Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/1-w4r5juGR6LulNnGAtATHA-KDoU.roa
File: 1-w4r5juGR6LulNnGAtATHA-KDoU.roa (raw, json)
Hash identifier: X58R/G2v/Mwaui6viydfP9zJbAc9lovN/mIu9JP+4NM=
Subject key identifier: FB:0E:2B:E6:3B:86:47:A2:EE:94:D9:C6:02:D0:13:1C:0F:8A:0E:85
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 1AA28BEA
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/1-w4r5juGR6LulNnGAtATHA-KDoU.roa
Signing time: Sat 25 Jun 2022 16:08:10 +0000
ROA not before: Sat 25 Jun 2022 16:08:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12310
IP address blocks: 185.64.92.0/23 maxlen: 23
185.64.95.0/24 maxlen: 24
185.64.94.0/24 maxlen: 24
188.240.216.0/22 maxlen: 22
83.166.192.0/19 maxlen: 19
188.240.8.0/22 maxlen: 22
194.102.203.0/24 maxlen: 24
194.102.202.0/24 maxlen: 24
195.95.228.0/23 maxlen: 23
89.42.16.0/21 maxlen: 21
89.149.0.0/18 maxlen: 18
80.86.96.0/20 maxlen: 20
80.86.96.0/19 maxlen: 19
84.247.64.0/18 maxlen: 18
2a02:2a00::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446860266 (0x1aa28bea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jun 25 16:08:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb0e2be63b8647a2ee94d9c602d0131c0f8a0e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:c6:e3:6a:01:6e:e3:23:ce:8a:64:86:78:
06:ba:82:ac:33:96:aa:f1:05:e5:ee:6b:7f:8b:7e:
2c:3a:08:4d:7e:86:2e:6b:d3:64:d4:aa:50:05:b0:
de:3c:12:88:dd:e8:4c:e7:d0:f3:52:4c:79:cd:46:
db:fa:d2:47:27:1a:d8:06:58:45:b2:3b:46:e4:49:
87:3c:47:e6:0f:92:bd:7d:fa:d1:6a:59:aa:7f:54:
2e:50:8b:3b:1b:24:bb:94:b1:e3:fd:3f:9f:0a:76:
51:92:50:65:d7:48:08:6c:55:16:1e:b4:e1:33:40:
bc:92:fa:64:97:b4:eb:78:2a:47:57:e5:82:29:4f:
64:9b:07:45:e0:fb:4d:1c:43:fc:14:49:0e:e5:46:
8a:59:6e:be:b7:11:42:8a:30:97:a8:37:9d:28:79:
d5:74:f9:36:f5:50:1f:ca:73:77:2d:2e:fd:e3:79:
e6:86:6b:f1:cc:65:2b:48:04:78:af:34:15:7e:74:
a4:bd:f9:cd:ab:c2:d7:33:32:a7:ab:13:31:ce:fd:
46:7e:c5:2a:b2:7d:36:d8:80:0c:cd:96:20:b7:2f:
f8:c5:a0:cd:5d:0f:f1:60:d4:6d:30:65:77:c0:4d:
84:f5:0e:e9:5d:a6:66:6e:0a:22:9b:22:c1:b5:9c:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0E:2B:E6:3B:86:47:A2:EE:94:D9:C6:02:D0:13:1C:0F:8A:0E:85
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/1-w4r5juGR6LulNnGAtATHA-KDoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.96.0/19
83.166.192.0/19
84.247.64.0/18
89.42.16.0/21
89.149.0.0/18
185.64.92.0/22
188.240.8.0/22
188.240.216.0/22
194.102.202.0/23
195.95.228.0/23
IPv6:
2a02:2a00::/32
Signature Algorithm: sha256WithRSAEncryption
23:24:67:99:fa:3e:22:49:ea:7c:2d:71:c5:50:30:59:b7:82:
b0:58:f9:f7:e4:5e:28:05:32:ce:5e:00:40:26:18:48:a7:37:
4d:54:60:d2:53:74:e6:a9:92:71:05:23:00:e8:34:e5:5b:eb:
85:24:60:88:98:cd:52:30:0b:a9:57:87:09:f8:12:e2:bd:58:
2b:73:03:31:04:5e:8f:01:64:f5:ae:ae:f5:fc:ce:7c:1e:2a:
2f:ca:1a:c5:07:44:6c:79:c6:3a:78:d8:07:33:97:ed:dd:c4:
fc:46:46:cf:21:4d:3e:e9:d6:e2:0f:26:e9:ea:19:99:26:a4:
15:c8:17:fe:89:68:df:b0:3f:13:79:89:24:30:32:12:84:40:
6c:f7:31:a8:26:46:73:92:85:df:aa:98:32:6a:d5:39:d3:72:
f2:0b:f4:b1:9a:fb:48:0f:5a:70:4e:48:40:b3:a9:bd:6e:ba:
27:26:0b:bc:33:85:1e:b8:6f:08:ca:4e:71:7b:23:b6:9a:e0:
cf:23:04:18:69:98:b8:ac:a4:7a:21:6a:7e:0f:92:b9:b2:e7:
25:e6:65:21:a4:60:70:04:9b:f0:35:ea:5f:0a:8b:a8:68:89:
1c:11:73:f5:ef:ac:8c:9b:a7:a2:fd:05:72:c6:83:c3:86:23:
77:6c:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:29 2024 by rpki-client on console-fra.rpki-client.org