Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M2GRC3FzD90_TMa45iNPHK6bhEw.roa
File: M2GRC3FzD90_TMa45iNPHK6bhEw.roa (raw, json)
Hash identifier: F75BLmrJ69lLai8DhKRbSez8vzxVMYAqpjjCp0Qe7GM=
Subject key identifier: 33:61:91:0B:71:73:0F:DD:3F:4C:C6:B8:E6:23:4F:1C:AE:9B:84:4C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01853F2EAEDFEF16E80424C1281057A4E84C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M2GRC3FzD90_TMa45iNPHK6bhEw.roa
Signing time: Fri 23 Dec 2022 13:31:41 +0000
ROA not before: Fri 23 Dec 2022 13:31:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 81.161.237.0/24 maxlen: 24
94.103.124.0/23 maxlen: 24
87.121.58.0/24 maxlen: 24
93.123.81.0/24 maxlen: 24
83.219.98.0/23 maxlen: 24
87.120.5.0/24 maxlen: 24
176.125.252.0/22 maxlen: 24
94.156.182.0/23 maxlen: 24
194.55.184.0/24 maxlen: 24
94.154.174.0/23 maxlen: 24
194.59.30.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:2e:ae:df:ef:16:e8:04:24:c1:28:10:57:a4:e8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 23 13:31:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3361910b71730fdd3f4cc6b8e6234f1cae9b844c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:90:d3:74:37:24:c0:a2:74:3c:59:84:6b:
58:d3:02:cf:12:44:77:0a:f0:67:3e:1a:31:27:28:
c9:f8:0a:fa:2a:85:7e:77:ad:c5:53:de:ab:32:16:
e7:dc:3d:74:3f:ed:0e:8f:74:ab:83:da:14:6f:46:
3e:40:6b:8b:0c:d7:53:a0:e8:e4:84:fa:4e:26:cd:
8c:c5:db:87:53:02:56:38:45:c8:36:99:29:d0:c0:
64:15:3c:05:9f:c1:de:72:8b:10:70:c7:79:3b:d5:
38:44:7b:4e:30:fb:15:e1:6f:32:0e:08:ac:07:53:
89:cf:05:f8:b6:fd:27:a7:dc:d0:4a:78:f0:75:dd:
f4:c1:92:61:40:5a:a0:3d:ab:13:d8:fd:42:64:d9:
df:2d:1a:d7:63:50:6f:00:6f:66:c6:3b:77:eb:8f:
aa:d4:2b:60:4d:fa:98:d1:75:85:7c:3f:63:22:dc:
62:31:6a:10:72:0b:85:f0:31:4f:79:8a:f5:67:a2:
51:9f:4d:8e:99:ee:8d:22:72:4f:e9:92:58:5d:0c:
72:c6:0f:45:be:ab:56:b7:3a:32:08:c3:2c:6d:cc:
16:84:81:f6:72:cb:c3:42:de:9d:9d:43:1d:39:e2:
f0:41:0f:4c:b5:ad:63:f1:87:2a:f3:3c:6b:5e:15:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:91:0B:71:73:0F:DD:3F:4C:C6:B8:E6:23:4F:1C:AE:9B:84:4C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M2GRC3FzD90_TMa45iNPHK6bhEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
83.219.98.0/23
87.120.5.0/24
87.121.58.0/24
93.123.81.0/24
94.103.124.0/23
94.154.174.0/23
94.156.182.0/23
176.125.252.0/22
194.55.184.0/24
194.59.30.0/23
Signature Algorithm: sha256WithRSAEncryption
84:61:0a:0c:64:3f:2d:bd:f9:c4:80:0e:95:2c:49:3c:0d:64:
64:f7:e3:e4:1b:f3:fc:49:9b:42:d4:a5:7a:dc:b9:d2:d8:94:
06:96:99:75:1e:48:b6:d1:dc:7b:3b:6e:17:84:f4:62:bb:8e:
41:db:5d:1b:0e:e4:42:0a:0f:da:33:2d:e6:02:1f:6c:52:55:
dc:71:78:eb:72:01:b9:22:f5:bb:e8:2d:11:7d:5c:54:70:9b:
dd:d7:a6:f2:53:eb:ca:18:53:c0:ea:df:de:27:e3:d7:0a:95:
10:71:3b:76:1c:e5:30:fd:e7:f8:da:a9:cd:1d:4e:9a:46:5e:
74:c5:a3:37:89:34:94:5b:14:24:9a:97:68:2c:ec:d0:ee:6c:
07:04:c8:42:79:53:d4:07:7e:ce:36:fa:14:da:ec:27:29:a9:
03:00:e9:f6:94:a0:1f:c1:4f:8c:07:ef:12:5c:08:5e:ac:54:
d5:81:dd:18:55:fc:38:cc:ff:fb:92:56:10:1b:c8:74:31:11:
08:1e:98:37:67:84:77:c9:53:e3:90:ac:55:cb:48:6b:32:cb:
d8:44:48:0f:e2:e0:39:7b:50:04:01:8f:4f:33:78:ff:b2:ba:
f9:66:43:71:2d:54:cd:1a:cf:08:b3:72:30:70:ad:ea:05:27:
ed:bf:f8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org