Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GTtvjqmVYC6Nett1lmAE72KIpe0.roa
File: GTtvjqmVYC6Nett1lmAE72KIpe0.roa (raw, json)
Hash identifier: 0aXp6DHnka/mTSAfd9+/DSxJVOkldOFUacKgs40LU0M=
Subject key identifier: 19:3B:6F:8E:A9:95:60:2E:8D:7A:DB:75:96:60:04:EF:62:88:A5:ED
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186503E6B595C5E9B1F490538B6000A3C2B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GTtvjqmVYC6Nett1lmAE72KIpe0.roa
Signing time: Tue 14 Feb 2023 14:05:13 +0000
ROA not before: Tue 14 Feb 2023 14:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 178.215.224.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
92.249.51.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
109.206.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:3e:6b:59:5c:5e:9b:1f:49:05:38:b6:00:0a:3c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 14 14:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=193b6f8ea995602e8d7adb75966004ef6288a5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:0d:44:9a:f0:68:81:5c:8c:11:ae:20:4a:
d2:7e:49:b2:65:da:e8:3f:f2:bf:30:18:37:ff:e5:
a3:6a:68:d7:1a:58:b7:63:84:ce:5d:1b:b0:4e:e5:
32:6c:57:dc:8f:fc:52:f1:a4:05:f4:5b:8e:2d:b0:
61:03:77:1f:3f:ac:09:53:11:36:8b:d7:96:a4:c7:
a7:f1:97:5b:f1:a2:8f:e2:af:76:50:c8:b9:5f:9e:
40:26:c5:6b:fe:ca:45:93:fe:99:67:1a:f8:2c:8d:
0a:b5:8b:69:9b:43:62:a6:a5:43:8e:14:ff:0a:b7:
7c:33:fc:70:b2:b2:67:91:19:13:10:4b:22:e3:9f:
4e:aa:0b:a7:dd:7a:3c:08:d0:6a:71:58:1a:84:9a:
5c:86:1b:ce:55:f8:e1:01:f8:c5:73:b9:d4:21:4b:
36:df:62:01:cb:2e:4d:5d:3e:94:f9:53:ab:b0:c7:
19:27:6e:5a:e5:6b:e2:ae:de:09:ba:1d:ab:6b:db:
4e:e6:b7:1d:c1:fa:69:be:f0:b6:36:0b:1b:f8:cb:
d1:cc:0f:1d:40:c4:7c:2b:b5:c8:22:85:d5:a9:ed:
e0:1d:35:59:00:81:df:2c:2b:b3:43:93:7d:95:47:
b0:42:4e:c7:cd:d7:fa:76:25:2b:c1:16:26:77:b8:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3B:6F:8E:A9:95:60:2E:8D:7A:DB:75:96:60:04:EF:62:88:A5:ED
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GTtvjqmVYC6Nett1lmAE72KIpe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.61.0/24
83.219.97.0/24
92.249.48.0/24
92.249.51.0/24
94.103.127.0/24
109.206.238.0/24
178.215.224.0/24
193.25.216.0/24
193.37.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a9:ea:bc:13:6f:ce:9f:b9:cf:4f:0b:fd:07:47:69:6d:4c:
8b:d1:d2:26:2a:79:2d:4f:ce:29:13:d5:82:19:cc:89:e2:4c:
3f:11:df:1e:49:a5:ac:58:fb:ad:7b:9f:bb:44:16:6d:2c:f9:
79:5f:5e:be:5d:f1:4c:5d:96:84:c0:a1:a5:25:7a:8f:84:9c:
3f:92:b5:7d:d1:ae:56:9c:b8:db:af:70:1e:58:d7:89:ff:33:
a2:56:a8:66:b7:29:7f:d0:07:a3:08:fd:15:1e:2b:32:70:f2:
ec:dc:09:a4:fe:22:0c:13:11:c1:05:e5:e6:3f:9d:d2:3f:6b:
1f:c6:4e:80:6a:dc:52:ab:32:60:0d:c1:3f:0d:c3:26:e8:4a:
ef:9b:f7:7e:49:fb:52:56:4e:d0:c9:36:81:00:19:0b:4a:99:
b6:a0:49:e6:59:02:d6:c7:5c:da:84:68:11:c3:96:bb:36:ff:
b1:22:07:86:88:45:b1:12:d3:0e:2e:c3:0e:a1:30:e9:db:94:
91:f5:29:5a:26:7c:35:b0:b4:57:cd:39:fa:7f:bf:92:6e:5a:
62:db:fa:df:09:7a:b5:42:5a:71:7f:71:3d:46:2c:2f:51:40:
45:ce:7a:c0:c6:bf:ab:2d:66:7a:db:04:80:28:3d:68:53:d7:
c9:b8:14:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org