Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UsTFya-QLbAhobFLAgTfZdopR8Y.roa
File: UsTFya-QLbAhobFLAgTfZdopR8Y.roa (raw, json)
Hash identifier: zYGejjmp/JQQP9Pj1XNhkfZdTu0auVAhBrH5Dnayfok=
Subject key identifier: 52:C4:C5:C9:AF:90:2D:B0:21:A1:B1:4B:02:04:DF:65:DA:29:47:C6
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 14181917
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UsTFya-QLbAhobFLAgTfZdopR8Y.roa
Signing time: Tue 08 Mar 2022 13:47:08 +0000
ROA not before: Tue 08 Mar 2022 13:47:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.8.164.0/22 maxlen: 24
212.90.100.0/22 maxlen: 24
185.248.184.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.253.0.0/23 maxlen: 24
91.132.59.0/24 maxlen: 24
193.36.73.0/24 maxlen: 24
193.36.85.0/24 maxlen: 24
193.36.84.0/24 maxlen: 24
212.87.192.0/22 maxlen: 24
185.234.144.0/22 maxlen: 24
185.59.115.0/24 maxlen: 24
82.115.20.0/23 maxlen: 24
82.115.24.0/22 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337123607 (0x14181917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 8 13:47:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52c4c5c9af902db021a1b14b0204df65da2947c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:c7:5a:c8:af:48:3b:92:b9:43:3f:b6:16:
58:ea:f0:58:93:42:fa:84:b8:36:a0:24:4a:77:48:
c6:73:24:f0:80:37:56:93:3e:2e:d5:6f:00:0c:ac:
94:07:0f:3e:df:ff:9c:c2:46:2e:a7:09:9a:12:83:
7b:5f:1f:c6:49:f3:15:90:fa:00:74:c2:d7:e3:b0:
8e:06:a5:b1:6c:ab:0d:62:81:f2:a7:88:74:05:86:
c0:68:dc:fd:ad:59:67:4b:27:90:93:1c:a5:96:f7:
64:c0:9c:e2:90:fe:40:47:04:bc:e1:29:f1:b5:07:
92:4d:d1:a8:bc:e5:2c:a4:61:72:d1:52:9b:88:75:
0b:81:e3:6d:fb:77:9e:c4:81:f8:42:ba:92:6d:a0:
49:f3:f3:f8:6e:05:27:ec:f4:08:5e:ee:4c:65:a8:
5a:64:62:e4:2f:eb:a7:59:29:55:84:ad:74:b0:25:
7e:23:92:5b:f0:80:b8:48:bd:e9:d4:c9:f2:06:cf:
f0:ef:96:6b:18:45:a9:42:6b:aa:b7:a1:0e:fc:97:
d6:6e:d7:99:88:dc:c4:7d:d9:37:8b:d9:8d:70:45:
19:7f:48:72:4f:df:3d:8a:19:9d:15:71:1b:a0:30:
9f:d2:5d:d0:48:e8:ef:27:85:44:2f:a0:96:a9:44:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C4:C5:C9:AF:90:2D:B0:21:A1:B1:4B:02:04:DF:65:DA:29:47:C6
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UsTFya-QLbAhobFLAgTfZdopR8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.20.0/23
82.115.24.0/22
85.8.164.0/22
91.132.59.0/24
185.59.115.0/24
185.129.108.0/23
185.220.236.0/22
185.234.144.0/22
185.248.184.0/22
188.253.0.0/23
193.36.73.0/24
193.36.84.0/23
212.87.192.0/22
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:83:43:1c:46:8e:ec:9d:40:e8:f8:ac:be:b7:3e:5e:03:a7:
7f:40:b6:34:4b:25:76:46:37:20:5e:a1:d5:19:37:66:e8:d0:
f6:13:72:b8:0b:7f:b9:c6:6f:d9:2e:4d:eb:d2:6c:a5:78:8e:
d2:31:bc:1d:49:bf:0f:78:8f:c9:de:33:e6:67:32:c1:e2:62:
f3:1c:d0:97:f1:2c:7c:eb:85:60:d1:e2:14:60:2b:28:5e:f8:
8c:26:41:43:b4:e6:33:e6:d7:3b:a7:6b:67:2c:4c:68:66:12:
63:4b:b4:4c:95:b6:44:c2:5b:4c:11:75:ee:e1:6c:34:8f:71:
8b:b3:2e:4f:f3:1b:02:46:3a:17:31:6f:f6:9c:ad:cf:8b:98:
98:ee:3d:a8:28:e4:1e:98:c8:6f:86:18:6c:02:28:aa:32:5f:
8b:7d:e2:9e:bf:a9:c7:b0:81:17:c7:24:32:61:e1:03:8d:48:
a9:56:60:03:19:28:b9:ec:fc:14:53:3d:e7:66:3c:6f:f5:c7:
bb:67:3a:24:ca:fa:27:d8:57:da:c8:01:55:1c:9a:b6:c6:0c:
66:56:41:9f:c9:ab:e1:47:9e:a9:42:23:8a:9c:8f:e3:65:67:
a2:28:90:f2:0a:4b:12:a3:6b:2e:ac:13:bf:34:b4:85:f0:1e:
fd:40:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org