Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/8UPwZUyHg8_QlmGjpPRs1OJ0uiA.roa
File: 8UPwZUyHg8_QlmGjpPRs1OJ0uiA.roa (raw, json)
Hash identifier: RJK7h8ihKOqV61mkP7p3+yk+/LqOYj7QI2jHIAIh+Gk=
Subject key identifier: F1:43:F0:65:4C:87:83:CF:D0:96:61:A3:A4:F4:6C:D4:E2:74:BA:20
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 05C9ACA1
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/8UPwZUyHg8_QlmGjpPRs1OJ0uiA.roa
Signing time: Fri 21 Jan 2022 07:38:52 +0000
ROA not before: Fri 21 Jan 2022 07:38:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60978
IP address blocks: 185.199.224.0/23 maxlen: 23
185.199.226.0/24 maxlen: 24
45.92.29.0/24 maxlen: 24
185.215.148.0/24 maxlen: 24
185.215.150.0/24 maxlen: 24
212.162.148.0/22 maxlen: 22
185.235.14.0/23 maxlen: 23
193.39.185.0/24 maxlen: 24
193.39.186.0/24 maxlen: 24
45.81.150.0/24 maxlen: 24
185.191.228.0/23 maxlen: 23
185.191.231.0/24 maxlen: 24
185.218.235.0/24 maxlen: 24
85.209.84.0/23 maxlen: 23
85.209.87.0/24 maxlen: 24
185.202.172.0/23 maxlen: 23
185.202.175.0/24 maxlen: 24
2a0b:aac0::/29 maxlen: 29
2a0a:1f42::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97103009 (0x5c9aca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 21 07:38:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f143f0654c8783cfd09661a3a4f46cd4e274ba20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:a8:69:e3:7e:5b:74:1a:90:84:50:c0:77:
5a:33:c8:ff:0a:13:bc:25:a7:ac:32:fa:0e:9a:a1:
0b:0a:29:f6:1e:b5:06:d7:af:ba:72:d3:bc:7e:c9:
48:13:d9:13:de:9d:82:7b:b7:44:60:29:0b:d8:b7:
28:66:f5:60:ae:ce:80:c5:3d:39:8f:0a:98:80:77:
fd:88:c9:e1:19:59:04:ab:4a:c1:08:65:93:27:c1:
5e:5c:d1:8c:0e:cf:b1:eb:ac:c7:95:f7:60:dc:74:
8f:55:de:47:49:1e:2b:eb:f9:54:5c:db:d0:a2:83:
c6:f7:ca:16:cd:e7:5e:fb:47:0c:b5:1a:cf:e2:62:
3f:53:fd:dd:ff:0e:eb:23:79:30:c4:cf:37:b5:13:
51:0e:e4:28:33:78:0f:9b:a4:f2:db:53:fd:d1:30:
36:7e:db:28:3c:9e:91:63:f4:97:45:48:6a:fd:fd:
b3:83:59:62:bf:49:e4:cd:21:6a:c0:99:04:33:3a:
c7:70:2b:e6:a2:5c:ab:4b:36:c5:90:98:f9:39:db:
5c:35:a9:54:65:3b:cf:0c:99:50:4c:23:b6:99:c3:
93:09:73:8d:fc:28:ed:ab:8f:9b:46:8a:e0:99:ec:
b3:89:42:1e:04:55:bc:7b:8d:53:75:4e:2d:d6:d1:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:F0:65:4C:87:83:CF:D0:96:61:A3:A4:F4:6C:D4:E2:74:BA:20
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/8UPwZUyHg8_QlmGjpPRs1OJ0uiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.150.0/24
45.92.29.0/24
85.209.84.0/23
85.209.87.0/24
185.191.228.0/23
185.191.231.0/24
185.199.224.0-185.199.226.255
185.202.172.0/23
185.202.175.0/24
185.215.148.0/24
185.215.150.0/24
185.218.235.0/24
185.235.14.0/23
193.39.185.0-193.39.186.255
212.162.148.0/22
IPv6:
2a0a:1f42::/32
2a0b:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
18:cd:26:f5:43:65:0f:c5:3b:31:d4:8b:a4:54:b8:bb:71:23:
22:02:bc:40:ce:a6:cc:9b:f6:0f:3b:29:01:48:dd:57:68:46:
ff:ac:f1:ef:e9:81:4c:be:2f:4f:21:f6:79:78:05:89:f1:20:
e7:5d:17:84:53:d4:8a:a7:f8:70:dc:c9:ed:ab:aa:7a:af:cd:
5a:c2:be:ad:4b:bc:8d:fa:ba:7d:ac:8d:11:0a:aa:6f:9d:ff:
f0:32:70:ae:91:7d:6a:cb:f5:4a:6d:61:26:8b:32:64:49:b2:
8d:e5:97:68:11:fd:eb:c6:db:10:d2:42:63:24:36:09:a0:8c:
ed:9a:3d:73:34:3d:d4:d3:33:c2:19:fb:a9:b2:77:5b:f3:7d:
92:63:aa:f6:9f:a1:fd:97:f9:6a:5e:12:29:76:57:98:34:06:
8b:68:28:45:ce:25:65:1d:63:1d:34:0c:63:b4:71:fb:03:46:
95:ec:cd:c4:a6:87:8d:ca:d6:2e:33:18:14:ab:be:db:90:e3:
94:07:a5:a8:40:8a:9f:34:68:22:52:27:21:a9:c8:fe:c8:20:
6d:29:c1:c5:23:44:85:a8:94:df:65:a1:99:e3:85:16:b1:e3:
e2:08:3d:b6:b0:2e:10:a3:77:43:f4:c2:75:04:03:6b:14:de:
ea:82:87:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org