Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/yibXgnow9RLB2gv_-EpLgY3pF8I.roa
File: yibXgnow9RLB2gv_-EpLgY3pF8I.roa (raw, json)
Hash identifier: VM0TbzOv+3IXEqKyhTTc+muz5/bgXhoWDiVgrAN9smQ=
Subject key identifier: CA:26:D7:82:7A:30:F5:12:C1:DA:0B:FF:F8:4A:4B:81:8D:E9:17:C2
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0189654AC35153777493096716C53CC9E26C
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/yibXgnow9RLB2gv_-EpLgY3pF8I.roa
Signing time: Mon 17 Jul 2023 19:19:05 +0000
ROA not before: Mon 17 Jul 2023 19:19:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.80.223.0/24 maxlen: 24
45.80.222.0/24 maxlen: 24
45.80.221.0/24 maxlen: 24
92.119.192.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
45.153.227.0/24 maxlen: 24
193.32.164.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
45.142.37.0/24 maxlen: 24
45.129.130.0/24 maxlen: 24
45.129.129.0/24 maxlen: 24
45.129.131.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
45.136.69.0/24 maxlen: 24
45.136.68.0/24 maxlen: 24
193.36.231.0/24 maxlen: 24
45.138.4.0/24 maxlen: 24
176.222.58.0/24 maxlen: 24
45.138.6.0/24 maxlen: 24
45.138.5.0/24 maxlen: 24
45.146.26.0/24 maxlen: 24
81.16.140.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:c3:51:53:77:74:93:09:67:16:c5:3c:c9:e2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jul 17 19:19:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca26d7827a30f512c1da0bfff84a4b818de917c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:67:8e:fe:ba:49:dd:55:1b:cb:33:c8:48:
b5:d4:07:81:fe:a8:ac:e5:9b:15:4f:30:53:14:fa:
2b:f7:a8:b5:35:8c:e4:30:2c:94:3f:83:ea:46:76:
7d:2d:2d:7e:88:19:38:69:83:c3:61:25:f1:74:c7:
fe:2e:bf:2a:82:dc:3b:d2:a2:40:d3:91:9e:c3:30:
b9:d6:6a:11:d1:58:5e:cd:65:da:18:14:ed:5f:07:
1f:2e:be:b4:8c:dd:42:bf:43:9c:0a:d0:67:5c:31:
a6:d1:a4:6d:58:d7:ca:b4:a6:70:34:b3:e9:34:d6:
00:e8:2b:2e:41:fa:f2:63:b9:ea:aa:0d:8b:7f:eb:
90:42:69:d4:57:14:b8:8a:fd:bf:6b:79:a7:b3:ab:
cd:2f:90:32:4e:de:8e:97:e1:ba:3f:0a:11:2e:02:
33:17:94:a9:bf:0e:fc:6b:2a:bf:14:88:87:9f:3b:
b1:ab:ef:8c:6a:ce:fa:da:f7:30:3b:26:ba:d4:11:
49:f5:fa:fd:c5:8e:9e:4c:f6:eb:e0:65:4f:fb:de:
09:39:2d:0c:06:79:8b:ba:e2:67:4f:66:48:c9:1d:
2b:da:9e:bd:4e:00:d9:85:98:e0:04:d1:f6:e6:a8:
f5:7e:cc:0c:74:81:f0:fa:af:93:2d:85:77:a0:c6:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:26:D7:82:7A:30:F5:12:C1:DA:0B:FF:F8:4A:4B:81:8D:E9:17:C2
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/yibXgnow9RLB2gv_-EpLgY3pF8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.221.0-45.80.223.255
45.129.129.0-45.129.131.255
45.136.68.0/23
45.138.4.0-45.138.6.255
45.142.37.0/24
45.146.26.0/24
45.153.227.0/24
45.159.85.0/24
81.16.140.0/24
92.119.192.0/24
176.222.58.0/24
193.32.164.0/22
193.36.231.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3d:53:ab:4f:61:cc:89:0a:73:9b:a4:c0:cf:83:c7:f5:26:
5e:45:aa:17:a9:53:f0:ac:47:12:10:73:af:ea:48:1d:f6:76:
a1:8c:6d:04:ac:a7:88:ed:17:df:be:cd:5e:08:da:83:c1:50:
14:a5:98:32:c7:07:99:28:55:7b:0a:f0:ee:b8:e9:d5:e6:d9:
eb:f4:34:30:50:1a:52:33:01:f0:23:ee:c4:5a:b7:2d:d4:6f:
45:83:74:88:cf:da:ac:68:99:45:f1:6e:b1:d8:87:3b:bc:e9:
20:aa:9f:a6:39:00:5c:68:bc:d1:46:1f:b9:e8:8e:99:3b:3f:
af:61:36:01:21:a9:78:0c:1e:11:a4:f1:03:64:08:2f:c8:0e:
40:2a:64:17:97:7f:08:42:24:0b:04:8e:3f:6f:26:58:b7:80:
94:d6:0e:67:c6:3b:25:6e:08:d2:98:c1:bf:31:3b:60:8a:7a:
74:23:62:23:49:5e:da:2f:51:74:e4:00:37:c9:48:b3:1b:9c:
a9:4c:df:fd:45:00:30:88:53:3a:72:44:d2:5a:4e:95:f0:24:
ad:55:07:29:68:66:18:f5:af:86:19:44:87:fc:e8:99:ee:89:
4f:57:be:c9:e4:3d:74:c6:c6:dd:a9:b4:08:5d:52:da:6d:96:
bd:77:64:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 11:45:14 2023 by rpki-client on console-ams.rpki-client.org