Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/w5855nBioZVpy4XxhybOxjQOpKo.roa
File: w5855nBioZVpy4XxhybOxjQOpKo.roa (raw, json)
Hash identifier: hjZIgeBqAcuYcmJikSIx6MSEG50Gyv/MYLrZRhtBTKE=
Subject key identifier: C3:9F:39:E6:70:62:A1:95:69:CB:85:F1:87:26:CE:C6:34:0E:A4:AA
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 3747F446
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/w5855nBioZVpy4XxhybOxjQOpKo.roa
Signing time: Sat 01 Jan 2022 10:04:59 +0000
ROA not before: Sat 01 Jan 2022 10:04:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 65632
IP address blocks: 188.125.175.0/24 maxlen: 24
188.125.174.0/24 maxlen: 24
188.125.173.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.162.0/24 maxlen: 24
188.125.161.0/24 maxlen: 24
188.125.160.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
188.125.172.0/24 maxlen: 24
188.125.171.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927462470 (0x3747f446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Jan 1 10:04:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c39f39e67062a19569cb85f18726cec6340ea4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:e1:34:b0:ef:81:5e:c4:0b:da:35:71:f8:
e8:77:88:de:0b:80:bc:02:04:ab:4c:c8:07:a6:2a:
98:96:19:38:47:9b:11:d1:01:88:27:f5:32:e0:f9:
62:30:00:1a:3f:57:01:49:ee:8b:b6:c1:6b:09:81:
24:1c:f1:98:ac:c6:2a:86:e6:be:22:f6:75:13:37:
8d:b3:aa:75:41:b3:46:fa:5b:be:d2:25:7d:22:3b:
95:9e:81:91:27:61:5b:50:ca:5c:43:03:9e:cd:f8:
9c:8a:bd:d4:f0:d3:4b:05:4c:d0:9f:89:38:70:0d:
0a:b1:99:2f:9a:3e:f5:81:bf:e7:4b:af:12:7f:d9:
b8:07:f9:d7:68:b2:9f:71:ad:00:70:a0:ee:35:9c:
aa:d5:29:ea:f4:1b:94:58:ec:be:fb:35:01:f9:f2:
9f:d6:46:d0:56:e4:a1:22:27:db:6c:e2:22:a0:f2:
93:48:ae:64:dd:cc:18:16:0f:c1:96:c8:6d:fb:ad:
79:93:56:07:e2:bc:f4:3f:99:44:de:a7:ce:da:64:
96:0f:e5:19:70:af:3f:1a:df:a0:b0:f1:d7:ca:b0:
5d:8d:ce:36:c7:e0:18:2a:60:e8:1b:8e:bd:78:ed:
4d:e9:21:42:a3:92:92:59:45:40:73:b4:ac:bc:b2:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9F:39:E6:70:62:A1:95:69:CB:85:F1:87:26:CE:C6:34:0E:A4:AA
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/w5855nBioZVpy4XxhybOxjQOpKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:03:fa:fa:48:43:9d:04:27:56:88:cb:0a:88:bd:1b:92:4b:
6a:0e:91:a0:95:9a:75:f6:d0:17:c0:a7:93:ff:9a:b3:c0:14:
2c:59:a1:9c:df:ba:6a:a9:30:c2:e5:3e:36:24:eb:f6:b2:93:
9b:26:ec:97:f3:eb:0c:a1:89:ee:6c:a1:03:02:df:9f:9a:97:
4f:8d:07:a2:14:6d:4c:23:2b:59:80:98:9d:6d:2e:ab:42:13:
a4:fc:d2:e0:e5:ed:4d:61:80:7b:3f:68:33:5f:bc:14:d7:1e:
f9:18:cf:b2:70:10:a8:b8:2c:6c:e7:ca:fb:23:68:9f:e8:f0:
e4:b1:b2:f8:43:ee:12:3a:79:f8:ac:11:21:36:c7:65:2b:fd:
d3:82:5d:47:43:be:e9:1f:23:c9:d0:33:a7:45:c9:e0:3f:48:
f1:9f:02:d0:d9:4f:60:50:1f:63:ef:28:6a:fe:19:84:36:2b:
14:63:31:2d:b9:65:a6:ea:94:87:c2:ad:78:9a:f6:7b:5b:f8:
52:89:6a:45:a2:d7:79:8e:c2:8a:1a:af:0c:9e:5e:5f:9b:b4:
c8:bf:f9:58:53:3c:ed:e0:4f:70:b5:fe:b6:7d:80:44:12:c2:
17:1c:70:6c:82:56:4e:3d:00:e2:84:a2:00:3e:b2:5b:2f:08:
41:1c:e0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:47 2024 by rpki-client on console-fra.rpki-client.org