Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/FOWReJIYufLOxIFq-Dhlzdr27SY.roa
File: FOWReJIYufLOxIFq-Dhlzdr27SY.roa (raw, json)
Hash identifier: SstsqoiBQeSyCUpMdg0pu1dPeIrQuLa26H2SCY55iVU=
Subject key identifier: 14:E5:91:78:92:18:B9:F2:CE:C4:81:6A:F8:38:65:CD:DA:F6:ED:26
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 37FA2F38
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/FOWReJIYufLOxIFq-Dhlzdr27SY.roa
Signing time: Fri 25 Mar 2022 14:00:22 +0000
ROA not before: Fri 25 Mar 2022 14:00:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49632
IP address blocks: 188.125.175.0/24 maxlen: 24
188.125.174.0/24 maxlen: 24
188.125.173.0/24 maxlen: 24
188.125.161.0/24 maxlen: 24
188.125.160.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.172.0/24 maxlen: 24
188.125.171.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939142968 (0x37fa2f38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Mar 25 14:00:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14e591789218b9f2cec4816af83865cddaf6ed26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:47:a0:bd:f6:23:8f:f6:37:c9:4e:65:35:
e3:72:32:0c:43:88:64:e5:20:a7:8a:23:f2:3a:4f:
8d:ef:70:32:76:74:50:6b:72:b0:90:e4:4a:77:3c:
66:af:8c:75:e3:8b:61:83:3d:87:f2:7e:b8:44:58:
3d:25:ab:2d:f1:24:c0:2e:2c:70:3b:17:f8:76:3d:
e1:96:f5:a3:2e:76:1b:d8:0a:4b:62:97:bb:a8:71:
53:96:0f:24:7c:ba:c8:7d:e7:2f:1a:16:8a:38:2c:
73:16:56:d0:8e:32:c6:e3:66:e5:90:74:54:39:60:
57:34:39:11:39:90:25:c5:35:5c:9c:76:59:ef:4b:
e7:fd:5d:0b:e4:de:55:f8:63:49:6a:0a:1c:0e:9f:
b3:c7:8a:83:65:05:ab:3f:87:78:91:73:aa:3f:0e:
17:77:3c:f9:4e:94:29:6c:5f:2c:be:0b:69:54:ff:
f8:03:ec:f7:bd:93:25:d7:57:21:66:03:03:c4:f5:
c8:56:2b:0c:74:33:fb:7d:c3:37:9b:9d:b3:4f:55:
b3:aa:e9:86:af:d2:96:9a:31:ff:81:02:56:15:e7:
d2:7e:cc:bb:6b:54:78:12:38:18:d7:14:59:8c:db:
f1:17:36:9b:ba:8c:f7:3d:22:6c:5f:07:e0:7c:a8:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:91:78:92:18:B9:F2:CE:C4:81:6A:F8:38:65:CD:DA:F6:ED:26
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/FOWReJIYufLOxIFq-Dhlzdr27SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/23
188.125.163.0-188.125.175.255
Signature Algorithm: sha256WithRSAEncryption
87:67:a2:42:74:65:3a:d3:3e:70:f2:69:14:49:cb:d9:7c:2d:
8d:4b:67:5d:c6:53:ac:ec:4a:d2:71:cc:d8:61:13:0d:4b:ef:
30:59:d7:08:ef:1d:63:1d:d3:73:be:be:e5:c6:9b:11:e8:9c:
97:8e:56:98:c4:0f:85:28:90:0d:65:88:4c:b0:91:bf:4d:bb:
94:c9:0d:73:78:5d:11:3e:76:35:ed:b4:3f:f9:d3:41:ef:a9:
c0:21:8b:a0:64:91:c8:ac:40:25:74:3e:ef:d6:b7:18:21:f6:
d7:78:7e:83:fa:9f:96:09:e2:69:7f:00:ad:5f:a0:1c:35:a0:
5b:22:45:3b:bd:03:3e:bb:5d:a5:ea:f9:ab:13:24:9c:23:e3:
c6:53:33:27:2b:a0:60:99:32:e6:14:08:75:d7:e5:60:27:aa:
d5:97:72:37:72:d4:80:4b:3f:ee:a0:b4:2d:02:4c:1e:78:01:
43:6a:e3:4e:b0:1d:1c:16:94:b1:a3:12:a5:b6:da:d1:f8:cc:
0a:67:88:25:4b:f2:b1:88:77:20:5a:b6:b3:72:52:f7:38:e2:
c8:e2:58:78:4e:7c:63:63:6c:28:f7:40:07:fb:02:95:f0:3e:
bd:7b:2e:e7:bf:cb:02:c8:7e:b3:7c:47:59:eb:29:5b:9d:10:
17:e1:d0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:25 2024 by rpki-client on console-ams.rpki-client.org