Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RJWvJgh0Po4RpVHN08VNjdduR0g.roa
File: RJWvJgh0Po4RpVHN08VNjdduR0g.roa (raw, json)
Hash identifier: IE63zroWuMNpe69poWSa+3FhPCWFytSOS6omzv6LTQM=
Subject key identifier: 44:95:AF:26:08:74:3E:8E:11:A5:51:CD:D3:C5:4D:8D:D7:6E:47:48
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184F635A252197EBB1AE240E370ACAB1F3D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RJWvJgh0Po4RpVHN08VNjdduR0g.roa
Signing time: Fri 09 Dec 2022 09:27:00 +0000
ROA not before: Fri 09 Dec 2022 09:27:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 194.55.224.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.65.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
194.180.51.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:35:a2:52:19:7e:bb:1a:e2:40:e3:70:ac:ab:1f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 9 09:27:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4495af2608743e8e11a551cdd3c54d8dd76e4748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:18:05:28:b6:15:14:9b:60:0b:d8:f0:bb:
75:67:7b:2c:69:8e:60:31:44:46:74:cd:20:5d:b3:
04:e5:7b:7f:35:55:91:54:79:ed:a6:0f:74:66:c6:
9a:e0:ce:39:3e:22:b3:ec:96:41:2b:8f:f3:61:6a:
59:ba:9d:95:7e:e0:a1:b5:87:c1:b5:c5:0f:c3:ee:
8d:3e:43:40:af:53:e1:14:ae:26:ac:d3:57:6b:30:
b8:74:b2:6a:4f:ea:eb:37:ef:63:aa:d2:6f:a0:f2:
5b:54:d7:90:33:c6:8c:e0:66:28:f3:13:28:2b:c8:
3b:4d:1e:e9:79:7d:78:86:cd:7f:04:01:9d:8b:5c:
1a:3f:9a:52:38:f7:0f:46:85:6a:ba:d5:b6:69:1d:
a3:df:41:59:c3:d2:5a:04:f8:1d:4a:5e:d7:1e:c0:
70:11:3a:43:33:7e:6b:fa:9f:73:f9:5e:91:c1:71:
25:bd:6c:d0:ef:ac:e9:a5:c5:3a:6f:58:99:35:61:
9f:3c:80:23:87:23:94:24:49:8d:d1:d4:37:a1:18:
46:a8:c6:8c:e2:85:3a:20:01:02:be:31:94:0c:29:
87:bc:a7:71:bd:d9:a4:d0:51:f6:1b:a2:be:91:cd:
6d:7d:ab:0c:c2:ba:0d:c5:68:66:13:c3:2d:d6:d3:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:95:AF:26:08:74:3E:8E:11:A5:51:CD:D3:C5:4D:8D:D7:6E:47:48
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RJWvJgh0Po4RpVHN08VNjdduR0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.64.0/23
83.219.96.0/24
84.21.173.0/24
84.54.50.0/24
94.154.162.0/24
178.215.226.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.55.224.0/23
194.55.227.0/24
194.180.38.0/23
194.180.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f6:6e:fc:19:9c:81:0c:c4:81:56:84:de:b9:1d:a0:a1:79:
87:e7:dd:23:4e:aa:d2:bf:b2:3b:b9:54:e3:0b:fd:82:5d:8f:
90:9a:59:91:20:bd:11:48:ee:6a:16:cf:a0:5f:43:f5:35:d6:
f4:71:c8:d8:f3:68:92:56:f0:d6:cc:23:ac:0b:d2:75:ba:75:
17:7e:0d:1b:a1:21:14:05:76:06:3d:da:ba:ed:a8:47:71:ae:
ee:53:73:2c:6d:5c:7f:5e:d0:96:9a:6a:71:c7:3d:8f:68:92:
50:42:7e:9a:58:5e:ed:81:33:78:15:34:f1:e1:bb:6e:5e:22:
4a:d8:f6:40:81:e6:c9:94:ef:bf:a6:89:c8:89:e8:64:9b:80:
e9:81:9b:dc:6d:f6:d3:ab:7b:00:b2:2e:75:71:4b:aa:37:90:
43:23:84:73:50:1d:c5:69:b0:79:0a:0e:9a:1a:53:45:69:f1:
a6:00:6a:37:7e:2f:87:a6:90:a2:88:02:76:f6:b3:eb:a2:37:
96:66:86:8b:f3:97:cf:90:02:dd:3e:36:13:6f:a2:dd:7d:cf:
95:3c:6e:85:3a:55:ca:7f:40:2a:00:1c:54:9e:2e:c4:e8:17:
9b:3e:57:e8:27:c4:47:af:d0:84:c7:30:0a:2e:3d:87:8b:9b:
44:f2:c3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org