Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/gvIRpfj_GjU7pe7XBxP-00lyrOU.roa
File: gvIRpfj_GjU7pe7XBxP-00lyrOU.roa (raw, json)
Hash identifier: yxw4i/b83LF04FZKPuoO+uMBZtf/kBvh3B5/se+ILlc=
Subject key identifier: 82:F2:11:A5:F8:FF:1A:35:3B:A5:EE:D7:07:13:FE:D3:49:72:AC:E5
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 018EA0C1E3C1EFC9191947BC6347C3B40F7E
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/gvIRpfj_GjU7pe7XBxP-00lyrOU.roa
Signing time: Tue 02 Apr 2024 21:40:44 +0000
ROA not before: Tue 02 Apr 2024 21:40:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8374
IP address blocks: 5.172.224.0/19 maxlen: 19
31.0.0.0/15 maxlen: 15
31.0.0.0/16 maxlen: 16
37.98.208.0/20 maxlen: 20
37.109.0.0/16 maxlen: 16
37.152.16.0/20 maxlen: 20
37.209.128.0/19 maxlen: 19
37.247.128.0/17 maxlen: 17
37.247.241.0/28 maxlen: 28
37.248.0.0/15 maxlen: 15
46.76.0.0/15 maxlen: 15
78.30.64.0/18 maxlen: 18
84.39.160.0/20 maxlen: 20
87.251.224.0/19 maxlen: 19
92.60.128.0/20 maxlen: 20
93.154.128.0/17 maxlen: 17
151.248.32.0/20 maxlen: 20
185.4.212.0/22 maxlen: 22
188.125.32.0/19 maxlen: 19
193.41.112.0/23 maxlen: 23
212.2.96.0/19 maxlen: 19
2a01:2e0::/28 maxlen: 28
2a01:bb80::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:c1:e3:c1:ef:c9:19:19:47:bc:63:47:c3:b4:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Apr 2 21:40:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82f211a5f8ff1a353ba5eed70713fed34972ace5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:be:14:49:71:a4:c0:97:5e:0f:cb:dd:5f:
11:88:f4:5e:90:1b:ef:9d:1c:f2:95:e7:3c:f4:20:
d2:d4:52:55:a2:67:9d:9f:95:06:83:8b:9e:fc:60:
d4:9c:d7:de:b6:08:ef:86:22:0c:db:c3:79:74:3a:
4c:91:69:85:1e:52:73:00:d5:a0:50:36:8a:73:e1:
f7:cc:9f:33:59:ee:2e:e1:67:67:b3:fe:bd:56:59:
73:14:06:41:d5:13:89:39:e6:12:ae:d2:f1:d8:a3:
62:03:0e:a0:f4:f5:57:2f:76:a8:fc:44:63:39:3d:
6c:cf:15:2c:57:0f:d0:ad:f1:dc:c9:64:de:f8:1e:
bb:6e:44:8d:3c:54:bd:a7:66:3b:46:72:8f:95:73:
47:4d:06:d1:49:dc:89:c0:44:35:46:d4:b8:4f:ca:
32:63:c1:1f:2f:37:7b:f6:14:40:02:b5:29:4e:57:
08:d3:ff:b4:76:34:95:59:a1:e1:b8:6b:60:d1:9b:
1f:a6:39:91:49:90:5d:ce:66:e1:04:d1:73:d9:80:
e7:d9:db:14:5a:1a:64:39:0a:3b:d2:72:eb:d2:dc:
1f:a0:88:c6:ec:5c:7f:d8:98:86:cb:de:49:99:6b:
31:4e:e7:b6:19:07:8f:ed:14:52:ea:71:fe:aa:82:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F2:11:A5:F8:FF:1A:35:3B:A5:EE:D7:07:13:FE:D3:49:72:AC:E5
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/gvIRpfj_GjU7pe7XBxP-00lyrOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.224.0/19
31.0.0.0/15
37.98.208.0/20
37.109.0.0/16
37.152.16.0/20
37.209.128.0/19
37.247.128.0-37.249.255.255
46.76.0.0/15
78.30.64.0/18
84.39.160.0/20
87.251.224.0/19
92.60.128.0/20
93.154.128.0/17
151.248.32.0/20
185.4.212.0/22
188.125.32.0/19
193.41.112.0/23
212.2.96.0/19
IPv6:
2a01:2e0::/28
2a01:bb80::/32
Signature Algorithm: sha256WithRSAEncryption
14:9c:47:ca:e7:a0:32:d0:4e:27:d2:7d:5b:bc:40:35:b2:bc:
64:d9:f2:30:52:70:af:b7:36:d6:c2:1b:9a:e0:93:e4:0f:59:
84:3a:6d:f2:10:29:06:c9:55:1a:7b:6b:c7:af:e0:07:a9:95:
b1:f8:e4:45:66:87:15:75:53:21:30:92:9f:4c:4c:3f:ec:ad:
72:2f:53:90:0a:5e:bb:84:57:36:42:9d:83:13:b5:ad:68:14:
0a:8e:eb:3b:53:e2:d4:ba:9b:67:7d:c8:2f:c3:a5:be:a7:49:
d0:5d:0c:6a:62:55:8c:a6:d7:36:9f:20:f1:e5:15:48:e6:29:
1b:e5:ea:b6:df:f0:b5:3f:c3:7a:08:6a:c7:3f:02:27:aa:8f:
c5:cc:10:c5:96:e5:26:aa:1f:be:1b:f4:50:28:59:ca:e6:01:
18:34:f5:13:9e:40:5c:11:e3:cb:73:03:cd:66:17:a3:e9:1b:
9b:21:6e:c7:11:1e:14:eb:e4:f8:d3:bf:ce:44:aa:74:c7:c0:
5e:af:7b:a6:31:b7:98:d9:24:8b:9f:5b:39:0b:b9:26:de:72:
37:74:fd:87:d5:1e:69:75:3a:c6:e8:fb:47:1b:9a:b1:8d:80:
f6:50:c2:d5:f6:db:8f:00:9a:f9:19:48:b7:73:b8:02:83:6d:
fb:88:1c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:57 2024 by rpki-client on console-fra.rpki-client.org