Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/OjfojUnwfnDbB2MslbnRfJxamWs.roa
File: OjfojUnwfnDbB2MslbnRfJxamWs.roa (raw, json)
Hash identifier: d3CjJ5iG8NDvKzZChcynsMyQoPUxPP4Nwc4HFOuBQow=
Subject key identifier: 3A:37:E8:8D:49:F0:7E:70:DB:07:63:2C:95:B9:D1:7C:9C:5A:99:6B
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0185966FAB4C3F2F4BDA005FAFCE9D6498D3
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/OjfojUnwfnDbB2MslbnRfJxamWs.roa
Signing time: Mon 09 Jan 2023 12:09:38 +0000
ROA not before: Mon 09 Jan 2023 12:09:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26636
IP address blocks: 194.5.92.0/24 maxlen: 24
194.5.93.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
5.44.44.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
45.129.185.0/24 maxlen: 24
195.80.51.0/24 maxlen: 24
85.92.109.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
45.66.116.0/24 maxlen: 24
109.236.58.0/24 maxlen: 24
109.236.56.0/23 maxlen: 23
45.80.130.0/23 maxlen: 23
45.80.129.0/24 maxlen: 24
91.107.116.0/24 maxlen: 24
194.31.174.0/24 maxlen: 24
194.31.173.0/24 maxlen: 24
92.118.114.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:6f:ab:4c:3f:2f:4b:da:00:5f:af:ce:9d:64:98:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 9 12:09:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a37e88d49f07e70db07632c95b9d17c9c5a996b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cc:11:9c:ef:24:fa:3a:e2:67:3a:74:6a:09:
c7:6e:63:ae:7d:fb:7e:9a:84:59:5a:02:78:4b:b9:
e0:63:83:11:c6:c9:3e:55:bf:e0:df:93:bd:36:f5:
24:6a:2b:cd:d5:0b:d6:0e:b2:68:fe:93:c4:59:8b:
8f:fc:31:dc:e3:8d:ee:07:57:2d:5b:d5:62:79:76:
dd:42:d6:fc:50:c8:23:fb:28:49:28:46:56:99:91:
c2:eb:85:16:f9:7c:35:2e:46:42:c1:4b:84:c2:b1:
8b:b1:eb:32:48:58:36:7a:1a:d1:3c:fc:c1:32:11:
e1:a3:6a:7f:fa:86:92:b2:c5:cc:28:73:1a:3b:3c:
23:7f:05:89:dc:57:0e:2a:f0:c5:bb:36:b1:f4:41:
6a:0a:c5:e8:8b:8f:f6:8b:0d:6f:f3:11:87:93:dd:
e5:d8:a6:d8:97:2c:ff:b5:5d:6e:c6:58:e5:12:ac:
e1:34:cd:51:a9:09:84:8e:76:b6:67:a7:4d:5a:c6:
43:75:31:e9:87:03:ee:38:92:bd:98:6f:cb:f9:d7:
77:ef:8e:1c:86:7d:18:9a:ec:74:a8:26:48:e8:44:
b8:2d:07:0e:20:7c:e0:00:ab:d8:bc:3b:8d:c9:5b:
27:ef:f0:1e:b3:c9:0a:ad:eb:a2:f6:59:9e:1c:60:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:37:E8:8D:49:F0:7E:70:DB:07:63:2C:95:B9:D1:7C:9C:5A:99:6B
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/OjfojUnwfnDbB2MslbnRfJxamWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.44.0/24
45.66.116.0/24
45.80.129.0-45.80.131.255
45.129.185.0/24
85.92.109.0/24
91.107.116.0/24
91.200.84.0/24
92.118.114.0/23
109.236.56.0-109.236.58.255
141.98.233.0-141.98.234.255
194.5.92.0/23
194.31.173.0-194.31.174.255
195.80.51.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2d:26:15:8f:27:52:c6:5c:27:f1:e2:a0:b6:04:ef:c8:d0:
7a:5f:77:5a:00:e7:72:39:05:8f:66:8e:1f:8d:de:36:46:22:
97:3c:4f:b8:c1:f7:a6:82:cc:70:ec:ba:3b:5a:66:1b:e2:9b:
e6:66:3e:26:dc:70:3b:dc:12:58:e6:1e:8e:8a:97:7a:4c:6b:
a3:ef:ab:7c:b5:93:a6:89:6c:1c:b8:0c:a2:42:36:1b:58:7d:
c0:fc:c2:94:77:53:9a:92:57:32:74:13:89:db:b3:d7:39:cd:
ef:4e:09:44:55:36:1a:31:c7:90:fa:a0:82:6f:0e:09:7a:80:
d9:c9:55:7e:4b:9c:ed:b0:70:6f:1a:89:f2:25:68:90:af:5e:
ca:cc:66:a1:20:4d:c3:3e:a2:02:84:16:cc:0b:38:be:52:02:
54:de:20:86:e7:a4:ae:b2:2e:d0:70:98:2f:47:69:df:74:e6:
8d:1f:f6:06:3f:6f:d5:d9:0b:a3:d5:03:f2:37:0f:3a:3b:f8:
cc:a4:98:76:e9:b4:29:cc:dc:aa:55:f7:3f:be:0f:54:d0:2a:
63:9e:17:fb:0c:77:23:ed:32:5c:e3:e7:30:fd:b4:be:3d:56:
86:a0:57:4f:bb:e0:ad:0f:6c:54:73:d2:6c:38:1f:fd:4e:bb:
b9:48:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:54 2024 by rpki-client on console-fra.rpki-client.org