Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/UcYZBtqPaXdmAv-D_NLd641yQek.roa
File: UcYZBtqPaXdmAv-D_NLd641yQek.roa (raw, json)
Hash identifier: byXjGLIynWigFRK1JNRiWBz+CTlE9GFzxZLzkLr/89Y=
Subject key identifier: 51:C6:19:06:DA:8F:69:77:66:02:FF:83:FC:D2:DD:EB:8D:72:41:E9
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 0186C58D8ACEE8930FDB5E80C702A252BA39
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/UcYZBtqPaXdmAv-D_NLd641yQek.roa
Signing time: Thu 09 Mar 2023 08:47:12 +0000
ROA not before: Thu 09 Mar 2023 08:47:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48291
IP address blocks: 188.135.200.0/21 maxlen: 21
188.135.208.0/20 maxlen: 20
188.135.228.0/22 maxlen: 22
188.135.236.0/22 maxlen: 22
188.135.240.0/21 maxlen: 21
188.135.152.0/21 maxlen: 21
188.135.160.0/23 maxlen: 23
188.135.166.0/23 maxlen: 23
188.135.175.0/24 maxlen: 24
188.135.176.0/21 maxlen: 21
188.135.192.0/21 maxlen: 21
185.38.138.0/23 maxlen: 23
159.20.136.0/21 maxlen: 21
159.20.152.0/21 maxlen: 21
159.20.224.0/21 maxlen: 21
159.20.240.0/21 maxlen: 21
159.20.248.0/21 maxlen: 21
188.135.136.0/21 maxlen: 21
188.135.144.0/21 maxlen: 21
159.20.160.0/21 maxlen: 21
159.20.168.0/21 maxlen: 21
159.20.176.0/21 maxlen: 21
159.20.184.0/21 maxlen: 21
159.20.192.0/21 maxlen: 21
159.20.200.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:8d:8a:ce:e8:93:0f:db:5e:80:c7:02:a2:52:ba:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Mar 9 08:47:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51c61906da8f69776602ff83fcd2ddeb8d7241e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:fd:55:b7:db:3a:1e:0e:63:d8:13:93:50:
fc:df:f4:e4:8b:88:c8:b3:94:58:6a:36:f9:fc:9e:
c8:ea:fb:ce:38:89:4b:a4:b1:d2:4c:00:f6:35:1a:
8d:25:21:18:1d:93:e6:0b:d5:b4:e9:b3:d6:37:b4:
df:04:82:4e:81:98:ab:0f:d4:70:91:10:b5:06:7b:
54:3b:f5:75:e0:4a:b0:00:c0:26:b7:a2:fb:6b:5f:
a8:87:03:cd:a3:86:75:15:fd:8b:a6:41:4a:c3:2e:
ad:cb:02:ab:65:3c:1f:53:84:62:9d:55:6f:dc:7d:
08:bb:b5:b2:33:b6:87:e5:9d:29:16:8a:6d:d8:28:
1c:cd:e3:e8:53:50:df:aa:9d:af:bf:82:4f:b4:8b:
47:d5:6b:98:4b:8a:d4:cb:46:dd:49:5a:67:5f:6d:
da:e4:b3:05:44:70:06:2b:c5:fa:57:60:90:f2:92:
9b:a2:72:bb:85:28:3f:b3:90:10:5d:f8:c7:3b:78:
47:db:bb:ad:07:12:28:4b:ec:67:ad:c8:dd:5a:e1:
78:2c:af:9d:e5:c5:dc:45:e1:75:a5:88:69:0c:44:
46:2b:5a:d3:12:61:36:5f:d6:33:99:db:5e:63:b2:
3d:71:81:2b:cc:b6:f6:61:b7:54:a0:d1:c9:94:44:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C6:19:06:DA:8F:69:77:66:02:FF:83:FC:D2:DD:EB:8D:72:41:E9
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/UcYZBtqPaXdmAv-D_NLd641yQek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.20.136.0/21
159.20.152.0-159.20.207.255
159.20.224.0/21
159.20.240.0/20
185.38.138.0/23
188.135.136.0-188.135.161.255
188.135.166.0/23
188.135.175.0-188.135.183.255
188.135.192.0/19
188.135.228.0/22
188.135.236.0-188.135.247.255
Signature Algorithm: sha256WithRSAEncryption
63:5c:e2:3c:7e:b9:a9:17:d0:0f:7c:a9:2a:13:12:1c:fc:9d:
be:be:a1:34:c4:37:98:1a:d6:f2:90:1f:02:b0:f5:06:a1:30:
cd:ff:a2:5a:53:bc:2b:9a:35:38:b5:ff:bd:2a:1a:2a:b7:c5:
16:4a:02:7a:7b:43:a3:8c:cc:fa:f3:8b:ce:db:5d:d9:65:41:
04:e3:d9:7b:8d:26:e0:0e:fb:0b:a0:04:07:fe:6b:67:9c:99:
20:81:98:25:81:d7:ed:be:94:2c:af:92:0e:dd:71:77:1b:5c:
1c:a4:c8:2d:26:de:c4:b4:3a:8a:eb:7d:18:e2:d2:b6:60:6f:
a3:da:35:00:23:11:a3:fe:fa:9d:c6:1b:10:da:b3:e0:1d:25:
4b:4d:7c:ac:7d:11:4b:07:5d:24:8c:81:e0:2e:0d:f2:29:19:
41:ac:62:63:0b:fb:ea:10:44:82:40:56:b9:1e:2e:17:ee:f4:
79:45:c1:b9:e9:8e:b7:2e:1a:2b:e9:0d:30:d8:40:e6:5c:e3:
d4:1b:8c:1a:7f:5f:9b:d0:88:ce:89:8a:e0:fe:28:a0:23:f8:
e2:21:2d:0d:52:0a:80:fe:2e:d5:3d:37:e8:23:9c:a0:54:97:
4b:57:5b:75:19:6c:31:a5:91:29:1e:40:a6:7b:aa:75:cc:7f:
47:e6:bf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-fra.rpki-client.org