Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-7a2qa1u5pgzvTtJBGpiY47EaIw.roa
File: 1-7a2qa1u5pgzvTtJBGpiY47EaIw.roa (raw, json)
Hash identifier: PgGFe5LGcdFejjTpOCTEZ0GVOB/jMqq/Ly8vW0s+mPM=
Subject key identifier: FB:B6:B6:A9:AD:6E:E6:98:33:BD:3B:49:04:6A:62:63:8E:C4:68:8C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183E65E7290F3B5C889587BEB0346039E52
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-7a2qa1u5pgzvTtJBGpiY47EaIw.roa
Signing time: Mon 17 Oct 2022 14:34:52 +0000
ROA not before: Mon 17 Oct 2022 14:34:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 212.87.205.0/24 maxlen: 24
31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
85.217.128.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
194.55.226.0/24 maxlen: 24
164.40.186.0/23 maxlen: 24
164.40.184.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.37.46.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
185.221.66.0/24 maxlen: 24
79.110.49.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.72.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:5e:72:90:f3:b5:c8:89:58:7b:eb:03:46:03:9e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 17 14:34:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbb6b6a9ad6ee69833bd3b49046a62638ec4688c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:f2:fa:bd:1d:3d:01:29:d6:67:66:1d:2a:
04:30:87:83:65:98:d1:4b:df:6d:4f:83:52:a7:1c:
6f:b6:f7:57:7a:9d:19:2b:d0:bb:cf:2f:07:53:62:
62:45:34:7e:ec:90:81:c8:bf:3b:8d:d2:52:d5:2c:
69:c5:c0:0f:e3:67:d7:21:fc:8b:d2:a0:f8:d5:ac:
6f:26:bc:bc:0a:12:bc:dc:1c:f8:c3:cc:62:69:44:
d3:d2:10:45:29:d7:c6:05:46:fc:43:86:81:b5:c1:
0c:74:24:9a:90:22:5f:8d:ac:bb:9d:6c:af:72:30:
2d:dc:b9:2e:91:14:08:6b:36:f7:ed:b3:58:dc:22:
cd:64:b9:fa:1e:0a:42:43:dc:39:38:d7:7c:a5:4e:
6f:7b:f0:e6:d7:ab:dd:b0:ec:02:d4:f4:7c:4a:d8:
cf:7d:a9:30:10:1c:fa:70:dc:7f:5c:94:ba:8d:e5:
77:96:4d:47:a6:92:e5:3e:b5:67:67:73:85:30:5f:
5b:1b:ec:04:97:53:0e:e6:02:40:81:23:29:7c:0e:
18:82:56:65:40:fa:b4:64:bd:be:5c:71:05:44:8e:
01:dd:54:de:4c:1e:86:af:65:fc:0f:0e:d8:92:a4:
bd:1c:9b:58:ab:dc:f0:d0:aa:42:19:21:12:c2:a6:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B6:B6:A9:AD:6E:E6:98:33:BD:3B:49:04:6A:62:63:8E:C4:68:8C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-7a2qa1u5pgzvTtJBGpiY47EaIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
79.110.49.0/24
84.54.50.0/24
85.217.128.0/24
164.40.184.0/24
164.40.186.0/23
185.221.66.0/24
185.225.72.0/24
193.37.46.0/24
193.222.97.0/24
194.48.249.0/24
194.55.187.0/24
194.55.226.0/24
194.169.172.0/24
194.180.49.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1d:e9:43:37:eb:9d:89:e7:41:8b:66:3b:0f:0c:89:03:78:
51:e4:ab:18:30:cd:83:3d:cb:24:86:e5:dd:ec:d2:3f:55:8a:
34:95:57:bc:55:f1:64:56:e1:8e:12:8e:f6:5c:88:26:a1:42:
ca:f6:da:94:6d:c2:fa:30:6e:71:6a:78:21:93:17:1a:ab:50:
00:04:c5:b1:07:2f:25:b0:1c:16:92:8b:ac:b7:35:d3:02:a9:
50:65:1d:fe:9a:36:73:93:ed:47:37:28:d0:51:da:2a:65:20:
c2:b9:b7:a7:fa:2e:1d:d8:85:0b:83:4e:1a:1f:38:21:f2:bd:
14:7a:b2:56:d0:d1:2e:91:39:40:64:06:4c:9e:6d:04:fb:31:
59:bd:73:e7:4d:24:17:4a:f2:5a:99:ee:7b:26:dd:3e:13:7d:
3d:df:a1:1d:f3:41:a5:e4:d8:85:9c:b6:e0:e0:b1:b3:aa:67:
c0:9f:fb:0b:07:57:ea:76:30:c5:96:c2:92:8c:15:86:dc:ef:
a6:64:e9:02:de:6c:3e:ca:01:eb:15:f3:76:e0:c2:37:5a:db:
e1:c5:1d:da:2c:7b:84:dd:d7:51:6b:e3:de:90:bc:ed:d5:4c:
c0:84:8e:01:5c:49:63:f9:be:26:a1:fb:02:5f:94:4d:5f:a9:
3c:cc:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:55 2024 by rpki-client on console-fra.rpki-client.org