Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8J9KX9MYBtNFfzk28_X1LbCn5vY.roa
File: 8J9KX9MYBtNFfzk28_X1LbCn5vY.roa (raw, json)
Hash identifier: sPywlTbJAN8/Rz2xOVnCRCcmqZHbCdByWtyMAZ2ZEdw=
Subject key identifier: F0:9F:4A:5F:D3:18:06:D3:45:7F:39:36:F3:F5:F5:2D:B0:A7:E6:F6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C5850848323B55D691CFE6B2FC21E7DDD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8J9KX9MYBtNFfzk28_X1LbCn5vY.roa
Signing time: Mon 11 Dec 2023 09:58:40 +0000
ROA not before: Mon 11 Dec 2023 09:58:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 94.156.8.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
2.59.253.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:50:84:83:23:b5:5d:69:1c:fe:6b:2f:c2:1e:7d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 11 09:58:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f09f4a5fd31806d3457f3936f3f5f52db0a7e6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:05:a2:77:42:90:b4:5d:25:f2:af:17:0b:
63:d4:0e:bf:b8:f2:6f:bb:e7:e3:ff:fe:85:db:18:
03:a3:07:d1:36:86:4c:f9:8f:23:e1:6c:38:9f:4d:
4b:f5:df:fa:92:1c:dd:40:5b:fa:61:93:e2:81:92:
6f:c1:4a:f9:37:f7:61:51:61:df:2c:d8:9c:e5:50:
41:b1:8b:dd:a6:e0:79:94:4a:c9:0d:82:f6:ea:96:
a7:29:8d:4c:f6:e7:e0:14:d1:3a:e2:de:a4:8b:dd:
e0:93:92:ee:46:f5:02:86:cc:8f:95:74:ad:cf:82:
71:7d:15:26:c6:c9:f1:62:ca:85:1b:dd:3e:0d:05:
e3:fe:03:42:de:38:ac:56:6e:18:ef:c2:cc:15:79:
24:f9:30:a2:cd:51:de:52:c3:dd:c7:98:a9:58:ea:
0a:d7:dd:d7:2c:a0:92:5a:ac:9b:16:78:62:d5:c7:
c6:7f:e0:71:f6:f1:d6:61:ca:ef:76:68:a7:0b:ee:
1e:44:7a:12:fd:49:3f:21:48:48:94:47:bb:85:ca:
7a:98:0c:3c:52:76:9f:26:be:76:81:81:1b:c8:ce:
6a:bd:be:31:ab:a1:e6:a7:3b:56:a5:50:d6:30:9f:
65:07:52:88:73:68:e9:94:b3:f4:a9:6d:de:a5:69:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9F:4A:5F:D3:18:06:D3:45:7F:39:36:F3:F5:F5:2D:B0:A7:E6:F6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8J9KX9MYBtNFfzk28_X1LbCn5vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
94.156.8.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
178.215.238.0/24
185.222.160.0-185.222.162.255
185.225.73.0/24
185.246.223.0/24
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.31.205.0/24
194.48.248.0/24
194.55.186.0/23
194.55.224.0/23
194.169.172.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:54:94:c7:38:36:f2:97:85:b4:19:20:bd:ea:9c:ab:0e:9b:
a4:26:d0:fa:5f:df:81:1e:4b:c7:a7:08:bd:67:66:57:18:66:
49:4d:d9:a3:d4:53:54:b4:16:91:ce:29:97:a7:7b:31:df:59:
98:6f:51:5f:6a:8d:02:82:d3:18:4b:d0:9e:af:60:92:0f:83:
b2:c3:6e:d1:b3:d9:9b:b4:10:63:56:fa:eb:74:28:a3:84:c6:
57:80:bf:88:2d:49:2f:ca:e4:e0:be:a6:8b:c9:6c:81:2e:ce:
16:e1:91:be:d8:70:0d:14:ba:cf:27:8d:19:1f:5b:ff:d3:14:
d6:0e:05:c2:a2:7a:e5:15:a4:2a:36:82:b9:9c:f6:85:b5:6f:
4b:68:fe:27:aa:17:98:e9:d5:86:be:96:f0:3c:57:e0:aa:d4:
85:58:e4:a7:02:df:c9:88:25:42:76:3c:21:8d:35:a2:f0:bc:
57:8b:85:55:85:7e:8f:d3:c9:e6:c2:90:3c:65:73:41:c5:ce:
94:d1:99:e0:6d:17:fc:e6:b9:25:f3:1b:73:ed:93:d3:c0:bb:
6e:b6:2c:d0:53:da:68:52:13:37:e3:ab:6d:07:cc:55:e3:b3:
b1:b7:89:20:9b:d6:61:ee:21:52:62:c7:50:e1:8e:6d:a1:06:
12:4f:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:59 2024 by rpki-client on console-fra.rpki-client.org