Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JOtJpRJcHgB4i8dFxY06u9p3r28.roa
File: JOtJpRJcHgB4i8dFxY06u9p3r28.roa (raw, json)
Hash identifier: sT22jZCgUO4eXUHU8O/88OpiXJNEEV4HSK621Cx27z0=
Subject key identifier: 24:EB:49:A5:12:5C:1E:00:78:8B:C7:45:C5:8D:3A:BB:DA:77:AF:6F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183CB06546043766A0917D1B4C8DCF1F397
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JOtJpRJcHgB4i8dFxY06u9p3r28.roa
Signing time: Wed 12 Oct 2022 07:08:53 +0000
ROA not before: Wed 12 Oct 2022 07:08:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
194.55.226.0/24 maxlen: 24
164.40.185.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
185.218.139.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
176.125.252.0/22 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:06:54:60:43:76:6a:09:17:d1:b4:c8:dc:f1:f3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 12 07:08:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24eb49a5125c1e00788bc745c58d3abbda77af6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:33:39:75:eb:52:d7:dd:29:35:e1:48:9d:
2f:77:69:61:ef:e0:40:73:5d:45:42:24:a0:56:bc:
ad:7b:8e:bb:92:c5:4c:fc:f7:b5:90:e5:bd:70:e0:
b6:d3:45:af:57:97:b2:a3:3c:7e:bf:77:20:57:bd:
b5:57:e4:33:77:73:44:76:e5:f7:85:e1:05:eb:15:
a3:1c:55:71:cc:7c:68:d1:cd:3f:78:25:95:c1:1e:
6b:5d:bb:84:9a:e2:db:c5:2a:bb:66:8f:d1:b9:2b:
34:42:71:98:cc:e4:13:78:24:d4:e7:32:35:09:bf:
bb:98:60:7b:5e:14:39:43:42:8e:07:a3:7c:3c:95:
6b:7b:4a:b2:dc:60:94:b5:80:f5:d2:7d:fb:4e:f3:
82:b1:c0:a5:85:b9:f4:b1:e0:7f:c7:ef:e5:50:91:
2f:aa:40:c6:07:5e:11:9c:1b:e3:5e:ee:07:24:da:
c2:48:b3:34:e6:b7:19:d0:a2:f2:2c:1a:3a:53:b3:
e0:b4:9c:01:d3:fc:d9:86:4c:14:01:a3:15:bd:18:
01:c1:45:d7:98:2d:ab:16:99:df:a4:fb:37:d3:42:
97:e0:5a:10:be:cf:04:ad:7e:12:4c:15:aa:c8:23:
02:9f:ca:67:9d:a3:bc:a4:de:9d:41:7c:c4:bc:06:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EB:49:A5:12:5C:1E:00:78:8B:C7:45:C5:8D:3A:BB:DA:77:AF:6F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JOtJpRJcHgB4i8dFxY06u9p3r28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.49.0/24
87.121.124.0/23
94.154.161.0-94.154.163.255
164.40.185.0/24
176.125.252.0/22
185.218.137.0/24
185.218.139.0/24
193.222.98.0/24
194.48.248.0/24
194.55.226.0/24
Signature Algorithm: sha256WithRSAEncryption
90:41:ed:5c:82:79:8e:ee:c4:2e:78:81:6f:74:dc:11:de:ec:
60:d1:65:d6:23:1a:bd:1a:ff:19:a1:52:02:df:27:ee:ec:aa:
f1:80:16:99:c0:d8:0f:df:42:85:2e:a9:65:59:7a:ba:9c:dc:
89:68:3d:d8:60:55:a0:24:6d:db:45:ba:85:c3:bc:80:b3:45:
ca:da:f1:22:53:1f:6e:bd:de:5b:67:c5:91:42:55:da:2e:ad:
88:8a:4a:dc:c6:89:21:ca:9b:fe:82:0f:64:22:de:ff:f4:f5:
5d:57:a0:f3:32:aa:8d:1d:6e:df:66:e3:f9:85:a8:74:5b:13:
6c:4f:d7:e8:b8:a3:60:46:cc:60:df:68:32:c0:ee:9c:08:db:
0a:2e:e3:2a:15:57:d3:24:17:19:2d:0d:ab:14:eb:cd:59:9a:
53:47:61:45:11:d9:92:96:e0:20:6b:58:fd:98:c6:8e:49:22:
8f:03:2a:b0:64:f3:37:0b:63:5e:11:be:f3:ae:c9:62:d7:71:
84:24:3e:f7:2a:44:2f:87:7d:b4:3a:dd:2b:82:65:5c:f3:2c:
6d:6c:f3:32:4e:df:f2:71:26:d7:8b:09:6d:4b:1d:ad:10:aa:
62:e4:1e:0f:6c:91:a5:ff:98:81:86:de:82:ac:ba:fc:36:88:
db:a8:97:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org