Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QHheWc50BNxqF6p-CkQW2iWsJfs.roa
File: QHheWc50BNxqF6p-CkQW2iWsJfs.roa (raw, json)
Hash identifier: EosOvBwKdYJi/ewmuhMbOJDVzGqUp0A4e3mXmuQGs/c=
Subject key identifier: 40:78:5E:59:CE:74:04:DC:6A:17:AA:7E:0A:44:16:DA:25:AC:25:FB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018774556F931729E0009D4BDA84D598BB22
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QHheWc50BNxqF6p-CkQW2iWsJfs.roa
Signing time: Wed 12 Apr 2023 07:19:28 +0000
ROA not before: Wed 12 Apr 2023 07:19:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 81.161.230.0/24 maxlen: 24
94.156.234.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
176.125.253.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:55:6f:93:17:29:e0:00:9d:4b:da:84:d5:98:bb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 12 07:19:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40785e59ce7404dc6a17aa7e0a4416da25ac25fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0c:0f:10:87:42:c3:ac:e0:1c:95:a8:01:fc:
f0:70:03:77:ab:ab:90:97:ee:4a:fe:a6:28:3b:e3:
4c:3a:6a:be:48:2e:52:7c:7d:d1:af:39:c8:6b:19:
db:f0:eb:66:0f:38:56:55:80:d7:bf:73:f2:ee:1a:
74:2d:09:37:58:e1:4d:8b:c7:dd:ae:88:02:ec:75:
ec:68:30:29:af:0c:f3:07:2c:10:57:a6:bb:90:3c:
cd:05:47:5f:9f:08:a8:41:e1:0d:71:0b:84:9a:60:
db:f0:05:71:7b:7e:1a:79:a0:39:3a:e4:92:13:9e:
a1:10:ec:34:97:f6:86:7f:e7:8d:83:59:84:b4:c8:
87:2d:9d:65:0b:84:50:3a:ad:f8:f8:1c:40:68:0d:
13:b5:47:92:81:8b:42:f5:cd:8f:02:55:64:45:60:
95:91:62:7f:17:b0:19:b5:cd:ff:1a:47:91:d3:1e:
8d:ef:a3:a8:04:58:6a:88:e1:f5:57:65:da:2d:1e:
7f:31:f1:f4:b0:68:78:27:b0:9d:b4:5b:95:e9:e5:
d3:e6:66:c4:bb:f0:60:a8:11:55:ad:58:0c:cb:60:
67:9b:30:1e:07:9d:ac:08:9e:bb:b5:28:e4:df:c6:
d1:cb:ce:65:ec:75:1b:0e:43:e7:c5:96:2e:4d:04:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:78:5E:59:CE:74:04:DC:6A:17:AA:7E:0A:44:16:DA:25:AC:25:FB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QHheWc50BNxqF6p-CkQW2iWsJfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.12.255.0/24
45.129.84.0/24
45.129.86.0/24
81.161.230.0/24
94.154.162.0/24
94.156.160.0/24
94.156.234.0/24
176.125.252.0/23
178.215.226.0/24
185.222.162.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:50:87:e4:08:25:b1:8b:27:f8:ad:d3:6c:96:31:96:f7:39:
47:c7:17:39:17:4d:33:a9:6c:3d:6f:13:b9:f4:64:0f:f4:c0:
b1:9c:25:4e:e9:51:98:8d:13:f3:51:96:82:0d:b6:be:90:76:
7f:12:59:14:94:cd:31:00:80:f0:2f:b1:36:71:a7:55:60:8e:
4f:64:00:9c:80:ce:24:23:9a:88:8a:16:62:3c:93:8e:25:ff:
0d:34:ce:2a:3e:ff:e8:c8:0f:1f:6e:5c:da:27:ef:90:45:a3:
b0:0d:64:16:79:f5:2b:2a:74:f7:da:3f:31:68:fb:68:24:62:
c3:e6:22:4c:d5:bf:75:7b:48:3c:5a:c8:34:7c:83:9b:91:1a:
d3:24:45:fb:f5:5d:4a:b5:d5:56:d4:36:84:d7:73:cc:a2:34:
32:da:d1:4d:21:a5:4b:9d:3f:74:3e:00:08:86:75:0e:9a:16:
f7:10:10:cd:0d:03:bf:e2:a2:c4:7e:73:67:77:af:8c:0e:8d:
5a:d6:79:21:26:6e:d7:e8:95:02:72:e3:ef:16:0c:a6:96:cf:
a1:d9:22:97:81:e9:cf:1c:85:52:57:7e:94:ed:0f:9b:79:5c:
3b:a4:da:b5:b0:ee:70:84:c4:62:95:94:23:e1:75:4c:34:90:
27:02:90:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org