Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ItF9KaPvzXcoyBF_DpJ3qV__qgs.roa
File: ItF9KaPvzXcoyBF_DpJ3qV__qgs.roa (raw, json)
Hash identifier: UTa1BrvXhoqGydE/t3+4j7WudFVRyWxshvkA8GmQXuw=
Subject key identifier: 22:D1:7D:29:A3:EF:CD:77:28:C8:11:7F:0E:92:77:A9:5F:FF:AA:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01888BFD97378D59AAB75FB29924C0F1DD66
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ItF9KaPvzXcoyBF_DpJ3qV__qgs.roa
Signing time: Mon 05 Jun 2023 14:37:12 +0000
ROA not before: Mon 05 Jun 2023 14:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
94.103.126.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:fd:97:37:8d:59:aa:b7:5f:b2:99:24:c0:f1:dd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 5 14:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22d17d29a3efcd7728c8117f0e9277a95fffaa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:47:39:06:77:ac:fa:66:2d:34:44:65:8f:dd:
42:f1:2e:87:bf:19:e4:c2:38:ed:d8:75:b7:bb:e5:
d8:82:72:89:2e:c4:31:55:6b:cc:c1:ba:1a:9b:52:
56:62:82:d2:c2:86:08:ac:fa:29:6b:2f:ee:56:8e:
3b:62:3b:aa:42:b6:89:b0:99:c8:96:f5:83:65:d9:
46:e3:23:14:3b:b7:26:48:d2:a3:92:e0:f9:ef:59:
2a:02:ea:b3:ea:14:84:6a:48:00:43:ca:9a:36:23:
eb:fb:57:dc:27:95:fb:f9:bc:59:9c:1c:29:d5:85:
fd:7c:e5:59:d1:00:6a:69:b7:8b:80:ba:6d:db:8c:
07:b9:e5:42:da:a9:9b:d8:47:9c:80:7c:e7:33:4c:
0f:f5:83:c1:de:5f:1d:88:d3:4a:65:e4:7b:ba:7c:
f8:78:fb:78:a0:f8:d7:3d:c0:00:7f:1b:30:c4:75:
e7:2b:50:78:f4:45:82:b4:21:fe:c8:ae:67:69:40:
0a:e5:13:c6:cb:ef:ba:38:6d:20:a6:db:f4:56:58:
44:20:bc:20:3f:f3:40:7f:a5:ff:00:37:a3:4f:de:
a8:d0:1a:21:68:a7:3d:44:44:1e:d8:c3:bb:f1:4b:
b5:63:b2:5c:a4:62:88:62:32:f0:73:d3:6a:6b:b2:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D1:7D:29:A3:EF:CD:77:28:C8:11:7F:0E:92:77:A9:5F:FF:AA:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ItF9KaPvzXcoyBF_DpJ3qV__qgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
92.119.196.0/23
94.103.126.0/24
94.154.161.0-94.154.163.255
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.236.0/24
185.216.70.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2c:d9:6c:1e:ba:23:43:b1:f2:a0:c6:a1:eb:0d:53:25:d0:
37:b5:58:2c:fd:e0:55:b6:c1:4a:c7:27:a1:62:fe:40:1e:70:
ef:dc:1a:ea:e6:06:f0:f6:16:57:07:07:3f:65:9a:87:ee:ab:
2e:bb:84:31:dc:1c:2c:ed:53:71:7b:c6:76:c5:95:4b:dc:3e:
1d:7d:fb:c3:0e:24:37:54:67:76:cd:33:76:ca:2f:39:e2:6f:
23:a8:9c:68:19:4a:89:fd:5b:0e:3c:9d:2d:f1:2d:47:b6:60:
6b:bc:16:35:2c:a7:e4:5b:52:5f:15:07:e6:e8:16:90:d2:90:
4b:5a:cd:52:07:0f:a9:16:25:ca:65:0c:cf:50:76:5e:38:39:
99:e5:bf:8b:90:56:42:82:bb:9a:90:8b:66:aa:22:cc:3c:1c:
c4:ca:5f:85:30:e1:b2:04:0e:49:67:ab:9b:30:1a:eb:4d:ad:
6d:0b:95:91:d6:f6:e7:f5:1c:f2:76:bf:a0:e5:4d:60:43:b5:
82:40:ad:40:57:59:2b:2e:72:ba:42:01:ef:60:4c:10:be:1b:
78:92:ea:3f:39:3d:56:70:c6:ea:16:34:5d:14:92:75:ff:b7:
20:4a:b9:06:d0:31:c0:25:40:bb:b6:4a:96:b1:47:7c:a3:ca:
a2:c6:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:04 2024 by rpki-client on console-fra.rpki-client.org