Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TNC738ypJGp40y80ppn9WBmiXc4.roa
File: TNC738ypJGp40y80ppn9WBmiXc4.roa (raw, json)
Hash identifier: l5BYc2ElgmopYRJN77DOFFK/QO3fI35geB9zw7QU3/I=
Subject key identifier: 4C:D0:BB:DF:CC:A9:24:6A:78:D3:2F:34:A6:99:FD:58:19:A2:5D:CE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184F5EC652B5EA4AE777BFF1DFE7F09C151
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TNC738ypJGp40y80ppn9WBmiXc4.roa
Signing time: Fri 09 Dec 2022 08:07:01 +0000
ROA not before: Fri 09 Dec 2022 08:07:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 194.55.224.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.65.0/24 maxlen: 24
194.180.51.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f5:ec:65:2b:5e:a4:ae:77:7b:ff:1d:fe:7f:09:c1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 9 08:07:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cd0bbdfcca9246a78d32f34a699fd5819a25dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:e2:6f:01:6c:5f:e1:92:45:9f:a0:05:4f:
9d:99:c1:c2:f6:94:61:f2:51:2b:f7:17:85:08:ff:
7f:5a:55:57:4f:c3:74:98:cf:97:34:18:1b:f4:af:
7f:a8:b2:7d:9c:f4:4d:63:56:32:b3:b3:ff:55:2f:
ae:d9:ea:0d:3a:c3:41:da:50:87:2b:9b:1a:f9:e8:
b9:ee:a9:0b:47:0a:71:63:79:8d:1f:01:14:1e:f9:
9d:93:ad:3c:b9:0a:d6:67:bc:0b:88:7e:75:93:fd:
f7:bd:f8:1f:c5:7f:bb:13:12:73:ef:f1:ba:5d:70:
8d:3c:03:36:2a:10:6e:6c:29:14:77:9b:5b:b7:47:
3d:2d:af:c6:c8:ee:1c:d8:f0:63:0f:60:b3:80:10:
b2:1e:52:1f:06:88:c2:2f:75:fb:f7:d1:58:dc:ce:
58:fc:6f:47:d4:ee:92:46:af:48:6c:4c:cc:38:ee:
fc:42:41:35:0a:3b:88:77:91:ab:97:4d:04:85:0e:
5b:6b:99:2a:04:7c:2b:c5:8e:ad:21:8b:da:c5:f3:
d6:8a:b6:05:ea:e0:8a:2e:53:17:89:33:90:d9:93:
3a:15:6d:29:53:81:49:bd:2d:b2:bc:f9:5b:85:76:
67:ac:be:93:d1:2c:af:7f:ba:6b:ff:f7:5d:4c:c9:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D0:BB:DF:CC:A9:24:6A:78:D3:2F:34:A6:99:FD:58:19:A2:5D:CE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TNC738ypJGp40y80ppn9WBmiXc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.64.0/23
83.219.96.0/24
84.21.173.0/24
84.54.50.0/24
94.154.162.0/24
178.215.226.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.55.224.0/23
194.55.227.0/24
194.180.51.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e0:1d:09:5b:e5:61:dd:ea:18:0b:72:e3:c8:0e:8e:c4:a2:
1a:3e:b9:c1:39:b7:49:99:26:ed:11:cd:e9:2c:7f:2b:18:77:
f6:3e:c8:3f:26:c7:ee:4d:fe:4d:7e:8c:2b:8f:20:55:11:ed:
2d:76:23:83:48:2a:df:d1:9d:78:19:24:fa:14:b0:35:73:3d:
2b:59:33:a0:23:13:99:1e:4a:a4:55:6b:6e:fa:ea:57:2d:2c:
b0:53:c7:1d:c5:1c:b9:38:f6:5d:8c:ef:aa:e5:a4:39:7e:ce:
b6:19:45:b6:81:06:00:92:70:b0:c5:1f:71:1f:43:0c:80:ca:
fe:b7:6f:6c:83:ce:b1:5d:78:57:88:07:96:fb:22:1e:fe:31:
8b:46:76:ee:32:05:38:85:9a:cf:3d:03:48:37:be:6f:a3:43:
40:07:87:7f:66:3a:28:5a:d4:97:04:07:39:b2:7e:d6:19:e2:
d3:c2:e7:fc:18:cb:03:e3:5f:3a:ad:7a:fc:7b:0d:e7:23:c0:
be:05:58:d3:93:75:83:0c:5d:65:31:be:38:89:22:58:f6:f8:
a3:24:52:02:98:a8:26:84:25:9d:f6:95:21:9f:93:ac:b4:7a:
f4:51:0a:0a:23:4a:80:52:ec:b1:92:24:de:37:96:bb:63:81:
62:1f:9e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org