Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/oVtli_4aYLAobZOAC0gKShQm7NA.roa
File: oVtli_4aYLAobZOAC0gKShQm7NA.roa (raw, json)
Hash identifier: bqV85aYex+yFWYASveVvwy0yyIo/FOYUOfE1BNEey7U=
Subject key identifier: A1:5B:65:8B:FE:1A:60:B0:28:6D:93:80:0B:48:0A:4A:14:26:EC:D0
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0BCAB144
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/oVtli_4aYLAobZOAC0gKShQm7NA.roa
Signing time: Fri 20 May 2022 00:37:29 +0000
ROA not before: Fri 20 May 2022 00:37:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397563
IP address blocks: 213.142.133.0/24 maxlen: 24
213.142.136.0/22 maxlen: 32
213.142.140.0/24 maxlen: 32
213.142.141.0/24 maxlen: 32
213.142.142.0/24 maxlen: 32
213.142.144.0/22 maxlen: 24
213.142.152.0/24 maxlen: 24
213.142.153.0/24 maxlen: 24
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.132.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
91.151.92.0/24 maxlen: 24
80.253.252.0/24 maxlen: 24
80.253.253.0/24 maxlen: 24
91.151.80.0/21 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.85.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
91.151.86.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197833028 (0xbcab144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: May 20 00:37:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a15b658bfe1a60b0286d93800b480a4a1426ecd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:b7:55:92:f0:f5:c3:24:b6:c5:e7:eb:0f:
a0:75:c3:e5:89:c7:f4:b6:f0:e3:f9:96:01:a2:8e:
5a:53:3b:32:5c:d4:32:3c:e3:e4:3d:3f:99:8f:a6:
6f:2d:91:0d:91:8e:10:55:c2:26:8d:8f:e2:c3:43:
9a:0f:7a:31:98:be:9a:5a:0a:2a:83:c4:54:78:dc:
a3:db:9e:54:67:a3:5d:a1:5e:11:ce:d7:d7:93:2a:
fd:6f:72:6c:d9:8d:aa:04:fe:5e:d4:da:0d:27:88:
6f:0e:a2:24:58:bd:66:17:11:c4:04:a2:e4:74:89:
4d:6a:3c:b1:47:a0:89:50:f4:bf:d8:a0:4c:a3:a1:
24:cc:d8:5d:91:ff:86:66:a7:45:a0:04:2b:d9:19:
20:50:d5:c9:5d:13:e1:4c:92:78:df:8c:72:d0:d8:
99:7f:6f:9c:55:24:7c:6b:70:28:b9:f5:33:a4:77:
b6:17:a6:08:cf:c3:23:4f:d0:8c:08:5a:d2:1f:c0:
f1:24:fc:39:1d:91:e4:05:a7:80:1e:32:00:3c:47:
fd:4d:57:33:c1:76:c3:4c:b7:1c:86:65:2f:03:56:
df:52:52:80:f2:89:3a:df:bd:5b:b2:83:a7:79:ac:
cc:fb:cc:f4:ce:a7:76:ca:b4:ee:b9:e8:c9:8a:3e:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5B:65:8B:FE:1A:60:B0:28:6D:93:80:0B:48:0A:4A:14:26:EC:D0
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/oVtli_4aYLAobZOAC0gKShQm7NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/23
91.151.80.0/21
91.151.91.0-91.151.92.255
213.142.128.0-213.142.133.255
213.142.136.0-213.142.142.255
213.142.144.0/22
213.142.152.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:d7:23:ba:5a:e3:63:1d:eb:50:5d:9b:01:4d:32:6c:90:34:
29:07:21:e4:87:2c:f6:de:43:15:5c:82:03:cd:ff:fc:07:41:
66:23:d6:66:48:5b:fa:c2:80:47:8f:41:03:35:d5:37:13:a5:
6d:0d:64:7a:66:a7:7b:1c:fb:46:37:4f:2a:60:b9:4d:77:e9:
89:92:7a:a3:2a:6a:9d:22:12:e5:eb:4e:8f:e2:2a:41:a4:ec:
e1:35:d2:1c:24:22:dd:d7:a0:95:80:18:02:0f:0e:2d:41:7a:
69:a2:a7:00:6d:a8:03:8f:43:cf:60:c1:14:3b:1c:be:e4:8c:
cc:d4:3f:ae:1a:eb:a9:b9:3b:bd:d9:8f:99:58:79:86:7b:75:
55:04:d4:f1:27:5c:7e:b0:97:79:f7:5d:3a:b2:64:bc:79:eb:
52:06:59:8b:b4:11:8e:82:95:71:68:91:69:84:f0:39:a5:7b:
88:90:b3:af:c8:37:2f:f6:de:3f:ef:34:8b:19:20:d1:60:74:
b3:7a:02:c7:ac:1b:74:bf:2e:59:5c:c2:27:ec:e9:4a:96:7d:
b1:68:33:f0:fa:9c:89:3e:3c:46:d2:66:fb:63:7c:4d:3b:61:
b2:48:5d:79:25:99:f7:e7:fd:74:c7:7f:a6:f5:ed:8d:99:27:
59:aa:83:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-ams.rpki-client.org