Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/pKH912rwZZ5-Nue_D8l4OEibWYk.roa
File: pKH912rwZZ5-Nue_D8l4OEibWYk.roa (raw, json)
Hash identifier: 2Ox+uioEuhmH9SmQzfck6Sob52Mepgcg0u+x5angoqQ=
Subject key identifier: A4:A1:FD:D7:6A:F0:65:9E:7E:36:E7:BF:0F:C9:78:38:48:9B:59:89
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 018BD843C3559C5BACC025E687688A85A6E5
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/pKH912rwZZ5-Nue_D8l4OEibWYk.roa
Signing time: Thu 16 Nov 2023 13:13:21 +0000
ROA not before: Thu 16 Nov 2023 13:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 65632
IP address blocks: 188.125.174.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.162.0/24 maxlen: 24
188.125.160.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:43:c3:55:9c:5b:ac:c0:25:e6:87:68:8a:85:a6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Nov 16 13:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4a1fdd76af0659e7e36e7bf0fc97838489b5989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:00:8d:91:cf:57:7b:29:d0:58:0b:cb:6b:ce:
4f:10:1f:36:50:df:b1:67:1e:a6:b4:fd:24:0a:b7:
5d:f1:9d:32:2b:9c:1d:cf:82:3c:ab:61:35:3a:37:
c4:ff:31:28:7a:27:43:96:35:db:89:02:a5:10:24:
24:3f:62:69:30:ee:28:76:87:b7:a9:93:f1:bf:50:
d6:c1:ca:b5:d9:16:68:18:b0:85:c2:f8:7c:40:f6:
52:de:85:7a:58:ef:03:25:ac:05:95:5a:96:cc:c9:
bb:9f:67:87:84:70:08:de:49:07:74:82:8d:ef:e0:
83:f3:b5:a2:77:7e:7c:02:c0:8f:37:d0:c3:20:dc:
f1:b5:62:63:f7:06:40:22:a7:5f:7f:ed:92:89:b9:
ba:a7:28:6e:be:ca:d9:a3:3a:02:72:fd:85:6c:88:
5e:30:7d:62:9b:b1:aa:00:b3:54:60:37:54:2c:18:
8b:a4:8c:ef:20:b4:db:f5:4c:f5:00:7d:a8:38:92:
df:68:05:2c:4f:a5:d2:6b:52:a3:e8:25:7e:22:95:
8e:fb:3e:65:c9:fb:a0:62:e2:b2:07:25:c5:a8:be:
df:5d:07:b7:dd:e2:c8:d2:3e:c9:90:81:7a:17:84:
88:83:c3:b6:37:a5:5a:19:86:d2:7e:31:26:f6:85:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A1:FD:D7:6A:F0:65:9E:7E:36:E7:BF:0F:C9:78:38:48:9B:59:89
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/pKH912rwZZ5-Nue_D8l4OEibWYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/24
188.125.162.0-188.125.166.255
188.125.170.0/24
188.125.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:81:3e:13:3f:93:0e:e7:f7:c3:17:2f:72:69:f5:f1:bf:f8:
b8:8e:52:cc:a2:93:30:44:7f:72:77:e4:2f:a8:a7:3f:9e:78:
a2:5e:33:ff:8e:07:69:1d:cd:8e:59:50:8b:d6:c9:f6:18:81:
e5:50:e6:64:fb:72:83:d5:96:da:67:04:cf:3e:28:58:f4:58:
6f:3e:66:12:e4:66:77:b2:89:a6:e8:b1:32:28:65:ff:f2:41:
b4:1d:b3:ef:fe:f2:c9:b2:c2:25:35:12:93:b5:35:82:5e:6f:
e9:3b:1f:21:bc:cf:94:c7:ef:9d:ee:a5:a5:ce:5a:92:cc:66:
0d:bb:48:ba:f2:c7:7c:d8:9d:9e:14:ea:fa:50:f1:00:70:c3:
0f:15:72:77:b8:53:13:36:68:ab:33:50:69:22:2b:b7:61:df:
2a:dc:96:10:76:29:59:ec:ab:2b:1a:54:97:bf:db:95:72:d3:
0d:02:1c:dc:85:98:66:04:3b:8f:b8:97:23:8e:6e:4b:25:3f:
e2:34:2e:d1:32:7e:9d:cf:57:5c:89:44:da:fe:e6:c8:9a:06:
9e:e2:d8:75:08:4c:6f:dc:3a:ac:69:1c:95:d7:d8:7c:5c:d5:
d5:35:b6:55:af:5e:0f:1b:5b:4c:62:96:27:54:2b:2e:c4:2c:
55:6d:f6:7b
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYvYQ8NVnFuswCXmh2iKhablMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0
M2Q4MGMwHhcNMjMxMTE2MTMxMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGExZmRkNzZhZjA2NTllN2UzNmU3YmYwZmM5NzgzODQ4OWI1OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQCNkc9XeynQWAvLa85PEB82UN+x
Zx6mtP0kCrdd8Z0yK5wdz4I8q2E1OjfE/zEoeidDljXbiQKlECQkP2JpMO4odoe3
qZPxv1DWwcq12RZoGLCFwvh8QPZS3oV6WO8DJawFlVqWzMm7n2eHhHAI3kkHdIKN
7+CD87Wid358AsCPN9DDINzxtWJj9wZAIqdff+2Sibm6pyhuvsrZozoCcv2FbIhe
MH1im7GqALNUYDdULBiLpIzvILTb9Uz1AH2oOJLfaAUsT6XSa1Kj6CV+IpWO+z5l
yfugYuKyByXFqL7fXQe33eLI0j7JkIF6F4SIg8O2N6VaGYbSfjEm9oWU3wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFKSh/ddq8GWefjbnvw/JeDhIm1mJMB8GA1UdIwQY
MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt
NjliOTUzYzlkNWFhLzEvcEtIOTEycndaWjUtTnVlX0Q4bDRPRWliV1lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh
LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAvH2gMAwD
BAG8faIDBAC8faYDBAC8faoDBAC8fa4wDQYJKoZIhvcNAQELBQADggEBAAuBPhM/
kw7n98MXL3Jp9fG/+LiOUsyikzBEf3J35C+opz+eeKJeM/+OB2kdzY5ZUIvWyfYY
geVQ5mT7coPVltpnBM8+KFj0WG8+ZhLkZneyiabosTIoZf/yQbQds+/+8smywiU1
EpO1NYJeb+k7HyG8z5TH753upaXOWpLMZg27SLryx3zYnZ4U6vpQ8QBwww8Vcne4
UxM2aKszUGkiK7dh3yrclhB2KVnsqysaVJe/25Vy0w0CHNyFmGYEO4+4lyOObksl
P+I0LtEyfp3PV1yJRNr+5siaBp7i2HUITG/cOqxpHJXX2Hxc1dU1tlWvXg8bW0xi
lidUKy7ELFVt9ns=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:47 2024 by rpki-client on console-fra.rpki-client.org