Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/LY5EIXiieoLj8uN2gZr65GykIJg.roa
File: LY5EIXiieoLj8uN2gZr65GykIJg.roa (raw, json)
Hash identifier: OIqexw2h/tVr5KAJgHn0KVl8Wy5UIweCKkqdW/OTnN4=
Subject key identifier: 2D:8E:44:21:78:A2:7A:82:E3:F2:E3:76:81:9A:FA:E4:6C:A4:20:98
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018F735ED5B478DD67C79AF2901671F42282
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/LY5EIXiieoLj8uN2gZr65GykIJg.roa
Signing time: Mon 13 May 2024 19:12:25 +0000
ROA not before: Mon 13 May 2024 19:12:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397563
IP address blocks: 80.253.252.0/22 maxlen: 24
80.253.252.0/23 maxlen: 24
80.253.254.0/23 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.81.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
91.151.92.0/24 maxlen: 24
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.135.0/24 maxlen: 24
213.142.136.0/24 maxlen: 24
213.142.137.0/24 maxlen: 24
213.142.142.0/24 maxlen: 32
213.142.144.0/24 maxlen: 32
213.142.145.0/24 maxlen: 32
213.142.152.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:73:5e:d5:b4:78:dd:67:c7:9a:f2:90:16:71:f4:22:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: May 13 19:12:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d8e442178a27a82e3f2e376819afae46ca42098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:4f:e4:21:c3:5f:71:3a:88:1e:52:f5:6d:
ca:12:43:8a:67:93:6a:e5:5f:4b:52:b6:49:b9:9c:
cb:e2:c0:a6:89:f4:ad:0f:56:19:3f:9a:77:d2:aa:
52:22:2a:68:ee:c2:92:d3:db:52:c9:5d:63:e3:56:
93:9d:f0:cb:c6:28:0b:da:3f:91:c1:e4:87:a0:86:
b9:89:59:a9:ba:5a:71:10:aa:9b:ce:82:22:c0:6d:
6e:d0:13:19:e6:2c:e4:56:f5:7b:d2:3f:78:d4:7c:
07:4a:20:f0:e4:b8:11:54:c9:ae:f7:1a:5a:ec:c8:
48:cd:c6:3c:65:e4:67:e1:e5:fd:d8:34:54:ab:cb:
5c:05:04:64:30:7b:22:ec:51:ad:38:52:85:70:4f:
97:c0:ae:6a:8c:b2:ad:ce:e1:1d:10:1e:52:0d:c2:
31:e0:79:3e:de:d1:b0:7c:e2:28:07:4f:7d:c1:7b:
c6:5d:24:56:21:a9:e9:b5:69:47:41:cb:1d:3f:5b:
d5:53:a7:63:0d:f9:c2:f1:b8:9a:cc:41:cd:45:ad:
1c:61:44:10:9b:32:aa:55:cb:6d:31:17:93:b8:e7:
b5:d3:67:4f:ac:bf:ab:42:b2:5b:fe:b3:f2:a9:f3:
0a:a2:81:5e:6a:25:7d:c3:34:e1:fb:5a:cd:77:40:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8E:44:21:78:A2:7A:82:E3:F2:E3:76:81:9A:FA:E4:6C:A4:20:98
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/LY5EIXiieoLj8uN2gZr65GykIJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/22
91.151.80.0-91.151.82.255
91.151.91.0-91.151.92.255
213.142.128.0/22
213.142.135.0-213.142.137.255
213.142.142.0/24
213.142.144.0/23
213.142.152.0/23
Signature Algorithm: sha256WithRSAEncryption
10:f3:8f:b8:20:36:98:7e:d1:8b:8a:fa:31:17:aa:17:7f:ae:
69:53:45:88:ff:8b:e3:07:36:23:07:44:27:cd:97:8e:c4:02:
bd:c5:f3:a5:4d:51:c9:35:35:ab:57:9b:96:dc:e1:4d:4a:67:
81:d9:51:8e:62:07:57:a3:fd:5d:bd:db:7b:66:f7:e8:74:8e:
3c:5a:90:fb:7e:0c:2f:53:4e:12:6b:18:89:14:58:11:13:c1:
95:20:d6:85:97:91:7d:9e:68:23:f8:c7:a3:98:36:23:98:c8:
c6:4c:0a:d6:14:f5:ae:a7:8a:b2:5e:f4:b4:b4:1f:1d:08:ab:
97:5d:49:95:e0:93:bb:94:97:b9:15:21:d9:81:85:7c:ae:bd:
29:13:95:b9:8e:10:78:0b:78:23:9e:a5:f0:1c:bc:24:bc:af:
84:c4:00:bb:21:c3:f4:71:b9:02:13:2d:ee:cd:23:c8:9c:25:
f3:b6:a4:50:52:4e:ce:38:f1:f6:c9:c9:f4:5c:61:8d:c9:35:
f8:84:0c:c1:ec:84:34:36:9b:66:14:2f:2a:86:e6:bd:4e:2d:
84:48:ee:37:45:1e:97:87:c3:f9:a0:33:cb:09:e4:73:14:e2:
93:34:ec:18:ab:9c:e9:76:46:ab:35:97:99:d0:50:35:3d:1c:
de:65:c0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:38 2024 by rpki-client on console-ams.rpki-client.org