Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/lAtuAmtpeFivshGwYRuEujbxix8.roa
File: lAtuAmtpeFivshGwYRuEujbxix8.roa (raw, json)
Hash identifier: sE+smRQXn/+fyDWFIchFtTWq/+YK8rDIRruWRR6qyGI=
Subject key identifier: 94:0B:6E:02:6B:69:78:58:AF:B2:11:B0:61:1B:84:BA:36:F1:8B:1F
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 01851A340779CBAC33ADA1BD131B53C9EFF3
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/lAtuAmtpeFivshGwYRuEujbxix8.roa
Signing time: Fri 16 Dec 2022 09:11:35 +0000
ROA not before: Fri 16 Dec 2022 09:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28716
IP address blocks: 147.123.84.0/22 maxlen: 22
147.123.80.0/22 maxlen: 22
77.95.136.0/21 maxlen: 24
147.123.88.0/22 maxlen: 24
80.94.116.0/24 maxlen: 24
80.94.112.0/20 maxlen: 24
217.19.144.0/20 maxlen: 24
78.159.216.0/21 maxlen: 24
147.123.96.0/22 maxlen: 22
185.61.12.0/22 maxlen: 24
147.123.92.0/22 maxlen: 22
147.123.100.0/22 maxlen: 22
45.89.180.0/22 maxlen: 24
185.41.212.0/22 maxlen: 22
78.159.192.0/21 maxlen: 24
46.243.32.0/21 maxlen: 24
2001:1bd0::/29 maxlen: 48
2a01:5d20::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:34:07:79:cb:ac:33:ad:a1:bd:13:1b:53:c9:ef:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Dec 16 09:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=940b6e026b697858afb211b0611b84ba36f18b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:59:2d:c7:fe:28:46:cf:5f:02:fe:a8:35:9a:
34:5b:02:d3:72:d6:ec:c2:96:af:d1:b4:8b:c1:fc:
01:46:5f:c5:40:60:66:d9:ed:ad:6c:da:fe:ff:30:
21:9e:17:78:d9:bf:be:e7:71:7c:b9:cd:e5:f7:cc:
80:70:dd:2f:56:ef:77:44:c7:d1:61:77:b8:75:95:
4a:f4:4b:85:2d:61:6f:cd:0c:ea:25:7c:6c:62:69:
95:56:13:0b:54:dd:24:17:5d:8d:93:8a:04:22:c6:
7b:a3:99:98:8f:29:16:14:9d:c5:5c:94:94:81:7c:
a1:1b:ee:88:62:06:b1:8b:58:76:bf:f7:1f:b4:72:
53:0b:b9:b2:a0:18:29:59:9f:1a:ad:07:44:6e:c0:
c2:1d:4e:12:c5:36:63:7d:12:34:f8:5c:82:7a:cd:
41:ad:17:dc:1f:db:7f:a7:15:48:76:58:06:d9:0b:
a4:3f:0f:20:27:c1:b7:7e:9f:ad:ff:54:5f:3d:ff:
70:15:c1:67:aa:fc:42:bc:ea:d0:83:31:df:39:89:
9c:e0:3c:ce:12:a1:33:67:d5:ce:55:f3:52:b1:ed:
38:fd:20:bb:3a:a1:3d:23:e6:9c:ab:b0:7a:7b:2b:
6f:84:48:26:fb:74:53:e8:ae:a9:6e:96:06:56:87:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0B:6E:02:6B:69:78:58:AF:B2:11:B0:61:1B:84:BA:36:F1:8B:1F
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/lAtuAmtpeFivshGwYRuEujbxix8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.180.0/22
46.243.32.0/21
77.95.136.0/21
78.159.192.0/21
78.159.216.0/21
80.94.112.0/20
147.123.80.0-147.123.103.255
185.41.212.0/22
185.61.12.0/22
217.19.144.0/20
IPv6:
2001:1bd0::/29
2a01:5d20::/29
Signature Algorithm: sha256WithRSAEncryption
1e:29:32:58:0b:00:71:0f:8a:66:9a:5b:d5:8b:46:f0:d9:98:
12:34:cd:22:8f:c4:37:e3:1b:b8:0f:95:3f:00:fa:6c:8c:16:
a3:b3:4a:7b:25:1b:6c:b1:4c:96:59:7b:d1:cc:b9:a3:c8:1c:
bc:1d:10:dd:3f:93:99:a8:59:82:52:db:bb:3f:43:a0:9e:c0:
09:89:dc:92:3d:9b:7f:31:51:59:7d:6a:12:5c:21:b7:c7:fa:
49:df:4f:0e:b6:63:23:2c:0a:d2:0b:11:2f:c1:b2:d1:08:72:
da:48:25:b9:0d:95:d6:99:15:df:f6:1f:de:22:f0:1f:c1:31:
33:80:8c:c9:4c:d3:b2:cd:9b:29:bd:3e:d8:a8:fd:96:dc:48:
f0:e9:7f:b5:55:d6:cb:ea:02:71:de:b6:95:09:26:6c:b4:4e:
e6:c5:31:1a:6e:2b:9f:81:28:7d:a5:8b:d1:64:67:93:70:ca:
70:1d:9c:93:66:da:13:22:af:04:27:f9:a0:41:02:dc:b8:19:
38:67:b9:9d:db:af:a6:fb:7f:90:ef:12:fc:25:08:b0:c5:eb:
5a:49:22:65:37:3e:d8:6e:0e:a1:03:8b:50:83:3a:0b:70:05:
4b:81:fb:18:4e:8c:ed:83:45:75:7f:79:f6:8f:a3:b4:72:87:
8e:df:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:14 2024 by rpki-client on console-fra.rpki-client.org