Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/uamdBbyM71rEmtrQZ0RPKAw_yLk.roa
File: uamdBbyM71rEmtrQZ0RPKAw_yLk.roa (raw, json)
Hash identifier: ozd+zv0BPrnB014HucuLCuoA3jijKrtDfPpYIKYum3I=
Subject key identifier: B9:A9:9D:05:BC:8C:EF:5A:C4:9A:DA:D0:67:44:4F:28:0C:3F:C8:B9
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 018CC6B8AD7F191292BCA4C7E4F0EE60729C
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/uamdBbyM71rEmtrQZ0RPKAw_yLk.roa
Signing time: Mon 01 Jan 2024 20:30:40 +0000
ROA not before: Mon 01 Jan 2024 20:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60175
IP address blocks: 89.63.0.0/20 maxlen: 20
195.4.128.0/19 maxlen: 19
195.4.145.0/24 maxlen: 24
195.4.160.0/20 maxlen: 20
195.4.184.0/21 maxlen: 21
195.4.192.0/20 maxlen: 20
195.4.199.0/24 maxlen: 24
195.4.208.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ad:7f:19:12:92:bc:a4:c7:e4:f0:ee:60:72:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Jan 1 20:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9a99d05bc8cef5ac49adad067444f280c3fc8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:2f:01:9f:2c:3d:03:42:03:43:60:22:73:
c5:58:76:b4:eb:f0:07:6e:7d:0f:db:c7:69:83:bf:
1c:a9:93:ac:94:2f:02:0c:b2:41:41:11:aa:b2:98:
98:14:be:5b:f8:53:a7:09:e9:01:81:d9:8b:15:f2:
9b:1b:f0:37:86:40:72:ab:26:62:40:84:b0:7f:a1:
ec:27:6f:73:ce:5c:1b:a8:6e:4f:11:06:45:40:e2:
05:27:ba:8f:7a:d1:85:43:4c:2c:95:5f:2f:41:f3:
a6:f6:37:5f:85:38:aa:72:bf:d3:6b:e9:ee:6d:d8:
db:2d:ac:40:92:c3:84:0d:ad:eb:aa:ce:99:9e:1a:
bb:82:e7:54:3d:8b:1f:33:75:e3:4b:cd:d3:3c:76:
e1:a4:09:1b:a4:3e:6d:f9:23:1e:3b:80:8d:be:79:
3f:73:94:e0:44:32:e9:17:0d:0e:75:ce:07:d9:15:
4e:57:3e:e0:d0:f4:e6:19:43:8e:ea:ed:da:e1:89:
01:28:16:b9:64:78:b0:29:cf:3a:5e:85:01:24:50:
0a:b9:e2:34:52:50:90:49:6c:96:5a:f7:8d:9f:83:
94:4c:d4:c1:69:79:c1:a0:88:6c:26:a8:a2:8a:39:
0a:96:36:0e:8f:86:c9:f2:0d:fe:a2:e5:22:ba:cd:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A9:9D:05:BC:8C:EF:5A:C4:9A:DA:D0:67:44:4F:28:0C:3F:C8:B9
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/uamdBbyM71rEmtrQZ0RPKAw_yLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.63.0.0/20
195.4.128.0-195.4.175.255
195.4.184.0-195.4.215.255
Signature Algorithm: sha256WithRSAEncryption
94:25:6f:7d:3c:4c:3c:23:63:bd:bc:72:da:c2:86:16:32:03:
fa:4b:c2:d9:9b:f5:75:f8:78:ea:c5:f6:55:2b:1c:91:28:92:
f5:a5:b5:2f:5b:29:69:a6:f0:d7:3a:58:91:50:0a:d1:20:b5:
7f:c2:22:60:ec:65:4a:45:fa:ec:22:fa:0d:21:bf:76:42:69:
a9:76:a2:21:11:e8:d5:f9:f2:bb:2b:7a:75:dc:8c:46:d0:be:
c4:da:b8:86:10:8d:f6:ca:1e:7d:1a:a5:c3:bf:57:cd:2d:b9:
d9:32:30:50:10:f5:41:eb:21:bd:ee:5b:df:f8:41:ee:75:2e:
93:38:7a:a6:d5:ca:b4:58:ef:e1:a3:c7:ed:34:22:46:1c:40:
11:b4:44:20:dc:bf:92:c6:73:be:56:12:ab:3a:3e:46:c0:bc:
55:1a:7f:d9:34:09:d4:43:6f:0f:d0:4e:64:4d:11:da:fc:d9:
0f:e7:0a:e1:d5:5d:e3:f7:f1:d4:2e:28:a4:7f:4e:a7:d6:c7:
49:5b:e7:94:5f:49:a7:a5:e4:b4:d1:64:0c:3d:67:2b:0c:8d:
59:5d:20:1d:6b:c9:20:c5:7b:90:29:ee:31:13:3e:dc:b8:f9:
73:1e:bc:db:5c:ee:86:97:6e:df:7d:ec:bb:9f:47:21:cb:c3:
6d:31:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 10:43:01 2024 by rpki-client on console-ams.rpki-client.org