Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2MkroeBErlUF-u1yM2e8LHQuwg0.roa
File: 2MkroeBErlUF-u1yM2e8LHQuwg0.roa (raw, json)
Hash identifier: p0Ffhs7XbU7GVNcsbJhjv7dHsALLJ5ZHFUAjBBxZfvo=
Subject key identifier: D8:C9:2B:A1:E0:44:AE:55:05:FA:ED:72:33:67:BC:2C:74:2E:C2:0D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01864FC4ED2ED647DE3F74C9BB14A06B63B9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2MkroeBErlUF-u1yM2e8LHQuwg0.roa
Signing time: Tue 14 Feb 2023 11:52:31 +0000
ROA not before: Tue 14 Feb 2023 11:52:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
87.121.124.0/23 maxlen: 24
45.81.240.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
194.180.51.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:c4:ed:2e:d6:47:de:3f:74:c9:bb:14:a0:6b:63:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 14 11:52:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8c92ba1e044ae5505faed723367bc2c742ec20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:fe:be:5e:70:30:e1:65:9e:01:19:5a:2a:
4f:b1:af:bc:60:3d:c8:7f:5b:80:fb:27:fb:8e:a1:
aa:cb:76:8d:ce:2d:53:03:f3:e9:bc:4d:6d:9a:fb:
c9:f1:7d:f1:af:62:c8:fc:e3:ea:6f:13:de:2a:e6:
da:2a:3c:3e:fe:bf:74:4b:05:29:71:ec:5a:7c:4e:
81:bd:f0:03:55:d0:55:32:f9:d2:7c:49:f6:43:8c:
b9:67:03:ee:b4:d6:08:18:5e:70:b5:da:26:4d:01:
a1:8b:a4:06:6d:bd:91:b3:e4:25:db:7f:36:8d:91:
42:ae:bd:30:e2:84:70:59:3e:3e:cf:a3:c9:80:61:
42:af:48:0e:4b:0f:18:9e:03:4d:b2:a8:a4:e8:96:
e5:00:7a:e3:43:e6:d9:ee:cc:36:51:36:aa:1f:ff:
27:e1:f7:5c:b7:a4:0e:9a:1b:da:88:d6:39:1a:90:
6c:8a:6e:21:6c:55:af:29:dc:03:7b:5e:1f:a0:d2:
65:1e:81:a3:da:bb:80:99:e8:34:55:98:c0:6f:0a:
16:f1:c0:8c:c3:4a:a8:54:c6:dd:a6:99:40:81:dc:
de:27:1d:50:e5:71:80:fc:18:54:0b:03:85:51:cf:
5b:94:a4:6e:e2:a7:c5:54:25:32:60:0a:41:df:56:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C9:2B:A1:E0:44:AE:55:05:FA:ED:72:33:67:BC:2C:74:2E:C2:0D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2MkroeBErlUF-u1yM2e8LHQuwg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.240.0/24
45.151.89.0/24
87.121.124.0/23
92.119.196.0/23
94.154.161.0-94.154.163.255
171.22.19.0/24
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.252.176.0/24
194.180.51.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d9:b0:a6:8d:dd:8a:00:71:6b:f4:58:80:c3:4d:5f:b3:cf:
c4:70:31:d9:a2:d3:df:4a:e1:55:2b:da:61:8f:88:5f:9f:df:
52:9f:87:4c:31:51:2e:7b:5f:11:76:ad:d2:42:4c:c3:41:c4:
ee:82:45:e2:03:bb:f5:b0:b7:c7:74:cb:29:fd:94:a0:ca:d3:
fc:88:ab:bc:96:eb:9d:4e:45:c9:92:ed:ab:c9:9e:f6:83:d4:
0d:7e:b2:34:89:68:2a:30:85:c1:b3:ab:10:e1:0d:e6:c7:a8:
e2:2e:90:7e:33:1b:8a:8e:06:1c:8e:94:e9:0c:1f:ad:de:7d:
cd:b9:ef:58:1d:8a:17:47:55:73:11:11:00:9a:0f:e9:52:76:
f5:66:58:e5:37:7a:93:19:af:cf:6c:a9:1c:a7:e0:a4:41:f5:
99:a2:20:ae:6c:89:f8:7a:ef:30:41:40:4f:ce:7e:8b:5b:ca:
ce:ef:06:ee:fd:86:2d:d7:2e:3a:d4:ce:20:ed:6e:b5:54:71:
f3:df:2e:00:1e:9c:64:59:63:33:47:43:04:50:b1:81:9b:24:
17:55:8f:ad:aa:d7:89:a2:4b:31:3e:0d:8d:59:45:80:e5:f6:
41:12:44:3f:87:00:8e:7e:d6:f7:53:08:a0:86:ac:9d:00:a3:
b7:a2:11:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:23 2024 by rpki-client on console-ams.rpki-client.org