Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/ke5dFMOAOgzCBXQDItCLukbIL2A.roa
File: ke5dFMOAOgzCBXQDItCLukbIL2A.roa (raw, json)
Hash identifier: 62oLW0J+bk013FcKvL0+F/N4ScqwnuFyKBADi/Fpckg=
Subject key identifier: 91:EE:5D:14:C3:80:3A:0C:C2:05:74:03:22:D0:8B:BA:46:C8:2F:60
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 018D008F7F3AB7A8BB0FBD626CA248D30D26
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/ke5dFMOAOgzCBXQDItCLukbIL2A.roa
Signing time: Sat 13 Jan 2024 02:03:40 +0000
ROA not before: Sat 13 Jan 2024 02:03:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208041
IP address blocks: 193.160.10.0/23 maxlen: 23
193.160.14.0/23 maxlen: 23
109.197.32.0/23 maxlen: 23
185.222.4.0/24 maxlen: 24
185.222.5.0/24 maxlen: 24
185.222.6.0/24 maxlen: 24
185.222.7.0/24 maxlen: 24
2a0f:d180::/29 maxlen: 32
2a0c:8440::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:00:8f:7f:3a:b7:a8:bb:0f:bd:62:6c:a2:48:d3:0d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Jan 13 02:03:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91ee5d14c3803a0cc205740322d08bba46c82f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:7c:c5:ae:80:06:7d:34:21:4b:d8:73:58:
2d:f2:33:8e:75:d6:d0:30:92:47:bd:65:ca:7b:00:
27:03:53:f3:11:a8:c5:f5:66:3e:02:19:a0:ec:08:
19:3a:aa:cb:8c:fc:af:df:f2:bf:34:0b:77:3b:65:
c8:85:1e:8d:b4:c0:40:27:fb:4f:e7:ea:6b:74:fc:
19:0c:af:c9:e0:b0:59:ce:a3:c8:28:21:88:0a:f0:
fb:f3:fc:55:db:de:06:b7:f2:fa:c1:87:00:b1:f3:
a5:bc:f9:fb:90:48:4f:36:5e:c6:42:70:12:ab:8a:
9b:c6:88:17:34:63:00:93:bb:8a:c6:fe:6f:d3:8f:
63:14:f9:35:07:6c:59:e4:bf:a2:e7:30:b7:77:7a:
e2:86:26:77:3a:e7:f3:12:84:8a:33:22:64:98:df:
2a:d0:67:4b:2f:e7:98:37:83:72:59:93:bc:7f:69:
28:a4:99:65:30:7f:47:09:19:a6:5d:3b:46:b4:33:
26:c5:e2:f3:b0:11:7e:4e:36:a8:d8:e0:7c:cf:9d:
b6:93:3f:79:8f:a0:b6:39:79:5b:0d:94:e2:3f:9a:
5c:2d:95:8d:7c:01:10:b5:d7:b1:c9:b3:c3:83:6a:
ec:f8:de:7b:fe:90:ef:90:b8:45:09:f6:de:c3:5b:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EE:5D:14:C3:80:3A:0C:C2:05:74:03:22:D0:8B:BA:46:C8:2F:60
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/ke5dFMOAOgzCBXQDItCLukbIL2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.32.0/23
185.222.4.0/22
193.160.10.0/23
193.160.14.0/23
IPv6:
2a0c:8440::/48
2a0f:d180::/29
Signature Algorithm: sha256WithRSAEncryption
7c:96:43:be:0a:bb:8c:05:3b:1c:15:8a:93:01:c9:83:d8:55:
5e:39:43:76:cb:f3:20:0a:53:30:84:e5:b0:84:b4:1a:6f:4b:
