Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ObsMAsZFLxEhOzzUXUzYfVc8lF8.roa
File: ObsMAsZFLxEhOzzUXUzYfVc8lF8.roa (raw, json)
Hash identifier: vkZcRNcKHAX+dFihtFHwmvES7qWWvl53R8NrHF8aknk=
Subject key identifier: 39:BB:0C:02:C6:45:2F:11:21:3B:3C:D4:5D:4C:D8:7D:57:3C:94:5F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184384716A76C2DD76370E3011BB66A20BB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ObsMAsZFLxEhOzzUXUzYfVc8lF8.roa
Signing time: Wed 02 Nov 2022 12:18:13 +0000
ROA not before: Wed 02 Nov 2022 12:18:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 178.215.224.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
92.249.51.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
109.206.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:47:16:a7:6c:2d:d7:63:70:e3:01:1b:b6:6a:20:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 2 12:18:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39bb0c02c6452f11213b3cd45d4cd87d573c945f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:7b:25:73:28:35:4e:f0:c5:7d:ee:93:64:
3f:ad:26:06:3d:ba:ca:fb:e6:10:3d:e7:48:1e:64:
2d:f8:a3:45:68:1b:9d:8f:6f:2d:d6:f7:ce:3d:ea:
9c:7e:98:63:05:f6:46:67:d0:96:fa:10:f1:83:f3:
0d:81:cc:70:e6:74:2d:df:b4:40:92:fe:90:0b:88:
d0:bb:8c:1a:c0:27:dc:90:34:d6:ed:2a:b1:d0:7c:
a2:f4:f0:18:f6:45:b6:f1:cc:f6:7c:a6:5e:9c:e8:
8d:4d:1c:6b:77:e9:7d:df:00:eb:5a:55:a3:e0:77:
fe:d9:f6:41:6c:31:a6:91:7f:3b:37:66:f9:91:03:
5d:e2:ce:1b:76:e2:64:d7:bc:a8:4f:68:43:09:d3:
cc:50:62:32:f3:12:71:07:23:53:74:87:eb:62:d4:
af:d5:51:16:74:63:43:0b:8f:62:8c:47:e1:f4:19:
e9:a6:fb:cc:9d:eb:32:c0:42:81:38:1e:fc:9f:71:
74:1c:8c:cd:ac:46:07:53:92:e9:42:af:55:bc:44:
c9:31:c4:c0:dc:27:d9:86:80:e9:29:ab:3e:29:70:
12:65:5a:a5:df:a1:dc:18:b9:1b:aa:fe:cb:76:66:
0a:3c:e6:5d:8e:4c:f9:c3:69:29:53:27:d8:74:69:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BB:0C:02:C6:45:2F:11:21:3B:3C:D4:5D:4C:D8:7D:57:3C:94:5F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ObsMAsZFLxEhOzzUXUzYfVc8lF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.61.0/24
83.219.97.0/24
85.217.144.0/24
92.249.48.0/24
92.249.51.0/24
94.103.127.0/24
109.206.238.0/24
178.215.224.0/24
185.252.179.0/24
193.25.216.0/24
193.37.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:50:75:1c:a7:4a:e0:78:12:d6:5a:ed:72:0b:72:4a:b4:4b:
75:bb:97:88:25:8a:8a:84:05:6f:f4:73:0b:61:31:a4:f3:a0:
c8:3b:5c:8f:37:21:36:61:36:16:26:12:74:28:fc:0b:95:cd:
76:d6:92:8e:b3:25:08:ea:50:33:fb:1c:01:d3:e5:25:32:5b:
c8:14:6f:a7:91:a5:fa:49:48:c8:b4:e5:01:13:60:28:2a:01:
fd:b7:f7:6c:c9:27:4f:92:24:bd:d9:8d:45:d3:88:e0:68:c6:
6a:c6:9a:0d:0b:32:9d:42:0b:e1:c7:f9:0a:0e:b2:6b:a7:2c:
da:98:35:45:71:1d:1d:33:90:f0:d7:0a:f3:5c:d4:b3:3f:df:
6a:82:94:80:dc:aa:84:19:17:9a:5d:64:f9:19:b7:bb:76:d0:
9e:e6:bd:de:e5:21:25:88:5a:09:e3:97:34:df:67:25:86:34:
0f:51:13:a5:04:e9:4f:d6:44:2c:6a:76:65:5e:ab:ac:1f:a9:
60:83:a4:f4:81:05:d3:8d:78:5f:c3:85:0e:a1:b4:91:66:14:
ec:f7:c5:51:8f:e0:06:1a:f5:1e:89:25:04:a8:47:d3:9b:0b:
3c:95:c0:da:68:9b:f7:cc:34:64:fb:23:d3:15:f4:72:87:cd:
03:fd:58:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org