Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/NyYkFuUd00j1jRkKTQVz3141r2A.roa
File: NyYkFuUd00j1jRkKTQVz3141r2A.roa (raw, json)
Hash identifier: 2NW4GKqunfxhYGn1svKTLEMM8p0gXo+O86QXrR6A548=
Subject key identifier: 37:26:24:16:E5:1D:D3:48:F5:8D:19:0A:4D:05:73:DF:5E:35:AF:60
Certificate issuer: /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial: 350DB9DE
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/NyYkFuUd00j1jRkKTQVz3141r2A.roa
Signing time: Sat 01 Jan 2022 02:54:23 +0000
ROA not before: Sat 01 Jan 2022 02:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15605
IP address blocks: 5.181.68.0/22 maxlen: 24
46.30.168.0/21 maxlen: 24
2.58.128.0/22 maxlen: 24
109.73.80.0/20 maxlen: 24
185.5.244.0/22 maxlen: 24
5.154.192.0/19 maxlen: 24
185.37.180.0/22 maxlen: 24
37.77.96.0/22 maxlen: 24
37.77.100.0/24 maxlen: 24
37.77.102.0/24 maxlen: 24
37.77.101.0/24 maxlen: 24
5.154.237.0/24 maxlen: 24
5.154.238.0/24 maxlen: 24
2a00:1cc8::/29 maxlen: 40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890091998 (0x350db9de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Validity
Not Before: Jan 1 02:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37262416e51dd348f58d190a4d0573df5e35af60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:d6:ff:25:89:c2:f9:ef:fc:6a:83:55:14:
d9:06:9e:10:73:5d:04:84:4c:89:f2:c4:17:4b:f1:
ff:b1:9d:a0:35:a4:f0:db:28:c6:e2:2b:aa:e8:e1:
b3:88:f6:db:ee:02:30:f2:23:4a:3b:9a:3e:0c:7b:
97:18:8b:9f:a4:16:f0:63:32:62:80:bc:05:3e:f5:
0a:2a:67:59:b4:a0:26:fc:4e:d7:19:42:83:b4:27:
13:96:52:7f:ad:95:e4:43:71:51:fb:3d:b0:cc:5d:
5c:04:ae:ed:0f:05:c6:93:bc:02:f8:1d:92:eb:02:
d2:f2:02:b0:9f:11:ee:6c:7b:8d:6a:f0:67:31:5b:
d0:9a:b9:43:e4:10:5e:cd:18:ca:96:85:d7:d2:81:
ac:80:63:49:87:4e:0e:3b:d4:4d:41:35:79:12:b6:
07:a2:cc:34:4f:e7:c2:7c:7d:f0:c4:b7:92:c7:79:
8c:31:fd:88:a6:b7:0f:1a:19:f1:e4:33:5f:7c:a6:
42:7f:b9:1d:cf:26:a3:55:a7:b0:39:11:ab:7e:0f:
6e:f6:7f:c1:b4:49:c0:ad:fb:3e:76:52:27:ab:bc:
eb:bf:e4:02:1c:6a:15:bc:ae:d5:da:73:7c:0f:44:
eb:62:2c:ef:f5:a1:33:a8:18:a9:b3:e6:fb:e7:76:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:26:24:16:E5:1D:D3:48:F5:8D:19:0A:4D:05:73:DF:5E:35:AF:60
X509v3 Authority Key Identifier:
keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/NyYkFuUd00j1jRkKTQVz3141r2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.128.0/22
5.154.192.0/19
5.154.237.0-5.154.238.255
5.181.68.0/22
37.77.96.0-37.77.102.255
46.30.168.0/21
109.73.80.0/20
185.5.244.0/22
185.37.180.0/22
IPv6:
2a00:1cc8::/29
Signature Algorithm: sha256WithRSAEncryption
12:ee:01:16:7f:cc:2e:f4:8a:bf:96:95:e9:05:1b:af:87:26:
71:9e:52:8c:ca:cb:44:a7:c5:cc:8d:fa:12:7c:9d:53:41:a7:
55:bb:66:f5:5a:be:5f:42:2d:52:d3:9d:bb:bb:ae:cf:5b:11:
73:bc:c4:c1:f4:a9:f2:5e:ce:dd:0f:9c:56:49:2f:1e:87:f0:
8c:f5:5f:f2:5b:bc:5a:de:02:a8:f0:cb:ab:26:c7:a8:f3:20:
5d:23:63:55:fa:cd:3b:c2:35:73:c1:9a:ef:b9:ce:4d:f0:f3:
2b:7a:34:d6:c1:9b:56:33:de:b9:49:87:84:96:13:57:4a:e2:
c2:d4:e4:58:f4:c3:a3:38:7d:e6:31:2d:89:d6:11:c9:35:40:
af:95:35:33:73:01:4a:08:6d:ea:0e:e7:ab:72:9d:bb:b6:3a:
98:1e:55:aa:12:9d:00:51:6d:cc:3e:5e:17:81:cf:49:21:e6:
d1:6a:0b:57:01:eb:9f:69:88:a0:44:47:e9:ed:3f:3d:64:d4:
e3:2e:8e:80:09:92:b6:bb:21:ce:4f:ef:7c:92:30:9c:f8:54:
78:4f:86:d0:03:22:b8:04:39:8d:a9:94:74:ec:08:1a:b8:f8:
9f:a2:e9:a5:58:56:d6:f8:0c:70:e3:8a:78:57:4d:ff:0a:a5:
66:ce:6a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net