Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/4hVqS_W5p175pxuSbFa6pFjSIos.roa
File: 4hVqS_W5p175pxuSbFa6pFjSIos.roa (raw, json)
Hash identifier: R+tP/LSGKfVUP3veDtE16uRRH6JmV6p/GhhRGqma9CM=
Subject key identifier: E2:15:6A:4B:F5:B9:A7:5E:F9:A7:1B:92:6C:56:BA:A4:58:D2:22:8B
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 018AB7225E22D3BB9BB31CAB2CD266679C14
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/4hVqS_W5p175pxuSbFa6pFjSIos.roa
Signing time: Thu 21 Sep 2023 09:46:37 +0000
ROA not before: Thu 21 Sep 2023 09:46:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6718
IP address blocks: 91.208.75.0/24 maxlen: 24
195.206.164.0/24 maxlen: 24
193.93.142.0/23 maxlen: 23
128.0.34.0/24 maxlen: 24
128.0.33.0/24 maxlen: 24
128.0.36.0/24 maxlen: 24
91.239.230.0/24 maxlen: 24
185.36.252.0/24 maxlen: 24
5.154.224.0/24 maxlen: 24
5.154.171.0/24 maxlen: 24
5.154.186.0/24 maxlen: 24
2a05:1c04::/32 maxlen: 32
2a05:1c00::/32 maxlen: 32
2a05:1c02::/32 maxlen: 32
2a00:ece0::/32 maxlen: 32
2a05:1c03::/32 maxlen: 32
2a04:6c80::/48 maxlen: 48
2a05:1c01::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:22:5e:22:d3:bb:9b:b3:1c:ab:2c:d2:66:67:9c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Sep 21 09:46:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2156a4bf5b9a75ef9a71b926c56baa458d2228b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:75:92:7a:c0:31:b1:e4:f1:31:9f:5e:28:43:
13:7a:ed:3a:4d:f8:f8:b9:ca:ef:e3:f7:d7:80:fe:
ee:57:cd:b4:6f:f2:07:82:93:ac:ad:e4:9b:f5:6b:
b2:e1:b5:54:ae:23:e3:9b:e1:94:5f:4a:62:7c:ab:
5a:b5:78:a1:67:a1:cc:60:31:d2:71:83:17:8b:1e:
7b:e7:c0:fe:67:52:a4:7a:df:fe:99:8c:1a:60:f7:
6c:24:7a:da:51:26:10:9b:d3:d6:35:97:96:d8:d7:
82:5b:dc:18:1d:1d:cf:98:1c:93:0a:25:c8:83:d3:
45:94:cf:d1:6e:57:49:2a:42:a8:bf:2f:83:4a:ad:
67:f9:38:bb:92:a6:d1:c2:8f:58:49:3b:3b:52:04:
85:76:5e:89:f3:e2:28:b9:bd:06:3c:3b:8e:2b:05:
a5:db:b2:98:9b:05:64:92:dd:1b:cd:fa:f2:1f:06:
03:62:5b:51:88:fe:5e:71:77:10:6b:66:f8:c0:9c:
7e:57:0b:9a:fc:11:2d:d2:95:f1:65:5c:08:4b:8a:
65:b2:da:91:54:5c:c8:72:ad:87:47:a3:4d:2a:3d:
f1:44:af:3a:16:0a:b9:d2:1b:7e:8c:b1:58:b3:76:
2c:46:58:58:6a:3c:85:14:40:fb:3f:a4:3e:13:a2:
c8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:15:6A:4B:F5:B9:A7:5E:F9:A7:1B:92:6C:56:BA:A4:58:D2:22:8B
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/4hVqS_W5p175pxuSbFa6pFjSIos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.171.0/24
5.154.186.0/24
5.154.224.0/24
91.208.75.0/24
91.239.230.0/24
128.0.33.0-128.0.34.255
128.0.36.0/24
185.36.252.0/24
193.93.142.0/23
195.206.164.0/24
IPv6:
2a00:ece0::/32
2a04:6c80::/48
2a05:1c00::-2a05:1c04:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
16:5b:c2:af:52:18:0c:19:e3:87:af:fe:1f:1b:c8:f5:b3:bd:
5e:a3:bd:ac:ea:83:3d:27:12:2d:6b:d5:25:4b:6a:98:6c:38:
3e:25:d0:8d:76:6f:92:5e:0d:10:c1:94:0c:1f:01:76:96:42:
f6:5d:32:ce:4f:1d:70:32:6b:fc:4e:5c:9c:5e:78:93:88:61:
0b:c1:b7:5b:df:ca:91:3a:c9:4d:93:0c:a6:1e:ed:1d:6f:0f:
63:c3:8c:3f:84:c5:cd:bb:54:4d:56:75:33:0c:d8:bc:db:ff:
e9:20:2e:29:37:2e:80:8c:a8:2d:58:3a:cb:df:e1:96:15:da:
24:16:6b:f5:44:1f:74:e4:1c:41:53:b8:9f:84:d1:5c:ed:bf:
d7:f0:e9:b4:99:52:6c:5d:7d:55:02:74:1b:4d:02:fb:43:61:
ee:39:8c:11:bd:2e:7b:7a:8a:c9:bb:2b:da:7e:37:b2:45:2e:
dd:94:c2:67:dd:23:9d:15:aa:d8:4e:9d:10:62:51:fe:2e:9e:
1b:08:1f:5b:8c:1a:27:33:e8:b2:b1:59:ab:67:6e:51:f2:cd:
ba:cf:ad:e3:7c:98:f6:bf:b3:29:07:00:ca:a6:5f:f4:96:4f:
9a:2d:bd:36:17:36:3d:64:7f:2d:1c:16:98:c4:24:2b:d1:1d:
ad:b9:a0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org