Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y4Qryihwfw6nFcHs17YwBYq84Hk.roa
File: Y4Qryihwfw6nFcHs17YwBYq84Hk.roa (raw, json)
Hash identifier: sAorcexTXJ1f0XZtH1CIOqpwernHyW7fT8/qi5TcCgw=
Subject key identifier: 63:84:2B:CA:28:70:7F:0E:A7:15:C1:EC:D7:B6:30:05:8A:BC:E0:79
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E7447502493DB234F9BE8CFC9FD93FA51
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y4Qryihwfw6nFcHs17YwBYq84Hk.roa
Signing time: Mon 25 Mar 2024 06:23:34 +0000
ROA not before: Mon 25 Mar 2024 06:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.156.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.72.0/23 maxlen: 24
94.156.75.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:47:50:24:93:db:23:4f:9b:e8:cf:c9:fd:93:fa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 25 06:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63842bca28707f0ea715c1ecd7b630058abce079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:a3:69:31:6b:58:70:a5:9a:dc:3a:da:ca:
d0:af:c0:9c:ca:cf:85:ad:55:a1:ae:13:57:81:d2:
f9:9d:93:d4:99:a6:d3:67:39:8e:24:10:e0:92:7f:
60:5c:c4:7a:9f:44:15:92:20:e5:ce:3b:df:42:50:
97:4c:db:ad:88:b1:f9:b8:13:95:23:8d:04:2f:ed:
e8:51:79:fe:9e:d5:9b:94:07:d9:0e:5c:e0:82:4b:
15:26:6e:f6:4c:21:21:dc:22:1e:65:ef:1f:49:52:
92:1c:61:5d:10:08:05:4f:1c:6a:2b:97:f5:92:f6:
19:4d:78:f3:9d:e8:45:9f:fa:bc:21:87:d0:6f:59:
95:49:db:8a:87:74:dc:93:e2:d1:f9:55:8f:7f:dd:
4b:55:3b:b1:b5:58:30:38:c6:43:41:e5:0e:7c:fc:
af:b5:2a:94:d7:80:2e:9b:25:35:b8:f9:58:b6:74:
ba:0f:c8:ff:ba:45:61:d0:cd:75:8f:d5:23:5e:60:
53:11:3d:81:83:cb:28:c5:0c:e6:aa:da:a7:09:ee:
c7:a1:b1:d8:f3:3a:dc:a2:4d:1d:96:ae:4d:3a:5a:
96:a0:50:27:40:9b:ab:74:83:87:63:e6:74:07:92:
c6:02:64:6e:26:8f:52:c7:1e:a9:86:ae:73:9d:53:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:2B:CA:28:70:7F:0E:A7:15:C1:EC:D7:B6:30:05:8A:BC:E0:79
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y4Qryihwfw6nFcHs17YwBYq84Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.72.0/23
94.156.75.0/24
94.156.239.0/24
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.252.176.0/24
185.254.37.0/24
193.37.41.0/24
194.48.248.0/24
194.48.250.0/24
194.55.186.0/24
194.55.224.0/24
194.59.31.0/24
194.169.172.0/24
Signature Algorithm: sha256WithRSAEncryption
77:53:d6:57:e4:68:9c:4c:9e:37:b1:f6:b1:5c:8f:bb:7b:68:
2a:9e:ea:9e:8b:e4:8d:76:5e:ee:b3:2f:0c:65:92:4b:ed:81:
bf:42:6d:ed:9c:74:90:66:cf:ed:b4:19:fd:8c:a2:3c:41:6b:
0e:30:da:e9:24:18:95:a7:f3:10:6c:51:ce:5e:dc:98:65:e2:
80:78:a3:4d:3d:56:bb:49:b1:79:eb:19:c0:90:2f:7b:4a:f5:
e8:6f:fc:35:b1:6f:a7:f4:01:46:db:e9:d6:08:c7:07:2d:f2:
57:d5:26:d5:51:5c:23:2b:5b:a3:1f:88:9d:22:ab:fd:54:b8:
ed:24:58:33:67:0c:58:e5:25:48:c7:00:48:1d:6f:50:b5:26:
af:3d:77:8c:03:e4:eb:2a:8c:d3:52:aa:89:7c:f0:eb:57:a9:
d7:7c:33:18:4e:0c:93:56:ab:4f:94:4e:cb:8d:ec:45:60:83:
65:5b:b1:3a:fd:52:45:ed:8b:5b:50:4f:70:6a:10:74:29:5f:
d4:32:81:f9:76:0a:59:b8:52:77:55:d5:de:ea:29:a4:c8:8c:
39:74:3a:3a:67:1c:30:d3:4b:9f:2a:cf:6b:bd:1b:40:61:f9:
23:8e:c9:7b:f0:e2:76:64:99:85:7e:24:c7:49:73:fd:66:29:
06:4d:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:13 2024 by rpki-client on console-fra.rpki-client.org