Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-dpSnTNcx4uYH4hrKkWxti_vtjc.roa
File: 1-dpSnTNcx4uYH4hrKkWxti_vtjc.roa (raw, json)
Hash identifier: ywUygf3D5ELsJ8PT9qFPVTCcZf1MtLL2KEPYLB4Glz4=
Subject key identifier: F9:DA:52:9D:33:5C:C7:8B:98:1F:88:6B:2A:45:B1:B6:2F:EF:B6:37
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184E7B5315D56CB0069599EBCB2E666A504
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-dpSnTNcx4uYH4hrKkWxti_vtjc.roa
Signing time: Tue 06 Dec 2022 13:52:02 +0000
ROA not before: Tue 06 Dec 2022 13:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 194.55.224.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.65.0/24 maxlen: 24
194.180.51.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:b5:31:5d:56:cb:00:69:59:9e:bc:b2:e6:66:a5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 6 13:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9da529d335cc78b981f886b2a45b1b62fefb637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:be:d6:b4:cd:9d:55:8f:33:62:0e:3d:78:
1f:a9:43:98:9e:71:e0:6b:0b:56:b6:38:36:a0:f1:
32:12:1c:8c:43:a0:9b:33:e9:56:96:6e:d7:43:1b:
5e:09:72:59:67:68:25:ee:99:3f:49:03:ab:46:5b:
74:c7:a7:20:3f:b3:98:dc:f4:2e:fe:0d:bf:4c:8e:
1b:a2:0d:b7:15:bd:54:8f:99:a3:ce:e1:bc:3d:bc:
e0:03:30:a5:d5:da:ed:48:13:f6:e1:49:a0:94:19:
78:35:7d:be:b2:e1:c9:c2:1d:7e:11:cd:1e:c8:8e:
26:4e:64:d5:27:03:5b:f5:5c:c1:af:25:64:be:a7:
1f:51:c5:16:64:32:f4:74:b0:5d:27:e3:5d:ed:23:
ac:8b:22:e6:c8:40:57:1b:62:54:ef:c4:6e:0a:b8:
5d:69:f8:05:2d:8c:3c:b3:6e:6c:1f:de:d1:81:2f:
db:22:b4:d0:09:28:f9:e7:7c:cc:82:e1:58:89:e8:
09:f8:05:08:b2:dc:7c:98:a2:11:83:df:79:49:80:
a7:49:97:88:b9:15:54:26:c0:d9:a4:3a:89:49:37:
ab:52:77:df:05:f2:7f:3c:6a:3d:82:f2:81:02:55:
fa:d6:86:29:2c:72:66:36:04:29:e4:76:b0:8d:f8:
05:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DA:52:9D:33:5C:C7:8B:98:1F:88:6B:2A:45:B1:B6:2F:EF:B6:37
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-dpSnTNcx4uYH4hrKkWxti_vtjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.64.0/23
83.219.96.0/24
84.21.173.0/24
84.54.50.0/24
87.121.220.0/24
94.154.162.0/24
178.215.226.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.55.224.0/23
194.55.227.0/24
194.180.51.0/24
Signature Algorithm: sha256WithRSAEncryption
12:39:be:0a:77:90:c8:a7:9f:40:78:67:ba:fd:70:5d:da:a2:
98:38:5f:12:3f:50:c7:ce:95:06:31:cc:44:51:d2:07:d0:9e:
cc:3c:7e:0d:7e:47:b5:e3:03:55:55:df:e1:ea:0f:33:e4:75:
6b:94:15:92:26:ef:62:1b:1a:44:16:89:d4:1f:cb:f1:1d:34:
f4:17:06:c8:b8:91:6e:a2:aa:f2:9a:ce:c8:8c:13:5d:ec:de:
a4:b7:f9:f5:99:3d:dd:da:7f:b1:0d:25:ca:9d:62:68:12:3d:
e4:fa:d1:9a:76:ef:d9:22:a5:86:7b:13:2e:7e:39:bc:38:a7:
45:f4:f0:36:f6:13:3b:d2:ea:3f:78:c9:a5:de:21:d3:2d:94:
12:6f:22:ff:20:e7:b7:77:50:37:c0:6b:ec:8c:ed:7d:cd:b7:
3e:a1:dc:7e:92:90:03:68:8d:fe:43:1b:bb:f9:a3:77:ca:c1:
05:02:cb:fb:d2:06:8b:f9:c0:5a:bc:9c:59:12:1f:10:59:23:
e9:c3:72:2a:25:15:f8:a7:62:10:f5:6a:f3:1c:bf:d9:8c:03:
49:39:54:aa:76:63:ae:a0:64:49:d5:f0:23:87:a8:6a:69:70:
8c:d4:16:97:bf:3b:b9:09:3c:f0:21:44:10:b3:27:78:1d:36:
e9:6f:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-ams.rpki-client.org