Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/vht5sj1WdeKmu_5K9sONb4FZhz8.roa
File: vht5sj1WdeKmu_5K9sONb4FZhz8.roa (raw, json)
Hash identifier: BC9BFeu8NQgJwevpQQtrT+yCVG7K2x484EMFDfzyMJ4=
Subject key identifier: BE:1B:79:B2:3D:56:75:E2:A6:BB:FE:4A:F6:C3:8D:6F:81:59:87:3F
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 06FEE2B7
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/vht5sj1WdeKmu_5K9sONb4FZhz8.roa
Signing time: Sat 01 Jan 2022 07:02:18 +0000
ROA not before: Sat 01 Jan 2022 07:02:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12350
IP address blocks: 83.228.128.0/17 maxlen: 17
213.162.0.0/19 maxlen: 19
194.38.64.0/21 maxlen: 21
195.15.128.0/18 maxlen: 18
194.38.72.0/23 maxlen: 23
185.133.28.0/22 maxlen: 22
212.232.128.0/17 maxlen: 17
194.148.0.0/16 maxlen: 16
195.15.0.0/17 maxlen: 17
212.28.128.0/19 maxlen: 19
194.38.160.0/19 maxlen: 19
212.147.79.0/24 maxlen: 24
212.40.0.0/19 maxlen: 19
194.38.91.0/24 maxlen: 24
194.38.92.0/22 maxlen: 22
212.147.0.0/17 maxlen: 17
213.5.152.0/21 maxlen: 21
212.254.0.0/16 maxlen: 16
212.109.64.0/19 maxlen: 19
2a03:a360::/32 maxlen: 32
2001:4c78::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117367479 (0x6fee2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jan 1 07:02:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be1b79b23d5675e2a6bbfe4af6c38d6f8159873f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:73:4e:6f:64:fd:db:20:cc:fb:15:24:2e:
41:e7:82:92:8e:01:2c:2b:15:20:f1:fe:a3:a2:7d:
8e:86:75:82:40:04:10:4f:5d:e8:ac:9b:5e:80:aa:
01:f0:b0:db:60:73:ba:0e:58:25:c9:8f:85:5c:e5:
03:8e:9e:90:79:4b:ba:9b:02:7d:46:57:e9:ca:53:
a5:2c:9d:3b:20:60:98:12:ce:7d:33:de:df:81:f3:
18:fb:a3:b6:e8:ca:22:a0:c7:73:27:28:f7:ef:de:
16:f0:96:2d:60:4a:e9:e7:eb:2c:77:11:70:f9:de:
e1:7c:c5:2b:aa:c9:00:21:44:d2:c3:19:eb:cf:93:
ab:a2:46:4f:a0:40:9b:35:e4:47:2a:9a:9c:af:ff:
20:b1:1f:6a:5e:73:01:a2:e1:97:19:ec:1f:6b:8a:
8d:70:74:11:29:16:87:17:d5:e4:70:96:49:fa:be:
14:86:d1:4e:a6:a2:2b:7e:ec:3d:0d:d4:aa:80:ef:
d6:a6:ec:c3:ac:7e:24:ee:98:de:d1:42:bc:d5:a6:
bc:39:24:78:d9:bc:24:c9:51:e1:1e:f4:a0:1a:d9:
f1:a0:85:3b:55:a8:3f:a4:c2:8e:8e:58:21:7c:e2:
69:d4:60:8f:ce:3b:94:78:14:95:c3:e7:65:4b:80:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1B:79:B2:3D:56:75:E2:A6:BB:FE:4A:F6:C3:8D:6F:81:59:87:3F
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/vht5sj1WdeKmu_5K9sONb4FZhz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.228.128.0/17
185.133.28.0/22
194.38.64.0-194.38.73.255
194.38.91.0-194.38.95.255
194.38.160.0/19
194.148.0.0/16
195.15.0.0-195.15.191.255
212.28.128.0/19
212.40.0.0/19
212.109.64.0/19
212.147.0.0/17
212.232.128.0/17
212.254.0.0/16
213.5.152.0/21
213.162.0.0/19
IPv6:
2001:4c78::/32
2a03:a360::/32
Signature Algorithm: sha256WithRSAEncryption
89:89:1a:42:c0:c6:97:15:72:cf:85:48:6a:99:04:80:02:19:
f3:0e:da:20:e8:f6:e4:c2:84:b0:97:36:23:73:eb:e0:cf:92:
92:1a:eb:ae:80:e8:dd:62:06:d4:71:6e:9c:1d:d7:07:a8:db:
87:71:e6:35:af:d0:b9:39:5e:ff:6f:02:39:d8:00:ec:16:d9:
b6:4e:70:de:a4:84:70:c4:6f:67:49:5c:c5:df:a5:e7:45:3c:
f9:4f:5c:0c:10:f9:3f:b8:70:a6:86:64:24:70:f8:93:b3:07:
00:36:c0:0a:30:a9:78:32:d2:5a:79:45:cd:02:29:81:c5:5c:
5a:50:1d:73:3c:d0:5a:27:80:3b:33:32:8a:db:29:aa:3a:35:
b7:cc:c9:0e:8b:e3:e5:2a:c6:c1:8a:bf:21:78:67:81:4e:ca:
42:85:0a:81:fe:1c:37:ad:4a:2d:66:d2:e1:4b:12:d2:ce:b5:
59:66:13:fc:91:e8:e7:67:4c:6b:f5:68:c1:e3:94:22:c8:e6:
d8:0d:50:14:9f:30:3e:5f:f3:c0:0a:f2:e1:26:95:e5:c0:a7:
da:45:bf:fd:98:73:a7:19:07:18:06:6f:83:2b:0a:4d:11:12:
ff:f0:80:c8:da:62:7b:16:39:f0:df:45:5d:3f:a6:4a:90:1c:
c8:0f:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:19 2023 by rpki-client on console-ams.rpki-client.org