Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/9_Ybi4saIeFu2-1mywZ0A53M1N4.roa
File: 9_Ybi4saIeFu2-1mywZ0A53M1N4.roa (raw, json)
Hash identifier: ydZtjd3UZ2pNXAJtamcxZnjaKo5vd4g3xYoGu/fyYp8=
Subject key identifier: F7:F6:1B:8B:8B:1A:21:E1:6E:DB:ED:66:CB:06:74:03:9D:CC:D4:DE
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018404BEF019CF897136C0E87E7ED0280A3F
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/9_Ybi4saIeFu2-1mywZ0A53M1N4.roa
Signing time: Sun 23 Oct 2022 12:08:52 +0000
ROA not before: Sun 23 Oct 2022 12:08:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
195.80.50.0/24 maxlen: 24
195.80.51.0/24 maxlen: 24
85.92.109.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
45.8.97.0/24 maxlen: 24
45.8.98.0/24 maxlen: 24
45.80.130.0/23 maxlen: 23
45.80.129.0/24 maxlen: 24
91.107.116.0/24 maxlen: 24
91.107.124.0/23 maxlen: 23
194.31.174.0/24 maxlen: 24
194.31.173.0/24 maxlen: 24
91.107.127.0/24 maxlen: 24
194.5.92.0/24 maxlen: 24
194.5.93.0/24 maxlen: 24
5.44.44.0/24 maxlen: 24
5.44.46.0/24 maxlen: 24
5.44.47.0/24 maxlen: 24
45.129.185.0/24 maxlen: 24
194.28.192.0/24 maxlen: 24
45.66.116.0/24 maxlen: 24
45.66.119.0/24 maxlen: 24
109.236.58.0/24 maxlen: 24
109.236.56.0/23 maxlen: 23
92.118.114.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:04:be:f0:19:cf:89:71:36:c0:e8:7e:7e:d0:28:0a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Oct 23 12:08:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7f61b8b8b1a21e16edbed66cb0674039dccd4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:53:34:97:7b:5f:b9:60:14:99:5f:4b:1a:
79:10:be:84:56:65:b4:7e:9f:91:d5:b2:14:69:9c:
35:e7:95:ce:e0:a4:0e:c9:2c:a9:91:76:2e:82:2d:
36:e3:72:89:70:3e:c6:7f:79:19:2a:de:c5:28:9a:
0d:36:49:2d:62:33:eb:26:a3:60:cc:12:b1:c4:b5:
2f:38:ed:f3:3b:f0:db:64:c9:5d:f7:20:f8:3f:68:
77:4a:93:a9:c8:bd:80:bd:23:bd:24:c7:b1:1d:39:
f2:7c:d1:11:31:01:38:b8:e4:05:37:ee:28:93:0f:
9b:53:c1:cd:4a:cb:12:61:30:eb:b3:8c:bc:0b:8e:
ae:ed:1f:be:7f:e5:66:6e:e0:90:41:e9:3b:b4:f1:
b1:4b:cf:a9:bb:ab:08:d4:82:99:41:ff:b3:ad:ee:
52:ae:ea:d5:a0:81:26:3c:02:b2:b3:b4:2b:68:c8:
b6:ea:fa:8b:18:fe:0b:75:ae:8f:cd:09:c3:1f:99:
43:a1:74:55:f2:9d:f2:c2:b8:9f:78:12:25:25:14:
87:32:2b:71:a9:91:39:27:c3:46:4e:ed:ec:b7:b5:
1a:8f:0f:07:ca:d5:57:d7:15:b2:cc:9f:b3:e8:ee:
f0:4a:44:b0:3b:25:a8:40:40:7d:af:47:9b:a2:26:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F6:1B:8B:8B:1A:21:E1:6E:DB:ED:66:CB:06:74:03:9D:CC:D4:DE
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/9_Ybi4saIeFu2-1mywZ0A53M1N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.44.0/24
5.44.46.0/23
45.8.97.0-45.8.98.255
45.66.116.0/24
45.66.119.0/24
45.80.129.0-45.80.131.255
45.129.185.0/24
46.16.15.0/24
85.92.109.0/24
89.191.232.0/24
91.107.116.0/24
91.107.124.0/23
91.107.127.0/24
91.200.84.0/24
92.118.114.0/23
109.236.56.0-109.236.58.255
141.98.233.0-141.98.234.255
194.5.92.0/23
194.28.192.0/24
194.31.173.0-194.31.174.255
195.80.50.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:e9:98:c9:93:8a:20:3e:fe:69:d7:0f:77:de:68:28:16:59:
fb:37:1d:0e:25:49:80:53:cf:cd:91:0a:6e:5d:05:a7:6c:2e:
7b:dd:06:59:a9:3a:a2:9a:e2:e2:1b:39:2b:c9:d5:d3:d4:06:
b7:aa:94:bf:60:85:e6:35:0a:f5:ba:a4:db:17:38:dd:f9:0e:
55:ea:7c:cf:7f:3e:80:a1:ef:08:b9:b8:98:3f:0b:83:80:a8:
57:7a:d9:f7:0d:75:eb:f8:03:6d:37:4a:c6:25:9b:57:dc:0f:
41:be:f8:67:80:c7:03:ba:3a:d9:92:f9:78:32:54:9e:35:bc:
6f:b9:3b:83:89:35:8d:8a:f1:24:e4:3b:c1:f8:35:ce:aa:9c:
41:89:db:b5:bd:0e:66:0e:fb:41:a4:7e:91:8d:58:72:80:e1:
9b:16:3e:98:4a:de:1b:2b:ae:b7:0f:e2:5e:f4:02:27:48:a3:
46:d7:00:63:f3:8e:97:b4:61:8d:18:27:39:f2:d5:ed:f2:ef:
29:da:ba:1f:3b:f9:64:31:bf:c9:db:50:3f:fa:e9:ed:bf:3e:
f3:02:84:79:3e:12:ab:f4:a8:d8:ba:1c:af:83:a6:61:9b:d5:
1b:ea:48:e4:ac:4b:15:86:3e:c4:a1:10:a4:99:77:fe:71:f7:
9a:ee:f0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org