Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dkSWImqTe4X0OPx0dd7zk-vpxts.roa
File: dkSWImqTe4X0OPx0dd7zk-vpxts.roa (raw, json)
Hash identifier: asOODSRhjPu20AeawhwJ37+TRh+5qqpea5VPxeh3aTs=
Subject key identifier: 76:44:96:22:6A:93:7B:85:F4:38:FC:74:75:DE:F3:93:EB:E9:C6:DB
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187C6855E8A5837DF225B554221B9A650C5
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dkSWImqTe4X0OPx0dd7zk-vpxts.roa
Signing time: Fri 28 Apr 2023 06:20:41 +0000
ROA not before: Fri 28 Apr 2023 06:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
185.241.209.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
91.188.204.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/24 maxlen: 24
185.103.72.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:85:5e:8a:58:37:df:22:5b:55:42:21:b9:a6:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 28 06:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=764496226a937b85f438fc7475def393ebe9c6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:79:29:68:df:ef:e3:4f:d4:55:72:ad:08:e2:
5c:e1:3e:56:e6:77:24:13:97:90:96:fa:00:19:e0:
52:33:b2:99:b9:66:cc:ea:e3:29:81:a2:cc:31:af:
3f:93:3f:60:88:33:78:21:91:7a:e8:cf:77:49:27:
89:71:f2:50:ac:3a:16:af:20:a8:98:ca:e4:d9:ae:
96:4f:71:f4:57:db:07:7b:52:b0:73:0f:18:b4:82:
8d:ce:04:be:67:7e:8e:09:52:cc:16:9c:37:5b:86:
91:a2:71:46:72:83:a9:6d:60:59:6f:43:06:10:89:
75:6a:66:e2:1b:c1:ad:3a:42:38:a0:c8:ff:a4:ad:
52:c8:74:bd:c5:61:07:13:8a:80:2a:c2:8e:18:e5:
64:a4:5a:bf:76:6e:8a:9d:4a:e5:0c:c9:d5:a5:0a:
66:cc:d0:80:c1:13:3d:5a:1e:f0:42:9a:d3:c6:5c:
32:c0:b8:4e:fa:cc:ae:a4:10:eb:15:c6:ed:8a:28:
6c:7a:24:0c:36:f6:8d:3e:e2:14:5f:29:2c:77:bc:
37:88:6f:75:e8:f9:e8:cb:c2:1c:73:26:32:10:eb:
af:e1:7d:db:e3:68:56:b3:ca:a2:01:fe:29:c0:34:
27:7b:c7:7b:b4:57:d5:59:a3:bd:ef:d3:14:fd:0a:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:44:96:22:6A:93:7B:85:F4:38:FC:74:75:DE:F3:93:EB:E9:C6:DB
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dkSWImqTe4X0OPx0dd7zk-vpxts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.148.0/24
89.37.63.0/24
91.188.204.0/24
93.115.254.0/23
185.103.72.0/24
185.238.10.0/24
185.241.209.0-185.241.211.255
185.255.169.0-185.255.170.255
188.212.132.0/23
188.240.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:97:4d:71:bf:f9:6f:36:6a:cb:2f:ca:23:ac:f5:74:27:1a:
91:7e:59:01:b8:54:fb:bc:2c:6b:9c:54:9a:cc:6e:dd:78:ad:
03:75:5e:45:7e:7a:c2:f2:a2:ce:17:5b:0e:d2:02:a8:e1:7b:
53:f3:6d:6f:35:b4:e5:8e:fe:f4:ed:45:16:a8:a0:0b:e3:b5:
d7:a2:5a:9c:96:07:49:98:6c:13:43:5e:d4:ba:e8:cc:77:44:
cc:e2:b5:93:e1:c7:bd:bc:15:99:a1:04:ff:1e:a4:0b:f2:13:
2b:27:85:21:7d:46:33:a6:4e:c6:f3:16:e4:bc:90:54:74:5f:
42:8d:d3:9e:9f:de:c2:ab:e2:51:18:4c:68:17:40:70:60:dd:
86:b9:27:5f:0b:50:7c:f3:6b:07:53:e2:16:6b:04:de:0b:48:
8d:7a:26:c2:71:44:51:10:d3:31:a0:fd:51:03:00:d9:ed:05:
82:45:32:d0:44:79:e0:bf:d8:43:be:75:dd:29:6c:43:e8:8d:
85:e2:c4:72:0b:61:99:5c:5a:02:a4:d4:d8:98:e2:1c:30:0e:
bb:b5:c7:81:ab:d9:ae:5d:3a:46:1f:a6:ea:09:27:01:44:5c:
c0:cd:0d:df:37:56:9c:44:ac:2c:b1:d3:bc:8f:86:6e:e4:d1:
00:b1:fc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:12 2024 by rpki-client on console-ams.rpki-client.org