Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dszWGCwFrcaRYfJXAqF7JxP7aXo.roa
File: dszWGCwFrcaRYfJXAqF7JxP7aXo.roa (raw, json)
Hash identifier: y8b1Sf+HxkxipnzOQJsdxhfPoTLQBz5ehj1WvrOznM0=
Subject key identifier: 76:CC:D6:18:2C:05:AD:C6:91:61:F2:57:02:A1:7B:27:13:FB:69:7A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0188B4968692AA1D47B89CA77BED0795EA3E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dszWGCwFrcaRYfJXAqF7JxP7aXo.roa
Signing time: Tue 13 Jun 2023 11:49:03 +0000
ROA not before: Tue 13 Jun 2023 11:49:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.33.14.0/24 maxlen: 24
193.19.106.0/24 maxlen: 24
213.32.249.0/24 maxlen: 24
103.205.26.0/24 maxlen: 24
103.205.25.0/24 maxlen: 24
103.205.27.0/24 maxlen: 24
185.230.250.0/24 maxlen: 24
185.230.248.0/24 maxlen: 24
185.230.249.0/24 maxlen: 24
192.166.212.0/22 maxlen: 24
193.42.52.0/24 maxlen: 24
193.42.54.0/23 maxlen: 24
185.9.54.0/24 maxlen: 24
62.197.132.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
185.103.73.0/24 maxlen: 24
185.115.146.0/24 maxlen: 24
77.75.62.0/24 maxlen: 24
77.75.60.0/24 maxlen: 24
77.75.63.0/24 maxlen: 24
194.4.156.0/23 maxlen: 24
194.4.159.0/24 maxlen: 24
185.115.144.0/24 maxlen: 24
185.115.144.0/23 maxlen: 24
185.115.145.0/24 maxlen: 24
78.142.242.0/24 maxlen: 24
78.142.242.0/23 maxlen: 24
45.159.152.0/24 maxlen: 24
45.159.154.0/24 maxlen: 24
45.159.153.0/24 maxlen: 24
185.229.104.0/24 maxlen: 24
185.229.105.0/24 maxlen: 24
185.229.106.0/24 maxlen: 24
185.229.107.0/24 maxlen: 24
89.43.211.0/24 maxlen: 24
89.43.210.0/23 maxlen: 24
185.245.238.0/24 maxlen: 24
185.245.236.0/24 maxlen: 24
203.0.8.0/24 maxlen: 24
185.245.239.0/24 maxlen: 24
89.43.208.0/24 maxlen: 24
89.43.210.0/24 maxlen: 24
185.245.237.0/24 maxlen: 24
178.239.201.0/24 maxlen: 24
185.121.231.0/24 maxlen: 24
178.239.203.0/24 maxlen: 24
185.121.228.0/24 maxlen: 24
178.239.200.0/24 maxlen: 24
185.121.230.0/24 maxlen: 24
185.236.62.0/24 maxlen: 24
185.236.63.0/24 maxlen: 24
223.27.112.0/24 maxlen: 24
178.239.192.0/23 maxlen: 24
178.239.192.0/24 maxlen: 24
178.239.193.0/24 maxlen: 24
178.239.194.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:96:86:92:aa:1d:47:b8:9c:a7:7b:ed:07:95:ea:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 13 11:49:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76ccd6182c05adc69161f25702a17b2713fb697a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:aa:a1:2a:d9:99:fc:e9:c7:0e:04:98:51:00:
4b:07:91:89:d6:74:bb:1a:9e:94:30:30:19:55:68:
f4:2f:b8:98:68:40:a9:f3:c4:2c:cb:ad:48:6b:fc:
7b:ec:c3:8e:b7:3f:f2:a7:7f:94:75:53:18:f7:cb:
2e:e1:c0:f2:d0:52:98:bc:c2:59:30:06:46:82:0e:
20:cf:f4:45:35:4f:7e:6c:a7:70:a4:1e:48:e2:19:
97:d4:f0:3d:60:89:42:ab:9b:9e:54:ec:04:81:13:
7f:77:88:e3:2f:0b:86:05:18:3c:e5:56:47:d1:af:
1d:ae:31:c5:81:50:46:d4:8c:99:0e:8d:fd:03:e6:
5c:c5:a3:ac:af:88:3f:94:62:b3:c8:d9:74:56:71:
d3:db:6c:ed:ed:00:69:31:4b:bd:47:fd:ba:07:78:
3f:55:37:84:78:4e:26:75:a5:98:55:13:6c:93:4b:
fa:2c:c5:2b:71:45:1f:66:30:f3:7f:69:09:59:3a:
6b:17:6d:a5:16:00:3f:7e:c7:d6:2c:d2:99:0f:ae:
48:35:91:aa:c8:a6:93:11:a0:77:a8:9e:f2:41:82:
e9:ac:61:23:1a:7e:69:88:d8:c5:59:56:f5:15:58:
a2:cd:89:ab:06:4f:16:4a:d7:be:26:f3:a5:de:31:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CC:D6:18:2C:05:AD:C6:91:61:F2:57:02:A1:7B:27:13:FB:69:7A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dszWGCwFrcaRYfJXAqF7JxP7aXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0-45.159.154.255
62.197.132.0/24
62.197.135.0/24
77.75.60.0/24
77.75.62.0/23
78.142.242.0/23
89.33.14.0/24
89.43.208.0/24
89.43.210.0/23
103.205.25.0-103.205.27.255
178.239.192.0-178.239.194.255
178.239.200.0/23
178.239.203.0/24
185.9.54.0/24
185.103.73.0/24
185.115.144.0-185.115.146.255
185.121.228.0/24
185.121.230.0/23
185.229.104.0/22
185.230.248.0-185.230.250.255
185.236.62.0/23
185.245.236.0/22
192.166.212.0/22
193.19.106.0/24
193.42.52.0/24
193.42.54.0/23
194.4.156.0/23
194.4.159.0/24
203.0.8.0/24
213.32.249.0/24
223.27.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:bd:1e:22:18:5f:0b:e3:62:24:a3:ca:74:32:60:35:0e:05:
d9:b2:92:a4:1c:ea:88:c3:c8:f5:4d:dd:56:a0:5d:50:84:56:
d0:8c:cb:2a:d2:29:8a:61:48:ab:35:74:8a:73:c5:f8:71:a7:
3b:47:9c:65:00:56:37:b6:d8:9c:73:ef:96:63:7b:1d:1e:ba:
df:a3:8f:e5:24:11:5a:15:c6:3d:bd:c9:90:67:1a:83:74:d0:
59:ff:52:b8:c6:13:68:78:23:4f:8d:7e:89:cb:6a:3e:46:a6:
3c:63:f5:1f:13:79:fc:10:89:b5:ff:b8:5f:01:0a:81:c6:9b:
62:5a:57:36:45:88:0f:57:82:f4:57:8f:1e:07:77:a6:f5:e2:
8a:bd:4b:74:c2:53:40:28:37:34:ad:cd:99:04:ad:43:42:3a:
c0:0d:b0:bf:66:21:bb:c6:07:46:a9:57:ee:7b:24:69:39:df:
d7:4e:1c:a6:71:98:41:6d:2f:67:db:1a:24:80:74:65:c4:ab:
d8:19:90:ec:86:46:f9:88:36:d2:fb:56:1d:16:9c:ab:d7:b7:
1a:a5:f6:8c:a6:30:69:54:8c:30:5c:f5:05:1e:bf:42:ee:51:
c4:ee:53:1a:87:81:18:f1:0a:8c:ac:03:e2:2c:85:2c:87:5b:
c0:c7:51:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:12 2024 by rpki-client on console-ams.rpki-client.org