Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/iubzbfzb-gwK8xdAZ8XIbPf6mNM.roa
File: iubzbfzb-gwK8xdAZ8XIbPf6mNM.roa (raw, json)
Hash identifier: gEzdeSPi9u7SVayvus5cfW6hm4znXa4V8cZrKZmAGd8=
Subject key identifier: 8A:E6:F3:6D:FC:DB:FA:0C:0A:F3:17:40:67:C5:C8:6C:F7:FA:98:D3
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 02CFFE08
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/iubzbfzb-gwK8xdAZ8XIbPf6mNM.roa
Signing time: Sat 01 Jan 2022 07:54:14 +0000
ROA not before: Sat 01 Jan 2022 07:54:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204348
IP address blocks: 185.252.112.0/24 maxlen: 24
185.252.115.0/24 maxlen: 24
185.252.113.0/24 maxlen: 24
185.252.114.0/24 maxlen: 24
5.183.88.0/24 maxlen: 24
5.183.89.0/24 maxlen: 24
5.183.91.0/24 maxlen: 24
5.183.90.0/24 maxlen: 24
185.249.255.0/24 maxlen: 24
45.143.189.0/24 maxlen: 24
45.143.188.0/24 maxlen: 24
2a0e:e7c3::/32 maxlen: 32
2a04:b800::/32 maxlen: 32
2a04:b802::/32 maxlen: 32
2a0e:e7c1::/32 maxlen: 32
2a04:b806::/32 maxlen: 32
2a0e:e7c4::/32 maxlen: 32
2a04:b804::/32 maxlen: 32
2a0e:e7c7::/32 maxlen: 32
2a04:b803::/32 maxlen: 32
2a0e:e7c0::/32 maxlen: 32
2a04:b805::/32 maxlen: 32
2a10:a6c0::/29 maxlen: 29
2a0e:e7c6::/32 maxlen: 32
2a0e:e7c5::/32 maxlen: 32
2a0e:e7c2::/32 maxlen: 32
2a04:b807::/32 maxlen: 32
2a04:b801::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47185416 (0x2cffe08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Jan 1 07:54:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ae6f36dfcdbfa0c0af3174067c5c86cf7fa98d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:cd:88:25:d5:de:66:65:64:9e:ab:fa:68:
42:99:fd:81:26:ee:dd:07:2f:b6:45:de:4c:ce:77:
5e:fb:44:de:c4:b2:6b:cd:b4:9a:b9:96:ea:a5:ac:
21:ed:56:f0:f2:e6:04:f2:7c:92:22:bf:d8:18:8e:
17:4a:b1:b0:75:67:30:ea:40:01:6f:89:bc:62:9a:
40:90:62:b1:43:8a:32:24:04:6d:98:3e:ea:34:f3:
44:6f:6a:9b:d2:74:8f:c4:d2:cf:04:77:f7:14:5c:
dd:7a:c4:9f:b8:63:6b:65:3a:6c:42:51:4a:78:43:
14:f8:41:4d:91:f9:5b:59:fa:b0:c1:b4:2a:f5:a2:
0a:e3:9e:11:38:f8:05:50:bc:ca:95:bc:b5:45:35:
bf:ea:b9:52:84:d2:9a:1d:eb:73:cc:ce:e1:96:fd:
84:aa:8a:e1:ff:80:03:02:9d:f9:cc:47:a9:bc:fd:
e8:aa:80:c9:21:86:3f:51:4c:ee:4f:cf:fc:21:c8:
9f:6a:14:c3:f9:d8:83:86:0c:45:82:f3:4e:55:0a:
ad:a4:8e:c3:50:24:51:2a:e9:e1:27:6a:b4:95:4c:
f6:3d:75:26:6b:2e:d9:b8:f8:02:6c:d3:7a:bd:67:
4e:12:94:52:a3:a2:85:f2:95:80:15:63:cc:57:f8:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E6:F3:6D:FC:DB:FA:0C:0A:F3:17:40:67:C5:C8:6C:F7:FA:98:D3
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/iubzbfzb-gwK8xdAZ8XIbPf6mNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.88.0/22
45.143.188.0/23
185.249.255.0/24
185.252.112.0/22
IPv6:
