Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/T9WMA5UEFD31Vq41RP_Lborvllg.roa
File: T9WMA5UEFD31Vq41RP_Lborvllg.roa (raw, json)
Hash identifier: LqGsYZ3mW0oaG7QwjCumtFya8L/CDpMecvWp52i5Tjc=
Subject key identifier: 4F:D5:8C:03:95:04:14:3D:F5:56:AE:35:44:FF:CB:6E:8A:EF:96:58
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0189B0D680651B0043E24871716440F4E25C
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/T9WMA5UEFD31Vq41RP_Lborvllg.roa
Signing time: Tue 01 Aug 2023 11:23:14 +0000
ROA not before: Tue 01 Aug 2023 11:23:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 45.134.25.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
45.146.24.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.134.24.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
2.59.49.0/24 maxlen: 24
45.133.31.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.153.224.0/24 maxlen: 24
45.153.225.0/24 maxlen: 24
45.153.226.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:d6:80:65:1b:00:43:e2:48:71:71:64:40:f4:e2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Aug 1 11:23:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fd58c039504143df556ae3544ffcb6e8aef9658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:ec:c6:c8:b8:2f:11:56:c4:5f:6e:51:55:
07:05:50:e3:4c:bd:a8:fa:17:44:0d:6e:fb:4d:4e:
0b:ca:57:3a:2b:38:98:c4:bd:04:97:39:1f:3e:0c:
39:24:54:6e:03:5a:f8:80:b4:41:bb:5d:e6:30:fc:
53:cb:2f:f6:86:f6:93:cd:12:8c:e7:0c:d6:8e:7a:
f5:22:bd:21:ca:52:ac:c6:a8:eb:98:42:d6:1d:65:
bb:2e:f4:8b:20:52:3f:71:c6:da:9a:8f:89:7c:e1:
f4:13:93:18:48:6a:e7:c7:4a:c5:37:8a:e0:08:8c:
6a:ed:f9:b6:1e:2c:10:30:b1:77:5a:af:af:c7:b3:
32:ee:7b:45:13:8d:46:e8:86:af:2e:65:8a:a4:8a:
62:c1:f7:a7:a1:0f:24:a1:f9:94:b2:d6:d8:d1:8d:
f2:1b:40:67:10:1b:12:a1:20:3d:9a:a7:67:26:ff:
7a:c3:7e:a8:9f:bc:b1:e2:94:40:29:56:5f:cc:4b:
4c:41:d2:ef:c0:ff:b7:bd:a1:cc:38:cf:d1:cd:2a:
a2:d3:96:34:a9:fa:2a:27:e1:28:c9:dc:96:0b:5a:
cb:b4:1e:25:5c:35:41:6f:48:45:68:69:8b:d7:ab:
19:2b:1e:6c:1c:98:99:77:7e:00:b1:1e:7e:2e:0a:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:8C:03:95:04:14:3D:F5:56:AE:35:44:FF:CB:6E:8A:EF:96:58
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/T9WMA5UEFD31Vq41RP_Lborvllg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
45.132.128.0/23
45.133.31.0/24
45.134.24.0/23
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.153.224.0-45.153.226.255
45.159.84.0/24
45.159.87.0/24
91.206.68.0/24
91.236.121.0/24
176.222.56.0/23
176.222.59.0/24
185.188.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:54:10:3a:eb:16:10:50:8e:10:e3:ca:df:bc:a9:29:b7:5c:
64:e0:9d:75:d1:e3:5e:4f:97:ae:ff:d3:98:b8:38:2c:f9:21:
ec:f2:3d:be:f5:c1:bb:49:0d:91:24:fc:85:6d:65:df:fc:d5:
07:db:73:b7:af:89:ca:74:d5:40:36:de:1d:09:0e:86:b6:46:
0b:87:4d:bc:87:90:00:bb:de:15:c4:8e:d1:7c:46:2c:9f:19:
34:f6:ec:55:6c:69:79:57:ee:80:4d:6f:c9:e5:c9:4f:15:69:
56:38:92:ad:cf:45:5d:75:b3:24:8f:19:56:bc:19:fb:a2:22:
b8:e4:e2:e5:22:df:09:e4:ce:89:f4:b4:6f:89:bc:bd:14:f0:
79:81:6e:9c:27:5e:77:47:ac:6e:2d:60:85:76:82:e8:90:b0:
f1:9a:7a:8f:77:24:54:c5:64:55:8c:89:38:90:8f:ea:bf:06:
da:41:96:d2:73:1f:74:37:ed:c7:8c:01:2a:5e:d1:6e:bb:fb:
79:e8:1a:78:84:e8:a1:e0:fd:cf:e4:66:53:02:31:41:64:45:
b3:ab:b3:e8:e6:98:2e:77:92:3e:16:3d:c8:6e:cc:3a:7f:a9:
6f:bd:cf:6a:d7:42:39:f8:db:98:6f:1a:6b:22:57:0b:49:a7:
13:17:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org