Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/gGsWQaRurMz75AI8YOUCMVbxU50.roa
File: gGsWQaRurMz75AI8YOUCMVbxU50.roa (raw, json)
Hash identifier: ReRUI2u73d2GTBHJzKJDc6j7MvorHPno8bPCguXBTD0=
Subject key identifier: 80:6B:16:41:A4:6E:AC:CC:FB:E4:02:3C:60:E5:02:31:56:F1:53:9D
Certificate issuer: /CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Certificate serial: 01850C7C079E33B3B63776E7EFB3A1F5458D
Authority key identifier: 3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/gGsWQaRurMz75AI8YOUCMVbxU50.roa
Signing time: Tue 13 Dec 2022 17:15:33 +0000
ROA not before: Tue 13 Dec 2022 17:15:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39305
IP address blocks: 193.57.227.0/24 maxlen: 24
185.151.214.0/23 maxlen: 24
91.211.64.0/22 maxlen: 22
45.84.52.0/22 maxlen: 22
185.88.9.0/24 maxlen: 24
62.106.73.0/24 maxlen: 24
193.57.226.0/24 maxlen: 24
2a0e:9780::/29 maxlen: 29
2a0c:7140::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:7c:07:9e:33:b3:b6:37:76:e7:ef:b3:a1:f5:45:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Validity
Not Before: Dec 13 17:15:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=806b1641a46eacccfbe4023c60e5023156f1539d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:18:b7:eb:c3:77:62:df:13:45:17:ed:b7:
51:3e:83:2b:df:f5:de:06:61:2c:55:6d:47:fe:14:
09:be:06:80:7f:49:59:27:1f:c9:47:a6:69:8f:b7:
07:ee:3c:b1:a1:2a:17:61:c0:69:99:f8:e6:38:ed:
1f:99:d1:37:e9:f7:73:6f:6d:6f:d0:33:50:00:a0:
c2:06:df:e1:5f:78:25:cb:31:48:d6:01:3b:0b:3a:
45:86:c6:22:42:d9:06:a9:de:97:a5:8e:d8:82:82:
63:f7:34:37:df:ad:c2:af:a8:02:87:46:2b:62:c6:
e4:dc:f7:59:2d:71:9c:5d:ca:ac:3a:37:34:14:47:
a3:12:2b:a1:c7:50:e1:e9:e3:39:c7:f0:ab:41:ed:
15:cf:8a:0b:1e:d7:8d:c5:81:4b:f6:40:68:ab:91:
66:e7:cd:a1:28:7e:54:75:fa:ce:b8:6e:50:18:dd:
58:de:40:11:f1:99:e1:89:59:9e:1c:d1:13:a5:5a:
b4:6e:70:1e:af:17:87:72:7d:21:e4:28:1f:cf:56:
40:23:ae:68:c2:93:52:06:7b:db:96:af:aa:6e:bd:
ce:32:3a:ea:9d:fd:c1:45:07:60:5d:91:7d:db:5f:
23:d1:e9:78:f3:32:ea:fa:90:a3:49:cc:a2:cf:a8:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6B:16:41:A4:6E:AC:CC:FB:E4:02:3C:60:E5:02:31:56:F1:53:9D
X509v3 Authority Key Identifier:
keyid:3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/gGsWQaRurMz75AI8YOUCMVbxU50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.52.0/22
62.106.73.0/24
91.211.64.0/22
185.88.9.0/24
185.151.214.0/23
193.57.226.0/23
IPv6:
2a0c:7140::/29
2a0e:9780::/29
Signature Algorithm: sha256WithRSAEncryption
73:d9:24:70:a6:89:a8:9d:4c:f1:87:16:6c:8f:ea:e2:4d:22:
07:74:28:5f:bc:c8:ef:3b:39:98:76:19:10:67:94:ae:7b:d2:
5e:22:3b:59:c9:25:4b:1b:ef:30:5e:0f:11:a8:8c:56:23:a7:
67:5b:ac:96:f3:ee:3e:dd:20:35:9d:32:d4:b1:8b:5a:b3:40:
94:85:8d:fe:3c:50:29:bb:cc:10:56:f7:10:05:7e:91:20:8d:
0b:7b:de:5c:1b:d2:68:a8:2a:23:59:17:aa:cf:9e:55:d0:e4:
8e:73:92:6a:a7:10:53:d8:4f:3f:98:20:3c:9a:fe:06:f2:03:
f7:c6:63:ba:73:d6:74:75:4a:82:69:6e:34:07:85:c2:9e:ab:
8c:be:eb:d0:e4:d2:5f:79:da:2d:98:5a:4b:79:e8:49:02:c0:
49:94:06:71:62:42:22:8e:89:80:a7:c4:06:4f:a4:c3:79:8d:
5d:4d:48:a2:12:b7:3c:c3:c3:cd:e8:ec:b2:7d:cd:0f:98:50:
d5:bd:48:da:67:52:b3:30:8d:80:67:9b:6e:d8:1e:dc:f5:b6:
c4:81:fb:d4:e8:7b:8a:88:a1:f1:24:5f:47:df:b9:b8:5e:80:
8d:1c:40:71:89:c6:17:78:f0:5d:04:65:1a:42:2b:4e:f1:fa:
89:97:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:02 2024 by rpki-client on console-ams.rpki-client.org