Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/Bkxf75eFtYw4-dCPvHhrU9428x4.roa
File: Bkxf75eFtYw4-dCPvHhrU9428x4.roa (raw, json)
Hash identifier: 5a3CoUdE4KjvKxg3J6V7h+Q0eY2dVr6lLWZXi3ZxFhI=
Subject key identifier: 06:4C:5F:EF:97:85:B5:8C:38:F9:D0:8F:BC:78:6B:53:DE:36:F3:1E
Certificate issuer: /CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Certificate serial: 01866EEA0B82065310BB65CE13192C2F669E
Authority key identifier: 3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/Bkxf75eFtYw4-dCPvHhrU9428x4.roa
Signing time: Mon 20 Feb 2023 13:01:17 +0000
ROA not before: Mon 20 Feb 2023 13:01:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39305
IP address blocks: 193.57.227.0/24 maxlen: 24
185.151.214.0/23 maxlen: 24
91.211.64.0/22 maxlen: 22
91.238.63.0/24 maxlen: 24
45.84.52.0/22 maxlen: 22
185.88.9.0/24 maxlen: 24
62.106.73.0/24 maxlen: 24
193.57.226.0/24 maxlen: 24
2a0e:9780::/29 maxlen: 29
2a0c:7140::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:ea:0b:82:06:53:10:bb:65:ce:13:19:2c:2f:66:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Validity
Not Before: Feb 20 13:01:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=064c5fef9785b58c38f9d08fbc786b53de36f31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:1f:11:26:09:0d:97:0a:1f:35:7f:fa:57:
f2:45:c3:91:30:fb:96:92:e9:44:2d:4e:79:22:49:
9b:21:37:54:76:29:42:6e:73:95:3f:d5:86:5e:c7:
42:93:7e:26:1e:76:57:d3:10:d3:da:0c:2b:c2:8f:
6b:03:15:0b:ff:1f:52:ac:aa:ed:a9:ad:45:33:06:
cd:a3:2d:ae:18:15:96:f7:d8:8b:96:56:27:81:76:
c0:d7:e1:7a:58:fb:cb:33:83:e7:4a:c9:0f:82:06:
9c:69:78:b0:bd:2a:b4:60:61:31:d2:16:e3:ca:c4:
47:2d:18:df:ed:49:b9:91:ac:12:d2:58:2f:e4:4f:
2c:69:6f:b6:e5:0b:2b:cb:39:70:42:57:f5:b2:e7:
77:47:ba:0a:ba:3a:d9:19:57:13:df:c3:14:24:73:
8f:3d:24:2d:c6:a3:72:90:18:bc:05:83:d8:3c:e5:
a1:2d:dd:a4:8d:17:13:e5:91:0c:4f:d5:2c:92:bc:
aa:fe:66:c8:a3:e5:7d:de:7d:d0:2a:2a:90:d5:6f:
a7:54:6f:f3:54:58:c0:10:17:2f:a0:27:d3:a2:5e:
d3:01:9d:02:5e:6e:c8:8e:24:a5:0f:37:c1:3d:6c:
21:f5:13:12:71:66:69:58:86:60:3e:06:4d:a5:c4:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4C:5F:EF:97:85:B5:8C:38:F9:D0:8F:BC:78:6B:53:DE:36:F3:1E
X509v3 Authority Key Identifier:
keyid:3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/Bkxf75eFtYw4-dCPvHhrU9428x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.52.0/22
62.106.73.0/24
91.211.64.0/22
91.238.63.0/24
185.88.9.0/24
185.151.214.0/23
193.57.226.0/23
IPv6:
2a0c:7140::/29
2a0e:9780::/29
Signature Algorithm: sha256WithRSAEncryption
10:91:51:c0:6d:77:bc:a5:72:4d:bd:0d:e3:1d:3c:8e:b6:02:
07:bd:8d:5c:27:71:df:8b:1f:7d:ad:88:07:3f:e9:4d:10:75:
5e:21:2e:4e:13:12:bc:0f:a4:8a:9b:2e:48:4a:4b:86:86:a8:
f1:e1:67:8b:79:6a:b9:91:b4:15:b3:58:27:0c:ca:be:da:03:
a6:33:87:0f:46:1e:55:cb:ca:ec:fb:27:1d:a8:e7:b3:3a:5d:
53:d7:df:f5:5b:15:6f:d9:6b:bd:3b:6d:9e:8f:1c:72:76:57:
d0:47:7f:e0:9a:ee:4d:38:81:6c:c2:99:c0:a6:31:ac:bc:44:
88:16:07:2c:fb:99:d4:ff:42:ee:3f:58:d1:91:7d:82:2d:c7:
cc:44:b5:13:8b:90:63:4c:75:e9:6b:11:92:d8:48:18:ba:a1:
41:83:92:b0:07:fa:5e:80:48:da:81:8c:7e:ae:19:e5:d4:a5:
6a:d1:db:ac:3e:2d:3b:d2:b7:85:d2:f0:c1:62:2c:16:d0:34:
6c:fb:01:e5:9c:6a:42:51:58:41:67:23:0f:af:a9:33:9e:f7:
06:a3:d0:9b:f2:c8:e1:fb:2a:f7:07:13:fb:1b:63:8b:44:b7:
99:95:f8:d6:8d:b8:7b:06:c7:1f:07:ea:cf:e5:e4:57:d6:45:
f0:c3:f7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:27 2024 by rpki-client on console-fra.rpki-client.org