Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/ssBxKy4ISt9AtpCD72QS6_T9ArE.roa
File: ssBxKy4ISt9AtpCD72QS6_T9ArE.roa (raw, json)
Hash identifier: TWXeGT4RE+h+F+1f6p/lBXbN1qjGfutyXGth6ejGPd4=
Subject key identifier: B2:C0:71:2B:2E:08:4A:DF:40:B6:90:83:EF:64:12:EB:F4:FD:02:B1
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 018D77D79FB97686EE3374A9ED18D5161C2C
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/ssBxKy4ISt9AtpCD72QS6_T9ArE.roa
Signing time: Mon 05 Feb 2024 05:57:16 +0000
ROA not before: Mon 05 Feb 2024 05:57:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208041
IP address blocks: 109.197.32.0/23 maxlen: 23
185.222.4.0/22 maxlen: 22
185.222.4.0/24 maxlen: 24
185.222.5.0/24 maxlen: 24
185.222.6.0/24 maxlen: 24
185.222.7.0/24 maxlen: 24
193.160.10.0/23 maxlen: 23
193.160.14.0/23 maxlen: 23
2a0c:8440::/48 maxlen: 48
2a0f:d180::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:d7:9f:b9:76:86:ee:33:74:a9:ed:18:d5:16:1c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Feb 5 05:57:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2c0712b2e084adf40b69083ef6412ebf4fd02b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ca:ea:94:e0:f8:fa:91:99:34:1a:a3:eb:67:
d2:e7:5a:e1:c1:37:c7:2b:f4:fa:b3:f5:da:bb:a8:
bf:83:51:28:e8:c9:08:6d:4e:cf:3c:d8:4a:e8:50:
01:07:a9:56:57:3d:4e:87:20:53:1e:aa:96:99:72:
66:a9:e4:22:66:f2:87:48:7e:c1:fa:25:ee:1c:80:
08:4c:03:1b:84:d8:7e:d5:6c:16:57:d9:48:5a:90:
7e:4d:ce:4b:44:f2:05:c8:0a:a9:a0:06:2f:f7:a3:
6f:41:53:0d:54:c4:78:92:2f:83:93:50:f8:20:bc:
50:0a:c0:81:f7:a1:90:cf:e2:b1:80:14:0b:24:d9:
9e:eb:3f:21:ca:9e:f1:b5:81:16:02:f1:5a:16:35:
de:cc:b7:7d:0f:09:ec:24:d6:e1:4c:35:26:1d:74:
7a:2c:44:7e:d1:fd:fa:85:dd:58:e2:8d:69:b7:59:
8c:ae:9e:9b:3e:f9:df:2b:96:d0:e6:66:25:fa:a5:
00:b0:49:e8:51:f9:4a:00:13:a6:40:63:7b:30:3f:
b1:21:91:d4:80:1e:8e:ca:e6:46:e5:a4:ee:63:33:
c3:e8:61:2f:2f:d8:8a:56:33:29:9b:6b:df:77:20:
5a:b6:68:0b:a0:02:79:99:03:1d:53:0a:ad:b9:42:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C0:71:2B:2E:08:4A:DF:40:B6:90:83:EF:64:12:EB:F4:FD:02:B1
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/ssBxKy4ISt9AtpCD72QS6_T9ArE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.32.0/23
185.222.4.0/22
193.160.10.0/23
193.160.14.0/23
IPv6:
2a0c:8440::/48
2a0f:d180::/29
Signature Algorithm: sha256WithRSAEncryption
45:d4:38:a5:3b:5d:44:c1:b0:11:41:76:66:9c:ad:19:a1:10:
8e:4c:41:a9:7f:08:42:56:da:67:6f:d2:28:a5:15:bf:4e:aa:
8b:3b:83:76:ec:40:e2:4b:cb:c0:e4:1d:f5:93:43:12:6f:5c:
fe:a4:54:6f:42:b6:2b:56:fa:87:6d:21:f8:28:e9:4a:04:45:
00:1e:6d:b6:c8:ed:10:05:7a:6d:bf:54:d0:bf:2a:49:ad:c9:
0f:23:ce:4b:27:cc:5d:79:f3:db:4b:53:b7:45:63:9d:ab:5a:
1d:e5:5c:3c:fd:f0:c6:8d:f1:71:e8:6f:55:fc:2e:2c:6e:f3:
01:ce:f6:e6:52:d0:6b:ad:d4:e5:34:61:34:ef:5c:08:63:5d:
07:38:99:10:75:d6:62:0d:31:21:12:36:9a:e1:ca:07:4d:26:
a6:29:c3:ff:53:95:24:40:81:0b:ea:c7:e4:64:8b:8a:3d:78:
44:91:b9:ce:5c:5a:5d:37:e8:fc:6f:14:02:33:65:8d:e8:08:
77:27:b5:6f:79:fc:c2:0c:47:e8:3d:9d:b5:b5:86:be:1a:cf:
78:36:b2:86:aa:d2:b0:58:8a:31:66:70:0d:54:ea:07:03:40:
ba:d4:b4:cc:16:53:1a:40:e0:e1:99:41:bd:bf:48:6e:74:58:
aa:7a:55:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:30 2024 by rpki-client on console-fra.rpki-client.org