Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/uTX6xZAJNEPb1Zzmh_VK5V0JE2M.roa
File: uTX6xZAJNEPb1Zzmh_VK5V0JE2M.roa (raw, json)
Hash identifier: 8ywjBpEDRYKoWoyceli+4Ig+O3U6QAU2vFzL41KRpj0=
Subject key identifier: B9:35:FA:C5:90:09:34:43:DB:D5:9C:E6:87:F5:4A:E5:5D:09:13:63
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 01857246B841D3B1A6597F32AFBD92E4C08B
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/uTX6xZAJNEPb1Zzmh_VK5V0JE2M.roa
Signing time: Mon 02 Jan 2023 11:38:35 +0000
ROA not before: Mon 02 Jan 2023 11:38:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 188.125.174.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.160.0/24 maxlen: 24
188.125.161.0/24 maxlen: 24
188.125.162.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b8:41:d3:b1:a6:59:7f:32:af:bd:92:e4:c0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Jan 2 11:38:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b935fac590093443dbd59ce687f54ae55d091363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:17:51:bf:af:85:69:9b:2d:1b:29:1b:07:
56:a9:4c:09:45:c7:56:04:28:fb:2f:3c:db:59:cb:
68:96:0f:00:29:fc:34:4d:56:d6:49:d3:54:8e:d5:
3c:28:cf:24:16:12:97:5f:4f:83:1d:df:8f:09:b1:
e2:36:aa:1d:0a:3b:be:9b:b4:96:d8:fa:18:46:8c:
16:fa:01:08:66:e0:6c:3b:f1:1c:ee:92:45:b3:06:
4f:49:a9:66:c6:b0:73:f1:16:ef:4d:6b:c9:1f:f8:
02:e0:e3:65:1a:fb:38:e4:9d:c2:b6:c7:55:d2:e1:
5d:72:de:2a:dd:2f:90:b6:07:b3:ca:24:96:52:6b:
a4:45:64:6b:51:87:34:d3:99:90:85:b5:87:ae:02:
2d:47:2f:48:90:66:ef:5a:2f:de:12:04:25:67:4a:
a6:4b:58:95:ac:c9:72:4f:96:3b:80:cd:4f:77:dc:
5e:b9:57:c9:ea:97:b3:c5:5d:d8:52:05:11:ab:e4:
bf:d6:54:8f:3e:5f:b6:b3:1b:67:6f:d8:32:9e:24:
e6:59:8f:ac:e1:e4:86:23:8a:87:f1:23:16:65:26:
07:c3:38:be:19:0f:c8:6c:51:e5:50:8c:f2:93:58:
b7:43:79:ab:f9:ec:f7:af:f0:5c:11:9e:62:98:20:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:35:FA:C5:90:09:34:43:DB:D5:9C:E6:87:F5:4A:E5:5D:09:13:63
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/uTX6xZAJNEPb1Zzmh_VK5V0JE2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0-188.125.170.255
188.125.174.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c4:56:1a:36:ac:30:3d:8d:da:7e:9f:c6:4b:3b:5d:42:e0:
97:2e:0c:e0:82:8b:9e:1c:b4:27:d0:de:01:87:43:e7:62:f5:
53:e8:f8:c9:e2:a3:43:60:c2:35:fe:d5:0a:e8:9e:1c:79:75:
50:8e:1e:c5:33:87:87:50:94:06:4b:96:4e:36:f2:3b:41:16:
e5:93:36:c2:37:f8:42:79:4a:a0:4c:68:98:97:c2:e3:eb:3d:
e2:1b:47:b9:06:32:61:63:34:79:28:54:ee:36:49:d3:d3:7b:
87:4a:98:e9:1c:61:8e:17:22:fe:c9:01:76:30:25:cc:a2:87:
37:9d:f6:ae:d8:d6:f7:62:fd:62:8d:88:30:45:34:7a:ff:52:
64:13:a9:65:40:ef:c7:11:12:8b:44:18:7d:cf:06:39:6d:ff:
82:75:26:5e:59:a3:85:ea:e2:3e:9d:de:5a:9d:b0:e2:17:71:
73:f5:df:91:98:07:6c:22:98:52:df:2b:18:33:15:8a:a0:75:
37:43:75:5a:a0:08:c6:4d:17:c8:b0:88:b3:d0:65:c6:1d:23:
79:18:6d:0f:48:dc:72:e6:9b:8d:80:83:95:22:d6:dd:b6:3d:
5d:51:54:43:5c:7e:93:df:7e:03:bc:46:62:32:d0:54:30:44:
a5:01:e6:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:47 2024 by rpki-client on console-fra.rpki-client.org