Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/uYAffn57T6sF-Yn1HOxxX4IR7nE.roa
File: uYAffn57T6sF-Yn1HOxxX4IR7nE.roa (raw, json)
Hash identifier: gyCVZoB8d4IlcLe59atKOd6fbacTvBB2VKl/KTKmINw=
Subject key identifier: B9:80:1F:7E:7E:7B:4F:AB:05:F9:89:F5:1C:EC:71:5F:82:11:EE:71
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0182113CC153C3931638826C6FA4AE924D4D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/uYAffn57T6sF-Yn1HOxxX4IR7nE.roa
Signing time: Mon 18 Jul 2022 12:16:10 +0000
ROA not before: Mon 18 Jul 2022 12:16:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204084
IP address blocks: 185.102.137.0/24 maxlen: 24
2a0f:7c80::/29 maxlen: 29
2a0b:e9c0::/29 maxlen: 29
2a0f:3380::/29 maxlen: 29
2a03:f7c0::/29 maxlen: 29
2a0c:f640::/29 maxlen: 29
2a0f:c780::/29 maxlen: 29
2a0f:5580::/29 maxlen: 29
2a0c:74c0::/29 maxlen: 29
2a0c:5d00::/29 maxlen: 29
2a0f:a500::/29 maxlen: 29
2a0f:7100::/29 maxlen: 29
2a07:4a00::/29 maxlen: 29
2a0b:9800::/29 maxlen: 29
2a0b:8040::/29 maxlen: 29
2a0f:2380::/29 maxlen: 29
2a0b:a300::/29 maxlen: 29
2a0f:a700::/29 maxlen: 29
2a0d:88c0::/29 maxlen: 29
2a0f:7300::/29 maxlen: 29
2a0b:d900::/29 maxlen: 29
2a0c:5c0::/29 maxlen: 29
2a0f:4580::/29 maxlen: 29
2a0c:7440::/29 maxlen: 29
2a0f:1180::/29 maxlen: 29
2a0f:4680::/29 maxlen: 29
2a0c:7540::/29 maxlen: 29
2a0d:2cc0::/29 maxlen: 29
2a06:ddc0::/29 maxlen: 29
2a0c:65c0::/29 maxlen: 29
2a0c:6980::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:3c:c1:53:c3:93:16:38:82:6c:6f:a4:ae:92:4d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 18 12:16:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9801f7e7e7b4fab05f989f51cec715f8211ee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:c9:3f:a3:8f:e5:b7:b4:b9:ab:00:6f:d2:
eb:bc:59:bd:94:c6:4d:52:78:18:5a:60:66:c3:74:
ca:e1:4d:08:bb:0c:a4:7a:01:9d:18:29:d5:81:0d:
f6:33:26:56:28:46:97:0c:45:9e:65:ea:6a:10:72:
0a:a4:ac:fe:41:04:79:b0:cb:c2:31:45:4c:0f:a4:
b1:d7:fd:7d:98:ee:65:e7:ff:dc:71:25:e0:cb:f5:
3d:53:f3:2a:90:47:0f:61:12:5b:13:58:70:66:62:
8a:ee:52:4a:a1:fb:ff:07:c5:54:4d:b5:37:3d:83:
98:52:7f:62:31:ee:ad:4b:c7:9a:a4:75:fc:3e:06:
b6:11:c5:1d:c0:80:02:44:48:cb:2e:f5:09:f1:62:
84:b1:99:01:36:3b:a7:d0:c3:45:8f:4c:9e:78:fd:
8f:90:03:74:72:53:fa:86:99:64:8f:cd:6a:e9:fc:
a0:64:82:18:1c:c9:59:a1:bb:fd:13:06:22:22:ee:
65:61:10:20:66:03:b9:3d:19:6f:e7:4d:25:95:a4:
c2:27:f4:65:b2:1d:70:27:ee:c7:c8:96:8c:d7:99:
29:46:e2:05:eb:db:2b:d0:4d:c6:a7:35:16:01:a7:
93:e9:1a:68:12:b4:91:29:e6:95:34:cc:9f:11:c7:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:80:1F:7E:7E:7B:4F:AB:05:F9:89:F5:1C:EC:71:5F:82:11:EE:71
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/uYAffn57T6sF-Yn1HOxxX4IR7nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.137.0/24
IPv6:
2a03:f7c0::/29
2a06:ddc0::/29
2a07:4a00::/29
