Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/U6Gaw-FGg0wa0u7fFMivIWTOVkI.roa
File: U6Gaw-FGg0wa0u7fFMivIWTOVkI.roa (raw, json)
Hash identifier: N6WdwcjezJqVA8bn+gnhn05zNgzktDk0Tyw4uePiHBw=
Subject key identifier: 53:A1:9A:C3:E1:46:83:4C:1A:D2:EE:DF:14:C8:AF:21:64:CE:56:42
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 018573685EE67CCC1CD5813C8C164A52EB5A
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/U6Gaw-FGg0wa0u7fFMivIWTOVkI.roa
Signing time: Mon 02 Jan 2023 16:54:57 +0000
ROA not before: Mon 02 Jan 2023 16:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199939
IP address blocks: 87.121.16.0/23 maxlen: 24
87.120.160.0/23 maxlen: 24
89.19.60.0/22 maxlen: 24
141.98.2.0/23 maxlen: 24
185.42.8.0/22 maxlen: 24
185.156.160.0/22 maxlen: 24
45.133.248.0/23 maxlen: 24
212.237.253.0/24 maxlen: 24
45.139.120.0/23 maxlen: 24
2a0d:bb40::/32 maxlen: 48
2a01:5860::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:5e:e6:7c:cc:1c:d5:81:3c:8c:16:4a:52:eb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Jan 2 16:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53a19ac3e146834c1ad2eedf14c8af2164ce5642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:80:98:72:60:e1:d2:b1:65:5e:86:f5:23:7e:
c5:14:40:a7:b8:2a:9c:92:47:57:69:04:5d:ab:e5:
a6:5c:2d:8f:9d:ca:fc:80:e1:93:78:a3:44:0b:5f:
70:3e:49:5e:8a:ff:ab:da:18:43:a0:cb:71:d1:6d:
85:1e:09:a0:02:52:24:0d:f1:b6:b8:4a:17:d9:5a:
92:4b:15:c3:ea:e9:ab:5b:48:a5:39:81:7c:38:44:
6c:9d:fe:97:09:1f:04:87:3c:92:74:c3:16:d0:00:
b7:f5:14:e3:19:48:38:91:a3:7d:60:e2:c2:88:69:
0b:92:e3:7a:8e:67:cf:fb:35:58:2b:ec:e8:c6:c0:
36:5d:6c:1d:9a:f1:fe:7e:ef:a7:15:02:3d:d1:96:
cc:0a:4b:cf:44:0e:a7:00:21:24:fc:b0:1b:77:a3:
6a:ae:a7:77:c7:51:d2:f2:83:32:37:17:bd:73:f1:
6a:dd:38:d9:88:b8:17:29:6c:41:7a:61:d9:0d:ec:
8b:58:90:1c:4a:bc:bf:ac:96:62:bf:75:fa:24:b5:
eb:ed:ce:1f:8a:c0:a7:53:68:b6:e0:35:06:43:04:
66:26:d2:a9:0a:28:13:b8:49:07:d2:af:08:f8:1d:
22:5a:d9:38:f0:03:5e:2d:98:02:6e:db:32:0c:42:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A1:9A:C3:E1:46:83:4C:1A:D2:EE:DF:14:C8:AF:21:64:CE:56:42
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/U6Gaw-FGg0wa0u7fFMivIWTOVkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.248.0/23
45.139.120.0/23
87.120.160.0/23
87.121.16.0/23
89.19.60.0/22
141.98.2.0/23
185.42.8.0/22
185.156.160.0/22
212.237.253.0/24
IPv6:
2a01:5860::/32
2a0d:bb40::/32
Signature Algorithm: sha256WithRSAEncryption
bb:bc:1f:a2:93:6a:68:3a:3b:90:d4:7c:1b:00:89:d4:96:87:
38:d0:27:d2:a7:84:86:cb:23:e8:af:7d:be:6f:a1:15:70:a6:
c1:dc:ad:78:a8:f9:58:86:f2:0e:ed:af:8e:9d:62:8f:85:fd:
d0:03:e7:df:17:74:ac:b4:c5:35:94:fa:36:b4:85:6d:cb:df:
4f:d3:7b:df:2e:b2:26:95:9a:d2:74:33:bd:ca:0f:55:d6:b5:
d2:ea:7d:86:57:00:f8:6e:1f:89:7b:6e:a4:10:1c:b8:01:50:
44:ab:45:b9:03:e2:cb:35:50:06:97:73:00:d0:d3:c5:a2:ca:
ff:0f:18:74:6f:4b:29:64:83:4c:fa:e7:93:d5:83:ed:7d:4c:
1a:fa:d2:c1:c2:b0:e1:1f:6f:7d:ad:22:c1:bb:33:44:80:7b:
6a:ab:83:5a:d1:1d:a7:f8:fb:2e:27:72:ef:97:a5:83:32:d0:
dd:54:04:57:3d:c6:f0:13:7c:91:f5:67:20:2a:99:b0:17:6a:
17:90:65:50:bf:15:76:b0:f8:0c:16:e8:48:62:a7:56:4e:ab:
c9:bd:7d:80:a1:29:b2:80:72:af:da:a2:43:e6:97:9f:38:b2:
91:55:f1:e0:c2:ad:89:c5:c8:d7:f7:2a:fe:5b:d5:43:3b:1e:
ab:91:c9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:58 2024 by rpki-client on console-fra.rpki-client.org