Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/FM8JCGmSjgKx8lFH3Zf4BqB7BeE.roa
File: FM8JCGmSjgKx8lFH3Zf4BqB7BeE.roa (raw, json)
Hash identifier: pE8BcQTkm9ISx+Y5602/xeNAq9Ys6Ay0e/QxNoPK97s=
Subject key identifier: 14:CF:09:08:69:92:8E:02:B1:F2:51:47:DD:97:F8:06:A0:7B:05:E1
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0545D54A
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/FM8JCGmSjgKx8lFH3Zf4BqB7BeE.roa
Signing time: Sat 01 Jan 2022 11:58:49 +0000
ROA not before: Sat 01 Jan 2022 11:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395800
IP address blocks: 185.244.50.0/24 maxlen: 24
193.111.250.0/24 maxlen: 24
185.244.48.0/24 maxlen: 24
193.39.168.0/24 maxlen: 24
193.39.170.0/24 maxlen: 24
194.187.120.0/24 maxlen: 24
91.200.151.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88462666 (0x545d54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 1 11:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14cf090869928e02b1f25147dd97f806a07b05e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:af:f5:2a:69:a2:0a:a9:84:87:20:d3:94:
80:0b:e3:2d:8f:19:04:85:a7:e8:b6:0a:23:6b:74:
c0:43:0e:ca:0f:95:ce:38:78:87:b7:66:66:8e:69:
ee:8c:bd:b2:12:df:81:b4:99:c4:b3:f6:d8:92:b8:
43:2e:06:5d:01:d8:82:fe:d4:f5:d7:3f:50:1a:92:
a2:57:36:d0:b7:55:c7:6f:10:d0:d4:23:d7:2a:5a:
0c:2e:b1:7b:aa:8a:a2:0f:e5:ad:c5:b0:ac:06:83:
11:64:9f:07:7b:91:a5:bc:75:4f:c8:1e:92:85:62:
41:ae:bf:04:55:ae:08:83:54:b8:62:61:17:2d:72:
5e:53:a4:be:7b:61:e2:7d:86:fd:a5:34:e4:83:d9:
64:af:b4:91:63:36:3f:10:3c:de:3e:32:ae:42:23:
e5:7d:d0:70:4e:ca:7e:ff:9f:71:6b:73:97:f5:cf:
ae:34:61:cd:5e:dd:ed:09:33:92:7b:61:ca:2c:51:
5f:76:f2:3c:79:18:81:78:99:86:2f:6a:f0:9a:c5:
a8:bf:60:9d:17:97:ce:65:a7:d9:e6:df:d1:0c:4e:
76:56:e7:8d:fd:59:65:7a:63:a6:f7:90:72:82:d7:
6a:6d:39:63:0f:9f:f4:7a:41:b2:27:19:0d:82:9f:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CF:09:08:69:92:8E:02:B1:F2:51:47:DD:97:F8:06:A0:7B:05:E1
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/FM8JCGmSjgKx8lFH3Zf4BqB7BeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.151.0/24
185.244.48.0/24
185.244.50.0/24
193.39.168.0/24
193.39.170.0/24
193.111.250.0/24
194.187.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2e:17:10:ae:40:bf:21:99:1b:e5:54:c7:72:52:57:10:3c:
21:42:37:fa:c6:66:aa:99:1f:ba:4e:c9:b8:b8:4b:28:f3:08:
c6:92:f5:c5:fa:f6:54:8f:41:1e:2a:22:f7:df:58:12:88:53:
06:7c:bd:6c:6b:85:a7:1e:45:b0:90:bd:89:5a:18:c7:80:c3:
9e:88:ec:dd:86:92:de:f1:60:e5:2f:37:7a:0d:bc:69:42:c4:
8d:76:80:52:1a:f3:46:ce:31:cb:fd:a3:73:9b:99:5b:b6:37:
47:b3:e7:bd:b1:e6:2c:0f:43:e6:bf:95:07:36:3a:5a:9f:1d:
ec:71:93:61:51:e3:cb:b3:b0:3a:bc:86:61:40:27:c1:ff:1d:
56:a4:8d:f1:b7:ac:90:f1:cd:ea:0e:82:24:33:3d:0a:1d:ea:
19:3a:ca:5a:94:d5:f0:b6:98:99:5c:a4:a1:f5:d5:52:96:86:
e8:27:58:25:22:61:3d:9c:14:69:d6:62:20:16:5f:4c:75:e3:
2c:f6:e8:72:a9:da:e5:4b:06:fd:d3:53:3e:dd:60:ee:4b:0a:
68:8a:39:10:19:89:8e:b4:f1:c4:97:d7:10:6a:18:ae:54:6a:
b3:60:23:18:1c:ab:ce:88:c4:ea:1c:1c:b1:e2:8e:f4:ad:b9:
2c:24:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org