Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/mSIwi3xN-IZySBVGy8udyDYR4q4.roa
File: mSIwi3xN-IZySBVGy8udyDYR4q4.roa (raw, json)
Hash identifier: SEjqV7id3p+1M8w3E9n/hajN7FAKHpEpVa2PtGOR0/0=
Subject key identifier: 99:22:30:8B:7C:4D:F8:86:72:48:15:46:CB:CB:9D:C8:36:11:E2:AE
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018C6EF172136336C18AA7216E6E142C6579
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/mSIwi3xN-IZySBVGy8udyDYR4q4.roa
Signing time: Fri 15 Dec 2023 19:26:06 +0000
ROA not before: Fri 15 Dec 2023 19:26:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 213.142.136.0/24 maxlen: 24
213.142.137.0/24 maxlen: 24
213.142.144.0/24 maxlen: 32
213.142.145.0/24 maxlen: 32
213.142.142.0/24 maxlen: 32
213.142.152.0/23 maxlen: 24
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
91.151.92.0/24 maxlen: 24
80.253.252.0/22 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:f1:72:13:63:36:c1:8a:a7:21:6e:6e:14:2c:65:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Dec 15 19:26:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9922308b7c4df88672481546cbcb9dc83611e2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:eb:44:ea:9e:6a:2c:1e:16:32:40:7f:ce:
14:b3:fc:1a:0e:8a:2d:d2:19:6d:12:fe:da:d8:3d:
1a:08:39:24:74:8a:3f:a9:58:67:a8:b8:8a:8c:b1:
3c:1b:e2:94:85:00:29:72:21:36:4e:cf:6c:8f:e9:
15:b0:07:f2:77:f7:5d:81:c9:49:a1:ca:27:3f:15:
2e:5c:12:1b:49:9f:fd:b0:88:05:ee:a2:55:75:76:
6d:20:8f:b4:76:94:33:d6:df:11:1d:01:1b:80:8d:
b8:b4:ae:a9:e1:7d:15:8c:95:29:7a:ea:a2:51:21:
4d:75:25:86:5c:ff:fe:88:2a:7b:f2:ce:e2:0d:cf:
8b:f7:6b:54:57:fd:00:15:f8:af:59:fd:7f:3a:97:
2e:3f:f5:75:8a:53:cc:df:42:f5:30:f6:33:c3:06:
1c:b6:bb:a8:a2:df:0a:4d:5e:57:60:0a:14:96:fe:
8a:ac:b7:3e:f4:71:cb:a1:bb:46:14:13:f1:a7:c9:
8f:1e:c0:6e:e1:7f:56:87:6f:a2:ac:b7:42:ed:05:
d0:53:69:c6:a1:b0:6c:f4:c5:44:be:ec:14:ca:bf:
eb:68:e1:ab:01:c6:dd:2b:c2:9b:54:65:f4:ed:89:
d0:e4:1d:da:1a:4d:0b:b8:e1:8a:52:a3:a5:8f:56:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:30:8B:7C:4D:F8:86:72:48:15:46:CB:CB:9D:C8:36:11:E2:AE
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/mSIwi3xN-IZySBVGy8udyDYR4q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/22
91.151.80.0/24
91.151.82.0/24
91.151.91.0-91.151.92.255
213.142.128.0/22
213.142.136.0/23
213.142.142.0/24
213.142.144.0/23
213.142.152.0/23
Signature Algorithm: sha256WithRSAEncryption
26:b2:d2:b8:54:80:03:4b:20:be:d5:5c:ae:52:3c:80:2b:21:
de:2c:1e:e4:25:82:e3:61:bc:d6:c2:7f:b5:e2:0b:9a:16:ff:
14:84:6f:2a:d2:d8:a2:9d:df:bb:0c:a8:13:7c:dd:9f:56:09:
dd:16:c0:17:7e:b9:df:e7:42:ac:6b:35:63:3e:1a:56:85:79:
97:0f:09:2e:0a:dc:8b:85:d2:83:82:58:54:aa:0d:6b:9e:a9:
cc:7c:12:23:e4:2e:f5:86:be:b1:f1:d2:c3:84:aa:75:22:c0:
9d:99:2f:3d:f9:89:6c:a1:90:2a:5e:e2:2c:16:65:37:3b:d6:
42:e5:d0:95:8b:6d:ec:67:95:f5:97:5d:b9:8e:d5:79:b2:54:
36:76:23:4d:a3:2f:c6:4c:33:98:37:ac:c1:89:eb:7a:12:3d:
53:8f:5d:b0:a2:31:76:d8:08:8d:76:41:e2:81:82:74:17:b5:
29:97:09:2b:72:0b:4c:e2:08:6c:b1:9c:38:28:38:c5:b0:87:
be:4f:96:c7:5a:e4:ff:53:66:48:44:ce:67:73:af:de:8e:12:
1d:3b:33:21:0f:cf:a3:e3:7e:eb:0f:1c:77:cb:c9:c8:4c:56:
6a:51:8a:c8:93:d5:41:b9:40:57:16:71:14:3e:1e:c0:3a:32:
5c:78:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:04 2024 by rpki-client on console-fra.rpki-client.org