Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/P27DPbWbCCOQbxeGcwWeCHfK1EA.roa
File: P27DPbWbCCOQbxeGcwWeCHfK1EA.roa (raw, json)
Hash identifier: R9Rfv7tAFceYBeINVZWsGNisaWnU+uf/bLN2X9pnbIQ=
Subject key identifier: 3F:6E:C3:3D:B5:9B:08:23:90:6F:17:86:73:05:9E:08:77:CA:D4:40
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018C866F00B6722F62B6A26735D54CEB5E3D
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/P27DPbWbCCOQbxeGcwWeCHfK1EA.roa
Signing time: Wed 20 Dec 2023 08:54:30 +0000
ROA not before: Wed 20 Dec 2023 08:54:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50129
IP address blocks: 185.188.19.0/24 maxlen: 24
185.157.212.0/23 maxlen: 23
5.61.212.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
185.157.214.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
185.161.185.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:6f:00:b6:72:2f:62:b6:a2:67:35:d5:4c:eb:5e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Dec 20 08:54:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f6ec33db59b0823906f178673059e0877cad440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:0f:ee:cb:ac:a7:3c:db:24:9e:a5:64:aa:
35:3f:c1:0c:4c:c1:94:e4:31:8b:69:22:9e:6f:23:
36:6f:ed:78:10:5e:01:b3:d7:9b:f5:bc:d5:15:77:
5d:04:bc:2b:65:7e:a3:1d:57:bd:df:60:77:c8:83:
7f:41:b2:72:b7:c4:8d:12:ba:ef:b9:eb:01:15:f1:
2b:03:c9:d7:e7:8a:98:ee:79:aa:87:5f:aa:83:51:
cf:68:62:b5:1e:0c:13:2a:6a:05:59:69:f9:f1:ea:
99:d1:34:9e:ca:2b:e9:d8:27:87:9a:89:31:1c:3d:
a9:3a:8c:49:34:81:99:c1:f7:d9:41:e5:f1:32:62:
6a:90:5d:1e:c5:b9:cb:6d:1b:a8:ff:6f:46:00:9a:
81:fb:32:cf:73:a4:5a:e5:0d:be:37:c6:58:89:94:
1f:36:5e:91:fe:c2:b5:95:76:f9:6d:01:95:95:07:
0d:30:20:9e:74:1d:a5:79:dd:3b:fd:db:f5:0b:54:
be:cb:98:10:8b:be:9d:fa:5b:87:99:e0:d8:3d:95:
fd:91:20:00:b1:62:c3:02:b9:13:6e:be:d8:b8:5e:
81:7b:65:6a:12:28:ea:d6:5c:b5:8b:85:53:b2:31:
34:8d:48:b7:9a:87:e6:07:6b:a6:3e:b1:ca:51:ab:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6E:C3:3D:B5:9B:08:23:90:6F:17:86:73:05:9E:08:77:CA:D4:40
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/P27DPbWbCCOQbxeGcwWeCHfK1EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/23
95.156.204.0/22
185.89.28.0/23
185.89.31.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/22
185.161.184.0/23
185.188.19.0/24
195.181.252.0/23
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
20:9e:4c:e5:19:69:f0:4a:07:1c:45:90:22:f2:c2:fd:1a:2b:
81:93:22:25:a3:02:1e:ba:37:9a:f4:be:3f:64:f8:a3:a5:ca:
53:8f:f5:a5:77:6f:86:d7:e5:9a:88:ad:1a:89:06:e2:94:96:
c5:3a:cf:44:2f:d6:5a:5d:08:7b:01:39:8e:30:ae:4b:31:d1:
c4:ff:99:d5:3f:c4:e0:33:cc:88:5e:81:0c:c4:aa:5a:90:cc:
28:b5:16:3d:55:6f:79:62:48:3b:7f:dc:b2:b9:8a:2f:ac:af:
6e:a1:b7:75:28:41:16:64:88:3b:ca:0e:95:02:fd:f2:7c:f6:
88:cc:17:a2:04:f9:ff:20:7e:e5:65:24:28:af:e6:26:ee:14:
94:b6:8f:36:78:22:55:63:b5:4e:0d:d0:97:15:62:5a:95:61:
66:3e:d6:e9:7b:b3:a7:ba:99:5b:bf:55:8b:0a:c3:16:b3:64:
40:6c:3b:c9:41:ed:e1:ed:a3:3f:a3:c1:ea:85:a1:8d:1b:9b:
45:61:bb:c1:54:46:29:d7:ea:6c:c6:f7:65:d3:25:8e:3a:43:
f4:70:ae:0a:1d:84:cf:2d:ba:14:a6:a2:19:f4:38:fd:17:56:
58:e5:22:88:c2:7f:e7:07:58:15:93:b7:23:3f:1f:1a:46:75:
7b:af:7a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org