Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/1-w3U6XOjtbSe1BZnYELlZ-qmLtk.roa
File: 1-w3U6XOjtbSe1BZnYELlZ-qmLtk.roa (raw, json)
Hash identifier: 4F/eBnqzYlSshv43tbq3LJBkLGOZBEZ7qbsaf31jQkw=
Subject key identifier: FB:0D:D4:E9:73:A3:B5:B4:9E:D4:16:67:60:42:E5:67:EA:A6:2E:D9
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018C866F0164C0076551508F5E7B08AD5B58
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/1-w3U6XOjtbSe1BZnYELlZ-qmLtk.roa
Signing time: Wed 20 Dec 2023 08:54:30 +0000
ROA not before: Wed 20 Dec 2023 08:54:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.188.17.0/24 maxlen: 24
185.188.19.0/24 maxlen: 24
185.157.212.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
5.61.212.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.157.214.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:6f:01:64:c0:07:65:51:50:8f:5e:7b:08:ad:5b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Dec 20 08:54:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb0dd4e973a3b5b49ed416676042e567eaa62ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:52:11:4d:67:dd:1f:80:96:d0:77:4e:e3:
71:62:08:88:43:03:0f:4b:79:d7:cb:45:8c:9a:1b:
f0:ac:db:5b:39:e5:75:66:b9:49:35:08:71:25:7d:
2e:9f:6d:ac:5f:e8:84:18:8b:bf:e1:9f:0b:78:e2:
a0:9f:5f:86:cf:5f:ba:d9:c8:ef:a0:12:49:47:98:
22:e0:bb:83:51:87:35:87:a4:0a:90:a4:f0:47:57:
42:ed:e6:dd:d4:d6:46:36:c9:82:25:e2:77:a7:3b:
d2:78:9f:45:a3:2d:d8:3f:a7:db:c7:a8:51:f9:58:
d4:5a:a5:a8:9b:e9:7a:ac:e8:24:6d:54:d4:89:98:
0f:2f:7d:9d:c8:9b:ea:79:4b:40:50:ae:59:a9:3d:
b1:d7:64:1c:ea:98:bd:50:27:7b:6a:8a:0a:d1:f0:
85:ba:e5:e1:f5:9e:75:6b:d8:62:a5:02:c1:19:1e:
5e:dd:bb:a9:b6:54:0f:a1:fd:05:38:e4:22:b8:b6:
17:92:b6:d5:ff:49:41:d4:e7:e0:de:0e:a9:4c:57:
fd:96:71:8c:1c:24:66:3f:71:08:69:e0:08:a1:c7:
9b:35:90:81:a1:04:c4:ca:bc:48:b0:a7:80:b1:64:
09:a1:ce:b1:b1:d7:ca:c4:46:c8:c5:0d:d0:33:57:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0D:D4:E9:73:A3:B5:B4:9E:D4:16:67:60:42:E5:67:EA:A6:2E:D9
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/1-w3U6XOjtbSe1BZnYELlZ-qmLtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/23
95.156.204.0/22
185.89.28.0/23
185.89.31.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/24
185.157.214.0/23
185.161.184.0/24
185.188.17.0/24
185.188.19.0/24
195.181.252.0/23
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
90:de:c8:34:95:fc:e4:6f:30:26:46:93:70:ac:51:62:30:82:
87:4e:08:b5:24:93:4f:0a:f3:c5:9f:26:3a:c1:25:83:f9:b5:
40:78:ed:15:c6:19:b7:ae:de:d0:85:43:91:ec:f8:4f:65:e0:
23:1b:af:59:58:18:80:f0:54:1c:84:1b:44:5a:ae:ba:e0:1f:
d1:9e:3b:e7:92:91:50:08:e4:18:bc:0c:51:54:72:81:6d:bc:
ff:61:d2:0d:22:38:c4:57:f0:07:c8:c8:c3:0d:ea:cb:ab:64:
c3:68:b6:0c:3b:8d:b5:dd:fa:2a:30:f0:f4:c1:d3:c5:7a:31:
27:53:8d:0d:2e:b8:24:f2:dc:eb:42:d4:40:2d:ec:43:49:3c:
6a:02:17:8a:88:65:f6:e5:ef:c2:3a:50:3b:9b:7e:02:bc:d2:
57:19:1a:88:d1:37:c4:4c:07:6d:b3:ce:5a:59:24:d5:82:44:
dd:c1:98:76:3b:7a:54:33:79:97:f8:cd:f9:af:7a:68:f0:7a:
47:4b:6b:d0:d3:f1:52:70:56:a5:61:e7:45:9a:7f:b7:c8:2e:
83:6c:2d:ee:b7:02:ae:dc:f0:b8:a0:32:99:d9:3e:9f:b0:c5:
27:22:a4:34:6c:84:37:d3:5b:8f:52:b6:0f:c7:d3:e7:69:64:
48:65:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org