Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/udLADV-N3qEH5PIZ3xrTrlMmGDI.roa
File: udLADV-N3qEH5PIZ3xrTrlMmGDI.roa (raw, json)
Hash identifier: eb1EaGdveDyvgXnAfrOtHz9CeWx/jAs6pRzlkbya8N0=
Subject key identifier: B9:D2:C0:0D:5F:8D:DE:A1:07:E4:F2:19:DF:1A:D3:AE:53:26:18:32
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 0781489E
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/udLADV-N3qEH5PIZ3xrTrlMmGDI.roa
Signing time: Sat 01 Jan 2022 01:03:17 +0000
ROA not before: Sat 01 Jan 2022 01:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48291
IP address blocks: 188.135.200.0/21 maxlen: 21
188.135.208.0/20 maxlen: 20
188.135.228.0/22 maxlen: 22
188.135.236.0/22 maxlen: 22
188.135.240.0/21 maxlen: 21
188.135.152.0/21 maxlen: 21
188.135.160.0/23 maxlen: 23
188.135.166.0/23 maxlen: 23
188.135.175.0/24 maxlen: 24
188.135.176.0/21 maxlen: 21
188.135.192.0/21 maxlen: 21
185.38.138.0/23 maxlen: 23
94.199.10.0/23 maxlen: 23
159.20.128.0/21 maxlen: 21
94.199.9.0/24 maxlen: 24
159.20.136.0/21 maxlen: 21
94.199.14.0/23 maxlen: 23
94.199.12.0/23 maxlen: 23
159.20.152.0/21 maxlen: 21
159.20.224.0/21 maxlen: 21
159.20.240.0/21 maxlen: 21
159.20.248.0/21 maxlen: 21
188.135.128.0/21 maxlen: 21
188.135.136.0/21 maxlen: 21
188.135.144.0/21 maxlen: 21
159.20.160.0/21 maxlen: 21
159.20.168.0/21 maxlen: 21
159.20.176.0/21 maxlen: 21
159.20.184.0/21 maxlen: 21
159.20.192.0/21 maxlen: 21
159.20.200.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125913246 (0x781489e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Jan 1 01:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9d2c00d5f8ddea107e4f219df1ad3ae53261832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:30:6f:80:a7:10:c3:b2:1f:3e:33:8b:31:
11:af:e9:e2:e2:e2:dc:6d:81:d1:29:13:10:00:9c:
6b:17:ed:e5:51:bf:b9:51:54:a8:f4:65:7f:e6:db:
26:cb:63:45:94:0e:70:cc:be:0d:2b:3e:e2:9d:5f:
f6:ec:29:80:24:fe:5e:51:60:6e:1c:65:52:64:7c:
76:d5:d4:f1:57:7e:dc:2b:dd:d1:15:f5:7e:74:28:
da:d1:f3:2d:71:ad:49:a3:a8:95:b7:be:c0:11:3d:
45:d9:1c:6c:25:36:11:5d:b4:3c:6a:8b:13:73:c5:
b6:86:22:92:7e:d6:d6:e2:65:71:3b:fe:3d:6d:fe:
ab:1c:6e:27:20:83:ec:f1:ef:4e:13:33:1b:ab:64:
e2:14:af:3a:02:7d:1f:ba:69:97:4f:f6:6a:94:29:
9a:77:16:7c:f3:5a:80:bc:be:c9:a2:6a:eb:4f:8b:
4b:0c:34:2d:45:c3:a0:ca:58:14:fe:56:2e:b7:fd:
4d:26:e0:0c:68:01:8e:3e:99:6a:e5:f7:a1:11:b6:
3c:17:b1:aa:e9:ec:9b:15:15:33:41:e4:55:51:8b:
21:c1:10:fb:83:df:90:13:13:64:67:10:12:71:22:
7a:b6:e6:bd:a5:a5:c7:29:86:76:3b:c3:cc:49:bc:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D2:C0:0D:5F:8D:DE:A1:07:E4:F2:19:DF:1A:D3:AE:53:26:18:32
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/udLADV-N3qEH5PIZ3xrTrlMmGDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.9.0-94.199.15.255
159.20.128.0/20
159.20.152.0-159.20.207.255
159.20.224.0/21
159.20.240.0/20
185.38.138.0/23
