Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/85w2iAq8MKTaJ4jnyGEnUugNeTs.roa
File: 85w2iAq8MKTaJ4jnyGEnUugNeTs.roa (raw, json)
Hash identifier: hVs+6LHenS9cj34so2Imyr0FEDAQa2nfIZvcZjvsb2o=
Subject key identifier: F3:9C:36:88:0A:BC:30:A4:DA:27:88:E7:C8:61:27:52:E8:0D:79:3B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01865F909BAFECE2F91760762D09072B693F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/85w2iAq8MKTaJ4jnyGEnUugNeTs.roa
Signing time: Fri 17 Feb 2023 13:29:17 +0000
ROA not before: Fri 17 Feb 2023 13:29:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 185.216.70.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
45.128.96.0/22 maxlen: 24
85.31.47.0/24 maxlen: 24
45.139.107.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:90:9b:af:ec:e2:f9:17:60:76:2d:09:07:2b:69:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 17 13:29:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f39c36880abc30a4da2788e7c8612752e80d793b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:bb:d8:e8:a0:e9:69:33:68:55:c4:d6:49:
17:ba:58:b4:02:0a:f1:c2:00:1d:82:a5:08:81:0c:
fd:2b:b1:fd:1d:c6:c5:f3:d6:41:c7:81:f9:4a:e6:
14:47:ae:99:2d:5d:0b:eb:36:1b:73:0b:a5:a6:41:
01:9f:80:f1:61:bd:1a:77:f8:7e:a0:c8:55:55:25:
d4:35:7e:53:08:b8:33:c6:fb:ce:49:c8:9a:09:54:
30:b4:85:c7:4b:4d:cd:b2:c7:40:e4:b6:e0:ca:1e:
ac:75:17:cd:19:27:11:d6:7a:9f:71:1d:93:52:e0:
80:6d:81:b8:c5:4f:6c:ba:ba:55:f1:b9:bf:54:1e:
a6:23:02:d0:eb:a2:3a:61:bf:fe:dd:87:c6:bb:32:
e6:7f:70:39:9b:a1:b3:6a:8b:69:91:94:fc:4b:39:
c5:4c:b8:8f:24:a5:0d:05:ab:76:26:e0:54:b1:b0:
f1:48:9e:52:72:64:0d:6e:d3:a8:77:6c:c2:8b:34:
8a:ac:6f:3e:29:6f:8a:3f:50:29:9a:ef:7c:19:05:
37:73:f0:e8:27:31:f7:1d:f6:50:3f:76:aa:ed:5f:
02:21:3f:09:e9:29:91:b6:db:3c:26:7c:8a:9e:d5:
80:5d:bf:c4:71:7b:4f:1d:53:5e:a1:23:59:b9:c5:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9C:36:88:0A:BC:30:A4:DA:27:88:E7:C8:61:27:52:E8:0D:79:3B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/85w2iAq8MKTaJ4jnyGEnUugNeTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.128.96.0/22
45.139.107.0/24
85.31.47.0/24
94.154.172.0/24
178.215.239.0/24
185.216.70.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:02:0f:38:c0:67:31:64:e5:39:91:dd:2b:3a:76:ee:60:ea:
30:5d:2b:0f:d5:ce:36:9b:ac:8f:a2:9b:dd:32:08:57:d4:21:
27:a9:a3:c6:11:cb:cb:c9:dc:a7:aa:7f:2a:64:a1:ca:f8:bf:
b5:92:77:4f:1a:c2:ba:73:58:11:2e:b1:8e:39:07:03:e8:d8:
d1:37:2d:85:83:07:a3:af:63:a8:89:d4:99:c9:3c:bc:53:58:
fa:35:84:63:a2:65:6c:24:0b:37:10:de:ec:4f:8a:20:7b:be:
8e:fa:78:32:7f:4e:0d:1b:30:45:2e:e6:fa:a6:fa:f4:19:fe:
a3:f5:19:11:ec:64:c3:e9:2c:50:a6:d1:4e:00:38:96:3b:65:
13:f2:8c:fc:c7:7f:b4:eb:e5:67:60:b0:00:7b:dc:6b:0c:65:
fe:68:1d:6d:45:23:b7:e8:dc:4c:2b:8d:5e:19:b2:aa:4c:65:
04:73:b6:cd:8d:f7:ea:a4:83:e7:f2:c1:c0:16:bb:e6:53:ad:
3f:f2:67:38:21:cc:42:ab:59:8b:23:24:8f:f0:35:22:fc:4f:
35:67:37:f9:97:9f:78:2f:7b:cb:cb:ac:a5:ef:ac:ee:4f:24:
41:c3:6a:b1:05:da:74:7e:ef:05:10:fb:76:e6:b4:cb:b6:28:
2a:99:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org