Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/VanH5w4jqb1ssS6XbNcyYmYOmcM.roa
File: VanH5w4jqb1ssS6XbNcyYmYOmcM.roa (raw, json)
Hash identifier: FbILqnA+XK7lhVJHqV6srI0xBihwYdtoW2UM5Tin5BA=
Subject key identifier: 55:A9:C7:E7:0E:23:A9:BD:6C:B1:2E:97:6C:D7:32:62:66:0E:99:C3
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 1A5F7149
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/VanH5w4jqb1ssS6XbNcyYmYOmcM.roa
Signing time: Thu 26 May 2022 09:41:13 +0000
ROA not before: Thu 26 May 2022 09:41:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12310
IP address blocks: 185.64.92.0/23 maxlen: 23
185.64.95.0/24 maxlen: 24
185.64.94.0/24 maxlen: 24
188.240.216.0/22 maxlen: 22
83.166.192.0/19 maxlen: 19
188.240.8.0/22 maxlen: 22
194.102.203.0/24 maxlen: 24
194.102.202.0/24 maxlen: 24
195.95.228.0/23 maxlen: 23
89.42.16.0/21 maxlen: 21
89.149.0.0/18 maxlen: 18
80.86.96.0/20 maxlen: 20
80.86.96.0/19 maxlen: 19
84.247.64.0/18 maxlen: 18
2a02:2a00::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442462537 (0x1a5f7149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: May 26 09:41:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55a9c7e70e23a9bd6cb12e976cd73262660e99c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:54:10:cc:81:34:8a:48:c0:21:5a:6e:09:
b6:48:f1:39:e5:5d:ad:fc:07:71:83:86:b9:c4:2a:
d5:f3:73:26:c9:17:13:0a:5d:eb:5f:3d:09:5b:cf:
32:db:7e:4a:13:4b:92:99:88:52:d1:0c:95:66:f7:
08:d8:f3:0d:21:42:99:b5:a3:2d:d9:33:6b:9f:4d:
ac:62:fa:c8:a1:05:40:0b:7d:25:a3:e9:ee:6d:8e:
52:d0:34:17:25:d0:ca:8b:69:b5:db:5d:e5:56:a5:
6d:4b:1e:b2:7f:fc:79:a7:fb:a6:f6:bc:1a:09:61:
3a:de:bf:23:77:2f:c5:78:48:c0:80:12:91:d7:f5:
ab:0d:dd:69:0f:fd:64:11:e5:e6:60:c4:a4:01:28:
47:db:d5:28:8d:86:dc:2c:28:17:7a:89:7c:f2:6f:
8b:35:c5:7b:d2:07:37:00:24:ac:9c:92:27:a9:85:
02:0c:c9:a3:96:4c:88:32:fd:53:32:53:c6:92:6f:
32:1f:c8:40:54:46:29:6d:fa:d5:14:7d:14:d6:8b:
0a:86:49:ee:75:9e:49:bc:e5:af:80:6d:5d:43:8c:
60:d9:b8:db:16:d5:a2:85:c2:1f:f1:52:b9:0a:2b:
df:5f:c7:32:18:63:4e:40:7e:39:1a:c7:c4:9e:84:
10:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:C7:E7:0E:23:A9:BD:6C:B1:2E:97:6C:D7:32:62:66:0E:99:C3
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/VanH5w4jqb1ssS6XbNcyYmYOmcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.96.0/19
83.166.192.0/19
84.247.64.0/18
89.42.16.0/21
89.149.0.0/18
185.64.92.0/22
188.240.8.0/22
188.240.216.0/22
194.102.202.0/23
195.95.228.0/23
IPv6:
2a02:2a00::/32
Signature Algorithm: sha256WithRSAEncryption
0b:fc:bb:59:98:e1:d6:94:56:b9:8d:7d:d0:32:64:24:6e:94:
b0:88:d6:3a:fe:68:83:f1:a9:28:a4:68:9e:0f:a3:20:4b:37:
f7:32:73:c6:1d:59:f6:1f:2d:ee:ce:0e:b5:46:72:76:da:5d:
b0:83:af:22:ef:79:74:70:48:9a:bb:1d:51:5a:d7:35:0d:25:
68:dd:36:d6:62:15:09:83:23:5a:64:e3:23:3b:3e:78:58:bc:
4f:e8:14:b5:6e:0b:6e:57:06:72:ac:f8:1d:c7:04:f6:ce:96:
93:b3:ff:f0:29:76:e2:0d:9c:1a:d1:05:b0:fc:ec:da:2c:6b:
52:e1:9d:2a:38:eb:36:3c:1a:fa:d3:db:04:06:39:38:59:62:
8a:f8:4f:9e:e7:72:95:bc:87:ea:cb:ef:6b:6b:87:a7:99:fa:
64:60:31:e7:ca:eb:bc:cd:f3:a0:24:53:70:0d:5b:82:68:83:
4d:08:c0:7b:3e:d1:9c:6e:d8:40:10:40:e4:10:f8:58:06:35:
7a:2b:d6:8f:89:9f:50:f7:99:bd:97:4f:cd:46:ad:19:2f:b3:
ed:f8:a3:97:b2:b1:33:c3:55:f4:34:85:39:21:4f:d2:34:b1:
6a:4b:97:23:d4:cf:29:c3:13:72:02:a3:c4:4a:1a:05:11:c9:
16:d2:a0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:29 2024 by rpki-client on console-fra.rpki-client.org