Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RDuHkcEJG2idGxBA9YgGJKAjrrE.roa
File: RDuHkcEJG2idGxBA9YgGJKAjrrE.roa (raw, json)
Hash identifier: 1CNhVhQElSQmAWyywL3U4Rs0PIP/MPquR1iEi5xFjwM=
Subject key identifier: 44:3B:87:91:C1:09:1B:68:9D:1B:10:40:F5:88:06:24:A0:23:AE:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186081AB2570AF7E6A135B084515CD16EB6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RDuHkcEJG2idGxBA9YgGJKAjrrE.roa
Signing time: Tue 31 Jan 2023 13:53:32 +0000
ROA not before: Tue 31 Jan 2023 13:53:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 81.161.230.0/24 maxlen: 24
94.156.234.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:1a:b2:57:0a:f7:e6:a1:35:b0:84:51:5c:d1:6e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 31 13:53:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=443b8791c1091b689d1b1040f5880624a023aeb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:88:92:90:01:02:0f:14:8f:e5:a4:38:11:
a7:a0:e9:0d:03:a4:28:89:60:75:3c:b3:91:20:f3:
aa:a1:b4:ee:ac:37:91:f4:8c:f6:08:15:18:c2:b0:
95:4d:a0:8c:c3:27:5b:20:6e:4a:28:62:6f:3d:5a:
4c:c2:b5:79:dd:c8:9f:bf:d4:27:c1:90:b2:ab:d7:
80:89:aa:b5:41:c8:90:9f:42:47:73:e6:73:dc:c7:
70:fe:0b:bf:78:dc:0b:ad:80:e7:2a:a1:00:eb:9c:
b7:e4:4c:d7:ce:76:cf:fc:4c:1f:12:07:b4:63:1c:
d4:ef:ab:14:bf:ad:d9:4d:55:b8:77:5d:b3:f2:2c:
89:6a:3b:4f:2d:36:b3:f9:a8:d7:88:23:e2:f3:6d:
64:f0:b9:c8:cc:41:6e:bb:0e:20:88:11:e6:cf:2f:
92:89:bb:48:de:eb:07:2c:c6:7b:6a:ab:57:d1:e1:
53:33:9d:39:24:a3:38:82:cb:ff:85:50:47:11:87:
fe:b8:10:8e:21:ad:25:73:d1:9d:cc:1f:1a:91:75:
e0:cd:ac:19:3d:e1:fb:90:79:a5:06:30:43:9a:1c:
ef:2a:20:88:4a:01:ad:fa:fd:c9:be:16:5f:bc:09:
38:43:03:51:ae:af:d2:b6:b7:6e:00:3f:5a:d5:16:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3B:87:91:C1:09:1B:68:9D:1B:10:40:F5:88:06:24:A0:23:AE:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RDuHkcEJG2idGxBA9YgGJKAjrrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.12.255.0/24
45.66.228.0/24
45.84.91.0/24
45.88.64.0/24
45.129.84.0/24
45.129.86.0/24
81.161.230.0/24
94.154.162.0/24
94.156.160.0/24
94.156.234.0/24
185.222.160.0/24
193.42.34.0/24
193.47.60.0/24
194.55.224.0/23
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b6:26:18:d1:4d:6a:f5:8f:45:b5:4b:37:be:37:69:f0:39:
70:ed:7a:e0:35:08:5e:44:28:aa:e9:1b:c1:fe:66:94:5f:77:
af:3b:cf:1a:d9:f8:b2:66:1c:fd:95:c6:28:3f:3f:73:65:ac:
59:b5:64:25:f9:4e:62:4f:3c:45:db:53:6b:81:fc:82:e1:84:
52:b7:8c:d3:03:72:60:e2:ff:13:e5:63:6d:04:90:b3:7f:3d:
94:f6:6c:d8:a8:42:72:93:67:04:65:47:e9:d8:75:a4:1f:d2:
3b:f8:94:82:f4:02:cf:2d:3a:c9:d9:4b:d4:5f:33:6f:0c:1f:
3e:bd:c7:38:6e:6e:42:6c:48:21:35:60:56:ea:c3:5a:3e:6e:
86:c3:eb:6a:6c:83:e2:dc:2c:6a:a2:5a:f1:a5:8d:fe:36:47:
72:a5:fe:05:af:b4:1e:58:0d:b1:5f:2d:6d:b9:70:6d:3f:e5:
47:77:61:c5:61:65:3b:e1:ab:00:d2:a3:ff:94:93:32:19:94:
78:dd:e0:1a:93:70:09:f6:c7:0a:5f:d1:59:89:d7:d4:9f:4a:
a7:a8:71:21:62:c8:9d:14:a9:11:d8:ea:14:05:25:d7:49:b4:
d0:0d:79:31:34:fa:bd:23:13:4a:9a:46:33:8c:59:9b:bd:5d:
d6:a2:6a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org