188.135.128.0-188.135.161.255
188.135.166.0/23
188.135.175.0-188.135.183.255
188.135.192.0/19
188.135.228.0/22
188.135.236.0-188.135.247.255
Signature Algorithm: sha256WithRSAEncryption
48:8a:0d:ee:c8:12:09:57:78:b0:57:00:80:fd:ad:b8:c5:32:
67:0d:d0:f9:76:04:ef:aa:94:82:c5:6a:a9:3c:af:aa:d4:d4:
66:ff:bc:bf:ce:00:92:8f:45:c0:73:f4:e2:14:a1:50:28:a6:
02:1f:2c:bb:92:81:2d:e6:8d:b8:8f:8e:fe:11:cc:84:d0:ed:
81:5f:8f:8e:00:9f:cd:f5:22:fb:a6:1f:fe:9c:d9:4c:55:eb:
b3:69:f5:d9:64:98:b3:00:d8:92:60:b1:5d:53:d8:e3:58:cb:
7d:82:3c:d8:b1:7e:2c:6f:d3:bf:46:5e:7d:d9:ec:86:f4:b5:
07:25:7e:be:8d:db:55:47:ed:d5:50:42:a2:fc:98:6c:2d:d5:
14:5a:b0:1f:af:ea:1a:00:92:11:96:9a:b3:fd:4c:70:dc:07:
60:38:d6:2a:1f:a6:99:e4:e4:52:42:2a:92:15:f2:0f:6e:97:
36:a4:f4:fc:da:c5:40:f3:79:81:31:df:76:59:8b:26:f3:9c:
d8:6f:07:d5:ca:e9:35:be:7e:14:f2:9c:71:2d:21:ac:00:54:
b4:76:0d:be:b1:16:09:2b:8b:ee:f0:a5:62:a8:a2:c4:91:8f:
03:90:9a:a7:ea:78:aa:2c:1e:aa:d2:e6:01:0a:a3:d7:83:0c:
06:67:dc:26
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIEB4FInjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZWI4Njk4MzU0NzExMzM1OWJhZGUxZjNmMzgxMDQwOTFlM2E2NDM5MB4XDTIyMDEw
MTAxMDMxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjlkMmMwMGQ1Zjhk
ZGVhMTA3ZTRmMjE5ZGYxYWQzYWU1MzI2MTgzMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALp+MG+ApxDDsh8+M4sxEa/p4uLi3G2B0SkTEACcaxft5VG/
uVFUqPRlf+bbJstjRZQOcMy+DSs+4p1f9uwpgCT+XlFgbhxlUmR8dtXU8Vd+3Cvd
0RX1fnQo2tHzLXGtSaOolbe+wBE9RdkcbCU2EV20PGqLE3PFtoYikn7W1uJlcTv+
PW3+qxxuJyCD7PHvThMzG6tk4hSvOgJ9H7ppl0/2apQpmncWfPNagLy+yaJq60+L
Sww0LUXDoMpYFP5WLrf9TSbgDGgBjj6ZauX3oRG2PBexqunsmxUVM0HkVVGLIcEQ
+4PfkBMTZGcQEnEierbmvaWlxymGdjvDzEm8FQUCAwEAAaOCAnQwggJwMB0GA1Ud
DgQWBBS50sANX43eoQfk8hnfGtOuUyYYMjAfBgNVHSMEGDAWgBTOuGmDVHETNZut
4fPzgQQJHjpkOTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pyaHBnMVJ4RXpXYnJlSHo4NEVFQ1I0NlpEay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvZjM1MzlkLTM4Y2QtNDY1ZS1hNTdkLWRlZTJmNjUwZGQ4Ni8x
L3VkTEFEVi1OM3FFSDVQSVozeHJUcmxNbUdESS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
ZjM1MzlkLTM4Y2QtNDY1ZS1hNTdkLWRlZTJmNjUwZGQ4Ni8xL3pyaHBnMVJ4RXpX
YnJlSHo4NEVFQ1I0NlpEay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
iQYIKwYBBQUHAQcBAf8EejB4MHYEAgABMHAwDAMEAF7HCQMEBF7HAAMEBJ8UgDAM
AwQDnxSYAwQEnxTAAwQDnxTgAwQEnxTwAwQBuSaKMAwDBAe8h4ADBAG8h6ADBAG8
h6YwDAMEALyHrwMEA7yHsAMEBbyHwAMEAryH5DAMAwQCvIfsAwQDvIfwMA0GCSqG
SIb3DQEBCwUAA4IBAQBIig3uyBIJV3iwVwCA/a24xTJnDdD5dgTvqpSCxWqpPK+q
1NRm/7y/zgCSj0XAc/TiFKFQKKYCHyy7koEt5o24j47+EcyE0O2BX4+OAJ/N9SL7
ph/+nNlMVeuzafXZZJizANiSYLFdU9jjWMt9gjzYsX4sb9O/Rl592eyG9LUHJX6+
jdtVR+3VUEKi/JhsLdUUWrAfr+oaAJIRlpqz/Uxw3AdgONYqH6aZ5ORSQiqSFfIP
bpc2pPT82sVA83mBMd92WYsm85zYbwfVyuk1vn4U8pxxLSGsAFS0dg2+sRYJK4vu
8KViqKLEkY8DkJqn6niqLB6q0uYBCqPXgwwGZ9wm
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-fra.rpki-client.org