Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YPu7Ipx7UEPeCfQoatV58JVFfrA.roa
File: YPu7Ipx7UEPeCfQoatV58JVFfrA.roa (raw, json)
Hash identifier: yOUYIDi4DAK6/HtqaeAb0DFKwpx/s8ZLe2jhCKn6224=
Subject key identifier: 60:FB:BB:22:9C:7B:50:43:DE:09:F4:28:6A:D5:79:F0:95:45:7E:B0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183A2C8B9A579DDA26FDD7CCC1196BB792B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YPu7Ipx7UEPeCfQoatV58JVFfrA.roa
Signing time: Tue 04 Oct 2022 11:36:47 +0000
ROA not before: Tue 04 Oct 2022 11:36:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
185.218.139.0/24 maxlen: 24
176.125.252.0/22 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:c8:b9:a5:79:dd:a2:6f:dd:7c:cc:11:96:bb:79:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 4 11:36:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60fbbb229c7b5043de09f4286ad579f095457eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:28:65:82:c9:93:80:85:fd:c7:bf:2b:2f:81:
c6:a5:3f:28:8f:66:00:32:e8:44:e9:b0:9e:f7:b8:
9e:35:b2:ce:98:c5:1c:f9:e3:2d:50:3c:6f:0a:00:
87:db:aa:69:c2:cc:e2:97:f2:e3:0e:28:20:84:88:
34:ef:72:83:86:83:53:fb:a4:60:f8:6e:7a:77:cd:
08:ac:71:83:dc:9b:7e:81:3b:08:c7:ba:b1:09:04:
38:d8:30:61:d3:b1:e8:4c:b7:9f:96:e2:51:4f:50:
2b:e0:c3:e9:c8:d7:18:b8:a9:8c:61:08:34:13:17:
23:88:d6:44:28:55:57:12:ee:24:30:aa:25:8a:df:
57:13:50:79:41:a8:06:70:1a:d1:14:a9:2d:5c:ac:
ac:93:98:a1:f6:05:8b:d6:15:a4:4d:1d:e3:99:26:
7d:4f:bd:37:c2:4a:bd:1e:5a:14:d5:c3:63:52:50:
04:fc:b7:55:a8:61:f4:b6:a5:07:2f:bb:18:c1:db:
0a:a1:72:fb:38:43:05:7a:97:26:8b:4f:6d:07:c7:
79:5f:f5:b8:3a:f4:3c:ae:3b:07:46:bc:15:b7:5b:
27:7f:ba:59:1a:a8:c4:3b:87:8e:ba:76:ca:ba:b0:
3c:77:8c:45:76:0d:db:bd:e0:26:c9:99:ff:c1:94:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FB:BB:22:9C:7B:50:43:DE:09:F4:28:6A:D5:79:F0:95:45:7E:B0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YPu7Ipx7UEPeCfQoatV58JVFfrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.124.0/23
164.40.185.0/24
176.125.252.0/22
185.218.137.0/24
185.218.139.0/24
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
49:77:a5:3e:03:f8:ca:45:18:0c:ab:7e:11:53:ee:70:2a:1d:
aa:a4:a3:e6:51:a4:37:98:40:53:e8:6b:cf:f4:be:3b:92:87:
e5:ad:a8:e8:3c:9b:95:46:34:43:bd:04:fe:02:eb:ec:a5:e2:
f8:f9:d3:8e:4c:c8:1f:4d:3a:1f:d1:80:1a:2a:1e:2c:99:ba:
2a:c2:2e:f3:92:28:7e:72:b3:e7:82:79:db:ab:c2:46:bd:7d:
b5:a3:85:d7:a7:5b:45:38:cc:2c:d8:bb:97:24:fd:b9:9f:a2:
78:7c:ad:2d:1b:6e:69:32:69:5a:02:3d:4a:8c:37:1d:0b:a6:
ff:74:c7:52:91:98:e4:ac:cd:db:24:94:0d:37:4a:d6:53:12:
a0:77:23:b1:3e:8f:ab:d4:8c:60:6a:45:f4:68:19:88:59:1f:
35:bf:2c:72:79:98:57:f8:e0:71:0f:20:0d:27:77:74:41:c8:
da:09:03:f2:49:6f:80:e4:b3:3a:66:34:2f:3c:02:a2:a2:4e:
d1:9b:16:f0:0c:b4:c2:40:ac:48:cd:de:0d:7a:61:85:9d:23:
c9:ce:86:c7:fd:d8:f0:99:67:a9:8c:c5:a4:a6:8e:00:89:79:
19:e2:6d:f1:38:ce:bc:d8:da:0e:7b:9b:9c:45:be:e2:76:57:
c1:43:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org