4e:a2:80:75:96:d7:93:20:6a:1c:3f:55:91:25:2e:1b:54:82:
52:73:5f:c8:af:08:aa:7d:c3:06:df:0c:b4:27:56:ba:8b:19:
ef:c1:8d:40:cf:83:3d:30:3f:ef:2d:ed:68:90:bd:61:a5:00:
b1:61:8a:7a:eb:ba:c7:60:b9:96:f0:a7:11:88:7f:d7:75:34:
4a:22:9e:83:06:ad:c8:09:81:d9:f9:37:ca:6b:67:6a:0d:f8:
25:48:88:8c:7a:34:f0:88:50:5b:50:9d:37:3e:ef:76:52:a6:
f5:3a:a4:4c:b0:33:e7:19:a1:44:0f:61:d6:b1:9e:6b:d3:f9:
97:37:0c:2c:18:74:88:66:2d:60:72:a4:aa:5c:55:ee:91:53:
25:2e:67:81:5d:eb:64:57:8b:90:f6:45:e1:04:38:76:e4:ff:
34:b5:fb:48:72:99:18:84:01:c1:e7:fc:3e:42:03:5c:b9:05:
05:1c:6e:9d:94:07:d2:5c:dc:a3:46:76:1d:83:7e:bd:62:c2:
53:0d:b4:9a:3b:8e:76:67:63:2b:0a:18:ae:6e:59:a8:e9:f8:
f2:c0:58:c0
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAY0Aj386t6i7D71ibKJI0w0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MWVjYzFhNzRjZjkyYWI2MTljNWY3MTAxMjM5MzdjZTUw
ZDljNDMwHhcNMjQwMTEzMDIwMzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWVlNWQxNGMzODAzYTBjYzIwNTc0MDMyMmQwOGJiYTQ2YzgyZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCV8xa6ABn00IUvYc1gt8jOOddbQ
MJJHvWXKewAnA1PzEajF9WY+Ahmg7AgZOqrLjPyv3/K/NAt3O2XIhR6NtMBAJ/tP
5+prdPwZDK/J4LBZzqPIKCGICvD78/xV294Gt/L6wYcAsfOlvPn7kEhPNl7GQnAS
q4qbxogXNGMAk7uKxv5v049jFPk1B2xZ5L+i5zC3d3rihiZ3OufzEoSKMyJkmN8q
0GdLL+eYN4NyWZO8f2kopJllMH9HCRmmXTtGtDMmxeLzsBF+Tjao2OB8z522kz95
j6C2OXlbDZTiP5pcLZWNfAEQtdexybPDg2rs+N57/pDvkLhFCfbew1tNOwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFJHuXRTDgDoMwgV0AyLQi7pGyC9gMB8GA1UdIwQY
MBaAFFgezBp0z5KrYZxfcQEjk3zlDZxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0I3TUduVFBrcXRobkY5eEFTT1RmT1VObkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNzFkYWYtZGQ2Ni00MWQ4LWIwNGYt
ZGE4OGI2YmRiMzE2LzEva2U1ZEZNT0FPZ3pDQlhRREl0Q0x1a2JJTDJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jNzFkYWYtZGQ2Ni00MWQ4LWIwNGYtZGE4OGI2YmRiMzE2
LzEvV0I3TUduVFBrcXRobkY5eEFTT1RmT1VObkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQBbcUgAwQC
ud4EAwQBwaAKAwQBwaAOMBYEAgACMBADBwAqDIRAAAADBQMqD9GAMA0GCSqGSIb3
DQEBCwUAA4IBAQB8lkO+CruMBTscFYqTAcmD2FVeOUN2y/MgClMwhOWwhLQab0tO
ooB1lteTIGocP1WRJS4bVIJSc1/IrwiqfcMG3wy0J1a6ixnvwY1Az4M9MD/vLe1o
kL1hpQCxYYp667rHYLmW8KcRiH/XdTRKIp6DBq3ICYHZ+TfKa2dqDfglSIiMejTw
iFBbUJ03Pu92Uqb1OqRMsDPnGaFED2HWsZ5r0/mXNwwsGHSIZi1gcqSqXFXukVMl
LmeBXetkV4uQ9kXhBDh25P80tftIcpkYhAHB5/w+QgNcuQUFHG6dlAfSXNyjRnYd
g369YsJTDbSaO452Z2MrChiublmo6fjywFjA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:39 2024 by rpki-client on console-ams.rpki-client.org