Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9SDCwJ6e3GuY1d3J81opdW0OD8Y.roa
File: 9SDCwJ6e3GuY1d3J81opdW0OD8Y.roa (raw, json)
Hash identifier: rQkZDlzawfEqyMXLJ0sCOXzpFNKNFJyH+qdgRoAj0Lk=
Subject key identifier: F5:20:C2:C0:9E:9E:DC:6B:98:D5:DD:C9:F3:5A:29:75:6D:0E:0F:C6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018ECD7AE5F63B4D51780F517D1F0D4F122E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9SDCwJ6e3GuY1d3J81opdW0OD8Y.roa
Signing time: Thu 11 Apr 2024 14:06:07 +0000
ROA not before: Thu 11 Apr 2024 14:06:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.156.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.72.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:7a:e5:f6:3b:4d:51:78:0f:51:7d:1f:0d:4f:12:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 11 14:06:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f520c2c09e9edc6b98d5ddc9f35a29756d0e0fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:b3:f8:66:64:43:3d:7a:e9:fc:4c:6f:e5:
32:38:92:98:fd:48:df:84:ad:e1:35:43:28:77:65:
dc:91:be:30:00:a8:8f:20:ce:c3:18:f7:72:3e:6a:
20:fa:00:b2:ae:a9:32:b6:b4:83:2e:56:97:1e:b9:
43:a5:bd:a9:df:0c:9f:58:f1:99:48:9a:a5:81:7a:
b7:aa:97:ea:70:4c:12:1a:7b:ab:a2:81:cc:b9:fd:
50:d8:0f:16:35:9a:3a:99:af:db:f8:c0:39:48:a9:
be:07:5f:4d:d3:1d:26:73:8e:d7:05:7b:00:f7:35:
68:3a:62:81:9f:57:5f:ff:43:50:89:5e:4f:b4:98:
26:88:94:58:34:3b:be:d9:3e:d8:23:ba:7a:88:ef:
ba:10:d3:02:12:8e:40:80:51:55:5f:f6:0c:9f:78:
da:b2:5c:9f:3f:0f:35:0c:62:3d:ef:ba:ac:ae:45:
96:75:85:2b:af:62:e6:b0:f0:f6:d0:d2:25:dd:2b:
79:2e:25:fb:c3:ce:90:97:cd:77:f8:78:32:21:18:
dc:67:d1:64:14:9f:2b:91:d8:93:4b:7a:42:a8:db:
ef:aa:d9:b4:7d:14:56:d2:06:cf:4b:70:de:c4:85:
a3:e0:76:00:2b:49:ce:81:f0:c0:7f:8b:7e:3c:22:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:20:C2:C0:9E:9E:DC:6B:98:D5:DD:C9:F3:5A:29:75:6D:0E:0F:C6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9SDCwJ6e3GuY1d3J81opdW0OD8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.88.88.0/24
45.151.89.0/24
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.72.0/23
94.156.239.0/24
95.214.25.0-95.214.26.255
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
194.48.248.0/24
194.55.186.0/24
194.55.224.0/24
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b2:c9:21:54:b8:6f:7d:d0:a3:32:16:15:19:2c:6b:ab:df:
80:90:0d:d0:ac:da:5c:00:2e:a3:02:e0:ff:37:24:8f:56:f1:
a8:8f:73:ea:7f:db:a2:b9:fe:91:aa:4c:51:f4:53:b9:44:8d:
05:88:c7:ff:17:90:0b:61:3c:1a:cf:df:ed:a0:b4:96:90:37:
cd:d5:b1:8c:e3:3c:e8:1f:fe:ba:69:c9:ba:a7:de:99:10:c0:
e6:3f:9d:de:b0:a1:7f:0c:09:38:44:64:75:78:9c:1d:e3:54:
e5:51:c8:71:a1:4b:b2:bd:80:4c:5e:3e:cc:ec:c7:62:5d:c4:
9a:c1:49:1a:71:b7:14:c3:6f:33:0d:42:9a:91:ba:82:fb:fb:
cd:58:5a:be:9a:94:e8:3b:aa:f7:79:55:c6:f0:79:0a:e5:9c:
23:60:53:47:cf:2d:14:5b:55:46:ca:d8:f3:fc:e1:1a:cb:e9:
b0:97:bf:5f:55:7d:68:00:69:6c:06:2d:05:ca:59:c8:37:6a:
b1:60:4b:3d:40:70:f8:0d:2e:3f:4a:89:1d:70:c6:46:ad:fe:
44:25:02:a7:e8:aa:85:3a:69:c6:a0:71:c2:95:6e:50:31:08:
e2:7f:1f:df:8c:54:7b:e0:03:11:53:5b:e0:23:e1:83:d2:8e:
e3:16:92:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:26 2024 by rpki-client on console-ams.rpki-client.org