Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/gblhTXSxEb5Bcrss2uveeScPLqw.roa
File: gblhTXSxEb5Bcrss2uveeScPLqw.roa (raw, json)
Hash identifier: PZk+WTP/zoQmH4js7qRLAukqf1LbQ69GnIW/o21laCc=
Subject key identifier: 81:B9:61:4D:74:B1:11:BE:41:72:BB:2C:DA:EB:DE:79:27:0F:2E:AC
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01852099E638306E59947DBC8FC88C4AE0B3
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/gblhTXSxEb5Bcrss2uveeScPLqw.roa
Signing time: Sat 17 Dec 2022 15:00:34 +0000
ROA not before: Sat 17 Dec 2022 15:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 92.53.180.0/22 maxlen: 24
176.52.128.0/22 maxlen: 24
176.52.132.0/22 maxlen: 24
176.52.136.0/22 maxlen: 22
176.52.144.0/22 maxlen: 24
176.52.140.0/22 maxlen: 22
176.52.152.0/22 maxlen: 22
176.52.148.0/22 maxlen: 24
176.52.156.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:20:99:e6:38:30:6e:59:94:7d:bc:8f:c8:8c:4a:e0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Dec 17 15:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81b9614d74b111be4172bb2cdaebde79270f2eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:16:45:76:f6:c0:9c:04:20:96:96:f6:84:
f3:78:35:28:60:b1:0a:60:9c:93:68:62:49:0d:d6:
6b:71:f6:ca:51:0e:6a:9a:fc:86:88:23:33:3e:62:
7b:1d:65:e5:ab:2b:b8:e0:5c:34:5e:a8:f2:dc:e8:
f4:af:13:53:f4:f5:cb:2c:db:09:0e:b2:b7:4a:32:
8c:b0:d8:ec:db:fe:92:27:cf:2e:1c:39:95:13:6a:
df:62:c2:3a:d0:68:03:6f:fe:4b:28:7c:79:fb:df:
72:40:d9:4f:0c:1a:8e:fd:b2:93:f9:c4:cb:7c:b0:
b2:23:1f:2d:6f:bd:83:46:50:38:cf:3e:51:1e:08:
7a:97:ef:7c:06:9d:7e:ea:af:d1:41:63:00:76:49:
d4:30:2b:f3:da:a8:17:73:73:e7:c7:7c:ec:ed:bb:
9e:13:b8:cd:e8:28:75:77:8c:39:d9:6a:0d:85:2d:
dc:7c:92:4a:04:d8:0c:b4:17:ee:50:a7:21:df:1b:
45:af:8d:90:14:8b:8b:05:35:0b:8b:f3:14:06:f4:
14:7f:cc:f1:bb:0b:b9:41:8b:74:8b:b3:14:5c:83:
21:6f:09:24:7d:93:c2:ff:7c:f8:97:44:d5:4a:00:
a5:73:c7:3d:2c:16:7f:38:e4:35:06:eb:2e:3f:c8:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:61:4D:74:B1:11:BE:41:72:BB:2C:DA:EB:DE:79:27:0F:2E:AC
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/gblhTXSxEb5Bcrss2uveeScPLqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.180.0/22
176.52.128.0/19
Signature Algorithm: sha256WithRSAEncryption
46:95:b1:a4:cd:6d:4a:13:5e:8d:dd:d8:7a:93:5d:a7:86:94:
49:bd:d1:f3:47:92:29:89:8b:32:fe:6c:5a:38:c8:86:33:0b:
ec:57:d3:11:4a:dc:49:a5:94:1d:58:33:0c:43:70:b1:2a:b1:
53:76:5f:6e:dc:18:73:a0:5e:0a:b0:d4:98:d1:05:7f:fe:dc:
9e:46:0d:91:c3:01:e7:9c:f5:a6:de:00:6d:94:71:83:cc:d6:
65:08:8d:44:5e:1b:f7:0f:6b:08:8e:d0:1b:81:5d:f9:8f:5f:
99:0c:61:ca:5c:a1:34:84:01:ee:2d:f2:34:ba:e9:d6:43:61:
63:8e:de:2f:71:4c:4d:80:62:e4:72:3c:b8:d5:e7:7e:e5:90:
0e:d6:b5:08:6d:90:17:d5:d7:99:dc:3f:6e:51:3d:23:2f:29:
9e:6a:18:cc:ed:d6:5a:f2:10:77:e2:1d:59:5b:3e:f7:34:e2:
eb:57:88:ac:63:14:7a:f6:bf:25:64:0e:b0:eb:db:d5:a2:54:
21:21:65:11:ef:12:64:f4:43:8a:9e:34:38:2d:ab:7b:10:5f:
ff:39:fa:03:37:10:cb:17:bc:f4:19:34:a2:41:e3:ff:57:03:
4b:6c:34:b8:5f:74:31:c0:44:2a:7c:c4:dc:fd:a8:7d:e7:ce:
3a:14:64:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org