Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/liyvmblzWyuOlldpU55ZCr3ML7E.roa
File: liyvmblzWyuOlldpU55ZCr3ML7E.roa (raw, json)
Hash identifier: 1IBJBumY1P65ihnAWxSIVk2pfMbzseB1DWPY5HickIg=
Subject key identifier: 96:2C:AF:99:B9:73:5B:2B:8E:96:57:69:53:9E:59:0A:BD:CC:2F:B1
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 018C25BDAE48C96F865344D3D65F7B2AAC74
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/liyvmblzWyuOlldpU55ZCr3ML7E.roa
Signing time: Fri 01 Dec 2023 14:17:16 +0000
ROA not before: Fri 01 Dec 2023 14:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50247
IP address blocks: 91.218.240.0/24 maxlen: 24
185.178.236.0/22 maxlen: 22
109.196.80.0/20 maxlen: 20
91.224.143.0/24 maxlen: 24
91.224.142.0/23 maxlen: 23
91.224.142.0/24 maxlen: 24
45.131.34.0/24 maxlen: 24
45.131.33.0/24 maxlen: 24
109.95.88.0/21 maxlen: 21
2a0a:7080::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:bd:ae:48:c9:6f:86:53:44:d3:d6:5f:7b:2a:ac:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Dec 1 14:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=962caf99b9735b2b8e965769539e590abdcc2fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:9d:fb:bc:b7:41:d3:8c:0e:32:d5:ce:45:
69:97:7a:10:1a:c6:48:7a:18:d8:91:06:9b:d1:ed:
d0:4c:89:f3:44:e5:c4:bc:36:57:42:88:8e:f9:4b:
33:af:e3:38:10:96:13:53:c3:92:23:cb:a2:05:38:
8b:90:28:4d:c2:41:b2:23:35:1b:46:43:55:ee:9b:
3e:e8:c9:a4:88:de:65:17:25:19:f8:0b:68:94:b0:
6b:7e:5e:9c:6c:d2:d7:18:21:8c:06:62:a8:5a:ff:
4d:39:d8:de:8e:ba:91:c8:dc:09:d3:f9:94:18:d9:
8e:23:bf:c8:e3:95:6b:f3:64:88:dd:0c:a5:dd:53:
9b:8c:52:26:4e:36:d3:42:9d:98:ea:71:f7:48:37:
b7:ab:68:bd:88:a1:73:2b:64:45:1c:93:5b:d3:30:
27:48:b9:97:93:00:49:a2:6b:d8:dc:8d:62:4a:ae:
93:4d:19:7c:0f:de:66:46:1e:d4:86:65:f5:7a:9e:
04:45:78:9b:dd:23:95:26:87:1d:11:51:4b:49:93:
34:2a:f4:8d:e5:f5:93:0d:0a:55:8c:15:99:b8:ed:
90:32:82:c0:23:36:ec:11:96:ee:7f:99:fb:b5:50:
1e:7e:2f:12:a1:6f:55:39:35:5d:4a:0c:99:d3:4d:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:AF:99:B9:73:5B:2B:8E:96:57:69:53:9E:59:0A:BD:CC:2F:B1
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/liyvmblzWyuOlldpU55ZCr3ML7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.33.0-45.131.34.255
91.218.240.0/24
91.224.142.0/23
109.95.88.0/21
109.196.80.0/20
185.178.236.0/22
IPv6:
2a0a:7080::/29
Signature Algorithm: sha256WithRSAEncryption
10:f0:7e:dc:c9:26:b6:62:70:b8:de:56:cc:50:8b:08:24:79:
e7:f0:61:54:c2:48:5b:f4:b1:6e:fc:94:d9:b6:23:10:08:29:
d7:7e:d7:38:c5:e8:91:8e:a7:f8:ce:74:d5:75:61:1e:c6:7e:
ba:dd:d8:91:5b:8d:53:14:fd:15:42:5c:69:92:bc:8c:91:da:
86:da:db:12:66:8a:e8:a8:8f:23:26:c4:19:4f:86:15:c6:3d:
6b:f5:3d:30:dd:52:54:e6:18:ea:08:42:be:08:61:c9:bd:3d:
e6:c6:79:90:5a:32:3d:9e:45:f4:17:cb:e4:ca:61:14:27:01:
e0:9d:90:9c:20:e0:d5:e0:e1:63:ff:3f:6e:3e:4d:90:f4:c6:
e3:a9:8a:94:4f:8f:40:09:b4:86:25:cf:55:4d:e8:b8:37:ab:
1b:ff:59:3e:48:01:cd:d3:a6:5d:1b:c4:3a:35:02:6c:3f:c7:
2d:3e:a6:62:d5:68:36:8b:71:ec:4a:83:d5:4e:03:64:1d:9d:
46:97:04:e3:1b:b8:c2:ea:ac:17:9e:59:11:b5:a1:63:21:f3:
e4:6b:17:5d:5d:65:49:9b:17:82:21:57:e7:4f:95:96:96:4e:
28:35:48:de:23:7f:bb:68:2a:cb:58:e2:e1:11:14:d3:44:04:
f4:df:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:16 2024 by rpki-client on console-fra.rpki-client.org