Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/J9kh-QCEtLubu37hGf2eiY1BA54.roa
File: J9kh-QCEtLubu37hGf2eiY1BA54.roa (raw, json)
Hash identifier: +xJJBcMVZayU6R/VfyPXQQB1ZaqygsFiqy/t3NWM/lg=
Subject key identifier: 27:D9:21:F9:00:84:B4:BB:9B:BB:7E:E1:19:FD:9E:89:8D:41:03:9E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018810898DB2565670E492BA352A6F8D5B99
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/J9kh-QCEtLubu37hGf2eiY1BA54.roa
Signing time: Fri 12 May 2023 15:17:10 +0000
ROA not before: Fri 12 May 2023 15:17:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206003
IP address blocks: 87.121.124.0/23 maxlen: 24
81.161.230.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
185.246.223.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
82.115.210.0/23 maxlen: 24
45.139.104.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:10:89:8d:b2:56:56:70:e4:92:ba:35:2a:6f:8d:5b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 12 15:17:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27d921f90084b4bb9bbb7ee119fd9e898d41039e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:45:a6:2c:4c:8c:27:a7:c0:76:d7:96:92:
cb:77:f4:44:41:53:61:9f:8a:53:da:1d:c3:e4:6d:
41:5f:ea:74:2c:48:52:2d:9b:49:75:88:f8:e9:6e:
4b:71:a0:81:df:73:c2:bd:92:78:f0:b2:e4:14:77:
b3:2a:30:b7:57:e0:d1:65:75:ed:02:48:ff:f5:9d:
6a:33:0f:b3:1a:7f:fb:46:76:35:e8:45:ce:f9:ad:
9b:a0:1e:43:0f:f3:ca:bc:1a:ba:f9:9e:76:81:77:
7f:c1:e1:fe:c5:d2:ed:fe:36:ab:d0:86:04:f8:5e:
fa:6d:da:20:be:f3:de:f6:e2:e3:ac:d8:64:bb:5c:
44:dc:38:19:4a:e2:9a:90:73:fa:2b:08:a0:59:f5:
5f:80:c5:97:16:d8:6b:16:f6:3d:f0:10:b8:46:ef:
f9:c0:2c:5d:1f:a7:74:c1:21:c3:2a:10:44:dd:64:
1d:1f:b9:16:1c:50:30:f0:dd:34:40:e7:fe:46:81:
b8:3e:58:72:a9:63:37:8d:74:25:c7:8c:75:3c:34:
f3:ef:7d:f8:d4:c1:3c:d9:7b:01:9e:55:73:cd:bd:
15:cc:92:b8:fc:59:14:a6:70:70:9e:7e:d3:68:3f:
a9:82:72:90:15:80:0a:f4:bf:b3:af:f2:a9:29:38:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D9:21:F9:00:84:B4:BB:9B:BB:7E:E1:19:FD:9E:89:8D:41:03:9E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/J9kh-QCEtLubu37hGf2eiY1BA54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.12.255.0/24
45.66.228.0/24
45.129.84.0/24
45.129.86.0/24
45.139.104.0/24
45.141.158.0/24
81.161.230.0/24
81.161.239.0/24
82.115.210.0/23
83.219.97.0/24
87.121.124.0/23
87.121.220.0/24
91.200.192.0/22
94.154.172.0/24
94.156.160.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
178.215.226.0/24
185.246.223.0/24
193.35.19.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:71:de:4a:bc:48:7e:54:e6:66:c0:f8:f5:d9:57:be:51:42:
03:95:f3:67:3c:5d:86:fb:46:f8:a1:20:30:ce:dc:51:e6:72:
ad:d4:a3:f7:7f:d0:b4:35:e0:6d:83:31:e4:3f:9d:53:84:a5:
00:c4:69:b0:82:7c:70:c0:48:43:e5:e8:d9:46:ae:05:ed:58:
27:5b:80:ec:fa:d3:cb:51:eb:a2:40:93:e5:05:b6:26:67:11:
f9:98:6d:25:bc:7a:af:ee:91:6f:10:ba:a5:04:7d:61:98:72:
f5:94:42:4c:b8:9e:9f:ad:72:46:84:33:8f:db:e1:06:33:b4:
21:29:2b:f6:27:98:ee:39:e6:c4:df:82:12:77:a5:2c:28:6d:
ce:c4:af:e9:b0:c3:9a:d5:d2:19:ce:dc:68:a1:e6:e0:6e:0c:
3e:7a:b4:58:43:01:91:da:bb:90:73:b1:f5:6b:ac:05:af:a2:
2d:8a:fc:27:e5:f2:2a:28:ae:ee:3d:44:18:47:d2:4b:cb:93:
3a:37:34:02:32:4b:1f:26:9f:cb:9c:5c:6a:48:9b:c9:3b:34:
29:8f:99:ab:ed:4a:10:3e:a6:c9:31:28:62:3f:45:3b:5e:44:
97:1c:f8:80:bf:47:c1:64:64:e8:4c:49:d9:7a:68:dc:bf:24:
c3:0e:e5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:04 2024 by rpki-client on console-fra.rpki-client.org