2a04:b800::/29
2a0e:e7c0::/29
2a10:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:0a:5f:18:d9:df:e2:f4:84:90:5d:fa:6f:31:64:ba:a3:a9:
c7:ba:b5:1d:39:87:c6:13:b4:ac:c2:53:60:93:2b:f8:91:83:
aa:d8:7a:48:c8:13:0d:c8:30:7d:ae:d8:d0:d9:b0:e9:f8:58:
44:a8:74:6c:86:fa:24:3b:a6:25:d8:2f:3d:ec:19:5c:c8:f8:
4e:f9:a6:47:73:b1:3a:9a:23:82:1e:94:ad:e3:c2:15:bd:42:
df:59:fb:13:3c:d9:22:7a:4a:36:ef:1c:ee:bc:5d:d6:be:36:
a1:c0:b3:8d:ec:db:68:2a:2d:63:9c:a0:0f:a1:6a:28:0a:db:
43:19:c7:42:48:e9:72:86:d3:46:47:75:dd:67:ef:2a:01:ad:
c5:94:77:91:98:af:65:98:41:f1:55:19:bf:f6:b9:ca:a9:23:
e8:e3:bd:7f:f0:ce:f2:e0:da:f2:1c:c3:6d:4b:42:83:b2:30:
d9:d5:a8:f7:8a:31:37:92:9b:ba:4d:dc:a0:dd:d4:84:2c:91:
17:6f:e6:17:e9:18:de:16:3f:11:38:ba:c2:0a:ac:1e:e8:f2:
2b:73:94:b7:cc:44:9c:ea:34:6b:07:1c:4f:8c:fd:3a:1c:96:
c8:8c:d8:9e:15:e0:4d:6a:57:db:ec:22:af:50:d0:68:ed:1e:
94:25:8d:f4
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIEAs/+CDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OGIyMmVlYTRhNGEzYjgxNjU0YTIyN2VkYTk0ZTBlNzU5MzdiMDE1MB4XDTIyMDEw
MTA3NTQxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGFlNmYzNmRmY2Ri
ZmEwYzBhZjMxNzQwNjdjNWM4NmNmN2ZhOThkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANR9zYgl1d5mZWSeq/poQpn9gSbu3QcvtkXeTM53XvtE3sSy
a820mrmW6qWsIe1W8PLmBPJ8kiK/2BiOF0qxsHVnMOpAAW+JvGKaQJBisUOKMiQE
bZg+6jTzRG9qm9J0j8TSzwR39xRc3XrEn7hja2U6bEJRSnhDFPhBTZH5W1n6sMG0
KvWiCuOeETj4BVC8ypW8tUU1v+q5UoTSmh3rc8zO4Zb9hKqK4f+AAwKd+cxHqbz9
6KqAySGGP1FM7k/P/CHIn2oUw/nYg4YMRYLzTlUKraSOw1AkUSrp4SdqtJVM9j11
Jmsu2bj4AmzTer1nThKUUqOihfKVgBVjzFf4DQUCAwEAAaOCAjgwggI0MB0GA1Ud
DgQWBBSK5vNt/Nv6DArzF0Bnxchs9/qY0zAfBgNVHSMEGDAWgBRosi7qSko7gWVK
In7alODnWTewFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FMSXU2a3BLTzRGbFNpSi0ycFRnNTFrM3NCVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvNjljYmMwLWI2YzUtNGU2Ny1hNzNiLTJiNjVhN2E4YmU4Yy8x
L2l1YnpiZnpiLWd3Szh4ZEFaOFhJYlBmNm1OTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
NjljYmMwLWI2YzUtNGU2Ny1hNzNiLTJiNjVhN2E4YmU4Yy8xL2FMSXU2a3BLTzRG
bFNpSi0ycFRnNTFrM3NCVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBO
BggrBgEFBQcBBwEB/wQ/MD0wHgQCAAEwGAMEAgW3WAMEAS2PvAMEALn5/wMEArn8
cDAbBAIAAjAVAwUDKgS4AAMFAyoO58ADBQMqEKbAMA0GCSqGSIb3DQEBCwUAA4IB
AQB6Cl8Y2d/i9ISQXfpvMWS6o6nHurUdOYfGE7SswlNgkyv4kYOq2HpIyBMNyDB9
rtjQ2bDp+FhEqHRshvokO6Yl2C897BlcyPhO+aZHc7E6miOCHpSt48IVvULfWfsT
PNkieko27xzuvF3WvjahwLON7NtoKi1jnKAPoWooCttDGcdCSOlyhtNGR3XdZ+8q
Aa3FlHeRmK9lmEHxVRm/9rnKqSPo471/8M7y4NryHMNtS0KDsjDZ1aj3ijE3kpu6
Tdyg3dSELJEXb+YX6RjeFj8ROLrCCqwe6PIrc5S3zESc6jRrBxxPjP06HJbIjNie
FeBNalfb7CKvUNBo7R6UJY30
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:44 2024 by rpki-client on console-ams.rpki-client.org