Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q-XNOIJWOWQv5PiHQFVOQSBU2Ss.roa
File: Q-XNOIJWOWQv5PiHQFVOQSBU2Ss.roa (raw, json)
Hash identifier: E6ON3NNaTeLlrSmHnwz5raXqNi0vQ7iHAwXSnaI3vGQ=
Subject key identifier: 43:E5:CD:38:82:56:39:64:2F:E4:F8:87:40:55:4E:41:20:54:D9:2B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D83AB4442AAD10C1F30EACF0D7858D1F0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q-XNOIJWOWQv5PiHQFVOQSBU2Ss.roa
Signing time: Wed 07 Feb 2024 13:04:15 +0000
ROA not before: Wed 07 Feb 2024 13:04:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.84.89.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.172.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
95.214.24.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:ab:44:42:aa:d1:0c:1f:30:ea:cf:0d:78:58:d1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 7 13:04:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43e5cd38825639642fe4f88740554e412054d92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:43:a6:6a:95:26:c4:9e:b4:ed:ea:a6:cb:89:
30:e6:55:85:6c:d4:fd:cf:ea:6d:10:39:a9:7f:55:
0e:ca:89:d0:e6:0f:3c:bc:d7:e9:6a:46:2c:f8:0c:
f1:c6:ce:96:43:0b:d2:5c:53:41:4b:1e:16:72:83:
30:29:23:53:ef:86:ae:52:72:c4:9e:b5:33:68:fc:
b0:27:14:4a:67:8b:cd:c3:19:e6:b4:1c:8f:cb:9c:
32:22:e9:1a:55:85:df:5e:ef:c2:3d:4d:90:08:46:
4a:48:9a:9d:26:46:74:e5:e7:8e:d9:e9:d5:af:8b:
ec:4a:c5:3a:0d:b3:18:80:c9:85:07:58:bc:5f:cc:
6a:0a:69:a1:5f:82:4e:c3:a9:3c:a1:d6:ef:ae:1f:
dc:b1:31:72:87:31:1a:00:98:e6:b8:3e:ba:cf:fc:
ef:98:fb:57:03:4b:24:a9:0a:ea:58:60:c5:73:9f:
c4:54:b4:79:d3:f3:07:bb:bb:14:ec:5a:33:39:4f:
76:d9:61:26:c5:13:65:b4:7f:e5:75:52:f4:fe:0f:
7f:73:3d:fb:4b:3f:7c:63:ba:2d:35:b0:a5:80:17:
8d:6a:b6:af:f4:08:a1:3a:9c:dc:1f:bd:a8:3f:6e:
b3:a0:75:d9:34:95:00:0a:6d:ba:5f:e0:57:21:20:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E5:CD:38:82:56:39:64:2F:E4:F8:87:40:55:4E:41:20:54:D9:2B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q-XNOIJWOWQv5PiHQFVOQSBU2Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.88.90.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.154.172.0/24
94.156.239.0/24
95.214.24.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.252.176.0/24
185.254.37.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:78:ce:42:3d:92:35:ea:8f:4c:00:a3:91:9d:b2:2b:c1:c2:
55:28:14:68:ee:86:58:e4:99:4d:4a:ec:52:72:33:a6:db:bd:
03:47:c2:4f:e4:71:61:e5:73:1f:fe:2c:23:68:6e:84:6a:bc:
4f:e1:ee:20:af:51:ba:8f:51:ad:9a:92:2e:da:c2:98:33:c5:
0f:07:a5:73:68:aa:db:49:01:7c:e4:90:37:b6:c0:87:17:8a:
e3:06:6c:a9:40:9c:4a:85:bc:bd:f9:0b:8b:b8:e9:e1:9c:da:
e1:93:42:0c:e7:c5:7b:29:1b:f4:3f:50:eb:c3:12:ed:77:d8:
b2:ba:aa:aa:bd:c4:6e:28:80:59:1c:0f:33:ec:d3:d4:aa:87:
9c:e4:24:a3:fb:e1:51:b2:ce:9b:04:f5:52:20:64:4d:97:19:
d4:a5:e7:31:e4:39:00:82:d9:6a:b9:d9:ce:da:41:fc:90:15:
47:f0:f1:b5:51:34:86:6b:98:bd:dc:45:31:b1:db:0d:d2:9a:
26:cb:96:a5:c1:26:35:41:c1:fc:2e:82:77:ff:91:36:db:88:
5d:ef:4f:a4:ea:7d:0d:dc:4e:78:26:5e:a6:37:92:00:5f:97:
22:b9:9b:f6:81:54:bd:09:7b:02:22:b2:13:2b:55:73:b9:93:
e7:98:66:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:06 2024 by rpki-client on console-fra.rpki-client.org