Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/0h741xIoOFVXNkRteaCBzM9kKUc.roa
File: 0h741xIoOFVXNkRteaCBzM9kKUc.roa (raw, json)
Hash identifier: 5ydZ67CBvCASkKVolEhinuJu4P+NukxPssonZ+Qou20=
Subject key identifier: D2:1E:F8:D7:12:28:38:55:57:36:44:6D:79:A0:81:CC:CF:64:29:47
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 0188427CF1EF94056D81290728FDD586BFF7
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/0h741xIoOFVXNkRteaCBzM9kKUc.roa
Signing time: Mon 22 May 2023 08:04:24 +0000
ROA not before: Mon 22 May 2023 08:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47223
IP address blocks: 94.240.52.0/22 maxlen: 22
94.240.63.0/24 maxlen: 24
94.240.62.0/23 maxlen: 23
91.106.26.0/23 maxlen: 23
91.106.30.0/23 maxlen: 23
94.240.0.0/24 maxlen: 24
94.240.23.0/24 maxlen: 24
185.139.16.0/22 maxlen: 22
94.240.32.0/21 maxlen: 21
94.240.40.0/24 maxlen: 24
94.240.42.0/24 maxlen: 24
94.240.44.0/22 maxlen: 22
94.240.46.0/24 maxlen: 24
94.240.48.0/22 maxlen: 22
94.240.48.0/24 maxlen: 24
94.240.48.0/21 maxlen: 21
91.106.24.0/23 maxlen: 23
194.152.46.0/23 maxlen: 23
2a01:6e80::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:7c:f1:ef:94:05:6d:81:29:07:28:fd:d5:86:bf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: May 22 08:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d21ef8d7122838555736446d79a081cccf642947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:5a:76:15:03:24:7b:95:7e:b5:9f:99:8e:
d8:ba:3d:07:9e:dd:b9:eb:b4:b1:fe:60:80:0a:e5:
14:08:64:0b:c7:fd:b6:f0:e3:7f:48:8d:00:1a:d9:
24:d1:69:95:4b:7d:4b:a7:82:25:75:e2:62:fa:a3:
d4:fe:c1:e4:7f:6f:03:af:ca:10:4b:64:5d:a1:ff:
f9:ca:e7:a2:4b:9f:da:ac:c1:1c:5d:ce:db:b0:72:
97:f5:ed:d5:af:64:77:2c:38:d5:90:50:d3:8d:1a:
05:a6:0a:20:83:44:4e:61:7b:4b:10:38:33:a2:2e:
45:bc:09:69:71:89:1a:9c:58:d3:a4:6b:fa:c5:87:
b1:c6:74:2f:cd:df:98:28:0e:11:8d:58:34:14:7d:
ac:d4:95:f0:a6:f8:05:92:d0:fa:ed:d0:74:0b:56:
69:07:4a:7e:40:e5:26:27:49:ac:89:56:91:4a:43:
01:5e:9e:f2:a7:c4:13:18:de:59:11:35:9c:cf:ec:
0c:34:0c:48:12:70:05:f6:cd:7c:25:84:3b:85:10:
f7:ea:1f:4d:43:19:c7:38:12:2b:b3:a1:97:e7:38:
65:87:44:22:a5:d8:a3:39:ae:49:26:a0:25:29:6b:
41:cd:0f:89:8a:18:97:d6:ea:cd:8c:85:6e:01:d6:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1E:F8:D7:12:28:38:55:57:36:44:6D:79:A0:81:CC:CF:64:29:47
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/0h741xIoOFVXNkRteaCBzM9kKUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.24.0/22
91.106.30.0/23
94.240.0.0/24
94.240.23.0/24
94.240.32.0-94.240.40.255
94.240.42.0/24
94.240.44.0-94.240.55.255
94.240.62.0/23
185.139.16.0/22
194.152.46.0/23
IPv6:
2a01:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
27:23:30:36:fb:68:fa:2a:41:5f:82:08:59:30:2f:b7:d5:f6:
37:8b:c1:08:cf:56:b7:5e:84:4b:80:fa:30:b2:20:8f:38:93:
77:c5:87:f2:85:e9:55:b5:27:14:3e:57:91:16:10:34:24:f1:
92:00:9d:64:ef:d0:de:7c:aa:05:df:d0:a3:5f:f1:b7:a0:69:
a9:f3:40:a4:11:4e:ae:4c:7f:59:29:8a:0d:54:0f:fd:93:3e:
b4:19:e1:61:c0:74:47:95:c0:af:b0:7f:7b:f1:07:e9:e7:02:
b5:0f:04:6a:17:1e:82:4f:96:74:95:ee:9b:e9:25:22:90:1d:
95:99:f8:ce:4d:3a:bb:bc:a3:f6:e3:5f:5e:d8:d8:1c:62:59:
10:ee:3e:a0:05:47:4c:b7:8f:97:e6:84:de:ab:44:27:9f:19:
a0:be:15:59:57:98:91:38:54:03:cd:08:ea:2d:d9:51:9a:7a:
1e:38:19:c8:4f:d9:c1:b5:33:be:80:c9:b5:e5:98:9c:81:6a:
2d:0c:09:1e:cd:51:44:0b:89:4d:9f:cf:ff:7e:1a:c6:76:51:
d0:18:37:dc:eb:31:84:8a:22:29:e6:da:47:fb:ff:e0:16:d6:
9b:8c:25:f8:e6:31:39:d4:06:b4:c8:ee:09:77:ac:8c:57:64:
5f:03:dd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:18 2024 by rpki-client on console-fra.rpki-client.org