Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/N5V_roFaHWxy2tl_FPXZUamYB4Q.roa
File: N5V_roFaHWxy2tl_FPXZUamYB4Q.roa (raw, json)
Hash identifier: DlLp1j3mJwFdmcNKrIOMzeASUgYsS2ye7L9ngXUpia0=
Subject key identifier: 37:95:7F:AE:81:5A:1D:6C:72:DA:D9:7F:14:F5:D9:51:A9:98:07:84
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 086DA91B
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/N5V_roFaHWxy2tl_FPXZUamYB4Q.roa
Signing time: Sat 16 Apr 2022 11:38:33 +0000
ROA not before: Sat 16 Apr 2022 11:38:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.228.0/22 maxlen: 24
45.137.16.0/22 maxlen: 24
45.150.52.0/23 maxlen: 24
95.214.176.0/22 maxlen: 24
91.239.148.0/23 maxlen: 24
91.238.92.0/23 maxlen: 24
212.115.124.0/22 maxlen: 24
45.132.80.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141404443 (0x86da91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Apr 16 11:38:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37957fae815a1d6c72dad97f14f5d951a9980784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:49:81:78:a9:63:d6:a8:7a:83:84:bd:e6:
87:ab:99:95:90:06:34:58:26:da:a8:df:0e:64:1d:
16:70:dc:87:09:ab:08:04:30:1d:1f:a8:6e:1f:a3:
da:be:46:a2:34:c7:2a:0a:75:04:e3:60:43:8e:38:
99:4a:4b:3c:24:a8:fc:64:e3:6c:61:c0:45:5e:07:
47:8c:01:be:a9:4d:c3:39:e8:91:c4:7d:b3:e5:80:
8f:fe:c7:e2:8b:81:40:0c:2d:6c:a0:e5:ab:44:45:
f8:00:0b:f1:4d:51:ad:52:44:74:bb:6d:00:76:64:
f4:b6:e5:59:60:c2:4c:9b:61:0d:c6:64:cd:99:3d:
6f:37:d7:82:f2:a0:f1:80:9b:3e:23:09:48:83:81:
3a:e4:b7:88:95:97:7b:9c:97:2a:d5:3f:5e:5e:ce:
06:6a:62:a8:36:f0:ad:bd:c9:75:fb:c6:9e:e5:6e:
77:16:68:10:e9:42:3c:75:d5:65:6a:69:d0:d9:42:
d2:c0:a5:b6:9f:bf:e6:8f:da:25:1e:44:6c:1d:9c:
36:29:39:c1:99:a6:0a:b9:39:c0:93:63:a7:45:bb:
2c:5a:c9:2f:f5:19:7e:3c:96:8c:bd:25:4f:0f:91:
14:2f:88:79:4b:f1:3c:44:35:29:63:4f:c9:2a:a5:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:95:7F:AE:81:5A:1D:6C:72:DA:D9:7F:14:F5:D9:51:A9:98:07:84
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/N5V_roFaHWxy2tl_FPXZUamYB4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
45.137.16.0/22
45.150.52.0/23
91.238.92.0/23
91.239.148.0/23
95.214.176.0/22
176.105.228.0/22
212.115.124.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:ad:33:3e:7c:bd:bb:4e:73:90:f7:67:ff:0a:05:c0:66:0b:
d1:19:d9:49:61:74:a9:bd:04:64:30:3e:a8:65:dc:1d:ef:57:
24:05:39:a7:cb:65:3a:b9:66:5b:1d:f4:56:f3:98:fc:39:3d:
27:8e:05:d5:6c:40:49:46:4a:5b:d5:92:08:82:72:5a:f6:6d:
fc:72:2d:fb:fa:4e:f8:d6:81:08:a4:d1:27:ab:3d:c6:3f:06:
b0:5a:52:45:76:e2:97:5f:03:f1:d4:cd:fa:9a:4d:f4:27:f2:
1d:9d:ce:c7:34:46:f8:84:17:b6:2d:40:6e:a4:05:ed:19:07:
3c:40:3e:10:a5:11:0f:97:09:98:49:1c:82:6e:06:e7:8c:29:
74:18:41:6b:10:fd:1f:3b:cd:73:74:24:75:7f:7a:5d:d3:7a:
b9:5b:28:22:a0:18:cb:8a:22:49:5a:e6:c8:e4:d7:a5:ff:6b:
14:52:00:bb:1e:b2:43:6e:b3:60:d0:51:a5:77:99:d8:d4:21:
96:f5:b1:7b:92:74:14:a8:78:f7:13:57:ee:52:f5:e5:0c:1a:
6b:80:b8:87:53:25:86:a4:ce:81:6e:b8:10:d2:9e:02:f0:df:
ea:a8:ea:9e:ab:3d:00:be:97:74:cc:8a:a1:75:ed:bd:22:bc:
76:ef:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org