Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/yDgdHfLXnIyVptWMB6t9R4Llnxo.roa
File: yDgdHfLXnIyVptWMB6t9R4Llnxo.roa (raw, json)
Hash identifier: 9k7uDZti5o35dr668vd2FfihE90Thrfva8o7V9XPy9I=
Subject key identifier: C8:38:1D:1D:F2:D7:9C:8C:95:A6:D5:8C:07:AB:7D:47:82:E5:9F:1A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 157796FB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/yDgdHfLXnIyVptWMB6t9R4Llnxo.roa
Signing time: Thu 23 Jun 2022 12:12:03 +0000
ROA not before: Thu 23 Jun 2022 12:12:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.8.164.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.253.0.0/23 maxlen: 24
185.234.144.0/22 maxlen: 24
91.132.59.0/24 maxlen: 24
193.36.85.0/24 maxlen: 24
82.115.20.0/23 maxlen: 24
82.115.24.0/22 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360158971 (0x157796fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 23 12:12:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8381d1df2d79c8c95a6d58c07ab7d4782e59f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:b9:7d:fe:d7:3b:1a:f7:2b:af:c7:95:1e:
95:b6:93:a9:45:12:ff:57:43:50:7f:88:66:ce:e7:
08:d8:04:66:b8:95:49:5c:7e:48:2f:8c:43:24:2b:
49:11:f2:e1:55:61:ff:e8:6e:44:76:86:61:29:2a:
d9:a0:41:d3:34:29:18:12:c0:c9:5a:b8:4a:3f:31:
9d:80:f1:0b:5d:e2:69:a1:64:e0:ad:dc:0c:33:f4:
71:ae:b6:14:2d:6a:f3:20:8e:b1:0d:c3:f6:a7:57:
10:32:46:9a:bd:7a:f5:d9:b0:27:2d:19:3f:44:91:
77:df:b8:32:6b:c2:02:d5:be:dc:d5:e4:6e:63:c4:
04:5d:e9:6a:f9:06:c3:5b:76:16:22:3b:58:43:7c:
4f:8c:d5:2a:f2:38:7f:fb:be:06:6b:6a:71:e9:1b:
0a:bd:7f:bd:d0:c5:6f:dd:41:27:24:0c:cb:ce:2f:
a7:77:10:66:a9:a6:9d:38:67:f8:8f:ad:4a:e6:64:
31:97:e9:d8:22:82:5f:d5:82:47:2e:95:2e:d9:ef:
74:0a:e7:5f:3c:ea:fb:23:39:bc:1b:80:39:c7:bd:
39:ea:ec:c3:8e:3a:13:97:71:54:ab:a5:83:32:08:
c9:09:bd:b7:5a:9c:c1:1e:63:c1:e2:36:a3:43:34:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:38:1D:1D:F2:D7:9C:8C:95:A6:D5:8C:07:AB:7D:47:82:E5:9F:1A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/yDgdHfLXnIyVptWMB6t9R4Llnxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.20.0/23
82.115.24.0/22
85.8.164.0/22
91.132.59.0/24
185.129.108.0/23
185.220.236.0/22
185.234.144.0/22
188.253.0.0/23
193.36.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:99:b2:3a:6a:49:6f:30:6d:2c:1b:de:75:06:6f:b0:c4:36:
b2:67:f9:1a:bd:c2:d9:6c:98:5e:f1:49:6f:fe:f7:73:0b:58:
da:e8:bd:84:ec:3a:a5:47:74:26:10:d9:9f:ac:4d:fa:17:4a:
a0:d8:f2:4b:1f:89:d5:63:02:40:a6:99:34:df:da:0c:65:9e:
8d:ed:a9:5d:ed:fa:58:79:33:38:3c:77:ae:a4:d4:6a:5f:7a:
17:6b:c1:9b:40:66:fa:af:53:8e:92:73:46:6e:6c:ce:3e:0f:
8a:aa:3e:cc:80:9b:8f:b2:45:c0:b9:66:2f:f5:92:b4:f8:3c:
cc:40:1c:83:15:ec:ff:ce:dc:19:49:c7:2c:62:97:1f:cf:0c:
d5:12:9e:b3:18:8e:16:e8:33:61:09:5e:32:0c:33:fd:16:0d:
cf:9c:33:c2:e7:3c:ba:4e:73:92:43:28:d7:93:b5:5b:ce:20:
a7:3b:b1:e3:03:6b:bd:9f:3d:eb:2b:b4:64:13:b6:c1:46:3a:
51:30:35:c0:80:8d:8a:3e:9a:ad:33:99:93:87:2e:ca:31:0a:
6f:db:d3:0e:9a:bf:c8:97:82:5b:f0:4b:82:31:9b:d4:83:a6:
c9:c8:e1:97:ea:1b:4d:1f:cb:84:04:fb:92:dc:ba:59:f7:93:
50:cb:69:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org