Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/bV0r5evdNgcowYGgAbfjAesIpZY.roa
File: bV0r5evdNgcowYGgAbfjAesIpZY.roa (raw, json)
Hash identifier: wR5KGJd7Kb82kHN2m4GA/SOdBrTZYoMqu2XBqsMy02w=
Subject key identifier: 6D:5D:2B:E5:EB:DD:36:07:28:C1:81:A0:01:B7:E3:01:EB:08:A5:96
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01890334C616DEA8EC22CEC04DC0A5F70DAF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/bV0r5evdNgcowYGgAbfjAesIpZY.roa
Signing time: Wed 28 Jun 2023 18:12:17 +0000
ROA not before: Wed 28 Jun 2023 18:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.255.39.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
188.241.214.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
188.213.203.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
45.156.159.0/24 maxlen: 24
45.156.157.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/23 maxlen: 24
185.255.170.0/24 maxlen: 24
89.35.154.0/24 maxlen: 24
89.35.155.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
87.247.150.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.240.230.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
91.188.206.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
185.135.140.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
185.103.72.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
188.241.110.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:03:34:c6:16:de:a8:ec:22:ce:c0:4d:c0:a5:f7:0d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 28 18:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d5d2be5ebdd360728c181a001b7e301eb08a596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:75:9d:6c:31:bf:af:44:1a:36:c8:82:53:
61:87:96:74:d9:9d:68:a0:6a:51:f2:7e:60:35:14:
33:04:98:6e:71:17:34:d2:e8:b2:60:ff:e7:eb:7d:
49:24:99:bb:21:bd:24:d6:44:2b:8f:c9:f8:e2:e8:
b0:89:62:ad:78:84:57:a6:2a:50:ed:fd:d8:2b:e9:
42:16:74:a8:02:82:fd:d8:59:35:64:b2:43:b2:c0:
27:7d:44:4d:7a:51:bf:1a:32:32:fa:96:bd:cd:80:
67:bb:d4:de:01:6c:c4:b2:24:b2:38:e9:7e:ba:bf:
0e:c4:34:e9:39:73:44:00:74:b0:96:ad:e6:51:fa:
29:15:12:15:20:5b:6c:53:a2:1f:8c:f8:42:cc:1f:
f4:f6:fe:a1:e4:6e:d6:c5:7c:43:19:14:7d:66:57:
e9:36:d7:54:16:67:9f:1b:84:b5:91:58:21:a0:e7:
9e:f8:c2:f8:b9:b3:cb:aa:63:10:f0:d9:aa:c9:61:
e3:dd:25:1f:dc:9a:6c:06:b0:42:30:73:a7:cb:46:
59:ba:16:4e:89:9e:26:82:19:4a:e4:8f:e9:15:fa:
63:c4:dc:bc:31:96:7f:06:32:e8:3b:89:b7:b4:99:
45:83:ed:43:9e:e3:cd:cb:ec:a8:4c:94:7e:5d:3c:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5D:2B:E5:EB:DD:36:07:28:C1:81:A0:01:B7:E3:01:EB:08:A5:96
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/bV0r5evdNgcowYGgAbfjAesIpZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.157.0/24
45.156.159.0/24
87.247.148.0/22
89.33.85.0/24
89.35.154.0/23
89.37.63.0/24
91.188.204.0/24
91.188.206.0/23
93.115.254.0/23
185.103.72.0/24
185.135.140.0/24
185.135.143.0/24
185.238.10.0/24
185.241.210.0/23
185.255.39.0/24
185.255.169.0-185.255.171.255
188.212.132.0/23
188.212.158.0/24
188.213.203.0/24
188.240.230.0/24
188.240.232.0/23
188.241.110.0/24
188.241.214.0/24
213.232.92.0/24
Signature Algorithm: sha256WithRSAEncryption
26:83:d2:de:63:45:1d:c7:f1:ac:f1:5b:b9:fa:da:80:d1:31:
70:b8:ef:33:cf:9e:6b:1a:b7:c8:73:af:94:e4:41:ff:1f:d2:
f0:19:b6:26:58:c4:8c:2c:68:80:83:53:6d:90:7b:5e:bb:b3:
22:71:6c:50:87:31:05:04:49:e3:9a:24:f2:46:c6:0b:93:c8:
1d:36:cd:bb:0f:3d:75:8d:bf:01:37:61:e9:f4:f3:99:68:c4:
41:d6:74:b7:f6:4d:eb:64:2d:ff:e6:f1:e1:b1:e8:dc:9c:a3:
49:e6:ba:86:81:c7:77:08:03:ec:e0:75:41:38:fe:e1:25:6b:
af:4a:39:6e:70:d3:ee:ab:6d:2b:6d:01:8a:18:cb:fd:8b:24:
61:eb:42:2f:8c:46:b3:75:c0:98:6c:38:28:25:67:e5:0a:89:
98:38:e5:b6:dd:83:32:b9:33:14:9d:d5:b6:4b:98:48:ef:b8:
a9:d4:13:78:a6:fc:b0:cd:57:66:c2:0d:ac:34:5a:c4:43:0a:
45:95:c8:13:a0:80:da:fc:a8:ed:69:6f:28:f6:48:47:ea:c8:
46:10:44:78:11:f8:de:ca:d4:6b:e7:13:ab:0d:ba:cb:60:81:
01:e0:7f:97:f3:c2:c6:6b:17:dd:5c:bf:65:01:e0:d4:6c:be:
bb:82:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:12 2024 by rpki-client on console-ams.rpki-client.org