Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OWb4l0bUiBmimNACQYS-hi9TR9E.roa
File: OWb4l0bUiBmimNACQYS-hi9TR9E.roa (raw, json)
Hash identifier: +7UG5Sn+4goeCCJLDQKEUpSWTUMhLBUjp1CmpFT6Ugw=
Subject key identifier: 39:66:F8:97:46:D4:88:19:A2:98:D0:02:41:84:BE:86:2F:53:47:D1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018200801576A9CC64587D2BBB76FD642A45
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OWb4l0bUiBmimNACQYS-hi9TR9E.roa
Signing time: Fri 15 Jul 2022 06:16:10 +0000
ROA not before: Fri 15 Jul 2022 06:16:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 185.254.37.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:80:15:76:a9:cc:64:58:7d:2b:bb:76:fd:64:2a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 15 06:16:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3966f89746d48819a298d0024184be862f5347d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:19:6b:06:6d:a9:23:30:65:9c:4c:84:94:
a5:fe:a3:e3:18:6c:04:60:af:9f:5d:aa:23:d7:b6:
7b:18:cd:49:eb:db:04:23:40:f7:4b:08:e8:58:35:
59:06:29:9e:04:79:81:99:0c:dc:0e:ea:1e:04:a9:
ec:8c:54:18:28:22:ba:bc:92:fc:98:ed:a8:fa:c3:
aa:62:46:4f:5e:f1:de:cc:51:3f:ba:52:b8:03:36:
e7:b5:2a:19:3f:52:e1:7b:5e:9c:1f:49:36:26:75:
2e:6b:62:60:e9:5d:4a:51:18:a2:83:95:87:81:51:
f1:00:75:8e:92:de:6e:79:04:9c:a4:d2:6e:4e:dc:
49:f0:b5:84:dd:e2:94:bd:3f:dc:84:8e:59:1c:96:
a4:3f:59:1b:3c:bb:ab:aa:ee:36:48:8c:87:58:02:
8b:c6:0e:61:40:5e:25:90:dc:22:f7:db:56:49:9b:
47:80:92:ea:0a:f2:12:c9:71:4a:d9:8e:b4:22:d5:
7c:a4:11:1e:50:7d:ce:32:df:25:1b:08:1a:0d:34:
b7:1d:67:29:8d:b9:e5:40:99:d4:65:33:d1:6f:92:
f5:68:9e:4a:09:2b:78:67:b2:dd:f8:25:e3:6a:60:
c1:97:8e:8b:29:da:94:82:81:86:5b:45:53:1a:5f:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:66:F8:97:46:D4:88:19:A2:98:D0:02:41:84:BE:86:2F:53:47:D1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OWb4l0bUiBmimNACQYS-hi9TR9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/23
80.76.51.0/24
85.217.145.0/24
185.246.220.0/24
185.252.178.0/23
185.254.37.0/24
193.47.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:bd:61:36:ca:bc:7e:85:92:51:7a:1d:c5:cb:34:99:31:a9:
7c:8d:ac:68:dc:4d:a6:c1:58:a9:97:1e:19:dc:3c:c3:42:69:
d8:1b:c7:fa:41:e8:b3:e6:a8:23:56:dd:18:6d:da:9d:18:2b:
ab:cb:1b:c1:63:8c:f6:aa:1c:c7:d9:89:61:1b:eb:fb:56:f8:
3f:b6:70:5e:75:9e:54:f7:84:84:a8:d2:ae:46:92:45:be:c7:
2e:46:02:27:16:22:e5:7c:f9:d5:2e:76:fc:8e:2f:33:db:90:
24:2b:94:3d:79:06:b0:de:30:dd:a3:32:f6:44:f7:e5:05:e2:
a8:8e:3a:59:84:dc:33:f9:6b:ee:e6:21:68:2b:09:b7:e4:71:
63:24:40:d4:7d:c5:84:40:5b:8a:f4:22:03:94:2a:0b:40:d3:
62:d2:13:24:1c:ca:08:3d:b2:01:8b:68:b6:52:31:2b:f6:db:
1a:05:c3:7a:1b:a8:d2:38:c5:e9:4a:e3:9a:52:23:ec:5d:cf:
73:d5:b6:ff:c2:46:cb:68:9a:69:43:ef:05:05:f8:55:38:72:
25:07:18:0a:15:ca:64:e1:6c:1b:95:21:d4:ac:19:c2:81:d9:
ea:2f:27:90:b6:aa:4a:ee:17:90:d8:96:e6:cb:50:77:5b:83:
47:9c:73:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:31 2024 by rpki-client on console-ams.rpki-client.org