Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BRTrnlr8qkI7Cx6K6Eg7XwpEdb8.roa
File: BRTrnlr8qkI7Cx6K6Eg7XwpEdb8.roa (raw, json)
Hash identifier: sjFNqQRvV4hM+Vx7gC/VUJqDSVrY0qllPjjKgGTMOAI=
Subject key identifier: 05:14:EB:9E:5A:FC:AA:42:3B:0B:1E:8A:E8:48:3B:5F:0A:44:75:BF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1CD13D75
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BRTrnlr8qkI7Cx6K6Eg7XwpEdb8.roa
Signing time: Thu 20 Jan 2022 12:12:36 +0000
ROA not before: Thu 20 Jan 2022 12:12:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 178.215.224.0/22 maxlen: 24
84.54.48.0/22 maxlen: 24
194.180.51.0/24 maxlen: 24
194.169.172.0/22 maxlen: 24
194.180.48.0/23 maxlen: 24
185.252.176.0/24 maxlen: 24
185.252.178.0/23 maxlen: 24
176.125.252.0/22 maxlen: 24
94.154.172.0/22 maxlen: 24
193.25.216.0/22 maxlen: 24
87.121.220.0/23 maxlen: 24
109.206.240.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483474805 (0x1cd13d75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 20 12:12:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0514eb9e5afcaa423b0b1e8ae8483b5f0a4475bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:92:4c:d4:4d:93:2b:f1:c9:be:7d:f9:18:
ba:a7:40:69:5f:c3:61:b4:7a:81:92:97:18:cf:3a:
00:97:58:22:f1:d6:2a:73:8f:a6:6a:7a:3a:ad:40:
09:0a:f1:8a:f2:da:a6:df:6c:f1:d0:bd:dc:94:c9:
95:14:29:c6:32:b7:1c:d3:47:4d:bf:73:aa:14:76:
c9:e5:f2:6e:86:f0:a8:49:5d:fe:e1:9e:4d:4d:a2:
de:97:2a:44:70:14:fb:ad:5b:a6:17:49:c2:f7:15:
04:63:e5:23:b8:d8:7a:80:a9:80:53:42:a7:f6:b6:
96:f7:55:d2:c5:b2:4a:70:f8:23:3e:87:16:a6:74:
c1:93:89:83:3f:65:ab:83:1e:27:cb:be:23:97:a8:
b2:6e:8e:87:21:a0:3d:00:86:41:72:51:38:20:0e:
1f:4a:08:94:15:17:f2:98:9e:8c:7d:8c:76:f2:3d:
8a:c1:01:8f:b2:d5:8e:22:63:77:0b:be:f7:12:8c:
ff:d8:48:6d:30:88:56:e4:2c:31:0a:c0:82:69:3f:
ef:10:27:69:f3:b6:5a:da:9d:4a:d9:82:71:8a:7a:
f8:e9:18:fe:de:9f:15:08:1a:c2:f2:7e:59:fb:5f:
b4:e3:53:7c:4b:c7:33:1e:f5:ef:04:6e:0b:2b:82:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:14:EB:9E:5A:FC:AA:42:3B:0B:1E:8A:E8:48:3B:5F:0A:44:75:BF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BRTrnlr8qkI7Cx6K6Eg7XwpEdb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.48.0/22
87.121.220.0/23
94.154.172.0/22
109.206.240.0/22
176.125.252.0/22
178.215.224.0/22
185.252.176.0/24
185.252.178.0/23
193.25.216.0/22
194.169.172.0/22
194.180.48.0/23
194.180.51.0/24
Signature Algorithm: sha256WithRSAEncryption
98:20:16:e6:93:04:91:98:78:e1:b5:1c:2c:f1:b5:dd:5c:35:
c1:2f:ef:23:c8:6a:fe:c8:26:ed:6e:e1:de:4d:76:29:3e:e2:
01:56:90:7e:1c:dd:c6:b2:d4:dc:ee:13:04:c3:ed:a3:69:06:
99:d4:df:9e:34:59:94:81:0a:bd:b0:23:7d:a6:68:b9:86:30:
ed:e4:74:27:66:c3:6b:6b:6c:f2:3e:cb:1a:bb:f8:50:0f:2c:
bb:3e:fa:d0:e9:0f:c6:2e:66:af:4c:c5:50:09:1e:80:27:95:
9b:e0:9f:08:82:b3:10:32:0e:29:5a:bb:ee:0e:06:e6:2a:71:
84:7b:82:bf:27:f9:6c:18:aa:51:1f:68:08:5f:2d:e3:3a:46:
33:97:08:7b:fd:2f:e4:9c:c4:da:d1:20:22:9d:6a:73:86:10:
f8:a9:e9:91:6a:7b:87:10:a6:4d:9c:b8:53:ef:06:fb:db:56:
3e:0f:34:5a:7c:d3:f4:31:96:6c:2d:15:1b:48:d7:8f:aa:76:
7f:d5:f8:f6:b0:f7:a0:4d:0e:85:2c:d7:7d:37:2d:3e:9c:1b:
aa:93:58:a8:50:96:dd:3b:f6:c6:4d:39:f4:05:f9:82:e5:71:
fc:81:77:47:58:04:84:bb:c1:ad:21:e5:4b:ad:f5:7c:b7:d8:
61:0d:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org