Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IOxG0P50V-WXL3HWxr9BlWkhfiU.roa
File: IOxG0P50V-WXL3HWxr9BlWkhfiU.roa (raw, json)
Hash identifier: G9qekQcCZsrTmGypsx2iGGCAG0vPS64mkvh8wPrYhVc=
Subject key identifier: 20:EC:46:D0:FE:74:57:E5:97:2F:71:D6:C6:BF:41:95:69:21:7E:25
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01899C77DB75D399C699D6D7327DCA86D850
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IOxG0P50V-WXL3HWxr9BlWkhfiU.roa
Signing time: Fri 28 Jul 2023 12:27:27 +0000
ROA not before: Fri 28 Jul 2023 12:27:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 45.81.243.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
45.139.105.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
94.156.161.0/24 maxlen: 24
193.42.33.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
185.216.68.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:77:db:75:d3:99:c6:99:d6:d7:32:7d:ca:86:d8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 28 12:27:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20ec46d0fe7457e5972f71d6c6bf419569217e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:4f:5b:f5:a8:19:31:05:6b:76:69:23:d1:
74:32:c9:c1:6e:5c:74:a2:ec:0a:19:4d:ac:92:d9:
02:8c:1c:32:26:8a:66:a2:d7:b8:4c:6f:42:9f:d5:
b2:cd:1d:2d:43:40:ca:ee:75:a6:fc:81:e9:7e:5f:
42:f4:81:b8:75:e3:f6:19:1d:c5:24:35:d6:6c:90:
19:c2:bb:4e:ef:e2:30:77:70:44:8b:35:c0:9f:d0:
38:2b:68:a5:5f:f3:1b:77:36:48:6d:0c:4e:b8:9b:
f7:b8:1d:78:19:07:3b:84:5b:e5:42:02:fa:1e:66:
fa:62:b0:cd:f8:e5:4f:e5:d5:56:05:72:a4:1d:08:
01:a9:73:b5:52:e3:c6:cc:d9:9c:df:75:c1:67:55:
d9:ce:c1:d6:83:91:cb:25:74:46:fa:bf:08:13:d2:
5d:77:33:07:15:aa:e8:3b:df:b1:ed:7c:38:a8:10:
23:c5:b4:f1:1d:29:5f:24:f4:9d:83:00:28:2b:05:
fb:7b:f3:30:ad:7e:04:c5:75:9b:34:eb:bc:5a:63:
df:7b:a3:72:f1:ae:b2:fc:f7:ca:1b:40:6d:05:aa:
78:56:bc:3f:33:e1:c0:13:bc:75:e8:aa:38:27:67:
c0:38:db:a9:da:1d:f8:93:d6:71:cb:b4:92:7d:12:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EC:46:D0:FE:74:57:E5:97:2F:71:D6:C6:BF:41:95:69:21:7E:25
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IOxG0P50V-WXL3HWxr9BlWkhfiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/23
45.12.253.0/24
45.66.230.0/24
45.81.39.0/24
45.81.243.0/24
45.88.67.0/24
45.139.105.0/24
79.110.62.0/23
80.76.51.0/24
84.21.172.0/24
84.54.50.0/24
85.31.44.0-85.31.46.255
85.217.144.0/24
87.121.221.0/24
94.156.161.0/24
94.156.253.0/24
95.214.27.0/24
109.206.240.0/23
109.206.243.0/24
185.216.68.0/24
185.216.71.0/24
185.225.73.0-185.225.74.255
185.246.220.0/23
185.252.178.0/24
185.254.37.0/24
193.42.32.0/23
193.47.61.0/24
194.55.186.0/24
194.55.224.0/24
194.180.48.0/23
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f3:ed:7b:d5:94:59:7f:4e:82:d3:47:7b:b9:18:f0:d4:57:
8b:c2:37:e6:cc:71:a1:10:62:7f:31:aa:f4:f7:c6:2f:88:3a:
88:d4:9b:2f:ea:40:7d:31:92:5b:9c:38:dd:b0:76:b5:09:72:
bf:ae:b2:69:88:ce:12:66:4e:1f:f6:e1:54:c3:81:7f:5e:ec:
fc:77:ff:7b:4a:74:9d:a8:54:ef:98:d8:b1:f1:b6:86:ad:5f:
fa:5e:e7:fe:61:e2:93:46:e0:95:2c:88:28:f8:b3:55:d0:b5:
3f:73:71:e8:fd:35:b6:96:ce:76:01:bf:a1:63:94:0c:66:a2:
5a:3a:ac:78:78:2a:86:d9:00:e6:b2:a5:cf:98:87:c6:22:96:
14:e5:b6:1b:54:bf:89:ea:91:19:c5:f0:ee:77:63:5a:33:66:
c9:8e:8c:93:42:ee:80:e8:d2:14:c4:c0:a7:6a:2b:8f:75:2b:
0b:7d:95:d0:ab:07:2e:73:76:47:55:2b:78:fe:e8:29:08:96:
78:c1:d7:f5:41:e9:b1:8a:5a:c5:cb:20:85:b4:88:96:5f:98:
dc:a8:71:53:c4:9a:52:ce:57:59:c8:a6:5b:c9:06:5c:35:0f:
2c:e1:ee:9a:93:3c:73:29:53:d3:1f:79:26:80:35:01:43:ca:
31:eb:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:04 2024 by rpki-client on console-fra.rpki-client.org