Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/axeKeEsSJOc42ANdMgfFUF23JpU.roa
File: axeKeEsSJOc42ANdMgfFUF23JpU.roa (raw, json)
Hash identifier: mKlIhtHzLPuADlZvmrkN05eHmXH4uPrk4ZM/gncrAEc=
Subject key identifier: 6B:17:8A:78:4B:12:24:E7:38:D8:03:5D:32:07:C5:50:5D:B7:26:95
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018ECC398B85793CB3300E2885616D22F16D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/axeKeEsSJOc42ANdMgfFUF23JpU.roa
Signing time: Thu 11 Apr 2024 08:15:07 +0000
ROA not before: Thu 11 Apr 2024 08:15:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.156.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.72.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:39:8b:85:79:3c:b3:30:0e:28:85:61:6d:22:f1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 11 08:15:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b178a784b1224e738d8035d3207c5505db72695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:f1:b9:0c:8c:ba:27:50:97:c0:7d:6a:53:
8b:3c:1a:1d:d5:46:61:d2:16:73:1c:dd:c7:c4:fa:
6c:59:e1:0a:b0:d3:cb:67:d9:5b:90:32:f0:e5:25:
58:bc:47:40:89:df:e9:de:d7:63:e6:98:91:06:8e:
a6:36:9b:17:a6:16:12:fa:0f:45:96:00:5b:44:be:
81:63:53:f2:5d:74:90:4b:fe:3a:b3:50:f4:8f:20:
7e:9c:4f:48:81:f2:6c:c4:b3:d8:4f:5c:9a:13:1d:
93:67:81:1d:f1:6a:25:2f:bf:01:2b:69:37:6f:db:
e6:94:ce:d4:e7:6e:af:92:ec:6d:fe:0e:ff:de:6e:
6b:78:88:9f:e1:9f:b4:a9:0b:0e:54:56:46:36:d7:
4c:59:6f:96:6c:f4:11:e1:a6:47:fd:8a:44:04:35:
f3:a2:45:fb:1d:5b:2a:fa:f7:b6:c3:4d:dd:3b:08:
ae:57:f9:69:70:3e:4a:62:32:9e:c2:5f:96:43:0c:
db:a6:44:1d:86:1d:2e:7c:5a:d5:fc:66:6e:08:ce:
1d:a1:0c:fc:71:98:91:f1:d7:40:ec:9d:76:74:bb:
fd:67:58:b0:d6:15:83:75:b5:82:81:f8:c4:69:58:
11:d8:7f:c3:27:b6:c9:fb:96:09:f7:e9:8e:a8:e3:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:17:8A:78:4B:12:24:E7:38:D8:03:5D:32:07:C5:50:5D:B7:26:95
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/axeKeEsSJOc42ANdMgfFUF23JpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.88.88.0/24
45.151.89.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.72.0/23
94.156.239.0/24
95.214.25.0-95.214.26.255
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
194.48.248.0/24
194.55.186.0/24
194.55.224.0/24
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
42:33:9a:aa:7b:27:7f:76:23:8d:fc:77:6f:e6:fd:90:89:03:
c7:b9:bd:3e:c8:e4:3d:ba:32:2b:39:bd:db:13:b3:11:dd:d7:
a3:eb:24:67:a2:1e:3a:3b:e6:80:85:0d:61:2e:7e:7d:61:8c:
2b:f7:89:cf:90:55:90:15:50:14:7f:00:1a:fb:a4:5a:46:54:
60:c8:77:3c:24:a6:63:39:30:29:cf:77:40:6c:d6:17:c9:b6:
e7:ce:79:82:29:c6:f5:e3:2c:fb:d2:39:09:7b:74:7d:ae:3e:
dd:86:3f:65:f3:cf:ae:fa:54:3c:7d:38:db:25:c0:c6:5a:a0:
90:95:91:5b:27:54:d2:ae:ed:4e:e6:62:06:90:80:a4:3a:d0:
85:50:56:7d:8a:a5:ad:21:c5:ec:b9:d3:bc:43:10:b4:da:2c:
2f:a7:16:46:8c:9a:dc:88:a7:45:b3:ec:7b:fd:7a:35:99:6a:
c6:a4:40:76:a6:5c:9e:9b:6a:08:32:77:73:96:09:f6:0d:59:
6c:79:77:b4:cc:a4:0c:d3:74:b1:ed:90:0a:3b:c3:15:ae:91:
2a:23:9c:21:84:58:db:af:55:bd:21:14:bb:c2:0e:ad:21:38:
0a:9d:3d:b2:80:30:75:e2:f2:8a:d7:0c:c9:67:4b:52:56:a1:
1e:b5:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:37 2024 by rpki-client on console-ams.rpki-client.org