Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/rvT0HBEoZBj9AkVTqznYOQ0CsR0.roa
File: rvT0HBEoZBj9AkVTqznYOQ0CsR0.roa (raw, json)
Hash identifier: kQhe49nlZkhd5arAjgkMEjbADBnu69+bQTm2rSf6GiY=
Subject key identifier: AE:F4:F4:1C:11:28:64:18:FD:02:45:53:AB:39:D8:39:0D:02:B1:1D
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 02915DCE
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/rvT0HBEoZBj9AkVTqznYOQ0CsR0.roa
Signing time: Sat 01 Jan 2022 03:51:12 +0000
ROA not before: Sat 01 Jan 2022 03:51:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29611
IP address blocks: 45.157.84.0/22 maxlen: 24
217.68.240.0/20 maxlen: 24
185.2.216.0/22 maxlen: 24
185.43.184.0/22 maxlen: 24
185.76.48.0/22 maxlen: 24
185.73.184.0/22 maxlen: 24
217.69.32.0/20 maxlen: 24
2a0f:5280::/29 maxlen: 48
2a03:2d20::/32 maxlen: 48
2a00:c20::/32 maxlen: 32
2a04:95c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43081166 (0x2915dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Jan 1 03:51:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aef4f41c11286418fd024553ab39d8390d02b11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:7e:d2:d8:ff:8a:81:14:49:dd:05:5c:2f:
41:e2:e1:e7:ff:56:fa:a6:23:e2:2a:9e:e2:ea:f7:
88:71:2f:ce:4c:be:81:ff:d6:b0:8a:60:59:0f:c2:
cb:ee:8d:28:9b:97:28:da:24:10:ff:80:94:47:f1:
d9:06:a9:91:d8:27:28:1f:ff:7d:71:74:c4:ef:8c:
cb:0b:63:71:b4:5d:a3:e2:23:ba:cc:d6:42:39:be:
aa:26:02:2b:63:88:24:b4:f8:e8:46:58:81:a4:95:
8a:4a:7c:ac:c9:93:16:78:fe:47:8d:4c:39:b0:3f:
ec:62:fa:e0:c1:c6:6d:28:1b:85:58:88:b4:8c:50:
ff:e9:a9:2b:9f:9d:a7:b2:2f:f3:d5:cc:eb:cd:8f:
75:97:19:ad:1a:bf:67:f7:fa:80:1b:26:47:48:8a:
cb:57:76:57:37:34:97:cd:26:0b:62:cd:b5:8f:b2:
d1:87:dd:61:18:07:ee:e9:14:d0:15:70:bc:d6:b6:
2a:d2:a2:37:21:3a:fc:93:1c:2f:11:c2:91:cb:2d:
32:64:0c:e2:a9:75:64:f8:a1:e9:c8:e5:91:f5:69:
ec:49:41:64:2f:46:d2:76:fb:f3:fe:b5:c4:f6:a9:
78:d4:80:52:6e:74:02:7f:1c:9c:de:dd:ed:0d:f8:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F4:F4:1C:11:28:64:18:FD:02:45:53:AB:39:D8:39:0D:02:B1:1D
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/rvT0HBEoZBj9AkVTqznYOQ0CsR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.84.0/22
185.2.216.0/22
185.43.184.0/22
185.73.184.0/22
185.76.48.0/22
217.68.240.0/20
217.69.32.0/20
IPv6:
2a00:c20::/32
2a03:2d20::/32
2a04:95c0::/29
2a0f:5280::/29
Signature Algorithm: sha256WithRSAEncryption
0e:ed:9f:91:74:5e:b7:20:7d:8d:66:38:ec:2c:03:ae:2d:67:
12:30:ad:2a:2b:e1:78:8d:c9:f1:5c:51:cc:e3:b2:1a:ff:a4:
1d:ee:30:01:e4:3f:d7:1d:4a:c1:24:16:b3:9b:45:99:85:2a:
af:df:ed:ed:71:f4:c4:23:6a:d5:da:34:29:e2:45:cb:47:04:
a0:6a:a8:07:a3:68:7e:41:a3:32:eb:9a:4f:49:21:ca:5f:25:
87:a9:72:9b:df:46:41:41:5f:3d:32:0f:16:50:9d:ee:a7:c8:
bb:eb:a9:4a:34:2c:58:3e:73:fd:03:45:3c:74:2b:7f:d2:5a:
97:d0:79:14:07:c8:82:30:b6:9f:fe:95:81:82:76:fe:71:86:
3f:a9:6b:b0:58:ae:af:1b:5e:f4:1a:dd:0e:c0:fa:b5:d3:46:
b9:c8:a0:fc:b6:b6:b3:57:ff:f8:ac:06:00:ca:e0:a8:f5:19:
2c:a4:db:d0:51:5c:cb:29:d6:9c:c0:ba:8f:91:39:a7:3f:01:
68:83:4c:de:7c:30:1a:dc:ca:ce:57:17:98:7f:d1:11:31:8a:
ae:86:5d:19:3f:78:2c:d8:c6:5d:c3:69:d5:8f:38:b9:30:f7:
33:3e:df:fe:2f:9b:0c:7a:19:e9:8d:7f:d7:63:2d:36:26:54:
d9:46:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:18 2024 by rpki-client on console-fra.rpki-client.org