Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/apsnM2Cly4vSJDS7BHVxzHp5tVs.roa
File: apsnM2Cly4vSJDS7BHVxzHp5tVs.roa (raw, json)
Hash identifier: gTOONY0sbrecNjqAYrYB1QJYiZBb9NKCBPA8cymit4U=
Subject key identifier: 6A:9B:27:33:60:A5:CB:8B:D2:24:34:BB:04:75:71:CC:7A:79:B5:5B
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0183D1E4458B6955758844C68D1E38A2073B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/apsnM2Cly4vSJDS7BHVxzHp5tVs.roa
Signing time: Thu 13 Oct 2022 15:09:01 +0000
ROA not before: Thu 13 Oct 2022 15:09:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12325
IP address blocks: 89.46.42.0/24 maxlen: 24
94.177.28.0/24 maxlen: 24
188.213.212.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
94.176.213.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
89.40.222.0/23 maxlen: 24
92.114.54.0/24 maxlen: 24
89.35.124.0/23 maxlen: 24
89.44.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:e4:45:8b:69:55:75:88:44:c6:8d:1e:38:a2:07:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Oct 13 15:09:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a9b273360a5cb8bd22434bb047571cc7a79b55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:77:4b:f0:ff:ee:72:56:8c:41:e2:f1:73:
d8:3a:a9:e3:21:e8:36:dc:a5:be:87:35:90:04:c3:
81:16:7a:5b:72:e4:c6:f6:1e:f5:f5:33:d7:56:ff:
d1:36:8b:89:bb:2e:16:be:43:da:4c:f6:74:ed:61:
75:1a:42:47:60:8d:65:cb:8e:5b:ca:04:9b:ae:36:
c7:69:58:64:e0:f2:75:c4:cd:21:bc:a7:f1:2b:63:
00:ec:37:fa:f2:d5:76:ed:51:45:c6:c0:68:ff:a6:
6e:58:f6:7d:f9:9c:01:33:9d:99:3a:77:53:d7:50:
d5:f3:a8:a6:b6:c2:87:69:29:10:33:e0:d3:09:f0:
b8:15:65:b2:72:cc:c6:74:64:cf:e2:35:2e:af:e2:
72:b8:a0:3f:94:73:e7:3a:95:e7:f0:b9:b5:25:be:
cf:22:27:07:28:6a:ba:7f:d8:a5:76:d3:39:98:26:
c5:7a:16:a2:06:94:d9:1e:a3:a4:22:43:9c:47:42:
7a:99:09:3a:a8:6d:ff:f8:9b:99:d0:49:f8:f0:29:
fd:54:1a:5b:94:4a:f9:25:f6:fd:52:a8:20:83:5f:
a6:dc:ff:55:1d:59:f7:f7:7f:0e:70:7f:9c:8d:e2:
e1:16:a3:46:f9:03:01:11:52:63:50:ce:f9:12:c5:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9B:27:33:60:A5:CB:8B:D2:24:34:BB:04:75:71:CC:7A:79:B5:5B
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/apsnM2Cly4vSJDS7BHVxzHp5tVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.124.0/23
89.40.222.0/23
89.44.105.0/24
89.46.42.0/24
89.47.36.0/24
92.114.32.0/24
92.114.54.0/24
94.176.213.0/24
94.177.28.0/24
188.213.212.0/24
188.213.216.0/24
Signature Algorithm: sha256WithRSAEncryption
45:dc:54:56:7b:c9:49:76:5e:4f:27:3f:eb:f5:fd:96:96:08:
4c:e2:3e:d2:f6:bd:f5:04:54:e5:d9:2b:ae:20:a3:c7:06:fa:
69:4c:73:ea:67:23:2f:56:72:59:0d:43:da:df:6a:24:33:2d:
c3:c4:f7:ec:4c:72:0b:4b:df:a5:73:fb:df:4e:ec:ca:b0:9e:
e0:06:18:e0:42:ea:43:83:17:16:af:e5:1b:16:35:17:9f:b4:
32:62:ad:d7:26:32:b0:65:25:f7:5b:ee:e7:d4:37:40:a3:7f:
be:8b:9e:63:f3:d8:f1:eb:2f:f9:b8:77:95:f0:2f:26:c6:d3:
1c:44:56:d0:14:01:72:ce:6f:ef:dc:1f:d1:ec:c5:12:04:2b:
4a:a5:32:cd:d9:6a:3f:1a:7a:13:54:a1:aa:38:83:97:07:d9:
a4:6e:1f:96:b0:01:03:87:96:24:8a:56:70:66:bb:38:31:bf:
58:2e:60:48:c9:ff:4e:d0:bf:6a:6e:fe:2a:9e:7f:d8:36:b6:
1f:22:44:7e:84:5d:77:59:d0:6d:b6:9d:b4:c8:77:58:ae:2d:
c7:d5:db:55:22:89:ee:5f:4a:28:a4:13:af:34:57:1a:1d:9f:
f5:a4:08:22:42:e6:a7:70:b9:20:02:48:38:f4:64:f7:27:c4:
fb:f0:3d:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:49 2023 by rpki-client on console-ams.rpki-client.org