Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/XyKbPkdpIdE6g0Yem4mAolGrcAY.roa
File: XyKbPkdpIdE6g0Yem4mAolGrcAY.roa (raw, json)
Hash identifier: UFYVJlDeie6U3so068bMkGuOIStVTetYrXM/+mJy8AU=
Subject key identifier: 5F:22:9B:3E:47:69:21:D1:3A:83:46:1E:9B:89:80:A2:51:AB:70:06
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0182B13F0EAEBD1EE08AC702FAA6D09326A8
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/XyKbPkdpIdE6g0Yem4mAolGrcAY.roa
Signing time: Thu 18 Aug 2022 13:57:55 +0000
ROA not before: Thu 18 Aug 2022 13:57:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397563
IP address blocks: 213.142.133.0/24 maxlen: 24
213.142.144.0/24 maxlen: 32
213.142.145.0/24 maxlen: 32
213.142.140.0/24 maxlen: 32
213.142.141.0/24 maxlen: 32
213.142.142.0/24 maxlen: 32
213.142.152.0/24 maxlen: 24
213.142.153.0/24 maxlen: 24
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.132.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
91.151.92.0/24 maxlen: 24
80.253.252.0/24 maxlen: 24
80.253.253.0/24 maxlen: 24
91.151.80.0/21 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.85.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
91.151.86.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:3f:0e:ae:bd:1e:e0:8a:c7:02:fa:a6:d0:93:26:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Aug 18 13:57:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f229b3e476921d13a83461e9b8980a251ab7006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:98:76:37:9d:04:82:5c:60:8f:58:08:34:78:
92:6f:c4:33:ef:12:be:46:23:60:cb:27:1a:81:3d:
b4:e8:0e:4c:22:a3:e3:d5:6a:98:c5:9f:03:4e:3c:
48:9f:1b:a8:46:de:28:ad:08:6b:73:fd:94:a5:6d:
5d:4d:c9:e5:aa:47:5c:76:9b:47:97:0c:b9:54:b9:
b1:8a:fe:91:4b:13:22:bf:2f:16:29:c0:85:84:2a:
ea:00:8a:90:45:02:94:2f:a2:e2:b7:ae:92:b9:47:
71:8e:bd:6c:6b:fa:b4:0a:df:d8:1a:17:34:4c:e7:
4f:8c:a1:f8:73:a1:bf:0d:d9:80:3a:6e:d5:be:c6:
db:5b:d4:6b:7e:92:b8:c2:3e:e7:7e:98:96:57:c1:
25:51:e1:92:a9:2b:24:a1:cc:6b:3c:9c:e2:08:f9:
fe:d9:0a:e7:ff:a8:ca:e9:ff:1b:f7:93:9e:76:cf:
e3:ad:bb:65:09:cc:e3:c0:27:9d:e6:c8:e7:ad:bf:
ed:ba:e1:a0:bd:98:94:d3:31:1d:cc:a6:c8:6f:ab:
41:b6:0d:98:27:36:d6:43:26:60:d0:32:0d:19:73:
43:e3:bb:ca:4b:3e:53:06:0c:12:9a:8b:a4:4f:3f:
47:41:b9:97:90:90:f3:98:0c:a5:ca:ae:66:e0:be:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:22:9B:3E:47:69:21:D1:3A:83:46:1E:9B:89:80:A2:51:AB:70:06
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/XyKbPkdpIdE6g0Yem4mAolGrcAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/23
91.151.80.0/21
91.151.91.0-91.151.92.255
213.142.128.0-213.142.133.255
213.142.140.0-213.142.142.255
213.142.144.0/23
213.142.152.0/23
Signature Algorithm: sha256WithRSAEncryption
28:18:c3:fb:8f:93:17:1e:c7:19:87:90:67:3b:9d:99:6e:ae:
77:8b:09:7f:96:0e:6d:91:cb:a8:1e:43:af:40:c1:0a:c4:41:
dd:d9:47:ea:f5:c9:b3:a3:e9:2c:55:c6:14:55:07:93:19:cb:
dc:2c:b1:52:63:88:74:91:c4:ce:f5:55:de:11:5e:f9:cd:5d:
21:01:fe:ad:66:da:da:c7:f7:f5:a4:fe:8e:7d:f8:71:68:2a:
f7:10:01:e1:94:38:c6:55:7c:1d:8f:a9:24:14:4f:2b:96:8b:
71:7e:b0:bd:d4:46:cb:5b:f3:91:ff:03:35:69:72:46:e2:38:
71:bd:c6:4c:0d:4c:e8:e5:18:45:00:d2:46:f6:b1:19:15:51:
03:87:4a:35:93:6a:3c:dd:1f:37:1a:47:3a:fb:a5:2a:46:8c:
63:40:65:1c:22:2f:ba:d7:8f:bb:c1:e1:65:93:ed:11:86:d2:
90:ab:14:c8:ff:8e:be:b7:14:d3:08:28:df:b2:7f:cc:2d:c4:
c6:e5:ca:3b:5d:be:a5:d2:41:15:3f:8a:4b:14:b1:02:1c:c5:
9d:5b:d0:21:d2:61:c9:07:c2:87:61:f2:13:04:15:b4:3a:83:
35:de:80:32:4e:92:21:90:e9:79:a1:05:d7:0e:be:8e:9a:c2:
40:e1:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-fra.rpki-client.org