Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/IqielIET-Udpf5lv0rvRWa1Rkco.roa
File: IqielIET-Udpf5lv0rvRWa1Rkco.roa (raw, json)
Hash identifier: GgrGb7Ienwp/lNeqqiCQgdIyHuxOnMyW/y0Kou7bSxQ=
Subject key identifier: 22:A8:9E:94:81:13:F9:47:69:7F:99:6F:D2:BB:D1:59:AD:51:91:CA
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0187B43C46E1102550D688527FECDD6E70A6
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/IqielIET-Udpf5lv0rvRWa1Rkco.roa
Signing time: Mon 24 Apr 2023 17:07:41 +0000
ROA not before: Mon 24 Apr 2023 17:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 188.240.83.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
84.234.16.0/20 maxlen: 24
62.112.0.0/21 maxlen: 24
85.204.160.0/22 maxlen: 24
93.113.184.0/21 maxlen: 24
194.88.112.0/20 maxlen: 24
91.232.136.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:3c:46:e1:10:25:50:d6:88:52:7f:ec:dd:6e:70:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 24 17:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22a89e948113f947697f996fd2bbd159ad5191ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:67:e7:65:cf:08:08:59:1b:1c:55:45:33:
9d:47:83:99:e4:3e:99:f1:86:33:35:89:7a:ae:e1:
b2:c3:7e:05:23:13:b7:97:60:6c:38:04:9a:3f:60:
be:c1:a6:2c:2e:a0:40:f4:44:2c:07:70:11:a1:5e:
be:eb:de:3d:3c:3d:53:d3:78:39:0c:39:f0:bd:9c:
5e:35:76:8f:bb:19:5d:d3:12:dd:62:97:f1:05:f2:
79:b0:4f:91:e4:7b:77:06:2f:ff:3f:b6:5d:5e:c3:
7f:53:50:ca:41:b5:15:25:7e:5e:b6:df:ed:41:eb:
e0:28:9b:48:94:de:84:a7:0c:a5:36:62:47:db:d8:
f8:7a:87:ff:ec:29:6a:0b:54:3e:f0:23:f0:fe:07:
d6:b6:ea:a5:70:79:5f:e8:4b:0f:e8:86:e8:00:3f:
e4:4c:4a:e0:4d:2b:fc:90:a5:7f:71:44:cc:02:9a:
16:bd:cc:de:95:2f:b6:11:23:66:56:47:db:b9:51:
eb:27:4e:65:0c:2a:b2:de:4e:78:95:31:27:52:69:
b6:bd:af:7c:0d:2d:e3:82:83:93:d3:98:8d:60:a5:
60:5b:6f:d4:08:c2:41:ee:91:44:bd:fd:1b:aa:31:
82:d1:4f:ab:01:e8:52:90:43:ba:8e:4b:6c:b9:9b:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A8:9E:94:81:13:F9:47:69:7F:99:6F:D2:BB:D1:59:AD:51:91:CA
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/IqielIET-Udpf5lv0rvRWa1Rkco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
84.234.16.0/20
85.204.160.0/22
91.232.136.0/22
93.113.184.0/21
188.240.83.0/24
194.88.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:7a:4e:ed:bf:a8:ce:86:d3:7b:cf:61:6a:3b:79:8d:6f:1d:
ea:f1:e2:71:e7:6a:96:e4:cc:89:49:62:7d:a4:86:54:a7:25:
75:43:bd:6b:c4:21:c8:eb:05:16:2f:4e:51:e8:4b:32:75:c7:
2f:65:87:a4:12:02:f7:95:58:0e:cd:03:90:99:47:ef:f2:6c:
39:31:ad:20:55:42:df:df:0e:2f:43:84:9e:83:87:a8:5a:37:
a2:5b:74:ad:97:89:a5:f4:8a:f3:5e:5d:12:50:2b:08:78:2c:
8b:88:f9:ee:77:81:b6:40:9c:50:91:d3:9c:6f:23:34:8a:cb:
e8:f2:d2:18:d2:dd:7a:20:87:a0:54:41:e8:3d:25:57:87:71:
33:73:9f:44:23:dc:e9:90:8a:9f:31:f3:80:52:29:96:8d:7a:
48:2c:59:1a:9d:c7:35:c5:f9:72:55:e5:cc:75:c3:00:5e:83:
31:84:14:ca:4d:d1:4c:49:d9:a4:27:ec:ca:ed:11:60:0e:f2:
5c:93:79:f3:bd:3c:07:bb:bc:aa:d8:0b:77:76:e0:4d:6e:05:
ff:78:5c:2e:f5:b7:f7:ea:75:dc:7d:ba:6d:13:02:ea:69:97:
63:51:91:a0:21:0e:10:0d:e3:7b:45:67:7d:6b:7d:26:c6:b8:
aa:b2:7a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:49 2024 by rpki-client on console-ams.rpki-client.org