Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yUFz08ifkD-WiMPZLmJ1J_wIW6Q.roa
File: yUFz08ifkD-WiMPZLmJ1J_wIW6Q.roa (raw, json)
Hash identifier: 8uS6iZk1+HHP6rIU17WxenJQT9DikY0321J50rIIshU=
Subject key identifier: C9:41:73:D3:C8:9F:90:3F:96:88:C3:D9:2E:62:75:27:FC:08:5B:A4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018771964F409F3EB989C4B96E4E050FFD0D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yUFz08ifkD-WiMPZLmJ1J_wIW6Q.roa
Signing time: Tue 11 Apr 2023 18:31:28 +0000
ROA not before: Tue 11 Apr 2023 18:31:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.9.55.0/24 maxlen: 24
45.159.152.0/24 maxlen: 24
193.19.106.0/24 maxlen: 24
192.166.208.0/22 maxlen: 24
185.103.75.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:71:96:4f:40:9f:3e:b9:89:c4:b9:6e:4e:05:0f:fd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 11 18:31:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c94173d3c89f903f9688c3d92e627527fc085ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c7:3e:0f:b7:48:43:85:6b:23:ce:8b:db:b2:
14:f5:7f:44:31:6b:13:3d:62:8f:6f:06:3a:c8:33:
04:32:9b:4f:41:d4:82:c6:e0:ac:4c:fa:45:e8:d7:
1a:c0:74:bc:70:83:e8:a0:f1:bd:31:57:10:a8:5f:
f8:ab:39:80:2e:84:ec:74:f5:96:88:c9:16:09:89:
06:63:67:6a:b0:15:40:16:ea:90:f9:ac:56:59:f5:
a0:49:d9:ac:41:33:f6:bb:f0:b5:d4:94:42:39:65:
45:d0:a2:1c:4a:0b:50:4f:d1:e1:9e:4c:97:04:30:
0a:9a:44:2e:0d:0b:58:62:ed:0c:e7:57:46:4b:ad:
6c:79:e8:aa:b7:da:94:28:50:c4:08:fb:d6:32:46:
9e:6b:20:85:36:9f:82:b0:5d:3e:55:78:e4:10:91:
5d:02:aa:00:6c:15:37:1a:85:f7:55:5b:6f:1d:59:
4a:62:06:59:cb:fb:34:67:70:f4:85:86:e7:98:b6:
53:be:3d:02:bb:89:49:de:23:a6:40:11:03:66:4c:
35:76:9b:e7:d3:07:e8:66:09:2a:f2:96:8c:00:41:
09:91:bc:13:14:0c:0b:cb:b2:29:1b:12:36:8d:46:
f1:a7:71:a5:c0:02:f4:8d:00:1c:01:0a:a2:84:af:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:41:73:D3:C8:9F:90:3F:96:88:C3:D9:2E:62:75:27:FC:08:5B:A4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yUFz08ifkD-WiMPZLmJ1J_wIW6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0/24
185.9.55.0/24
185.103.75.0/24
192.166.208.0/22
193.19.106.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c6:9e:2b:01:ea:75:fa:3b:84:d4:fa:90:bc:de:c7:f1:a1:
9a:5e:c4:62:72:86:f4:ab:c2:d5:40:49:b9:92:b3:63:fb:5b:
87:fa:c2:ed:77:10:a1:af:c1:1a:a3:1c:50:e9:fb:d4:59:0c:
b9:7a:f1:c7:53:eb:08:b0:27:0c:23:ca:75:f6:25:44:66:66:
df:d6:f8:bf:01:50:c8:25:a7:4e:3e:53:81:5b:ab:4f:cb:1c:
df:2a:8e:b3:91:1e:f0:99:81:6f:1b:24:53:7c:6e:d8:98:8a:
e2:a8:95:d1:b8:bc:22:be:56:4b:bb:8f:af:f0:fe:94:bf:d4:
a5:35:43:20:11:f7:95:ae:8e:73:07:9c:32:fe:ac:dc:91:6c:
4b:0a:be:53:68:eb:66:2c:6a:cb:9f:ee:fc:f9:c0:77:20:40:
7d:32:6d:a7:7a:d1:2d:f2:5b:0d:e0:fc:c4:3b:66:06:bc:85:
b2:da:0c:08:18:87:50:95:18:14:88:60:e7:4d:bf:dc:b4:11:
06:95:5a:c5:6b:1a:51:3b:2e:44:47:8a:72:f4:c3:1a:97:d4:
27:d2:ee:fd:cc:23:64:b9:8e:5f:e8:20:1a:0d:46:b2:d0:b4:
85:53:6f:ac:68:ea:3d:ed:02:31:ae:99:c1:de:fb:18:d3:c6:
53:ce:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:57 2023 by rpki-client on console-ams.rpki-client.org