Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/VEhrREzxF3JnpfomQLbNCaGBx-g.roa
File: VEhrREzxF3JnpfomQLbNCaGBx-g.roa (raw, json)
Hash identifier: 5UxwUY/NnRlxrgOd8M7aY036VmSYyyvBFDqUpxhihxM=
Subject key identifier: 54:48:6B:44:4C:F1:17:72:67:A5:FA:26:40:B6:CD:09:A1:81:C7:E8
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 329E6E8D
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/VEhrREzxF3JnpfomQLbNCaGBx-g.roa
Signing time: Wed 26 Jan 2022 17:10:03 +0000
ROA not before: Wed 26 Jan 2022 17:10:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29680
IP address blocks: 151.252.112.0/21 maxlen: 21
178.23.208.0/21 maxlen: 24
185.52.16.0/22 maxlen: 22
193.238.52.0/22 maxlen: 22
217.18.224.0/21 maxlen: 21
217.18.232.0/22 maxlen: 22
217.18.239.0/24 maxlen: 24
217.18.237.0/24 maxlen: 24
217.18.236.0/24 maxlen: 24
176.28.88.0/21 maxlen: 23
193.22.119.0/24 maxlen: 24
2a00:d60::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 849243789 (0x329e6e8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jan 26 17:10:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54486b444cf1177267a5fa2640b6cd09a181c7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:19:75:d2:ff:5c:2d:e8:3f:56:bd:b6:f7:
f7:90:fb:2e:f0:2e:b8:cb:09:65:d6:f9:4e:c5:b9:
ac:f8:67:19:6f:a6:79:64:3c:c9:52:32:87:3d:43:
15:fc:46:7b:a6:68:17:46:53:6e:74:c8:37:af:75:
cd:55:7d:d9:52:eb:e2:bd:3c:b7:2f:17:18:73:dd:
cb:89:70:1f:f0:0a:c1:87:bc:ef:dd:be:95:44:0c:
9e:55:50:4e:e9:cd:b8:56:1f:9c:1a:1c:7d:71:55:
9d:e3:7d:61:8a:b9:f7:03:ce:99:09:e6:d5:e4:e8:
d4:f3:95:ab:d3:65:8e:a2:91:e2:5e:69:76:f6:30:
38:ee:f1:cd:6a:74:ef:95:10:47:d6:81:99:8a:af:
14:59:72:13:2b:db:32:b3:cf:0c:6a:b7:40:14:cd:
bc:e6:67:e8:1a:30:8b:ba:6b:b2:18:c3:57:60:d0:
e9:a6:2c:97:55:94:d3:98:60:9b:58:e4:8a:8a:32:
f5:f8:9a:0c:b5:2e:60:08:dc:fc:43:d9:62:47:4a:
2f:4b:4b:6b:21:b7:54:d4:ca:32:d3:c9:af:5d:a6:
fe:0e:bf:4e:f2:f5:8e:10:d2:38:7c:c8:f9:cb:bf:
7e:0a:dc:a6:82:26:b5:63:19:71:71:fd:11:56:29:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:48:6B:44:4C:F1:17:72:67:A5:FA:26:40:B6:CD:09:A1:81:C7:E8
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/VEhrREzxF3JnpfomQLbNCaGBx-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.252.112.0/21
176.28.88.0/21
178.23.208.0/21
185.52.16.0/22
193.22.119.0/24
193.238.52.0/22
217.18.224.0-217.18.237.255
217.18.239.0/24
IPv6:
2a00:d60::/32
Signature Algorithm: sha256WithRSAEncryption
91:8e:29:41:3a:ff:da:03:51:13:c7:71:f2:a9:c9:e6:fe:f3:
51:b1:df:7d:0a:06:8a:33:dd:71:82:7d:8c:da:d9:58:59:a7:
7d:1d:74:d4:cf:81:1c:4a:af:c0:53:db:e1:09:ba:dd:70:3b:
79:fd:02:35:06:a3:61:0f:c1:1f:92:66:66:03:e0:c0:8e:4f:
a6:69:ac:cd:1a:69:ef:7c:62:89:66:a5:d9:0f:1b:71:14:33:
7a:42:6c:6b:c0:59:50:b4:8d:18:75:42:a8:11:32:95:04:53:
08:38:16:ad:47:e6:0a:6f:2c:8a:37:e4:6b:55:75:86:ca:de:
59:ee:3b:7f:06:bd:9b:e2:ae:1e:0c:1e:6f:44:65:8e:ca:cf:
9c:84:4e:e4:45:f1:b9:c8:27:71:62:d8:6f:1b:28:04:ee:48:
b7:14:c1:24:11:f8:de:01:a7:81:47:d8:68:49:02:0f:4c:32:
83:75:49:b5:12:d2:3f:c2:fc:d7:30:27:78:cc:9c:f5:86:49:
c0:92:ea:1a:3b:91:a9:f0:73:ad:da:73:4d:a4:40:c9:f9:99:
17:7e:0c:41:5f:24:dc:0b:8e:1a:e1:6b:65:f5:92:4e:9e:21:
0e:5f:f3:be:47:1b:82:cb:71:40:a1:e0:c5:fe:84:ab:f2:8f:
cf:32:89:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:39 2023 by rpki-client on console-ams.rpki-client.org