Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/KtRbqi6p1DOQyEPUr-sIuS-MVPo.roa
File: KtRbqi6p1DOQyEPUr-sIuS-MVPo.roa (raw, json)
Hash identifier: Nx0kXQaN1hXypl1CHgg2hTKZ/j2iWaoKBxmAjMuTrCI=
Subject key identifier: 2A:D4:5B:AA:2E:A9:D4:33:90:C8:43:D4:AF:EB:08:B9:2F:8C:54:FA
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 018C6706783B3D0BAB26F64FF33A2F996A7A
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/KtRbqi6p1DOQyEPUr-sIuS-MVPo.roa
Signing time: Thu 14 Dec 2023 06:32:06 +0000
ROA not before: Thu 14 Dec 2023 06:32:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.151.204.0/22 maxlen: 24
94.142.164.0/22 maxlen: 22
45.12.44.0/22 maxlen: 24
45.95.140.0/22 maxlen: 24
45.86.192.0/22 maxlen: 22
45.15.52.0/22 maxlen: 22
45.67.44.0/22 maxlen: 22
91.239.24.0/24 maxlen: 24
185.57.176.0/22 maxlen: 22
2.57.180.0/22 maxlen: 24
2.59.116.0/24 maxlen: 24
91.238.217.0/24 maxlen: 24
91.227.240.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:06:78:3b:3d:0b:ab:26:f6:4f:f3:3a:2f:99:6a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Dec 14 06:32:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ad45baa2ea9d43390c843d4afeb08b92f8c54fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:7a:32:f5:e3:af:e5:1d:0d:16:1a:7b:39:
e7:38:50:79:51:da:6c:54:64:79:53:34:52:92:53:
7b:77:9f:ba:ba:80:29:25:54:00:36:c5:55:7f:57:
a5:c1:e3:67:56:c8:0c:52:db:c3:8a:f3:c8:db:65:
a3:71:0c:71:d4:5f:82:91:37:7f:d3:31:0a:73:c9:
ea:2b:64:77:d0:47:0a:4b:e4:06:97:e7:e5:3f:68:
a4:23:14:14:d6:01:5c:e0:de:0d:7c:dd:4e:cf:8e:
6e:53:34:25:fd:51:be:92:d9:60:d6:fd:bb:cd:95:
42:07:f0:5b:92:cd:d7:b9:53:37:a3:fe:0a:b0:ac:
53:e2:87:0d:68:08:a0:2b:5b:38:a0:c6:9e:5a:5f:
5a:67:5d:39:0f:79:2a:e1:de:8f:54:43:30:1a:f8:
00:32:4d:ef:74:c5:bf:06:fd:32:86:f7:3e:6d:f0:
91:aa:99:5b:97:68:89:2b:2c:24:eb:de:bc:2b:d0:
50:18:bf:64:ea:90:4f:dd:df:bd:87:41:9f:57:b4:
00:b8:72:f1:e8:0a:e3:50:81:58:da:c6:c4:fa:9c:
ba:6c:50:17:91:b0:cd:b5:cb:4d:f0:6b:bd:75:2f:
57:31:c6:39:21:f7:07:4a:f1:bd:99:ed:ce:f3:01:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D4:5B:AA:2E:A9:D4:33:90:C8:43:D4:AF:EB:08:B9:2F:8C:54:FA
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/KtRbqi6p1DOQyEPUr-sIuS-MVPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
2.59.116.0/24
45.12.44.0/22
45.15.52.0/22
45.67.44.0/22
45.86.192.0/22
45.95.140.0/22
45.151.204.0/22
91.227.240.0/23
91.238.217.0/24
91.239.24.0/24
94.142.164.0/22
185.57.176.0/22
Signature Algorithm: sha256WithRSAEncryption
92:18:ac:24:76:4c:10:da:ea:e3:ce:b2:33:de:e4:36:d9:e0:
df:83:e5:7d:6d:47:6f:78:13:02:ba:be:b7:75:27:43:28:8e:
b6:c3:59:13:1e:68:67:15:fb:62:0e:15:a7:3f:c9:2d:9c:b2:
53:42:c4:44:70:9f:f9:1f:c7:ea:09:bc:3f:fe:df:32:01:ff:
5d:58:f9:84:53:96:58:1e:d6:2b:ee:68:ba:50:06:db:64:3e:
25:04:e7:1c:13:1c:a1:f7:a2:30:24:e5:ae:82:d6:60:22:00:
62:be:3d:b3:23:fc:9a:86:8d:a0:f2:ce:b8:b6:f3:83:77:63:
57:bb:5d:79:fe:fa:32:f1:49:e1:d2:1e:68:01:69:eb:b4:4e:
a9:af:f4:85:86:9c:f9:41:1f:3f:ab:b0:66:b1:13:9d:74:60:
9f:70:ef:9e:c1:00:f7:72:2c:ee:5c:1d:f3:f8:8c:10:8e:86:
1d:cd:5e:93:01:21:9d:2a:3b:70:95:d7:dd:24:ab:55:f0:e2:
de:77:f2:9c:b9:05:64:57:47:be:5a:3a:38:fb:23:93:53:90:
81:ad:fe:4a:c6:46:7f:1f:93:39:b4:da:2c:31:a3:41:ff:77:
6b:73:e3:2b:62:3e:1a:1b:59:06:77:04:9b:f6:05:2a:6c:b0:
6a:4b:ab:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:31 2024 by rpki-client on console-fra.rpki-client.org