Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/wE3yBhdrHUmOQWGruEwDkXhcFTA.roa
File: wE3yBhdrHUmOQWGruEwDkXhcFTA.roa (raw, json)
Hash identifier: y/WyJOr1viw1T1iu1WR+DiU1fTi65hSzJKjzfo2u6PE=
Subject key identifier: C0:4D:F2:06:17:6B:1D:49:8E:41:61:AB:B8:4C:03:91:78:5C:15:30
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 01836525A21E6DF5F00E10F739BBA1E48787
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/wE3yBhdrHUmOQWGruEwDkXhcFTA.roa
Signing time: Thu 22 Sep 2022 12:21:48 +0000
ROA not before: Thu 22 Sep 2022 12:21:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 166.108.216.0/23 maxlen: 23
166.108.218.0/23 maxlen: 23
166.108.224.0/23 maxlen: 23
166.108.226.0/23 maxlen: 23
166.108.220.0/23 maxlen: 23
166.108.222.0/23 maxlen: 23
166.108.230.0/23 maxlen: 23
166.108.232.0/23 maxlen: 23
166.108.228.0/23 maxlen: 23
166.108.238.0/23 maxlen: 23
166.108.234.0/23 maxlen: 23
166.108.236.0/23 maxlen: 23
166.108.240.0/23 maxlen: 23
166.108.244.0/24 maxlen: 24
166.108.245.0/24 maxlen: 24
166.108.246.0/24 maxlen: 24
166.108.242.0/23 maxlen: 23
166.108.251.0/24 maxlen: 24
166.108.252.0/24 maxlen: 24
166.108.253.0/24 maxlen: 24
166.108.247.0/24 maxlen: 24
166.108.249.0/24 maxlen: 24
166.108.250.0/24 maxlen: 24
166.108.254.0/24 maxlen: 24
166.108.160.0/22 maxlen: 22
166.108.168.0/22 maxlen: 22
166.108.172.0/22 maxlen: 22
166.108.176.0/22 maxlen: 22
166.108.180.0/22 maxlen: 22
166.108.184.0/22 maxlen: 22
166.108.188.0/22 maxlen: 22
166.108.192.0/22 maxlen: 22
166.108.200.0/22 maxlen: 22
166.108.204.0/22 maxlen: 22
166.108.208.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:25:a2:1e:6d:f5:f0:0e:10:f7:39:bb:a1:e4:87:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Sep 22 12:21:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c04df206176b1d498e4161abb84c0391785c1530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:13:00:4c:8c:46:3c:86:d2:b6:84:29:7d:
fb:9d:a2:5a:27:78:01:da:d8:25:7f:2d:d7:b3:54:
39:e5:19:c5:a8:4f:f0:1f:6a:95:5b:5a:2a:aa:43:
58:14:7c:f4:04:9b:05:67:32:52:7b:59:28:33:1b:
ce:d7:45:46:d8:59:c2:38:cb:69:86:ab:72:9a:dd:
83:12:9e:23:ae:24:f6:94:88:87:6d:fc:42:f4:4d:
12:84:1c:e4:68:43:f2:de:f6:8a:fc:68:66:b5:4b:
0d:42:01:00:8a:9c:7f:2a:95:f7:44:76:49:07:e9:
67:09:39:a2:d9:a6:56:dd:af:e6:a4:14:3c:a9:74:
76:a1:84:b7:af:66:93:6e:7e:9f:f9:ff:cd:31:3d:
78:e3:95:10:81:75:b9:7f:b8:ba:b8:5b:90:ca:c9:
b2:ef:91:bf:6f:7a:24:44:cf:fc:82:ba:a3:85:fa:
e2:98:2d:4b:07:7a:e8:78:5f:8e:70:b5:52:94:2e:
ee:1e:c6:5e:19:30:2b:e2:3a:b8:b6:a4:1b:08:84:
ac:ac:75:62:f2:c7:e2:5a:04:43:d4:5f:d3:a0:55:
cf:05:94:1b:87:05:26:03:87:89:15:58:ee:8a:b5:
f5:41:a4:be:1a:86:0d:39:bd:c2:83:cf:28:a5:64:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4D:F2:06:17:6B:1D:49:8E:41:61:AB:B8:4C:03:91:78:5C:15:30
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/wE3yBhdrHUmOQWGruEwDkXhcFTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.160.0/22
166.108.168.0-166.108.195.255
166.108.200.0-166.108.211.255
166.108.216.0-166.108.247.255
166.108.249.0-166.108.254.255
Signature Algorithm: sha256WithRSAEncryption
6c:8e:25:9f:ca:45:ae:10:12:40:d3:a5:e4:f3:2c:d0:94:73:
02:e3:67:4c:11:50:b2:1f:1c:fc:1d:f0:3b:98:26:4e:dd:1a:
94:a2:c8:ec:8b:4b:57:90:da:c0:59:21:ab:66:e1:8a:c7:60:
a0:fb:a7:63:c0:de:cb:32:1b:02:85:b9:5c:cf:83:9f:13:3f:
db:1a:8c:b7:98:ea:bc:46:1a:77:81:6b:35:06:21:b5:20:8c:
86:70:53:7b:94:b5:0f:b0:f6:3e:33:f8:45:dc:29:29:18:8d:
7b:aa:af:5a:d4:4e:40:a2:6f:6a:43:76:c1:f3:2d:17:5b:a6:
2d:47:7e:73:ed:1b:98:48:fc:cb:c9:4f:19:e9:e7:c0:f4:4f:
17:52:ff:19:36:a8:e5:c9:a7:33:6d:44:9a:18:bf:14:b1:ae:
b2:34:9d:36:58:f4:69:7a:4a:35:77:2b:e7:ec:a5:82:0e:c8:
eb:7b:a7:f2:25:80:cd:ef:60:e8:f7:a8:44:5c:03:77:e1:b5:
08:77:1f:07:0f:3b:f6:85:24:41:e1:ff:f2:f4:15:42:0e:42:
80:e3:9d:11:45:ac:d0:7d:e4:29:46:ae:d7:ca:d7:40:2d:61:
b0:b4:d5:af:a4:b6:cb:78:a5:cc:30:88:b0:1a:33:9e:af:66:
94:36:f5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:46 2023 by rpki-client on console.sobornost.net