Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/k1fTGdInlL9k_EvsZZaiVWfHSHk.roa
File: k1fTGdInlL9k_EvsZZaiVWfHSHk.roa (raw, json)
Hash identifier: /75ZBARNHFO5j7RwUt57PaOSga6ttbDnn5MD/JJ4s7w=
Subject key identifier: 93:57:D3:19:D2:27:94:BF:64:FC:4B:EC:65:96:A2:55:67:C7:48:79
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018BFBAF1190C217E9DF49286596AE01B645
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/k1fTGdInlL9k_EvsZZaiVWfHSHk.roa
Signing time: Thu 23 Nov 2023 10:17:16 +0000
ROA not before: Thu 23 Nov 2023 10:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.188.17.0/24 maxlen: 24
185.188.19.0/24 maxlen: 24
185.194.208.0/24 maxlen: 24
185.194.211.0/24 maxlen: 24
185.194.210.0/24 maxlen: 24
185.194.209.0/24 maxlen: 24
185.157.212.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
5.61.212.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.157.214.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:af:11:90:c2:17:e9:df:49:28:65:96:ae:01:b6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Nov 23 10:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9357d319d22794bf64fc4bec6596a25567c74879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:28:9e:df:b0:ff:41:da:80:74:6a:26:d0:
d1:9d:43:61:a0:cc:9a:97:c7:92:10:cf:f9:b7:81:
1a:12:33:37:25:be:67:a9:84:6d:7b:ad:63:2d:3e:
35:6f:41:7e:b2:aa:46:3a:02:a8:ea:0d:5e:30:ff:
8d:f3:f6:f4:05:a8:ec:75:85:bb:4b:d2:37:24:cd:
aa:ef:82:97:47:ac:2b:1e:67:bf:d0:8a:73:9e:3b:
be:4c:ca:db:26:b6:ba:6d:10:93:61:c9:43:54:af:
72:00:00:f1:e0:77:df:31:6e:ed:5e:22:38:0f:d9:
24:5f:ac:b0:e7:9e:18:6a:3d:f4:1e:5e:cb:dc:44:
33:11:03:88:c0:c2:cb:34:fd:45:9c:79:2c:ed:b2:
77:70:bd:7c:cc:80:63:d5:78:42:b7:ca:58:42:0f:
80:4e:4a:b9:05:b0:6f:83:b8:59:42:dd:d7:54:a8:
d9:5c:c8:eb:59:88:c8:28:d9:d3:64:a6:61:4d:54:
40:58:7a:67:84:3f:a2:5e:f2:ea:3a:4f:ed:64:37:
48:63:c7:b5:48:2b:58:7c:93:21:90:43:d4:91:04:
e7:4e:3c:a7:87:34:d3:8b:48:c2:da:fa:bf:25:02:
a5:e2:66:41:af:d0:66:32:37:cb:a1:9b:fd:0c:8a:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:57:D3:19:D2:27:94:BF:64:FC:4B:EC:65:96:A2:55:67:C7:48:79
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/k1fTGdInlL9k_EvsZZaiVWfHSHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/23
95.156.204.0/22
185.76.78.0/23
185.89.28.0/23
185.89.31.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/24
185.157.214.0/23
185.161.184.0/24
185.188.17.0/24
185.188.19.0/24
185.194.208.0/22
195.181.252.0/23
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
43:ad:0c:a4:85:49:f4:36:aa:52:72:73:db:c5:66:88:c4:b0:
3f:64:24:3e:5f:54:26:a5:6b:70:e9:61:bf:7b:c6:01:7c:3f:
28:d9:58:7d:9e:02:33:27:6f:47:93:04:17:bb:ed:d4:ff:8b:
0d:2c:20:8b:38:de:fc:bd:8c:0a:e1:64:40:12:10:10:12:ea:
ac:3c:67:54:ae:7a:c7:03:ed:8a:80:f1:3a:80:ae:eb:b2:93:
e3:e8:45:6a:cd:7e:ab:98:21:c7:32:60:24:1b:df:98:e0:84:
2d:25:ef:fe:ab:5e:80:7a:8b:d8:50:5b:1e:d3:fd:f1:a2:fe:
41:27:c9:e6:e9:c1:50:2f:86:60:f4:f5:e8:68:38:de:f0:3c:
93:b7:12:dd:92:c4:33:cc:49:4a:dd:59:4b:4f:32:a1:56:f7:
b2:dd:bf:e4:52:32:95:25:28:bd:a0:e4:ef:6d:aa:41:6c:03:
10:43:31:f6:02:15:50:0a:8c:9c:c4:ec:25:14:b6:04:fb:65:
58:39:03:5a:14:f3:49:d3:cb:0f:66:e7:cf:ff:94:13:8b:c2:
a5:30:ca:38:88:92:17:9c:03:ed:f0:8e:2d:59:5c:89:73:4d:
28:b2:62:84:b8:75:71:0e:95:01:ea:c3:50:ad:59:6d:16:65:
00:6a:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org