Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/GmFQf_5EOzMItDJ0DgHNOcgzJJw.roa
File: GmFQf_5EOzMItDJ0DgHNOcgzJJw.roa (raw, json)
Hash identifier: rTHq53g9hs7idc9FPmzgBgIUQPhmYGzGcQx+E7lmFfw=
Subject key identifier: 1A:61:50:7F:FE:44:3B:33:08:B4:32:74:0E:01:CD:39:C8:33:24:9C
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 018570F0992003A982DBC81711EDFDF9185F
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/GmFQf_5EOzMItDJ0DgHNOcgzJJw.roa
Signing time: Mon 02 Jan 2023 05:24:54 +0000
ROA not before: Mon 02 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203061
IP address blocks: 5.181.88.0/22 maxlen: 32
176.124.48.0/22 maxlen: 32
95.214.188.0/22 maxlen: 32
92.119.152.0/22 maxlen: 32
185.12.184.0/22 maxlen: 32
170.245.40.0/22 maxlen: 32
85.208.40.0/22 maxlen: 32
171.22.228.0/22 maxlen: 32
95.214.20.0/22 maxlen: 32
168.205.72.0/22 maxlen: 32
78.142.252.0/22 maxlen: 32
5.252.120.0/22 maxlen: 32
194.32.116.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:99:20:03:a9:82:db:c8:17:11:ed:fd:f9:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Jan 2 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a61507ffe443b3308b432740e01cd39c833249c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cd:94:64:d0:85:ff:b7:4a:42:be:bc:74:ae:
ad:1f:3d:c8:8d:e0:86:4e:ab:7c:25:5e:27:85:7b:
7b:9d:21:e5:cd:7a:c1:3a:3b:71:27:38:b5:85:67:
e8:77:39:77:0c:e4:b4:b5:8f:ba:ed:3f:f5:d3:8a:
2c:23:b9:b4:d1:86:02:04:fd:6f:6f:8e:7b:fd:a8:
ff:d4:f3:93:1d:e4:d3:39:63:0c:d7:35:33:6e:9b:
e4:72:26:15:a3:29:63:cf:ae:57:1b:74:61:a8:77:
11:a4:5c:e6:7e:f7:a1:9a:e2:af:ad:b8:60:16:a4:
ab:39:b8:62:56:a6:ef:97:55:56:30:0d:c8:0f:58:
53:7f:22:01:6d:47:f0:13:d7:39:c3:83:b8:6c:ce:
77:5c:57:61:be:4d:72:f6:6e:0f:2c:f8:eb:34:a4:
e4:23:89:c7:16:7a:bd:52:fc:46:6b:f1:8c:1b:0c:
a0:9d:70:cc:51:c7:4f:47:aa:f7:f0:ae:10:30:79:
64:f6:51:9a:d4:b7:4b:26:7b:f4:08:9b:ae:4b:62:
7e:ac:0b:cd:b8:49:13:b1:12:f4:3f:65:47:2a:fc:
d9:be:6d:ad:ee:b0:52:5d:cd:22:51:3c:42:53:98:
73:84:1c:37:3f:cd:5f:15:3d:18:20:99:9f:b0:3c:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:61:50:7F:FE:44:3B:33:08:B4:32:74:0E:01:CD:39:C8:33:24:9C
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/GmFQf_5EOzMItDJ0DgHNOcgzJJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.88.0/22
5.252.120.0/22
78.142.252.0/22
85.208.40.0/22
92.119.152.0/22
95.214.20.0/22
95.214.188.0/22
168.205.72.0/22
170.245.40.0/22
171.22.228.0/22
176.124.48.0/22
185.12.184.0/22
194.32.116.0/22
Signature Algorithm: sha256WithRSAEncryption
05:13:62:16:56:3d:f8:ce:f4:64:6b:9b:b5:d0:4b:8b:3e:ab:
b5:07:9b:7d:23:dc:1e:44:ab:19:49:14:2d:6c:e4:c6:63:a3:
6e:4e:82:14:60:e8:3e:f6:3b:07:5c:ac:57:0e:af:2a:4b:92:
d2:1b:4e:c5:3b:65:46:08:a7:17:6c:1f:cf:2f:e5:18:0a:f4:
51:a2:e5:d2:11:ee:5c:bf:e0:f8:c1:ac:a6:9f:f6:c9:40:7b:
70:6a:2d:26:4e:c0:e3:b1:78:64:82:ce:25:f6:c7:ae:1c:07:
f1:53:f3:39:4a:5b:31:60:85:7a:c1:9d:ec:b6:38:db:12:a4:
2a:50:7d:e8:0a:54:9a:82:cd:1a:75:b1:3d:9d:ac:6f:37:9e:
53:d0:d1:b8:bc:20:99:d7:b8:e3:d8:8f:ca:82:fb:e2:92:8d:
96:db:91:f9:eb:4e:ed:17:24:68:c4:e7:b4:38:92:88:1b:dd:
db:59:54:9e:5d:08:3b:9a:03:bf:05:56:3d:e2:f4:f2:40:25:
bc:a7:45:5d:56:97:13:dc:9b:0b:73:a1:51:ee:14:74:47:82:
31:45:4e:71:8b:46:a4:13:02:fd:97:ba:29:69:cf:a5:15:63:
27:9e:69:c6:ab:09:98:00:77:82:3a:5b:61:10:d2:c4:6c:7a:
5c:6d:e4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org