Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bN6a9nu4UQEnMslcy3KCJ_8mKmA.roa
File: bN6a9nu4UQEnMslcy3KCJ_8mKmA.roa (raw, json)
Hash identifier: MzKciuhbFEKmRQlS8Hol6uKH+wGk1QHZtahNIRQmup8=
Subject key identifier: 6C:DE:9A:F6:7B:B8:51:01:27:32:C9:5C:CB:72:82:27:FF:26:2A:60
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E651A31C435BCF5030C9E8132A774DE45
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bN6a9nu4UQEnMslcy3KCJ_8mKmA.roa
Signing time: Fri 22 Mar 2024 07:39:59 +0000
ROA not before: Fri 22 Mar 2024 07:39:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.253.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
94.156.75.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:1a:31:c4:35:bc:f5:03:0c:9e:81:32:a7:74:de:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 22 07:39:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cde9af67bb851012732c95ccb728227ff262a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0e:c2:14:2a:a8:c1:a3:f5:82:4d:99:b9:bd:
e3:b0:b3:1c:34:d5:6b:59:1e:55:d3:85:73:06:1e:
3d:e2:84:82:37:6f:0c:99:43:07:1f:46:17:81:f4:
68:90:8b:46:c1:54:3a:34:39:a3:3b:04:90:04:9d:
0c:53:91:f0:a8:09:bb:3d:a3:35:20:56:b5:cb:82:
6c:3b:57:e4:e1:8e:cc:9a:27:6c:79:52:21:71:82:
d8:99:0d:94:2f:9d:d1:4a:c2:f9:57:93:58:e2:c0:
c8:75:71:b2:23:70:d6:2a:af:33:07:c3:a2:4e:5c:
86:3e:ce:e6:8a:18:9f:eb:20:8d:c3:00:ab:5c:f8:
8e:c1:7a:14:af:a0:7a:37:1e:b6:43:45:84:85:a4:
17:71:84:d4:43:ed:dc:57:d1:95:ce:78:11:78:7f:
bb:7d:05:aa:bf:71:d0:9f:04:03:8b:35:4c:ad:7a:
22:50:a7:87:72:9a:c7:9b:0e:50:11:bc:48:44:e1:
d5:ef:d1:eb:6d:1e:8a:2a:52:ba:58:28:a9:51:8a:
1a:c6:e4:18:19:94:b4:39:b6:f4:88:6a:dc:c4:0e:
83:ae:2d:bc:81:b0:db:c4:46:86:fc:38:aa:7e:3b:
3c:ae:c3:23:71:3d:88:ac:ee:6c:9f:0a:fb:40:f0:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DE:9A:F6:7B:B8:51:01:27:32:C9:5C:CB:72:82:27:FF:26:2A:60
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bN6a9nu4UQEnMslcy3KCJ_8mKmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
83.219.97.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
94.156.75.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
185.222.160.0-185.222.162.255
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.55.187.0/24
194.55.225.0/24
194.59.31.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e1:03:3b:92:2c:af:0f:21:19:24:d0:32:69:60:c0:48:91:
13:d6:98:26:1e:d0:13:0a:fd:f4:25:0c:0a:eb:b8:92:6a:31:
b3:99:c2:24:5f:c8:52:fa:ee:da:5e:cc:b2:47:c1:07:3d:e6:
2c:40:4a:ab:b7:8e:12:65:79:e8:a6:3d:af:cb:b1:fc:3c:b5:
20:d5:75:b1:8c:2a:04:2f:fb:37:26:b3:e2:30:43:f9:b8:a9:
55:16:88:49:3f:3c:6f:29:26:92:3c:03:09:4e:52:96:24:7a:
fa:cf:5d:11:d9:ed:1b:c2:c2:72:73:7d:7b:9a:a3:b0:0b:1d:
e8:dd:15:8c:02:2e:4f:29:d7:d9:19:43:8f:38:ac:69:33:70:
d7:ff:b3:e0:78:ad:fd:24:1d:be:05:fb:b6:12:0f:db:bd:ad:
eb:37:8f:cc:0e:c5:7e:b9:58:f4:2a:c3:ba:8f:1a:69:a0:57:
5a:4c:fb:b8:db:9c:7b:ab:aa:3d:ce:c0:a4:e8:5a:58:38:77:
e8:6f:11:02:f6:81:4d:0c:92:06:68:8f:7a:13:ba:4e:01:01:
0f:85:22:9a:fe:2b:c7:12:6f:5f:66:d0:3f:54:97:9d:7c:06:
d7:11:29:57:2f:35:ef:29:22:c6:0a:1e:91:da:28:1a:63:49:
0a:b9:0a:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:14 2024 by rpki-client on console-fra.rpki-client.org