Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/ASSaFoZO5y0SZSfdj1wIOzB6AMI.roa
File: ASSaFoZO5y0SZSfdj1wIOzB6AMI.roa (raw, json)
Hash identifier: ooPAFZhL1pF9CG4O5za5z63U7PGA4rEPF5zblGEBc+c=
Subject key identifier: 01:24:9A:16:86:4E:E7:2D:12:65:27:DD:8F:5C:08:3B:30:7A:00:C2
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 0661D784
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/ASSaFoZO5y0SZSfdj1wIOzB6AMI.roa
Signing time: Tue 08 Feb 2022 16:11:34 +0000
ROA not before: Tue 08 Feb 2022 16:11:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 166.108.246.0/24 maxlen: 24
166.108.245.0/24 maxlen: 24
166.108.244.0/24 maxlen: 24
166.108.253.0/24 maxlen: 24
166.108.247.0/24 maxlen: 24
166.108.249.0/24 maxlen: 24
166.108.250.0/24 maxlen: 24
166.108.252.0/24 maxlen: 24
166.108.251.0/24 maxlen: 24
166.108.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107075460 (0x661d784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Feb 8 16:11:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01249a16864ee72d126527dd8f5c083b307a00c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:a7:de:85:ed:f6:eb:af:da:4c:b9:be:55:
de:c9:54:71:04:88:bc:14:71:4f:de:aa:36:f4:11:
92:f6:03:e8:31:da:66:d9:30:ee:e2:b7:f9:b1:e0:
8e:1c:bc:14:b4:23:53:0a:52:a3:af:75:ef:91:fc:
88:52:93:2a:1b:cb:e7:d0:e5:ee:c6:f1:dc:fd:22:
5d:fd:c7:e6:f1:4f:b7:90:d8:5f:8c:bc:3a:91:b1:
42:79:b4:d7:fd:16:c1:79:35:ff:09:86:e3:a2:c3:
63:48:df:52:8c:25:32:ca:01:29:aa:13:15:4e:f7:
28:44:74:b0:08:2b:3c:fa:4f:11:28:44:be:85:64:
25:94:44:93:79:f4:26:4f:94:da:58:af:b4:06:d4:
3e:88:ed:60:c7:57:0a:83:3d:b9:9f:bd:17:e7:78:
ce:c6:89:8b:9d:03:31:72:c4:3f:a8:24:e4:0d:b2:
7d:f5:a4:ce:46:67:21:f5:59:7d:e8:ac:9a:bb:ed:
e3:9c:ce:80:c8:7a:c8:7a:8b:8f:b7:60:79:af:22:
41:bd:6c:a9:de:7c:9e:d2:ea:af:94:58:b5:6e:6b:
04:d5:5d:03:9c:e8:7a:54:7b:7d:a7:07:86:1d:32:
ff:5b:c3:71:8b:ee:89:8d:3c:9f:6c:ec:1d:46:c9:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:9A:16:86:4E:E7:2D:12:65:27:DD:8F:5C:08:3B:30:7A:00:C2
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/ASSaFoZO5y0SZSfdj1wIOzB6AMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.244.0/22
166.108.249.0-166.108.253.255
166.108.255.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:3a:1e:c3:99:93:fd:a9:86:85:2d:19:8e:85:70:f5:f0:ca:
a8:e2:1d:49:cd:6f:e5:48:9b:26:ef:8f:0b:67:6e:b1:f0:c1:
47:ea:1a:f5:fe:a9:7d:b8:87:b9:b5:d9:93:eb:38:73:bc:77:
