Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/tRKczTATKk5v05-ytLWl0ht28nY.roa
File: tRKczTATKk5v05-ytLWl0ht28nY.roa (raw, json)
Hash identifier: 7oKAYh/lF9cWiMTiy7SOOKuIkvLvXwahyrWw0MeO5lA=
Subject key identifier: B5:12:9C:CD:30:13:2A:4E:6F:D3:9F:B2:B4:B5:A5:D2:1B:76:F2:76
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018CC9BC441246EE6B4D030927A6C96E5F5F
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/tRKczTATKk5v05-ytLWl0ht28nY.roa
Signing time: Tue 02 Jan 2024 10:33:27 +0000
ROA not before: Tue 02 Jan 2024 10:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 193.201.127.0/24 maxlen: 24
193.160.218.0/24 maxlen: 24
193.160.217.0/24 maxlen: 24
193.160.216.0/24 maxlen: 24
45.144.0.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.159.0/24 maxlen: 24
45.150.112.0/24 maxlen: 24
185.128.41.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:44:12:46:ee:6b:4d:03:09:27:a6:c9:6e:5f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jan 2 10:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5129ccd30132a4e6fd39fb2b4b5a5d21b76f276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:dc:80:ea:35:f0:27:8c:9a:94:b1:c4:02:
bc:94:59:52:ad:76:ca:e5:58:a8:a9:73:6b:5f:72:
81:ed:d8:18:cd:1b:ee:04:39:83:d1:5b:ea:a1:3e:
bc:f7:3d:c1:f1:0e:d6:24:22:ff:c0:09:22:a8:e1:
65:57:da:16:5e:a0:4e:de:89:35:92:99:77:6d:43:
a6:02:9a:a3:d4:6f:43:88:81:a4:25:03:79:cb:f1:
0a:6b:72:29:c1:69:04:6a:23:cc:fd:97:68:db:1f:
4b:0e:6f:1f:3b:6c:17:b1:5f:04:12:5f:f9:3c:2f:
75:94:a7:f4:69:78:c2:ef:b4:50:1f:ae:d2:fe:3f:
e5:14:56:08:a4:19:cb:f1:d8:26:94:8b:c8:30:a0:
79:e8:c9:a7:05:91:3c:7b:f8:13:0f:cd:00:56:c4:
73:48:16:5b:ad:e4:d5:65:fc:83:61:ed:77:07:63:
00:b0:bb:4e:20:0f:1b:b8:1d:02:3d:a0:2b:df:33:
10:a7:ba:ae:16:23:ba:c4:18:c8:b4:6e:07:b7:8d:
f9:48:d6:ba:65:51:3c:36:ea:79:b3:7b:85:63:08:
b3:ce:7b:b6:3e:28:26:c9:26:ac:2f:30:0b:18:b2:
70:1d:02:5f:83:1c:97:1e:02:67:0d:af:7f:bf:53:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:12:9C:CD:30:13:2A:4E:6F:D3:9F:B2:B4:B5:A5:D2:1B:76:F2:76
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/tRKczTATKk5v05-ytLWl0ht28nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.156.0/24
45.138.159.0/24
45.144.0.0/24
45.150.112.0/24
185.128.41.0/24
193.160.216.0-193.160.218.255
193.201.127.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:d7:5d:1c:e8:8e:b6:1e:e1:89:ee:22:25:e5:5e:e7:f2:75:
