Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/vsTj0KMIkQiPWbpzcW46s8eL9X8.roa
File: vsTj0KMIkQiPWbpzcW46s8eL9X8.roa (raw, json)
Hash identifier: T+6Jfen1Hm39TGT3jc6DTtXtCZYbP/CZOu73R+ia0ic=
Subject key identifier: BE:C4:E3:D0:A3:08:91:08:8F:59:BA:73:71:6E:3A:B3:C7:8B:F5:7F
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 388175BE
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/vsTj0KMIkQiPWbpzcW46s8eL9X8.roa
Signing time: Fri 27 May 2022 13:56:13 +0000
ROA not before: Fri 27 May 2022 13:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 188.125.174.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.160.0/24 maxlen: 24
188.125.161.0/24 maxlen: 24
188.125.162.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948008382 (0x388175be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: May 27 13:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bec4e3d0a30891088f59ba73716e3ab3c78bf57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:07:ec:e3:29:51:1e:3a:84:cd:0a:6e:66:
35:90:fb:51:01:25:ee:8c:b0:f2:fa:d6:91:2a:47:
40:e2:43:b2:99:8f:fd:79:99:11:4c:af:b9:e4:c5:
59:da:b1:6a:ca:3d:80:55:56:eb:d9:aa:5a:46:1d:
21:64:1d:ff:c0:af:19:ad:e2:9a:ad:a3:59:36:4c:
50:29:7e:9a:f0:b0:e0:91:34:33:d2:d5:eb:08:51:
27:d6:bc:4a:fa:d8:97:78:10:27:c7:97:75:13:74:
0e:45:8a:27:1a:18:7f:6f:32:22:d3:9f:fb:1f:7d:
7d:d0:3b:34:4e:aa:af:cf:be:b1:15:04:a4:f0:f9:
61:5c:fa:66:18:89:62:f8:2f:a4:aa:71:03:54:9a:
4c:5d:5a:8d:d9:46:2e:93:2b:fc:e2:2c:66:29:78:
94:a3:53:bb:a7:b7:13:50:f0:7b:f7:4f:3a:e3:c9:
e0:d0:64:56:36:b0:7a:d3:d9:f9:17:81:90:ab:e7:
59:ee:c2:4a:ea:22:b9:4e:b9:cb:fe:87:ac:e9:ab:
69:74:61:b3:80:6b:ab:da:ca:f7:8e:b3:f5:74:81:
41:76:eb:3d:15:c1:78:6d:72:e2:57:99:29:80:d2:
25:5f:4a:e8:66:96:0c:1c:b2:cc:45:6e:ce:f1:d7:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C4:E3:D0:A3:08:91:08:8F:59:BA:73:71:6E:3A:B3:C7:8B:F5:7F
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/vsTj0KMIkQiPWbpzcW46s8eL9X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0-188.125.170.255
188.125.174.0/24
Signature Algorithm: sha256WithRSAEncryption
36:86:0a:76:1c:95:a6:a1:d9:ea:1d:9b:28:8b:7f:b1:01:92:
56:10:c9:d6:e2:90:79:d2:2a:71:dc:48:c3:8c:99:75:82:73:
e1:1c:fc:51:31:f8:9c:0d:39:e0:d1:47:3f:c1:e6:81:da:14:
4f:36:4f:58:02:0c:49:3f:8e:b0:c4:04:55:08:c6:1e:4d:96:
0d:ea:d4:5c:1c:24:97:5f:aa:89:15:00:d7:d0:ae:da:01:fe:
66:3b:28:1a:85:75:fa:9b:ba:3d:06:8e:b6:22:0c:5b:d2:6e:
ab:62:cc:f4:64:46:cf:55:08:0b:09:62:d4:38:1e:6b:82:e1:
ad:cf:e4:b4:40:6a:27:36:57:ce:7e:ea:f0:5d:f6:13:fe:4b:
7e:31:15:2f:3f:4c:71:d3:3c:00:a6:d4:11:bb:9b:92:a4:1a:
fd:eb:22:1d:c8:66:54:3a:64:c6:32:01:36:91:74:be:d5:eb:
08:0e:b9:45:08:5b:3a:f8:c2:0a:4a:b4:44:e9:b5:13:98:de:
58:70:b9:6e:3b:21:3a:bd:b9:e1:a0:0d:ea:2e:a6:1e:cb:49:
60:9c:03:60:ee:bb:81:87:9a:91:34:e8:a3:17:85:14:d8:b2:
2d:85:c6:fd:50:54:80:02:c0:99:ad:f6:dd:88:f0:59:27:5b:
01:53:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:25 2024 by rpki-client on console-ams.rpki-client.org