Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3k8areGsvf4WFNlSyqy60iFXsBk.roa
File: 3k8areGsvf4WFNlSyqy60iFXsBk.roa (raw, json)
Hash identifier: k9YF64oMcaZqZOj2lDkwAQNGizFsbYWOTElsQgFnt14=
Subject key identifier: DE:4F:1A:AD:E1:AC:BD:FE:16:14:D9:52:CA:AC:BA:D2:21:57:B0:19
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185300C6638A80CDC908100F799DD1AA138
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3k8areGsvf4WFNlSyqy60iFXsBk.roa
Signing time: Tue 20 Dec 2022 14:59:57 +0000
ROA not before: Tue 20 Dec 2022 14:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 194.55.224.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
45.12.252.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.65.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:0c:66:38:a8:0c:dc:90:81:00:f7:99:dd:1a:a1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 20 14:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de4f1aade1acbdfe1614d952caacbad22157b019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:42:85:aa:45:3b:a8:4c:e8:6b:9a:be:80:
c1:57:fb:c3:da:07:0e:85:56:d1:9b:2b:58:d5:26:
23:27:a4:d6:b5:d6:99:04:04:4b:23:fa:17:30:9b:
a4:38:63:38:a6:2b:42:58:22:12:49:bf:4c:1a:67:
28:49:10:ba:cf:58:db:2c:d4:8f:f8:76:c2:33:e5:
c8:aa:95:ae:2f:2c:f4:05:e2:2f:9a:12:f2:4b:d4:
0e:1b:14:21:fc:fe:63:8e:ca:e8:24:6b:33:d2:23:
b3:e8:36:aa:fb:2f:81:77:88:a2:96:84:0e:98:d2:
a3:29:7a:30:49:e5:99:f6:d8:d4:32:15:e8:3a:32:
d2:64:bc:35:a1:ab:be:93:f5:84:df:61:8e:8f:96:
8f:f1:73:f1:46:f4:3c:5a:2d:90:4e:eb:76:f2:87:
69:6d:f9:23:00:1b:d8:c5:e0:15:6e:00:3f:d8:d4:
34:74:04:a3:71:51:db:55:38:5d:77:b8:cb:42:70:
92:d0:15:cc:ec:ca:f4:e5:93:be:0b:31:c9:d9:17:
3f:a1:95:38:3d:51:1f:97:29:63:68:a8:d9:d6:59:
d6:fc:48:aa:bf:d5:4e:13:fd:d0:ad:ea:da:22:bc:
c3:f2:23:0b:b1:70:29:e9:db:ff:dc:84:39:18:dc:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4F:1A:AD:E1:AC:BD:FE:16:14:D9:52:CA:AC:BA:D2:21:57:B0:19
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3k8areGsvf4WFNlSyqy60iFXsBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.252.0/24
45.12.255.0/24
45.84.91.0/24
45.88.64.0/23
83.219.96.0/24
84.54.50.0/24
94.154.162.0/24
178.215.226.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.55.224.0/23
194.180.38.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:fd:59:a5:8e:77:5f:ad:09:a4:d0:dd:4a:82:4a:09:ef:fb:
56:51:a2:36:3b:50:e5:81:62:77:06:9c:7b:d9:a1:81:87:49:
04:67:77:76:ca:9a:1d:df:4d:63:81:ec:62:df:ef:4c:08:ea:
8a:63:dd:17:70:f7:1c:aa:05:77:02:22:7e:29:5a:0d:61:13:
5f:9c:57:89:3a:9a:e7:09:e9:cc:ec:31:cf:b9:26:29:0d:fc:
7e:d0:15:b0:da:37:f1:f8:96:47:ff:41:e6:0c:a8:83:08:84:
25:07:89:6e:60:66:01:4c:e6:ec:82:70:5e:1c:97:97:4a:b3:
b1:59:a7:ce:c8:68:25:1c:fb:a0:c0:93:7e:bf:a8:f7:04:2e:
6f:83:96:82:01:2e:88:ee:e0:e3:27:c6:10:d3:8c:16:a2:63:
d7:57:e1:e5:3b:05:fc:82:07:a4:c9:ae:4e:a1:88:85:d1:98:
44:3f:bf:a5:76:bb:95:47:dc:17:f2:a6:40:f0:2c:da:d2:e2:
64:3a:df:36:0c:16:9b:75:5c:4b:2a:59:0e:cd:f3:6c:e1:eb:
70:ab:d0:aa:63:43:ae:05:b4:93:60:64:f6:c0:f9:2a:11:6e:
56:65:ae:05:a4:8e:3a:7a:e3:98:07:d7:3e:f3:a2:a6:3e:a0:
fe:93:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org