Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1WHC7JKmLU4Q7HuNBE24o9-iwjs.roa
File: 1WHC7JKmLU4Q7HuNBE24o9-iwjs.roa (raw, json)
Hash identifier: gv9fkc7T/BJBn9tTc9txvSuW3byVu11k4UkfzmjE540=
Subject key identifier: D5:61:C2:EC:92:A6:2D:4E:10:EC:7B:8D:04:4D:B8:A3:DF:A2:C2:3B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81F1A75BDA71475C240157D676CFA6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1WHC7JKmLU4Q7HuNBE24o9-iwjs.roa
Signing time: Sun 01 Jan 2023 13:25:10 +0000
ROA not before: Sun 01 Jan 2023 13:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 194.55.224.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.65.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:f1:a7:5b:da:71:47:5c:24:01:57:d6:76:cf:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d561c2ec92a62d4e10ec7b8d044db8a3dfa2c23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:26:e0:f4:fb:df:8b:c6:cb:0e:12:b8:62:
b1:bd:e2:74:9a:b8:80:ce:c1:76:e5:ea:20:ea:73:
31:08:fc:c0:79:1c:46:f4:68:f7:d0:7f:b3:a5:ba:
fd:93:ff:a9:41:41:2c:fb:8d:27:cf:9b:2c:66:95:
16:e7:52:d2:e5:e0:ec:92:db:0a:d3:60:ee:96:7e:
2f:c6:ef:34:94:69:90:8c:cb:5a:68:9d:68:67:91:
ad:5a:f5:a8:3e:b7:d2:8e:75:7e:af:f2:56:5b:b9:
26:9a:98:54:ad:a0:51:69:ea:2f:ae:70:a5:9b:50:
5e:af:7f:ce:93:93:11:5f:fa:a7:56:bc:56:2c:0f:
3b:04:00:d3:de:87:d2:b1:6c:65:11:e4:02:aa:45:
8e:b8:0e:0b:f7:bf:b4:e0:c1:f3:bd:28:2d:df:d4:
db:67:72:12:e8:fa:9c:db:cf:6c:4a:6e:d4:fa:a2:
4f:ce:58:35:e0:13:e8:8f:a8:94:15:b5:ac:1e:1e:
ff:26:95:78:dd:f0:88:98:92:0c:4a:ed:03:e8:0b:
42:51:61:1e:59:c5:f0:44:7b:eb:d1:27:05:cb:07:
0a:95:2c:51:66:b6:26:cb:ae:9e:a3:b6:6a:ab:aa:
dc:43:6f:6b:68:ca:1d:d0:2d:cd:ef:76:1c:43:e0:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:61:C2:EC:92:A6:2D:4E:10:EC:7B:8D:04:4D:B8:A3:DF:A2:C2:3B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1WHC7JKmLU4Q7HuNBE24o9-iwjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.12.255.0/24
45.84.91.0/24
45.88.64.0/23
45.129.84.0/24
84.54.50.0/24
94.154.162.0/24
94.156.160.0/24
178.215.226.0/24
185.222.160.0/23
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.55.224.0/23
194.180.38.0/23
Signature Algorithm: sha256WithRSAEncryption
24:b3:95:83:8b:07:c7:76:2b:0d:32:5e:9c:0a:f5:6f:1f:4e:
73:4c:39:92:f7:34:0e:4c:b8:12:d6:67:bc:e2:7f:a8:33:7d:
e0:79:01:d3:a9:8c:a6:74:c0:fd:8d:6c:24:d6:67:4b:06:12:
ea:1f:e4:01:14:ee:2c:0a:e8:5c:b0:9c:06:33:09:1b:3c:93:
b5:b6:99:5d:52:19:69:f2:6e:c1:e5:e1:7f:d7:52:05:e0:b7:
85:43:df:b5:b7:39:df:13:5f:8c:4d:87:23:c5:16:22:48:be:
10:d8:ef:93:14:e1:9b:9c:59:89:09:c0:68:cd:7b:08:3c:a7:
32:f2:6a:29:fa:ac:f2:48:87:7f:4f:e4:b1:86:0c:7d:3d:a7:
55:2f:8d:47:f7:f7:dc:9d:8d:6e:74:05:83:0f:83:f0:17:ff:
93:1c:f3:7f:4b:3e:e9:ee:9f:31:8b:7a:aa:50:c8:50:3d:67:
75:22:bd:39:94:33:dc:0b:51:44:e7:85:c6:20:e3:6b:4f:ee:
e8:6b:4a:aa:cc:f8:21:ce:c3:9b:90:ef:0b:81:bc:10:91:7e:
e2:5e:49:59:ea:ab:58:8c:87:2d:9e:22:4c:ee:72:31:7d:65:
8c:53:3a:de:e0:d0:51:ee:86:df:7d:11:03:b9:02:21:45:42:
70:9c:5e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org