Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/XSfpX0W3DlnlYf9uxoxbVukUKJM.roa
File: XSfpX0W3DlnlYf9uxoxbVukUKJM.roa (raw, json)
Hash identifier: ywY8gBFPI+xHmKT8X0CwC1kiikv9E7RJyBrr6IhNLBQ=
Subject key identifier: 5D:27:E9:5F:45:B7:0E:59:E5:61:FF:6E:C6:8C:5B:56:E9:14:28:93
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0567A8C7
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/XSfpX0W3DlnlYf9uxoxbVukUKJM.roa
Signing time: Wed 29 Jun 2022 08:12:02 +0000
ROA not before: Wed 29 Jun 2022 08:12:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200740
IP address blocks: 185.103.252.0/24 maxlen: 24
185.117.116.0/24 maxlen: 24
185.103.253.0/24 maxlen: 24
185.103.252.0/23 maxlen: 23
45.9.72.0/24 maxlen: 24
185.103.254.0/24 maxlen: 24
185.117.119.0/24 maxlen: 24
185.103.255.0/24 maxlen: 24
185.103.254.0/23 maxlen: 23
185.40.7.0/24 maxlen: 24
194.36.178.0/23 maxlen: 23
185.94.164.0/24 maxlen: 24
185.200.190.0/24 maxlen: 24
185.94.164.0/23 maxlen: 23
185.94.165.0/24 maxlen: 24
91.217.76.0/24 maxlen: 24
46.17.105.0/24 maxlen: 24
2a0c:f640::/31 maxlen: 31
2a04:5200:68::/48 maxlen: 48
2a0c:f646::/31 maxlen: 31
2a0c:f642::/31 maxlen: 31
2a0d:2cc4::/31 maxlen: 31
2a04:5201:2::/48 maxlen: 48
2a04:5201:7::/48 maxlen: 48
2a04:5201:8018::/48 maxlen: 48
2a0c:f644::/31 maxlen: 31
2a04:5201:4::/48 maxlen: 48
2a0d:2cc2::/31 maxlen: 31
2a04:5201:6::/48 maxlen: 48
2a0d:2cc0::/31 maxlen: 31
2a0d:2cc6::/31 maxlen: 31
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90679495 (0x567a8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 29 08:12:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d27e95f45b70e59e561ff6ec68c5b56e9142893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:2a:8f:8e:7c:2d:e0:53:53:0f:70:cd:d9:
37:da:f5:a4:fe:eb:b5:b8:d5:ff:cc:22:c5:72:82:
34:06:a8:02:15:57:15:52:85:7e:bd:4a:56:4b:14:
30:42:d4:4a:5a:da:7f:da:63:45:e8:cd:ae:fd:f5:
68:d9:3c:6e:dd:6d:99:39:8e:51:25:aa:da:12:3d:
94:06:c1:77:ef:43:8b:59:97:f5:7b:4c:99:1c:84:
8e:0b:0a:24:cd:bf:c4:0a:e8:d9:78:95:e7:0e:89:
92:a6:1b:a5:78:34:49:ac:88:e0:e3:43:58:89:09:
27:9a:c1:3a:a3:99:07:21:e6:ef:17:02:b9:50:74:
ec:5d:97:a2:af:5f:09:23:b0:2a:73:9b:95:d9:2b:
f7:58:2c:24:51:ff:6d:47:19:5a:26:ef:d7:8c:cb:
16:4c:66:37:29:f6:1f:bf:e7:bc:51:fa:f8:14:e0:
d5:40:b5:88:4b:f7:72:e9:0f:e0:18:d8:47:53:e0:
cc:c8:8c:73:a6:2d:22:11:e0:27:60:4c:06:72:a6:
47:f4:2b:7d:51:3f:6d:b9:45:68:21:b4:a1:a8:33:
31:d4:c7:30:34:a6:42:c9:64:c8:6d:13:85:af:f5:
e7:d9:f7:22:bd:c5:3a:3e:76:6f:9c:94:8d:9d:8f:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:E9:5F:45:B7:0E:59:E5:61:FF:6E:C6:8C:5B:56:E9:14:28:93
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/XSfpX0W3DlnlYf9uxoxbVukUKJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.72.0/24
46.17.105.0/24
91.217.76.0/24
185.40.7.0/24
185.94.164.0/23
185.103.252.0/22
185.117.116.0/24
185.117.119.0/24
185.200.190.0/24
194.36.178.0/23
IPv6:
2a04:5200:68::/48
2a04:5201:2::/48
2a04:5201:4::/48
2a04:5201:6::/47
2a04:5201:8018::/48
2a0c:f640::/29
2a0d:2cc0::/29
Signature Algorithm: sha256WithRSAEncryption
7b:6d:2e:d6:ce:9a:bd:08:49:ff:f3:b8:c2:3d:7e:25:db:db:
16:90:5a:1d:e6:aa:4e:da:7e:b2:64:6e:7e:30:36:8a:e1:4d:
b0:ff:04:93:2b:7f:c5:19:71:58:b6:c8:36:e2:1d:e3:13:ab:
9d:b9:dc:96:63:1e:f3:b6:78:ea:12:94:91:fc:c4:cc:82:23:
9d:a7:80:ea:a3:e7:eb:b1:c2:c6:69:3a:6d:de:77:26:6d:2b:
9d:d6:91:97:ba:de:49:0f:02:f1:1a:fc:50:0a:5f:c1:b8:8c:
fb:b1:8c:a8:60:fd:88:58:2d:56:f3:c4:7c:84:9d:52:0e:e3:
58:81:a6:49:1d:ff:25:e0:b5:52:17:93:88:eb:b0:8a:76:f9:
35:42:0a:1e:28:af:2d:a3:4b:bd:36:ac:26:99:6d:8a:6d:34:
64:ce:23:bc:78:ef:49:db:10:70:fa:ed:f1:d2:ab:ca:5d:d5:
d5:30:16:25:79:dc:5a:d0:81:d3:6a:02:cc:74:8b:ba:c2:95:
f6:e9:ab:37:6f:49:ff:61:c0:9d:dd:7b:54:2f:8a:89:0a:79:
1f:d1:9b:f9:0f:10:cd:b0:6d:0d:1e:cd:e6:0a:c1:5c:fe:2b:
3b:d9:a2:e1:6d:8a:04:31:6d:05:f2:72:66:3c:62:fc:c6:5e:
e0:f2:ca:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org