Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5IA_4jKciDjoetoHja6e0eY4p60.roa
File: 5IA_4jKciDjoetoHja6e0eY4p60.roa (raw, json)
Hash identifier: Sjypuaf1dyzu0QNK5wJSF0J5+9psElJ1YW+ItX3sl1o=
Subject key identifier: E4:80:3F:E2:32:9C:88:38:E8:7A:DA:07:8D:AE:9E:D1:E6:38:A7:AD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185BEBFDDDE049CE5439EF96431D6147E12
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5IA_4jKciDjoetoHja6e0eY4p60.roa
Signing time: Tue 17 Jan 2023 08:02:03 +0000
ROA not before: Tue 17 Jan 2023 08:02:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 185.216.70.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
45.128.96.0/22 maxlen: 24
85.31.47.0/24 maxlen: 24
45.139.107.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:bf:dd:de:04:9c:e5:43:9e:f9:64:31:d6:14:7e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 17 08:02:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4803fe2329c8838e87ada078dae9ed1e638a7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:a6:2a:f3:b1:c1:e6:4a:f1:ce:9a:88:af:
12:89:2c:72:94:34:a7:74:ca:45:ca:1b:7d:8c:1b:
c6:2c:a4:2f:74:a6:0b:7b:9a:af:aa:6f:83:90:91:
63:c5:fd:7b:30:a8:c3:58:b8:af:c2:11:17:c7:7d:
c4:1d:1f:be:05:62:4b:86:5e:6d:1a:9c:1c:c3:b3:
ae:d4:f9:ec:44:d4:c7:b6:21:d6:9f:2f:6a:10:b8:
a5:db:b3:9d:32:87:ea:b0:fc:e9:90:30:0b:cb:ee:
11:60:21:f3:59:ff:b9:98:4c:06:b2:ee:9d:af:27:
ba:bc:a8:f0:ed:36:0f:5a:fa:e5:11:52:28:2e:86:
dd:c8:9b:49:9f:16:21:43:46:dd:c2:20:1f:8a:89:
f3:2d:89:e9:48:e6:33:a6:5d:fa:e6:25:bc:06:4e:
35:c7:38:b6:c3:e3:d6:fa:73:a7:4b:c0:61:21:f3:
9f:81:17:a2:a5:c9:45:9f:3b:e5:36:3e:cb:49:b2:
22:2a:ea:c2:db:22:d5:13:c5:ef:7b:80:15:10:1b:
8a:b6:a5:8c:89:f7:61:53:45:4c:50:84:fd:63:44:
b1:61:71:bc:84:94:30:e8:41:db:eb:db:5c:17:e6:
8a:95:84:44:7e:93:a0:43:20:73:e2:3d:0f:03:b6:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:80:3F:E2:32:9C:88:38:E8:7A:DA:07:8D:AE:9E:D1:E6:38:A7:AD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5IA_4jKciDjoetoHja6e0eY4p60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.128.96.0/22
45.139.107.0/24
85.31.47.0/24
94.154.172.0/24
178.215.239.0/24
185.216.70.0/24
193.35.19.0/24
194.55.224.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:fc:c0:65:80:b4:4d:70:92:9d:07:e4:0c:31:2d:0d:d3:a3:
28:42:e5:0f:84:1e:46:e4:28:9c:73:c5:16:90:a4:1e:70:20:
af:d2:a4:35:83:b7:f5:b8:c6:90:7d:fc:e6:a2:fb:49:e3:00:
0a:9e:45:b4:72:17:ce:71:41:24:02:b5:4f:ef:60:e1:07:b4:
05:97:7c:8b:24:64:8f:a0:da:da:a3:f8:b0:61:c2:23:82:8c:
05:15:bc:15:31:b1:20:f6:b6:5f:7f:14:4f:92:f7:9a:7f:70:
aa:e7:f0:b4:1f:23:37:cd:9d:c7:9b:46:f8:c6:64:30:1d:49:
3d:e4:73:dc:64:aa:4e:3d:7f:3f:ce:8e:c0:48:2d:7c:7e:60:
3a:0e:ae:36:63:27:25:5e:81:20:68:ae:8d:df:e5:11:f6:f5:
c2:51:e5:90:b6:74:8c:3f:f0:76:42:88:55:29:c9:97:a9:66:
81:ea:97:d1:68:e4:29:29:d6:26:2f:55:70:b0:4e:44:f1:02:
f6:99:18:0d:2a:52:24:36:eb:93:75:9b:af:5a:df:af:2f:ab:
d9:f5:1e:cc:ec:54:d3:1d:e3:a5:26:2f:27:72:44:03:ae:82:
70:8f:81:54:11:78:21:82:e9:91:df:47:28:d3:71:4f:5c:97:
95:f6:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:38 2023 by rpki-client on console-fra.rpki-client.org