25:e9:f6:4f:8b:11:1f:e5:c9:4f:15:4c:ba:72:6c:e1:07:7c:
db:99:40:c7:d4:30:8f:ac:23:30:ba:b5:60:ac:07:04:7e:0b:
fc:cb:91:bb:34:05:8f:42:6c:93:82:5a:2f:ee:70:7a:93:58:
1a:14:6c:30:6d:2d:ff:34:92:51:47:b0:d3:fb:8f:64:4d:bb:
21:1a:01:51:33:ff:52:4b:2a:56:ce:49:7a:ce:d8:d3:b5:81:
a0:05:f7:d9:a6:09:22:6a:c1:50:e0:b3:6f:ae:cd:fb:74:e0:
04:27:83:a8:44:01:7c:95:34:27:1e:dc:32:68:46:0d:a6:63:
85:9e:40:2e:4c:57:64:34:88:54:88:61:a5:67:75:e9:65:64:
ed:4c:aa:72:ae:18:d8:56:f9:80:16:e4:29:03:89:f6:04:28:
29:11:31:60:58:64:a4:9b:98:4b:72:0a:ab:f9:5c:43:a5:10:
09:2e:e0:aa:0d:31:e3:cd:71:8e:16:97:61:f3:b5:39:06:03:
79:ef:8e:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEBmHXhDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OTJiODYwOTVjZTU1OGQyZTk2MTg3MjhhNDQyMjhhMjdiZTkwOThmMB4XDTIyMDIw
ODE2MTEzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDEyNDlhMTY4NjRl
ZTcyZDEyNjUyN2RkOGY1YzA4M2IzMDdhMDBjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKjPp96F7fbrr9pMub5V3slUcQSIvBRxT96qNvQRkvYD6DHa
Ztkw7uK3+bHgjhy8FLQjUwpSo69175H8iFKTKhvL59Dl7sbx3P0iXf3H5vFPt5DY
X4y8OpGxQnm01/0WwXk1/wmG46LDY0jfUowlMsoBKaoTFU73KER0sAgrPPpPEShE
voVkJZREk3n0Jk+U2livtAbUPojtYMdXCoM9uZ+9F+d4zsaJi50DMXLEP6gk5A2y
ffWkzkZnIfVZfeismrvt45zOgMh6yHqLj7dgea8iQb1sqd58ntLqr5RYtW5rBNVd
A5zoelR7facHhh0y/1vDcYvuiY08n2zsHUbJfHECAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBQBJJoWhk7nLRJlJ92PXAg7MHoAwjAfBgNVHSMEGDAWgBSZK4YJXOVY0ulh
hyikQiiie+kJjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21TdUdDVnpsV05McFlZY29wRUlvb252cENZOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzkvOGVhOWI5LTNiNmUtNGZkZi1iNWQxLWYwNGZkY2MwOWU1MS8x
L0FTU2FGb1pPNXkwU1pTZmRqMXdJT3pCNkFNSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkv
OGVhOWI5LTNiNmUtNGZkZi1iNWQxLWYwNGZkY2MwOWU1MS8xL21TdUdDVnpsV05M
cFlZY29wRUlvb252cENZOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEAqZs9DAMAwQApmz5AwQBpmz8AwQA
pmz/MA0GCSqGSIb3DQEBCwUAA4IBAQC9Oh7DmZP9qYaFLRmOhXD18Mqo4h1JzW/l
SJsm748LZ26x8MFH6hr1/ql9uIe5tdmT6zhzvHcl6fZPixEf5clPFUy6cmzhB3zb
mUDH1DCPrCMwurVgrAcEfgv8y5G7NAWPQmyTglov7nB6k1gaFGwwbS3/NJJRR7DT
+49kTbshGgFRM/9SSypWzkl6ztjTtYGgBffZpgkiasFQ4LNvrs37dOAEJ4OoRAF8
lTQnHtwyaEYNpmOFnkAuTFdkNIhUiGGlZ3XpZWTtTKpyrhjYVvmAFuQpA4n2BCgp
ETFgWGSkm5hLcgqr+VxDpRAJLuCqDTHjzXGOFpdh87U5BgN5747x
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:46 2023 by rpki-client on console.sobornost.net