Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E5RD75b_ojb0kpKGTNbfN-3l9R4.roa
File: E5RD75b_ojb0kpKGTNbfN-3l9R4.roa (raw, json)
Hash identifier: gERRLbJNACNMYCuwnoDj2Vnc9o4FONFS6cQUcuOBy2U=
Subject key identifier: 13:94:43:EF:96:FF:A2:36:F4:92:92:86:4C:D6:DF:37:ED:E5:F5:1E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01855DEF4C554FFD93D3B86261E06F8F25A3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E5RD75b_ojb0kpKGTNbfN-3l9R4.roa
Signing time: Thu 29 Dec 2022 12:50:41 +0000
ROA not before: Thu 29 Dec 2022 12:50:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
45.128.96.0/22 maxlen: 24
80.76.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
45.139.107.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:ef:4c:55:4f:fd:93:d3:b8:62:61:e0:6f:8f:25:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 29 12:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=139443ef96ffa236f49292864cd6df37ede5f51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:d5:13:28:6e:db:b4:6c:cf:fa:1a:7d:4f:
e8:68:f0:f9:70:34:5b:65:b4:6c:c6:0e:94:3a:aa:
6e:d8:82:55:00:f0:a7:e2:74:aa:08:09:3e:36:67:
c7:eb:02:7d:17:07:8d:3c:64:03:c6:ea:cf:b5:e9:
a6:cb:cd:50:e0:eb:11:90:79:1b:91:51:46:82:5a:
87:fc:89:d3:63:02:89:c1:6e:42:35:b1:bb:86:3a:
92:4b:19:75:e7:d7:6d:0b:ba:c5:48:b3:a3:8b:81:
9f:4c:2a:e9:cc:53:9c:97:42:c3:69:11:6d:80:3b:
23:e5:6d:f5:68:0d:9a:8d:99:5d:ea:a0:d2:02:47:
99:0c:ad:f6:58:fe:62:c0:d6:07:86:41:5c:fb:37:
71:65:02:5c:66:69:bf:be:f4:e7:4b:6a:9a:5c:b2:
cb:2b:00:5d:62:3a:e7:2b:06:49:1d:dc:85:f8:78:
d0:ec:c3:45:23:2f:b0:d2:9e:dc:74:e3:65:d1:4b:
71:9b:a1:f2:da:7e:16:b9:3e:be:68:c7:10:3e:32:
03:b6:26:91:c9:e6:be:9b:22:72:9a:22:03:f7:9c:
bf:0d:0e:99:ad:38:cd:cc:2a:74:77:df:8c:1d:d6:
fa:be:92:e4:19:25:4b:6c:81:0c:4c:77:d7:6c:55:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:94:43:EF:96:FF:A2:36:F4:92:92:86:4C:D6:DF:37:ED:E5:F5:1E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E5RD75b_ojb0kpKGTNbfN-3l9R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.128.96.0/22
45.139.107.0/24
80.76.48.0/24
85.31.47.0/24
87.120.87.0/24
94.154.172.0/24
178.215.225.0/24
178.215.227.0/24
178.215.239.0/24
185.216.69.0-185.216.70.255
193.35.19.0/24
194.55.224.0/23
Signature Algorithm: sha256WithRSAEncryption
03:3d:d2:bb:d5:48:11:66:40:c8:b2:a9:a5:b3:77:0f:93:6a:
b4:3b:0a:43:87:a7:b4:7d:26:8a:77:6f:04:f7:6b:03:35:4f:
6e:6f:d1:d2:a1:d1:c1:b2:e0:13:7b:b6:3c:b2:f1:2a:c3:5b:
9f:30:9c:ca:86:b0:ea:c0:31:fc:a9:d7:e7:57:00:33:b0:f9:
14:6f:42:bf:15:3d:f2:3c:e5:21:1b:c1:58:65:c5:88:d9:72:
4b:f3:de:26:dd:23:b6:44:3d:b2:25:25:56:27:48:0a:29:49:
2f:b9:a6:60:54:c0:d0:ad:d3:c1:93:4e:a6:23:29:92:78:38:
43:0e:f5:ea:cc:9a:fc:b5:b2:6b:23:e1:a8:34:74:b1:ca:c4:
9b:75:06:95:26:98:78:8b:bd:a8:7f:a7:60:fb:8f:0d:19:5e:
0c:12:c2:96:59:a3:19:76:83:46:25:69:7b:b0:3b:0a:1d:e0:
45:0b:8c:c2:3c:77:2c:64:64:b2:c0:ec:98:cb:6b:6b:51:1d:
f0:9a:9f:88:96:ba:bd:25:40:79:a1:c7:d8:e3:a5:36:5e:0e:
dc:36:e6:93:07:10:51:82:84:11:ec:24:b0:15:bb:fd:c3:7c:
02:c9:df:06:a4:27:1f:ec:3e:f6:9b:c1:47:5f:e1:c3:42:4f:
e8:8b:77:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org