Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/t-c5c25ceBAUmc_IbaF1qu_K8Yk.roa
File: t-c5c25ceBAUmc_IbaF1qu_K8Yk.roa (raw, json)
Hash identifier: xSsANOOj8ZHKtxi+ewp9kYBDk1ow3VULY/RSph4NTZ8=
Subject key identifier: B7:E7:39:73:6E:5C:78:10:14:99:CF:C8:6D:A1:75:AA:EF:CA:F1:89
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 14B17646
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/t-c5c25ceBAUmc_IbaF1qu_K8Yk.roa
Signing time: Tue 26 Apr 2022 00:45:31 +0000
ROA not before: Tue 26 Apr 2022 00:45:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.8.164.0/22 maxlen: 24
212.90.100.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.253.0.0/23 maxlen: 24
185.234.144.0/22 maxlen: 24
91.132.59.0/24 maxlen: 24
193.36.73.0/24 maxlen: 24
193.36.85.0/24 maxlen: 24
193.36.84.0/24 maxlen: 24
82.115.20.0/23 maxlen: 24
82.115.24.0/22 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347174470 (0x14b17646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 26 00:45:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7e739736e5c78101499cfc86da175aaefcaf189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:2b:01:96:ac:8a:2a:e2:ea:53:74:6c:86:
26:a1:fc:3a:c4:81:86:4a:70:a6:f0:80:4d:29:c7:
45:85:d7:9b:04:5a:34:98:90:45:26:d2:d0:15:e4:
31:ce:f0:ed:f4:4a:cd:df:64:ea:35:4e:17:b7:db:
3a:09:33:66:69:ca:5f:95:13:e7:4d:0b:07:78:e1:
c6:fc:dc:24:ad:29:a8:0b:20:2c:88:72:43:2f:8a:
b3:ae:cf:c7:ec:94:a0:35:60:64:d1:ac:e3:bb:12:
b7:65:88:3f:ee:a0:a3:d6:94:2b:f6:3a:f3:b4:2e:
5d:7c:81:25:6e:cb:36:9e:9d:4b:c7:68:af:fc:9f:
dd:2c:7a:96:67:1b:3d:fe:c8:b3:fe:e5:fa:4b:96:
bf:a6:2c:c5:fa:ea:3f:06:80:7d:d8:91:f5:4d:7b:
af:b1:5e:2e:84:61:b8:24:71:9a:6b:cc:24:16:1d:
51:20:58:04:14:8d:f7:c8:32:a8:3d:d5:c6:53:2b:
37:95:af:42:38:ba:69:2d:4c:82:60:a3:13:1a:b8:
a9:e9:78:e4:a2:82:cb:d3:98:c0:4d:2d:12:6f:75:
3e:c0:83:84:9d:b6:3e:ae:96:2e:02:73:78:c7:2b:
46:c8:62:71:27:47:6f:7e:69:5d:35:f9:9d:c5:fb:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E7:39:73:6E:5C:78:10:14:99:CF:C8:6D:A1:75:AA:EF:CA:F1:89
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/t-c5c25ceBAUmc_IbaF1qu_K8Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.20.0/23
82.115.24.0/22
85.8.164.0/22
91.132.59.0/24
185.129.108.0/23
185.220.236.0/22
185.234.144.0/22
188.253.0.0/23
193.36.73.0/24
193.36.84.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
44:3b:2e:49:a7:41:9a:92:9c:d1:83:41:94:3d:ed:5e:7b:73:
28:4d:bf:76:b5:ca:f0:b3:98:0a:b0:a5:c4:da:11:70:f0:9d:
ba:99:00:cc:27:63:e0:19:dc:39:75:8b:93:2e:f1:59:c4:df:
46:8a:2c:1e:00:81:c9:67:d5:58:3b:fa:fd:55:43:63:e0:40:
32:d6:c8:d5:32:52:48:cb:7d:c8:21:f6:c0:e3:ed:ce:a6:08:
4c:f6:c6:c4:d2:55:ca:35:77:fc:de:42:ba:e7:f5:c5:57:13:
bb:df:a4:13:f9:6a:7b:79:45:59:09:70:7d:11:2f:ad:42:7d:
fe:7d:e6:e9:50:94:9f:91:7f:df:9a:73:7f:f7:0a:72:79:57:
db:ae:c6:7a:20:dc:bf:69:05:de:18:e6:86:6c:d9:03:0c:00:
64:b0:92:4e:3f:d0:78:1b:b1:67:57:e4:4d:01:cc:9d:b0:a6:
99:8c:77:93:07:57:6e:07:5f:9d:9b:b3:88:6f:46:78:b5:09:
40:04:e5:50:13:39:d7:33:66:37:51:a1:73:87:62:51:77:70:
1c:84:66:33:8e:3f:5a:e3:76:56:5f:59:49:2e:09:bd:b1:a6:
ff:7d:86:0d:f2:67:92:16:ae:cc:47:b5:8a:74:7a:ad:c0:38:
85:5a:91:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:25 2023 by rpki-client on console-ams.rpki-client.org