90:13:a4:c6:84:e0:6c:29:07:3e:93:83:ee:c2:42:1d:16:78:
d5:65:17:d3:5b:ad:56:78:30:2d:3f:a8:99:b2:53:22:5b:39:
b3:66:9c:79:70:ff:87:48:5c:09:58:5b:06:86:c4:09:c9:20:
1d:4e:d6:12:32:c2:3f:66:d0:c4:fe:dd:85:ff:6c:ec:bd:83:
9e:44:40:1a:d2:a8:8f:f4:ce:d0:ea:3b:de:0e:fa:6c:d3:f9:
15:a4:68:7b:98:46:8b:76:36:be:0e:2e:71:22:d9:c1:47:ca:
52:f7:73:ea:e5:85:09:09:b5:bb:f6:68:c1:be:12:12:4c:e3:
a6:26:15:b5:4a:c5:4d:69:59:ae:d3:e9:fe:f2:06:75:43:87:
f6:35:67:21:9b:13:d0:9f:d7:cb:3c:6f:05:f4:cc:fe:1a:10:
9d:64:f2:3e:33:de:6e:dc:d9:87:85:86:85:d7:4e:13:1d:48:
84:e0:70:3b:4b:d8:42:1e:27:d2:97:07:66:ba:81:7d:ae:21:
7c:95:1b:ed:d0:a9:71:e5:14:a7:db:88:dd:2b:6a:d0:cc:fb:
63:34:65:94:a1:c9:72:64:11:be:2d:b0:7f:a2:38:14:0d:55:
49:31:64:1d
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYzJvEQSRu5rTQMJJ6bJbl9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNWNhYjhhMDlhOWZkZTIzYzk2MzVmOGUxNjRhZWYwOWUx
Nzk0OGMwHhcNMjQwMTAyMTAzMzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTEyOWNjZDMwMTMyYTRlNmZkMzlmYjJiNGI1YTVkMjFiNzZmMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTjcgOo18CeMmpSxxAK8lFlSrXbK
5VioqXNrX3KB7dgYzRvuBDmD0VvqoT689z3B8Q7WJCL/wAkiqOFlV9oWXqBO3ok1
kpl3bUOmApqj1G9DiIGkJQN5y/EKa3IpwWkEaiPM/Zdo2x9LDm8fO2wXsV8EEl/5
PC91lKf0aXjC77RQH67S/j/lFFYIpBnL8dgmlIvIMKB56MmnBZE8e/gTD80AVsRz
SBZbreTVZfyDYe13B2MAsLtOIA8buB0CPaAr3zMQp7quFiO6xBjItG4Ht435SNa6
ZVE8Nup5s3uFYwizznu2PigmySasLzALGLJwHQJfgxyXHgJnDa9/v1PbswIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFLUSnM0wEypOb9OfsrS1pdIbdvJ2MB8GA1UdIwQY
MBaAFC9cq4oJqf3iPJY1+OFkrvCeF5SMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jMmUxNmUtYWI2OC00NDI5LTk2ZWUt
MDAyZjI2ZTNiODk4LzEvdFJLY3pUQVRLazV2MDUteXRMV2wwaHQyOG5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9jMmUxNmUtYWI2OC00NDI5LTk2ZWUtMDAyZjI2ZTNiODk4
LzEvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQALYqcAwQA
LYqfAwQALZAAAwQALZZwAwQAuYApMAwDBAPBoNgDBADBoNoDBADByX8wDQYJKoZI
hvcNAQELBQADggEBALzXXRzojrYe4YnuIiXlXufydZATpMaE4GwpBz6Tg+7CQh0W
eNVlF9NbrVZ4MC0/qJmyUyJbObNmnHlw/4dIXAlYWwaGxAnJIB1O1hIywj9m0MT+
3YX/bOy9g55EQBrSqI/0ztDqO94O+mzT+RWkaHuYRot2Nr4OLnEi2cFHylL3c+rl
hQkJtbv2aMG+EhJM46YmFbVKxU1pWa7T6f7yBnVDh/Y1ZyGbE9Cf18s8bwX0zP4a
EJ1k8j4z3m7c2YeFhoXXThMdSITgcDtL2EIeJ9KXB2a6gX2uIXyVG+3QqXHlFKfb
iN0ratDM+2M0ZZShyXJkEb4tsH+iOBQNVUkxZB0=
-----END CERTIFICATE-----
Generated at Thu Feb 22 18:05:50 2024 by rpki-client on console-fra.rpki-client.org