Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/JXRK-ZX8lik4FOqH4NJ67jOamTI.roa
File: JXRK-ZX8lik4FOqH4NJ67jOamTI.roa (raw, json)
Hash identifier: S5nLbSg/5WSbX1DvX8kgo8wF2ST1JtFNW9ouQixnqXY=
Subject key identifier: 25:74:4A:F9:95:FC:96:29:38:14:EA:87:E0:D2:7A:EE:33:9A:99:32
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 018CC8713F90CD8A8FB2608746A91CB1306D
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/JXRK-ZX8lik4FOqH4NJ67jOamTI.roa
Signing time: Tue 02 Jan 2024 04:31:54 +0000
ROA not before: Tue 02 Jan 2024 04:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203020
IP address blocks: 109.205.185.0/24 maxlen: 24
5.44.248.0/24 maxlen: 32
137.59.4.0/22 maxlen: 32
92.119.168.0/22 maxlen: 32
46.254.105.0/24 maxlen: 32
46.16.32.0/24 maxlen: 32
2.58.76.0/22 maxlen: 32
178.212.226.0/24 maxlen: 32
80.73.243.0/24 maxlen: 32
87.236.144.0/24 maxlen: 32
93.157.108.0/24 maxlen: 32
45.67.4.0/22 maxlen: 32
185.72.240.0/22 maxlen: 32
146.255.187.0/24 maxlen: 32
213.173.60.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:3f:90:cd:8a:8f:b2:60:87:46:a9:1c:b1:30:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Jan 2 04:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25744af995fc96293814ea87e0d27aee339a9932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:1e:1d:76:53:a8:63:28:2d:38:b5:66:91:
73:71:4e:83:28:10:4e:5e:b3:d7:f7:2f:6b:5a:70:
93:72:06:b0:2b:dc:81:18:06:51:56:31:e2:13:8d:
b1:93:06:bb:c7:5a:c4:d6:4f:5b:eb:ee:c5:6a:a4:
61:3d:a9:8e:3c:4c:18:ee:a8:b6:d4:04:3b:18:69:
d9:5d:5d:53:be:59:e9:f9:c7:de:6f:f1:6c:1d:4f:
01:5e:b7:c1:42:1e:ef:56:64:02:ff:dd:19:f9:f1:
06:e2:30:80:a4:51:b8:5c:83:2b:9b:fc:f7:21:06:
0d:e9:f6:8a:49:f6:cd:66:be:cd:a2:bc:86:da:79:
db:f4:8d:b2:14:9c:c1:fb:13:d4:f2:d1:46:c7:d9:
8e:0d:10:47:51:15:ef:49:29:b0:43:68:65:d9:66:
61:1d:93:4b:ae:d9:3e:28:f0:d8:d7:40:8b:e0:a6:
08:58:a1:ac:0e:d3:bd:72:2e:6b:d0:81:6e:9b:70:
ab:dc:bb:79:43:34:4e:f2:db:bc:f1:c1:0e:b6:61:
5f:e7:64:a9:66:e5:74:88:b6:ed:d2:d6:49:9e:dc:
73:6b:57:8d:d0:8a:98:c9:cf:30:f3:b9:9d:58:b0:
53:ee:ea:ad:b9:1a:8a:5a:1a:c0:e5:5a:d2:f0:38:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:74:4A:F9:95:FC:96:29:38:14:EA:87:E0:D2:7A:EE:33:9A:99:32
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/JXRK-ZX8lik4FOqH4NJ67jOamTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.76.0/22
5.44.248.0/24
45.67.4.0/22
46.16.32.0/24
46.254.105.0/24
80.73.243.0/24
87.236.144.0/24
92.119.168.0/22
93.157.108.0/24
109.205.185.0/24
137.59.4.0/22
146.255.187.0/24
178.212.226.0/24
185.72.240.0/22
213.173.60.0/22
Signature Algorithm: sha256WithRSAEncryption
67:a7:2b:5c:b3:82:63:cb:17:7e:0e:f4:6d:23:3a:c0:bc:c4:
1f:32:9f:67:1a:63:97:4e:b0:86:54:f3:7c:56:bb:43:5d:b5:
09:b3:c7:05:dd:51:9c:86:24:97:a6:00:aa:17:9f:ba:d8:20:
c7:aa:08:a2:53:98:89:b2:b0:df:04:ba:84:12:40:d6:31:c3:
01:c9:c1:38:e1:c1:77:ef:9b:e8:54:92:5a:dd:38:7e:4e:22:
f2:e6:cd:d4:8c:c5:f2:d8:f8:e6:72:2a:9b:1e:e1:5c:0e:d4:
c4:b3:71:7a:c5:22:b7:62:31:03:82:e0:dd:6e:37:1e:5d:31:
91:a9:5b:f0:cd:5b:e7:d9:f2:0c:02:d1:33:74:b1:e9:ea:c7:
01:a6:05:6b:05:a1:29:d3:45:cb:73:d0:c7:c4:7e:b2:41:8c:
54:96:fa:95:69:74:cb:74:46:36:40:be:fa:b1:1c:fe:78:52:
2b:4c:4f:68:5b:8d:79:77:d0:d1:ab:fa:15:c4:61:1d:e5:2b:
41:d9:66:c5:f0:41:9e:03:78:72:fa:78:12:72:f9:3b:99:72:
82:dd:c9:dd:d4:b2:ad:32:d5:b8:66:8f:fc:a2:0d:92:89:5d:
c0:b2:21:a5:43:26:ce:8a:86:8b:06:1e:26:5f:9a:e4:45:24:
04:26:9a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:07 2024 by rpki-client on console-fra.rpki-client.org