Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/rQn1OGx4bwFo9ZPOyO2nYxGMRLo.roa
File: rQn1OGx4bwFo9ZPOyO2nYxGMRLo.roa (raw, json)
Hash identifier: Z8irPfmSATKL5t4T3w8XbmbTBXg5tIZ84xQ/GIiSfRI=
Subject key identifier: AD:09:F5:38:6C:78:6F:01:68:F5:93:CE:C8:ED:A7:63:11:8C:44:BA
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018FB9EC42E142514E841B7E4E619E5C34C7
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/rQn1OGx4bwFo9ZPOyO2nYxGMRLo.roa
Signing time: Mon 27 May 2024 12:00:19 +0000
ROA not before: Mon 27 May 2024 12:00:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 5.44.42.0/24 maxlen: 24
31.129.22.0/24 maxlen: 24
37.220.86.0/24 maxlen: 24
45.95.232.0/24 maxlen: 24
45.95.233.0/24 maxlen: 24
77.83.116.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
92.118.112.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
185.247.184.0/24 maxlen: 24
194.28.192.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:ec:42:e1:42:51:4e:84:1b:7e:4e:61:9e:5c:34:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: May 27 12:00:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad09f5386c786f0168f593cec8eda763118c44ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:1b:dc:ab:30:15:2b:13:fb:3a:f7:26:e0:
ec:8f:f1:86:64:bf:0c:2f:ba:8e:26:64:ed:20:9e:
68:d8:ed:3d:ca:b0:63:28:3b:f4:5e:9d:26:e5:ee:
af:25:1d:a3:05:a7:54:e1:7e:a0:8d:5a:41:02:a1:
37:92:bd:5d:86:c3:a5:9b:a4:a3:17:21:31:43:cc:
b6:77:d3:4f:31:6f:68:91:1a:36:54:8e:7f:11:4d:
27:51:c2:5e:28:ee:b1:f9:e5:b7:ad:d1:2d:92:65:
ab:ea:e6:74:bd:08:ce:14:b5:cd:ea:a6:fe:33:6b:
07:08:94:35:88:2d:61:0f:06:86:77:57:15:1e:78:
53:8b:e2:96:06:3a:6e:55:72:9b:9f:c0:64:6e:6d:
e2:ea:b8:6e:40:63:dc:00:d2:ec:50:c4:8f:cc:14:
8a:7e:23:80:5e:27:86:51:0a:65:0d:e9:75:57:e9:
1f:9d:de:c2:a0:a2:3c:3d:91:7b:d4:07:fe:97:f8:
ac:e8:b6:2a:0b:a9:0a:da:59:83:5f:bf:83:49:f1:
0b:15:b0:0f:02:24:7e:6f:d2:09:58:88:90:da:b5:
06:29:53:d1:42:39:a8:e4:10:07:13:0c:38:d5:43:
76:10:9c:b8:66:a4:01:4d:7e:a0:18:bf:ed:34:c8:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:09:F5:38:6C:78:6F:01:68:F5:93:CE:C8:ED:A7:63:11:8C:44:BA
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/rQn1OGx4bwFo9ZPOyO2nYxGMRLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.42.0/24
31.129.22.0/24
37.220.86.0/24
45.95.232.0/23
77.83.116.0/24
89.191.232.0/24
92.118.112.0/24
141.98.233.0-141.98.234.255
185.247.184.0/24
194.28.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0d:ad:f0:ac:5c:c1:af:47:18:bb:37:31:2b:80:41:82:f5:
96:13:26:0e:63:3f:3f:95:9d:f8:35:52:8a:30:9c:4b:78:b4:
bc:b4:7f:ee:f8:70:a9:e0:66:66:16:a0:66:68:9d:e8:0a:3a:
12:55:c7:69:2d:9d:7d:25:a7:53:c4:2a:95:a3:d1:7e:ef:42:
e5:d7:f5:30:3e:ca:dc:3b:f5:68:33:26:b9:16:e0:9e:d0:b5:
7c:1d:c2:72:79:64:75:23:09:ce:0f:90:2a:71:0a:54:27:f1:
cc:4e:33:e3:aa:ed:d9:3e:59:fd:c8:95:0e:57:e4:71:7a:ec:
3d:19:fc:de:25:e2:78:c7:37:77:42:54:8e:28:69:e4:b9:79:
3a:67:87:81:9b:d2:8e:92:1e:13:9b:51:b3:14:76:7e:d3:c4:
3f:a9:01:b2:4e:9f:f4:4f:42:18:48:3f:2f:4c:36:62:9c:a9:
f4:2f:14:9e:fa:2a:fb:46:a9:1a:f9:01:64:76:42:ed:1b:48:
10:a7:3d:bf:30:4f:9f:98:61:88:14:94:79:92:b9:f5:a8:50:
14:44:ba:09:72:f3:db:e1:99:f1:b8:f4:a7:18:56:76:1a:b8:
b6:13:f4:ec:6a:57:8b:92:f8:75:25:be:a2:f1:ed:11:f1:de:
09:53:c0:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 28 18:19:06 2024 by rpki-client on console-fra.rpki-client.org