Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/oydFF28-S4womnt_5_n0jWAwltQ.roa
File: oydFF28-S4womnt_5_n0jWAwltQ.roa (raw, json)
Hash identifier: VXkQNuUq9KS5YL3J2pTRMRulseb5s4bCnb60hrzkuHc=
Subject key identifier: A3:27:45:17:6F:3E:4B:8C:28:9A:7B:7F:E7:F9:F4:8D:60:30:96:D4
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018CC56DF83FE3BC46049497FAB850E61BE0
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/oydFF28-S4womnt_5_n0jWAwltQ.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202423
IP address blocks: 212.60.22.0/24 maxlen: 24
5.44.43.0/24 maxlen: 24
5.44.45.0/24 maxlen: 24
45.129.186.0/24 maxlen: 24
185.247.185.0/24 maxlen: 24
89.191.225.0/24 maxlen: 24
89.191.230.0/24 maxlen: 24
89.191.231.0/24 maxlen: 24
89.191.233.0/24 maxlen: 24
89.191.235.0/24 maxlen: 24
194.116.162.0/24 maxlen: 24
194.116.163.0/24 maxlen: 24
45.89.188.0/24 maxlen: 24
45.89.189.0/24 maxlen: 24
45.89.191.0/24 maxlen: 24
91.107.119.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f8:3f:e3:bc:46:04:94:97:fa:b8:50:e6:1b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a32745176f3e4b8c289a7b7fe7f9f48d603096d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:6c:39:9e:6e:ff:4b:fd:a7:08:2f:b2:1e:
da:7d:1c:6f:a7:17:e0:0e:e9:dd:d0:b8:83:6f:3c:
ce:53:21:b3:9e:8a:50:8e:2a:98:f4:c2:37:22:cf:
78:c8:99:61:75:ed:4d:80:d7:0e:c5:37:58:c6:aa:
d7:b1:7c:37:c7:ad:ce:af:54:35:15:f0:01:0d:82:
11:96:ae:1b:94:d7:96:02:00:37:61:16:ea:5a:fc:
3f:e5:89:c8:39:1f:00:05:98:70:61:61:d2:8e:70:
df:5c:27:0a:81:c9:41:27:5a:c0:6e:8b:3d:18:53:
59:6f:cf:0c:8e:d7:26:0e:38:5d:3f:7d:14:62:5c:
3d:b2:b5:ef:2e:d3:87:fe:ca:18:0f:e2:28:ce:e9:
f2:10:0a:ca:f7:01:32:47:0b:5f:27:80:f0:b0:c2:
d3:b5:18:95:9c:ef:5e:65:14:b2:65:10:bd:83:1b:
68:ba:e0:cf:4f:ec:80:38:2b:78:1a:5a:85:d7:13:
db:b8:c0:6e:f4:7c:c5:fd:cc:d7:c0:96:83:55:86:
9e:d4:5f:29:91:b0:42:46:64:fe:77:39:bb:ee:00:
c0:db:2c:74:83:81:2d:86:8d:33:6f:36:2f:d7:df:
e5:d8:62:21:73:53:a0:7a:63:a8:1f:f5:a3:17:13:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:27:45:17:6F:3E:4B:8C:28:9A:7B:7F:E7:F9:F4:8D:60:30:96:D4
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/oydFF28-S4womnt_5_n0jWAwltQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.43.0/24
5.44.45.0/24
45.89.188.0/23
45.89.191.0/24
45.129.186.0/24
89.191.225.0/24
89.191.230.0/23
89.191.233.0/24
89.191.235.0/24
91.107.119.0/24
185.247.185.0/24
194.116.162.0/23
212.60.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bb:a8:28:fe:b1:72:a1:d3:f7:0d:73:a8:c3:63:14:e5:c5:
f7:92:1c:f6:22:f5:d6:1c:98:4f:c4:69:14:41:8c:8f:3e:06:
20:84:0d:47:ee:bd:b0:ca:95:e4:48:93:22:4a:80:a8:6d:cf:
d2:d9:a3:5a:1e:f3:50:c4:9e:bb:ad:d8:a3:2b:94:44:04:5d:
06:d3:e3:df:cb:25:a2:97:08:09:d4:f6:f0:94:18:36:c0:10:
29:9f:17:4f:71:60:fd:f5:98:ee:cd:70:6c:39:04:23:82:b7:
55:85:67:8f:4a:ef:f0:fb:a2:34:ff:47:eb:0f:0c:98:df:73:
c0:2e:f1:29:a6:fd:29:74:b7:fb:fa:c6:cf:5c:5b:a6:be:e0:
3e:91:4c:04:a6:7a:7e:24:d3:6d:99:7c:9d:c6:55:75:48:33:
84:88:25:db:5a:6b:59:38:81:0d:a8:c4:28:7b:57:51:bd:ca:
23:6e:8d:33:08:06:bd:88:bc:19:dc:9e:69:b3:e6:a5:40:a8:
29:a8:a2:4e:0f:ca:37:af:2b:44:c7:aa:63:b6:9b:68:08:8f:
e0:22:c5:1a:56:4d:6d:95:1f:a3:76:3f:7e:29:8c:52:88:bf:
b0:dd:0f:82:7d:47:9e:ed:9d:4f:19:14:57:39:93:48:7f:83:
11:ce:ea:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org