Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/_Ktmf5yThO8lG48fO6LNDrVWghg.roa
File: _Ktmf5yThO8lG48fO6LNDrVWghg.roa (raw, json)
Hash identifier: 5ETvqA/jfZCLQ+ZFjol9Vh6prO8HKr+0t0HACSvEPdk=
Subject key identifier: FC:AB:66:7F:9C:93:84:EF:25:1B:8F:1F:3B:A2:CD:0E:B5:56:82:18
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 0A9E3D30
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/_Ktmf5yThO8lG48fO6LNDrVWghg.roa
Signing time: Wed 25 May 2022 22:50:13 +0000
ROA not before: Wed 25 May 2022 22:50:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49289
IP address blocks: 185.63.132.0/23 maxlen: 23
159.255.136.0/22 maxlen: 22
185.63.135.0/24 maxlen: 24
185.63.134.0/24 maxlen: 24
159.255.144.0/22 maxlen: 22
188.94.120.0/21 maxlen: 21
171.22.233.0/24 maxlen: 24
171.22.232.0/24 maxlen: 24
171.22.235.0/24 maxlen: 24
171.22.234.0/24 maxlen: 24
93.185.112.0/20 maxlen: 20
178.239.32.0/20 maxlen: 20
159.255.151.0/24 maxlen: 24
159.255.148.0/24 maxlen: 24
2a00:c50::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178142512 (0xa9e3d30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: May 25 22:50:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcab667f9c9384ef251b8f1f3ba2cd0eb5568218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:77:0e:fe:e8:30:3e:b1:a0:4c:34:14:8b:
02:2b:06:03:99:1e:5b:0c:57:f5:08:f5:ed:f0:b6:
8e:6b:8f:58:8b:b3:e5:39:ae:ae:45:7f:c2:d0:b8:
99:f7:34:c1:46:06:74:44:44:59:b5:0d:8c:56:5f:
7b:f6:12:ab:59:23:8c:fb:f0:3e:c4:81:07:44:81:
df:ce:b8:56:01:a1:91:77:f3:26:8b:c6:7a:2d:4f:
2e:ce:a4:b5:26:8e:49:b5:08:b7:26:0d:21:9f:26:
af:ac:c7:cf:3b:7b:27:72:d2:45:13:96:b6:77:8c:
49:25:9f:df:fa:98:38:ab:37:7b:24:32:c6:f0:cf:
19:e5:a2:23:3f:4a:5d:a0:7e:20:c1:ee:9b:04:18:
ca:55:55:37:85:ab:c7:3b:dd:32:71:2a:88:8b:5c:
de:33:d1:a5:aa:8f:dc:7f:49:c0:fd:c1:e4:c6:af:
08:ae:f4:5d:3a:96:1c:3b:cb:19:c1:bd:da:8a:7d:
4b:12:f8:ea:7d:39:5e:f1:e9:15:93:48:31:35:89:
88:e1:fd:79:87:e7:73:f4:b1:8f:51:f4:c1:4b:69:
90:49:f8:e0:88:38:fc:93:f6:a1:44:72:cd:86:4b:
d9:25:31:12:1c:3e:78:38:b5:93:8e:05:37:cc:f8:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AB:66:7F:9C:93:84:EF:25:1B:8F:1F:3B:A2:CD:0E:B5:56:82:18
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/_Ktmf5yThO8lG48fO6LNDrVWghg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.112.0/20
159.255.136.0/22
159.255.144.0-159.255.148.255
159.255.151.0/24
171.22.232.0/22
178.239.32.0/20
185.63.132.0/22
188.94.120.0/21
IPv6:
2a00:c50::/29
Signature Algorithm: sha256WithRSAEncryption
50:3c:57:4e:a6:c3:4c:69:3e:e3:9e:ec:63:69:e2:62:a2:3d:
2f:4c:da:98:8e:97:ce:2f:87:60:0b:67:fe:d8:53:0b:ae:45:
a7:8c:1a:a5:d6:98:c6:1d:86:66:21:f0:f1:fe:3e:4e:4d:4c:
f0:68:b4:5b:90:51:46:12:9b:6d:fc:55:f0:f8:63:fa:aa:ee:
3c:92:9e:41:a6:e3:43:a2:72:dc:c6:d8:7e:c8:fe:54:6f:af:
70:ae:0c:8b:96:74:c9:33:0c:59:6d:9d:73:87:24:5d:dc:29:
40:e5:56:ee:b5:3f:7d:d7:66:0b:15:80:c9:59:73:f3:ff:74:
45:19:29:23:5f:a0:0e:cf:0b:79:25:0b:5a:fe:f3:74:9c:dd:
e1:8e:9d:35:4d:8b:34:11:f4:c5:ac:8e:c9:06:e4:cf:61:00:
d7:67:49:84:e9:64:7d:cd:ab:79:e0:c5:d2:c0:72:bc:c9:c6:
3d:81:4c:d0:4a:a0:39:2c:a7:04:0a:f8:08:4d:63:47:5b:e8:
c2:43:12:cb:f2:5b:b2:8a:26:f6:e7:4c:70:d8:f7:bf:59:bb:
e9:76:f9:5c:73:40:33:b3:f7:2f:27:79:b6:83:15:9b:a1:e3:
a7:3a:ea:97:1c:55:1e:ab:4b:2f:c4:8b:48:7e:05:db:ab:6c:
d4:a8:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:05 2024 by rpki-client on console-ams.rpki-client.org