8:f0:0c:a0:7f:73:b7:f6:b8:3c:6c:f2:96:
67:83:9e:c4:7b:65:94:d8:0b:7e:4f:10:16:2f:51:
16:93:91:fc:3b:c2:22:9e:0f:09:66:b2:a3:82:4d:
e8:77:78:d6:07:e4:13:de:c0:08:77:b5:89:51:91:
09:c3:fe:9a:3c:a7:31:c9:c7:4e:28:ef:9a:46:be:
21:e8:a6:ab:90:1f:05:dc:65:d5:6f:5f:2b:59:4e:
c6:60:5e:bd:4b:00:e9:67:5d:c1:72:66:26:8e:39:
a7:22:e0:49:a3:1b:17:fc:db:37:c4:b9:9a:70:19:
b7:9d:7e:9d:b4:9c:1c:fa:5a:24:d9:ae:38:3e:3c:
06:68:bc:2f:df:b9:d2:c2:0c:c4:a1:45:af:1e:aa:
8e:e8:1e:38:e6:7f:64:a2:2e:2c:02:28:be:ce:c9:
ab:af:a0:d0:6c:69:b3:4f:db:96:71:ed:ad:d3:e2:
6e:99:af:d3:2f:9f:fd:58:ca:3e:fa:c3:ff:43:f5:
b7:61:0a:88:b7:15:9c:91:c4:e1:6a:4a:a9:54:af:
fd:97:95:de:98:38:2b:1f:73:9c:98:b2:e7:c2:6b:
c0:51:c2:de:82:02:34:5f:2f:a8:d5:e5:fb:d3:3a:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:82:2E:63:DC:99:5D:EE:3C:CC:8C:32:29:B9:FE:EE:57:C1:14
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/Nc2CLmPcmV3uPMyMMim5_u5XwRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.160.0-166.108.211.255
166.108.216.0-166.108.255.255
Signature Algorithm: sha256WithRSAEncryption
8e:94:e4:e4:73:e0:a4:7e:bf:a7:c9:87:72:0e:56:f7:19:c7:
00:45:36:9a:e4:41:28:d2:ef:32:79:96:41:e3:9d:88:34:b3:
07:a7:da:11:2a:df:f2:0e:e6:a0:05:eb:00:b8:a4:3d:53:09:
c2:52:0a:fe:9c:61:87:bc:f0:2c:cf:2f:f1:6d:24:e3:ec:b3:
60:1d:cc:c7:58:fb:e8:ea:25:2f:14:11:85:a4:2c:44:11:1d:
1b:7c:a2:c6:5c:c9:82:02:7c:b9:f7:50:b7:ed:bc:d9:19:ed:
1b:99:dc:96:a8:38:56:27:ef:05:ea:68:d8:37:2a:d8:36:d2:
a3:14:96:e9:0c:1f:f9:3c:62:49:64:b9:14:0f:81:60:ef:63:
e8:06:55:88:7c:c3:d6:80:36:91:5b:c7:78:0c:a0:55:25:02:
48:08:b8:41:a1:50:66:ab:20:cb:07:8e:ed:50:05:7c:ea:92:
8b:6d:72:82:ce:97:8c:db:a8:d3:a4:11:1e:6f:66:66:ca:b4:
54:7a:7e:82:81:64:5b:d2:d5:05:01:9e:9b:9c:97:17:53:7a:
e6:7b:9c:be:67:c3:a4:99:4f:e8:e7:bc:53:66:d6:47:8c:2b:
be:5d:54:22:4d:c1:d0:28:92:5d:e9:75:54:fa:34:a1:c4:9a:
f0:aa:e9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:27 2023 by rpki-client on console-ams.rpki-client.org