2a0b:8040::/29
2a0b:9800::/29
2a0b:a300::/29
2a0b:d900::/29
2a0b:e9c0::/29
2a0c:5c0::/29
2a0c:5d00::/29
2a0c:65c0::/29
2a0c:6980::/29
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0c:f640::/29
2a0d:2cc0::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:4680::/29
2a0f:5580::/29
2a0f:7100::/29
2a0f:7300::/29
2a0f:7c80::/29
2a0f:a500::/29
2a0f:a700::/29
2a0f:c780::/29
Signature Algorithm: sha256WithRSAEncryption
16:3a:a9:f4:9d:f7:00:d1:77:f4:87:60:e3:9e:23:b0:32:14:
ca:cf:b9:88:cc:66:b4:da:42:66:d2:bb:3a:c4:c7:5d:2e:29:
4f:d4:1e:4d:dc:48:c0:20:00:b6:b2:55:63:7e:52:9d:bc:92:
b4:90:b0:30:d7:d6:7b:be:80:cf:e9:ba:a7:c5:54:2b:46:78:
77:39:31:0c:2c:89:0d:e2:66:4f:35:d1:e6:fb:90:ef:79:e6:
4b:d8:3b:17:16:c0:5b:22:01:bc:eb:89:00:a3:cc:27:56:e6:
48:75:9f:b6:15:95:e8:36:71:ba:14:91:8c:d0:f9:17:59:8d:
45:cd:f2:34:a2:9c:17:14:e7:28:64:7c:a8:03:30:3d:c9:d7:
41:fd:f8:82:7a:fb:df:ef:45:1d:1a:3a:9f:8d:b0:cd:ba:1c:
73:06:84:f3:91:51:42:71:54:52:da:a1:08:e8:41:10:a4:ac:
65:e4:10:4e:92:4f:d5:4c:29:f1:46:46:02:0e:b2:58:77:90:
bb:5b:5b:eb:2c:82:93:18:92:73:ff:69:34:10:fc:7e:7b:94:
67:90:05:c5:a3:66:92:77:bb:f5:f9:ae:6f:a6:84:74:aa:b1:
f3:eb:5b:1b:0e:0b:1c:60:b4:1f:c3:77:f0:9a:cf:94:02:9c:
24:d2:f9:38
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISAYIRPMFTw5MWOIJsb6Sukk1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjIwNzE4MTIxNjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTgwMWY3ZTdlN2I0ZmFiMDVmOTg5ZjUxY2VjNzE1ZjgyMTFlZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gLJP6OP5be0uasAb9LrvFm9lMZN
UngYWmBmw3TK4U0IuwykegGdGCnVgQ32MyZWKEaXDEWeZepqEHIKpKz+QQR5sMvC
MUVMD6Sx1/19mO5l5//ccSXgy/U9U/MqkEcPYRJbE1hwZmKK7lJKofv/B8VUTbU3
PYOYUn9iMe6tS8eapHX8Pga2EcUdwIACREjLLvUJ8WKEsZkBNjun0MNFj0yeeP2P
kAN0clP6hplkj81q6fygZIIYHMlZobv9EwYiIu5lYRAgZgO5PRlv500llaTCJ/Rl
sh1wJ+7HyJaM15kpRuIF69sr0E3GpzUWAaeT6RpoErSRKeaVNMyfEccXRQIDAQAB
o4IC6DCCAuQwHQYDVR0OBBYEFLmAH35+e0+rBfmJ9RzscV+CEe5xMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvdVlBZmZuNTdUNnNGLVluMUhPeHhYNElSN25FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jAMBAIAATAGAwQAuWaJ
MIHZBAIAAjCB0gMFAyoD98ADBQMqBt3AAwUDKgdKAAMFAyoLgEADBQMqC5gAAwUD
KgujAAMFAyoL2QADBQMqC+nAAwUDKgwFwAMFAyoMXQADBQMqDGXAAwUDKgxpgAMF
AyoMdEADBQMqDHTAAwUDKgx1QAMFAyoM9kADBQMqDSzAAwUDKg2IwAMFAyoPEYAD
BQMqDyOAAwUDKg8zgAMFAyoPRYADBQMqD0aAAwUDKg9VgAMFAyoPcQADBQMqD3MA
AwUDKg98gAMFAyoPpQADBQMqD6cAAwUDKg/HgDANBgkqhkiG9w0BAQsFAAOCAQEA
Fjqp9J33ANF39Idg454jsDIUys+5iMxmtNpCZtK7OsTHXS4pT9QeTdxIwCAAtrJV
Y35SnbyStJCwMNfWe76Az+m6p8VUK0Z4dzkxDCyJDeJmTzXR5vuQ73nmS9g7FxbA
WyIBvOuJAKPMJ1bmSHWfthWV6DZxuhSRjND5F1mNRc3yNKKcFxTnKGR8qAMwPcnX
Qf34gnr73+9FHRo6n42wzboccwaE85FRQnFUUtqhCOhBEKSsZeQQTpJP1Uwp8UZG
Ag6yWHeQu1tb6yyCkxiSc/9pNBD8fnuUZ5AFxaNmkne79fmub6aEdKqx8+tbGw4L
HGC0H8N38JrPlAKcJNL5OA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org