Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/YxkkFgt74KhsAMR9dtDMmxQwe8E.roa
File: YxkkFgt74KhsAMR9dtDMmxQwe8E.roa (raw, json)
Hash identifier: IIsZFvYXGFkDDCc0BCKqXwsgytYm/0vn2sOAcrUf0Vg=
Subject key identifier: 63:19:24:16:0B:7B:E0:A8:6C:00:C4:7D:76:D0:CC:9B:14:30:7B:C1
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01857139B619CEBE5B8B2BACED664AA4B8C8
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/YxkkFgt74KhsAMR9dtDMmxQwe8E.roa
Signing time: Mon 02 Jan 2023 06:44:45 +0000
ROA not before: Mon 02 Jan 2023 06:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6718
IP address blocks: 91.208.75.0/24 maxlen: 24
193.32.28.0/24 maxlen: 24
128.0.34.0/24 maxlen: 24
128.0.33.0/24 maxlen: 24
128.0.36.0/24 maxlen: 24
91.239.230.0/24 maxlen: 24
185.36.252.0/24 maxlen: 24
5.154.224.0/24 maxlen: 24
2a05:1c04::/32 maxlen: 32
2a05:1c00::/32 maxlen: 32
2a05:1c02::/32 maxlen: 32
2a00:ece0::/32 maxlen: 32
2a05:1c03::/32 maxlen: 32
2a04:6c80::/48 maxlen: 48
2a05:1c01::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:b6:19:ce:be:5b:8b:2b:ac:ed:66:4a:a4:b8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 2 06:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=631924160b7be0a86c00c47d76d0cc9b14307bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:d7:d0:33:9a:bf:5e:1e:7c:e3:e7:02:f4:
eb:05:cc:23:39:9c:f0:09:fb:1c:87:39:42:c3:e8:
f4:fb:41:da:a2:3a:eb:20:36:21:e6:4c:98:95:c2:
de:2b:c8:5a:c2:92:4e:52:ef:50:24:27:bb:25:ec:
3d:a4:8e:c4:04:da:5c:fe:8b:14:e0:24:70:04:9a:
14:fb:f3:85:61:cd:9f:71:75:ed:d8:09:09:8c:84:
0d:ab:4c:3e:25:1a:97:8b:30:32:f4:91:10:6a:48:
73:7b:a6:3b:c4:36:64:b8:4e:f2:c0:32:c5:25:82:
b7:97:31:55:71:cc:ed:77:91:dd:0f:f9:5f:c6:62:
73:c0:69:62:90:4f:02:d3:8f:5a:a5:36:a7:c7:69:
31:ca:33:2a:e4:f3:a0:71:fc:27:08:1e:45:98:20:
0f:df:d3:c7:ca:88:2f:7a:7c:d5:2f:55:84:d8:e0:
0d:5a:b8:65:5c:f6:26:9a:9c:58:21:11:9b:74:00:
a2:7f:10:b9:03:26:30:96:43:9f:96:20:a2:8d:a2:
bd:77:53:d4:2e:78:56:db:78:cd:f9:a8:b2:cc:26:
f3:f3:f9:b1:95:66:73:cd:34:3e:41:cf:e3:6d:64:
84:57:90:e5:c5:07:a9:7d:62:16:f2:a4:fd:94:ca:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:19:24:16:0B:7B:E0:A8:6C:00:C4:7D:76:D0:CC:9B:14:30:7B:C1
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/YxkkFgt74KhsAMR9dtDMmxQwe8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.224.0/24
91.208.75.0/24
91.239.230.0/24
128.0.33.0-128.0.34.255
128.0.36.0/24
185.36.252.0/24
193.32.28.0/24
IPv6:
2a00:ece0::/32
2a04:6c80::/48
2a05:1c00::-2a05:1c04:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:39:80:43:a0:9b:ba:db:df:08:b6:9d:aa:71:c4:bf:39:02:
fd:17:7d:96:ba:1b:d5:d9:31:f0:49:d0:ce:40:b7:8b:fa:95:
b9:77:33:18:2d:d4:0b:e7:99:17:fe:70:bf:35:36:f9:50:e0:
52:dd:38:4f:03:67:99:31:d4:98:8c:bb:78:b1:9d:1c:94:5c:
04:f8:1f:8e:08:5b:ec:df:d5:97:6c:f2:f3:93:5b:cd:fe:9b:
b9:f6:9c:82:7b:05:d8:28:c7:5e:06:f4:89:fd:72:30:f3:18:
3b:b9:74:40:4e:ea:15:3c:1c:9c:e6:12:16:25:4c:97:6b:23:
eb:6e:8e:b9:5b:a3:e0:29:69:1f:6c:79:37:fc:b2:88:af:2e:
38:a6:48:5c:16:9c:72:db:a1:67:42:28:9d:76:5e:a2:71:0f:
1e:5d:61:9c:42:5e:ae:cb:59:7d:49:20:f6:0c:9a:6f:9b:e4:
51:fc:1e:c4:a6:94:82:a9:1c:71:ff:d8:a9:43:96:2d:d5:ee:
55:96:49:51:be:7d:2d:77:3a:a1:e2:ca:7d:68:a9:61:7b:fc:
94:e2:50:74:10:57:43:77:90:ba:b2:bc:f1:38:2d:9c:ad:41:
08:15:d0:92:6b:89:90:61:5a:e9:cc:41:18:77:8b:f2:d6:2b:
65:ed:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org