Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cPQDx1TPaPSbYpTbWO08s06n40Y.roa
File: cPQDx1TPaPSbYpTbWO08s06n40Y.roa (raw, json)
Hash identifier: XpnG0VpMHQrFHrj8RYyQvPrezN8f80TTOWWbF8SDX5A=
Subject key identifier: 70:F4:03:C7:54:CF:68:F4:9B:62:94:DB:58:ED:3C:B3:4E:A7:E3:46
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EEFAC8AE668D3961ABE815F9012CA3086
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cPQDx1TPaPSbYpTbWO08s06n40Y.roa
Signing time: Thu 18 Apr 2024 05:27:26 +0000
ROA not before: Thu 18 Apr 2024 05:27:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.156.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
85.209.133.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.163.0/24 maxlen: 24
94.156.72.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ef:ac:8a:e6:68:d3:96:1a:be:81:5f:90:12:ca:30:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 18 05:27:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70f403c754cf68f49b6294db58ed3cb34ea7e346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:06:1a:35:29:d2:bd:05:9c:a3:d6:bb:a7:02:
f0:15:07:ee:f9:a5:f8:9c:99:99:3e:96:d2:80:e2:
27:16:cf:84:b8:ff:07:e8:80:87:77:43:86:b0:b2:
0a:2a:06:7f:6b:b0:8c:05:71:a9:76:de:d9:a7:f7:
47:14:37:2e:94:5f:5d:99:ee:d3:f1:33:57:66:b5:
a4:01:d6:38:91:54:97:fc:2c:52:25:76:99:6e:93:
9f:21:df:da:b1:a3:8a:c6:66:dd:a6:2c:a9:f3:fd:
c9:06:8f:4f:1a:2c:3f:68:d9:b4:85:47:7d:8b:90:
86:c0:a7:f3:76:05:8f:f0:80:a6:7b:7b:9a:1a:27:
e5:43:2b:74:e0:c6:50:e0:73:ef:80:eb:23:bd:02:
79:a7:de:d3:ad:60:e5:aa:e8:e0:7a:71:01:2e:f1:
27:8e:5f:ba:ef:6a:c4:62:53:7d:cc:1a:79:b5:6e:
08:32:ea:83:7e:9e:b1:bf:4f:3e:8e:a6:da:38:34:
84:c7:ea:86:76:71:c2:3c:5a:01:72:b3:ef:68:08:
45:30:1b:fc:b1:bd:91:a2:c7:b3:ad:a5:59:56:6e:
65:fc:05:6d:f7:48:c0:98:97:4f:f8:6e:46:41:cd:
86:05:9e:16:d9:7e:83:c5:52:a9:34:58:c5:ce:e0:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F4:03:C7:54:CF:68:F4:9B:62:94:DB:58:ED:3C:B3:4E:A7:E3:46
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cPQDx1TPaPSbYpTbWO08s06n40Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.88.88.0/24
45.151.89.0/24
83.219.97.0/24
84.21.174.0/23
85.209.133.0/24
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.72.0/23
94.156.239.0/24
95.214.25.0-95.214.26.255
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
194.48.248.0/24
194.55.186.0/24
194.55.224.0/24
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:30:45:c7:65:a0:b8:fd:2f:28:2d:56:bc:31:c0:71:63:6c:
f6:41:72:ae:a3:45:fd:80:3f:ef:45:4b:09:ad:8a:f2:9a:52:
04:07:b5:52:cf:50:db:b0:d9:b9:77:eb:4e:c9:0a:64:ad:9f:
e1:9d:7d:3c:7d:bd:67:6d:3a:8f:7b:dc:9b:ae:44:48:4c:05:
5b:0d:7e:45:c2:ca:62:53:d0:a3:bb:63:ab:3c:a2:c7:e9:60:
ff:84:b5:8b:55:ed:3f:e7:00:fd:07:2d:42:29:83:fd:1a:e2:
28:65:44:dc:1f:c9:d2:f0:7c:9d:ec:0d:37:91:6a:c3:0b:97:
01:ea:7e:02:d4:56:33:34:3a:75:7e:4c:79:ed:2c:4d:91:ed:
6e:3a:b8:4a:5b:30:1b:1c:9c:29:d9:47:4b:a5:1a:d4:a3:25:
1a:ce:87:a3:fd:b6:a4:b6:f3:b0:6b:81:23:ec:f2:0d:86:66:
63:f4:36:5f:e7:94:c3:88:e9:7d:2e:a2:6f:6f:08:94:e2:ba:
fd:0f:65:6c:17:5f:59:28:92:2f:8c:44:74:84:b7:98:48:02:
2f:8b:36:1b:be:42:df:af:bd:43:6e:39:1f:91:30:82:ef:63:
82:cb:b3:04:88:b9:ed:77:76:7b:17:a7:fc:95:d4:05:7e:51:
9d:08:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:38 2024 by rpki-client on console-ams.rpki-client.org