Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ny3evGa96Ly7Afyg9OsORJKQwm4.roa
File: ny3evGa96Ly7Afyg9OsORJKQwm4.roa (raw, json)
Hash identifier: UAE5wnxFUdP/DyuA3960/fYEtpEOGZLwmDqIufTA4CQ=
Subject key identifier: 9F:2D:DE:BC:66:BD:E8:BC:BB:01:FC:A0:F4:EB:0E:44:92:90:C2:6E
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018CC86FC2EA08E364EB545FD860B8B5017D
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ny3evGa96Ly7Afyg9OsORJKQwm4.roa
Signing time: Tue 02 Jan 2024 04:30:16 +0000
ROA not before: Tue 02 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 45.138.212.0/24 maxlen: 24
45.138.215.0/24 maxlen: 24
91.237.105.0/24 maxlen: 24
91.237.104.0/24 maxlen: 24
45.138.7.0/24 maxlen: 24
91.206.69.0/24 maxlen: 24
194.107.200.0/24 maxlen: 24
45.149.131.0/24 maxlen: 24
45.152.118.0/24 maxlen: 24
45.149.130.0/24 maxlen: 24
45.152.119.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c2:ea:08:e3:64:eb:54:5f:d8:60:b8:b5:01:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f2ddebc66bde8bcbb01fca0f4eb0e449290c26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0b:c4:4f:01:60:ff:a0:ec:9d:14:73:b2:58:
16:da:a9:25:be:5f:5b:96:68:16:d4:de:06:72:f3:
e6:2d:e4:76:fc:2c:92:cb:31:03:6a:7a:c3:29:ac:
96:4e:e0:6f:56:4f:ef:ea:83:3c:8c:bd:45:d3:ee:
31:ab:84:b7:50:3d:3d:2c:eb:c5:b6:f7:2b:0c:85:
c0:5d:84:d6:e3:b6:c7:f8:2d:fe:76:f1:66:92:b2:
35:b8:8c:32:23:bf:3d:5d:8b:4e:b6:cd:1f:33:36:
57:d3:ac:53:f7:a1:77:17:e3:9f:4a:4a:a0:dd:3c:
23:63:58:7b:0e:da:16:eb:2b:d9:43:6a:01:4d:2c:
4d:4b:6b:1c:5f:57:8f:33:e1:16:d5:83:f3:4c:dc:
65:39:cd:f8:95:bb:0b:4c:40:9e:c4:2d:83:6f:4b:
8b:f8:45:ce:ff:f4:67:fd:5e:a4:69:89:8b:87:03:
8a:48:3a:7b:af:bc:b7:c0:c4:8a:af:2f:95:50:dc:
dc:42:ec:65:7f:f4:31:15:3f:63:33:dc:30:89:87:
10:cb:33:04:49:c2:ec:c5:86:97:5d:ce:c0:b1:0c:
5c:74:95:14:3e:ea:ac:2e:6f:d1:1b:af:99:25:1c:
e8:a5:c1:8b:a6:61:f4:cd:6e:f2:37:74:f8:79:c1:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2D:DE:BC:66:BD:E8:BC:BB:01:FC:A0:F4:EB:0E:44:92:90:C2:6E
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ny3evGa96Ly7Afyg9OsORJKQwm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.7.0/24
45.138.212.0/24
45.138.215.0/24
45.149.130.0/23
45.152.118.0/23
91.206.69.0/24
91.237.104.0/23
194.107.200.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ab:bd:c2:b6:5b:e1:c5:d9:b3:ff:c3:e0:e3:ea:2f:be:9a:
55:5a:68:ea:79:5a:b9:e4:b8:5a:dc:44:fc:1e:72:6d:b3:50:
1a:2d:b4:78:45:20:08:55:91:82:90:46:dd:f4:11:ea:8e:3a:
ad:fd:5d:60:92:00:8d:32:df:0a:ff:70:9b:66:b6:c2:bb:d5:
76:d4:68:d4:8a:0c:fc:22:ae:5d:5c:f4:7f:f8:ba:d6:42:97:
f3:a9:18:35:cb:a0:0e:91:21:6b:50:d2:45:58:2d:39:b9:c8:
36:02:0c:dd:e8:ee:8b:28:3b:d8:46:77:f3:a8:ed:cb:2e:fe:
17:d9:01:3d:75:84:04:e8:e2:55:1f:0a:fd:c7:a8:56:f5:3d:
2d:2c:9a:ff:d0:cb:da:e2:ec:44:38:9b:49:2d:d5:b1:55:7d:
2b:21:75:fb:e7:8e:82:26:5e:1b:2b:03:08:68:da:24:a4:eb:
08:85:e6:24:4e:a1:15:7f:9f:b6:d9:82:92:60:7d:b0:56:ed:
b7:4a:76:2c:c3:d2:c8:04:34:4f:cc:27:f2:ee:4b:40:25:7e:
aa:44:c1:46:2a:64:99:c1:d1:96:a0:74:ee:f6:69:2f:4b:c7:
ff:0b:35:db:d1:24:c3:68:95:75:dd:00:2a:ee:d1:e7:37:53:
61:f6:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org