Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/YUSfB4ry7Jzl2laZ-Q2K-M5Jyzc.roa
File: YUSfB4ry7Jzl2laZ-Q2K-M5Jyzc.roa (raw, json)
Hash identifier: N2WnvqKnzdNszH0A3e/gwXCUChyaj1qI51JqLq57MIg=
Subject key identifier: 61:44:9F:07:8A:F2:EC:9C:E5:DA:56:99:F9:0D:8A:F8:CE:49:CB:37
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0B463C2B
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/YUSfB4ry7Jzl2laZ-Q2K-M5Jyzc.roa
Signing time: Fri 25 Mar 2022 22:51:49 +0000
ROA not before: Fri 25 Mar 2022 22:51:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397563
IP address blocks: 213.142.133.0/24 maxlen: 24
213.142.136.0/22 maxlen: 32
213.142.140.0/24 maxlen: 32
213.142.141.0/24 maxlen: 32
213.142.142.0/24 maxlen: 32
213.142.144.0/22 maxlen: 24
213.142.152.0/24 maxlen: 24
213.142.153.0/24 maxlen: 24
213.142.154.0/24 maxlen: 32
213.142.155.0/24 maxlen: 32
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.132.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
91.151.92.0/24 maxlen: 24
80.253.252.0/24 maxlen: 24
80.253.253.0/24 maxlen: 24
91.151.80.0/21 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.85.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
91.151.86.0/24 maxlen: 24
91.151.87.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189152299 (0xb463c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Mar 25 22:51:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61449f078af2ec9ce5da5699f90d8af8ce49cb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:11:fe:69:35:81:08:8a:18:40:d4:c0:a0:
5b:79:21:2f:f0:2b:1a:ce:d6:f8:46:0b:ee:24:57:
6c:03:0c:fb:81:e0:e0:78:ec:ef:72:aa:28:22:af:
72:73:76:ce:f6:39:b4:a8:ed:ed:99:d7:c2:73:09:
49:6b:52:9d:91:e5:74:e0:ad:7f:ab:42:78:16:20:
b2:0d:82:a4:d6:26:2f:c3:96:d9:2e:e9:b0:4c:f8:
30:63:a8:cb:5a:40:e8:e3:82:13:d4:a1:29:d6:4c:
f7:c4:89:3d:18:03:4a:6f:0f:82:52:32:24:bf:8a:
45:f2:8f:c4:01:46:b0:ed:ee:2b:25:4b:c0:7e:ca:
60:31:22:80:2f:f5:b7:4a:2e:14:12:30:b7:bb:01:
97:8c:82:03:9c:1c:bc:60:79:68:43:00:dc:77:78:
dc:5f:6b:04:73:c5:bd:e2:8f:b0:9e:40:06:a0:90:
d7:13:c9:75:c7:01:8b:bf:3e:93:3f:6f:93:3f:d6:
45:9d:e2:b6:db:17:ba:11:39:10:6d:8a:b5:fc:14:
b7:aa:b0:d3:db:21:73:c4:1a:cc:71:30:df:d1:77:
c1:73:35:b1:b0:9b:fc:76:fb:54:e7:d5:82:9c:17:
f5:df:52:9f:70:2f:4e:31:82:54:ab:6d:48:e2:4b:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:44:9F:07:8A:F2:EC:9C:E5:DA:56:99:F9:0D:8A:F8:CE:49:CB:37
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/YUSfB4ry7Jzl2laZ-Q2K-M5Jyzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/23
91.151.80.0/21
91.151.91.0-91.151.92.255
213.142.128.0-213.142.133.255
213.142.136.0-213.142.142.255
213.142.144.0/22
213.142.152.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:84:66:c3:32:12:65:19:df:c8:c4:77:de:55:a8:bf:a8:0e:
70:59:2a:87:16:8a:cc:e3:89:67:fc:4b:96:d7:2c:d9:16:75:
01:70:ec:17:5c:41:03:a1:76:d4:41:45:35:9d:c5:55:7f:fd:
f0:e6:5e:40:ce:65:f8:0f:c3:9b:25:c7:90:0f:96:c9:8f:bb:
03:52:b3:2e:f8:a9:b9:d2:8d:5c:39:75:92:ff:ba:3b:fe:22:
c1:14:46:4c:a6:b5:ce:ad:fb:26:8a:97:2a:fb:5a:4c:28:3a:
ef:4d:61:c2:3b:af:3d:2b:8b:e4:d8:08:5b:4b:d1:28:9d:f8:
01:25:2c:f6:c1:9f:38:2b:c3:4b:30:cd:c4:fb:10:44:07:a4:
56:86:e7:d2:56:f9:33:54:94:ce:ae:2a:bf:a2:e5:25:3f:1a:
a3:db:f9:3a:38:a7:7f:5c:51:c5:d8:e9:eb:ea:92:40:07:14:
06:05:b1:49:ab:27:6a:6f:d8:9f:33:1c:d0:f8:f4:28:d9:85:
25:48:80:c4:09:e1:47:1f:f1:ce:e8:a6:45:98:64:52:0e:09:
e1:56:dd:37:0c:52:d5:06:0a:de:29:63:9a:59:6b:19:aa:2c:
a0:01:e3:c4:5c:99:cf:7b:8a:04:43:4d:40:5a:25:ea:56:a6:
a0:72:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-ams.rpki-client.org