Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RogMHU5PpJO0f8MP6tv0u7icPNc.roa
File: RogMHU5PpJO0f8MP6tv0u7icPNc.roa (raw, json)
Hash identifier: WSx4X5U5KtGWd0CKwUn8G/Zw17cF/oizde9twKTCR88=
Subject key identifier: 46:88:0C:1D:4E:4F:A4:93:B4:7F:C3:0F:EA:DB:F4:BB:B8:9C:3C:D7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185299D086D1771FBB5CBC9DE58F70F1F75
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RogMHU5PpJO0f8MP6tv0u7icPNc.roa
Signing time: Mon 19 Dec 2022 09:00:35 +0000
ROA not before: Mon 19 Dec 2022 09:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 194.55.224.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
45.12.252.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.65.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:9d:08:6d:17:71:fb:b5:cb:c9:de:58:f7:0f:1f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 19 09:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46880c1d4e4fa493b47fc30feadbf4bbb89c3cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:d4:8c:a9:09:29:28:49:b7:0e:96:a8:91:
c8:79:32:0f:49:68:5a:29:1d:c9:d0:f7:8b:c7:4e:
81:b1:4e:7e:5f:89:8d:2d:ca:c6:16:0c:a5:eb:10:
24:16:c6:7c:9f:f1:5f:1d:9e:c0:e4:f4:1a:10:fb:
53:50:40:11:49:c6:40:e1:36:3b:07:16:20:28:c2:
bf:20:94:ed:46:ed:a9:ae:93:a7:20:94:79:73:1c:
30:9d:e8:94:3f:65:d2:79:27:28:3b:ce:a5:48:f6:
c9:af:8b:9b:a6:09:cf:59:29:cc:d0:7f:7c:65:4b:
78:f9:55:3c:4f:c4:5f:7c:ea:e9:a1:3c:b8:d4:f2:
23:ff:e8:0c:6c:0e:14:95:3d:f2:95:80:7d:4d:c3:
54:f7:0b:75:0b:8b:33:1d:4c:1e:1f:7a:1e:82:28:
f1:aa:cd:55:c7:3d:98:a0:1b:8f:80:a1:83:30:90:
bc:b8:e4:be:48:c1:f7:04:20:4e:31:8e:8f:71:e8:
63:ea:ee:91:ad:61:3c:50:f5:18:b6:75:c3:1f:5e:
08:7e:61:1a:73:1a:6e:34:84:3f:fa:9c:9a:43:c4:
3c:34:08:ff:af:26:5a:4e:2d:26:25:76:8d:d7:71:
18:49:34:5a:36:a6:46:3b:1a:42:9a:2e:a5:9c:90:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:88:0C:1D:4E:4F:A4:93:B4:7F:C3:0F:EA:DB:F4:BB:B8:9C:3C:D7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RogMHU5PpJO0f8MP6tv0u7icPNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.252.0/24
45.88.64.0/23
83.219.96.0/24
84.54.50.0/24
94.154.162.0/24
178.215.226.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.55.224.0/23
194.180.38.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:47:f2:52:ae:90:a6:c8:e7:58:2a:66:a2:57:28:3b:87:94:
c5:0c:25:fb:b1:3b:f2:79:8f:ae:c3:67:8d:c8:d6:ad:90:f8:
f4:63:e4:84:f4:5e:16:94:57:5c:62:6b:9f:1e:b6:51:62:95:
6c:82:d7:bb:db:25:d7:08:29:d7:ef:25:c1:21:68:8d:c3:be:
ac:80:f8:59:6d:42:a4:88:ee:88:72:cd:b7:f0:22:ab:a1:fe:
9c:19:b5:32:f2:ca:50:e4:b9:34:b1:0e:a9:ce:01:9a:e0:26:
16:43:1f:7e:11:6d:ff:96:57:e6:7c:1f:15:e9:d5:e1:f6:0d:
2a:04:bb:17:07:2e:8f:66:c0:bf:d6:60:c9:94:34:96:ee:4c:
7b:ee:1d:e7:93:a1:9f:68:6b:a2:19:a5:49:bb:0e:c7:d1:84:
b6:75:6e:bd:20:33:c5:c5:0f:a8:36:9d:4b:27:a4:72:15:d7:
97:9e:08:59:7e:7a:89:89:b6:d7:0f:17:2f:39:97:df:2d:ac:
2f:c7:e0:cb:c0:ad:cf:c1:65:54:cc:76:16:7e:1d:30:0f:cc:
e2:4f:8f:46:fb:08:84:39:1e:bb:d9:92:eb:79:7f:44:5f:00:
67:a6:a9:06:23:69:5a:36:64:83:5b:1a:30:1c:93:96:7b:52:
e3:34:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org