Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eZtjybgBYKalEiDm5ntcDU3ZOTM.roa
File: eZtjybgBYKalEiDm5ntcDU3ZOTM.roa (raw, json)
Hash identifier: VyI9DwgAKUUvOGlygeo+qD/MeM1ZdgKdcwwL3fBGIig=
Subject key identifier: 79:9B:63:C9:B8:01:60:A6:A5:12:20:E6:E6:7B:5C:0D:4D:D9:39:33
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190C242C71D6E3B3ADA9BF62F25DDB3BF50
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eZtjybgBYKalEiDm5ntcDU3ZOTM.roa
Signing time: Wed 17 Jul 2024 19:54:34 +0000
ROA not before: Wed 17 Jul 2024 19:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c2:42:c7:1d:6e:3b:3a:da:9b:f6:2f:25:dd:b3:bf:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 17 19:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=799b63c9b80160a6a51220e6e67b5c0d4dd93933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f8:bb:50:81:cb:8d:79:f8:2b:64:a3:b5:f6:
fd:4d:7d:8f:9b:05:14:04:8a:f4:9f:36:93:04:d4:
1f:92:88:06:fd:e1:c5:24:8f:17:99:d4:25:1d:88:
52:cf:37:22:97:e3:76:d9:b6:7f:92:5a:5f:7b:39:
f0:00:86:16:d8:99:cc:ee:5d:e4:94:07:33:c0:3c:
91:5d:59:b2:f4:f3:0b:7b:09:e5:d2:f2:5a:99:66:
df:09:58:c4:82:3e:37:a8:49:1a:5f:cd:3c:b7:cf:
92:5a:b3:d3:9f:24:70:d7:6d:4d:8e:33:09:97:2b:
43:ff:7b:42:a5:e4:56:f6:d1:86:b8:9d:34:58:76:
4a:24:e7:88:b5:db:ad:25:a8:18:34:76:41:f5:b3:
0b:1f:5b:76:51:16:46:94:b8:3b:cb:4a:b3:60:fb:
9e:0d:45:f8:97:71:08:b4:dc:c9:ae:71:04:4d:b6:
6d:0c:71:1f:68:e9:2d:fe:e4:22:5e:9e:26:92:d9:
98:62:1e:ee:4f:65:8b:bb:e9:48:e2:ec:31:b3:19:
68:e1:5a:20:a0:24:8f:aa:72:26:df:14:16:fd:79:
54:8e:9c:91:62:36:c6:71:8e:b5:2a:5b:e0:a2:96:
56:6a:4a:7a:8c:19:5e:97:14:58:91:03:89:48:d2:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9B:63:C9:B8:01:60:A6:A5:12:20:E6:E6:7B:5C:0D:4D:D9:39:33
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eZtjybgBYKalEiDm5ntcDU3ZOTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.121.38.0/24
87.121.45.0/24
87.121.221.0/24
91.92.16.0/24
92.119.196.0/23
93.123.24.0/24
94.154.160.0/22
94.156.2.0/24
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
39:56:3a:2e:2b:06:0e:b5:de:cb:73:a1:40:ce:40:95:52:81:
b5:d9:00:67:ba:b1:00:96:ce:70:f2:b1:cc:60:9a:15:5b:44:
3f:7b:ad:29:6b:80:ef:9e:67:4b:31:75:98:73:db:6b:e4:56:
98:7b:00:c2:96:e7:d6:3f:3c:c6:b4:41:74:62:7b:bb:e3:5a:
47:dc:f1:18:42:26:f9:19:06:7c:ff:31:e8:55:0f:25:b9:1e:
32:05:bc:93:f3:4b:c1:93:2d:26:52:9a:88:67:7a:39:e7:ac:
39:be:80:9c:10:28:40:88:85:95:62:c4:de:b9:54:d4:cf:cd:
03:8c:ac:93:ee:fd:9a:eb:fd:0e:86:1c:c9:95:4d:b2:79:35:
d2:c4:87:96:16:8e:dc:1c:55:75:2f:e1:2d:d4:c8:40:43:1c:
4e:a4:4c:55:d4:86:96:0b:72:35:dc:48:1b:40:bb:76:1a:45:
a0:25:f9:01:99:65:44:f6:6a:c7:80:04:73:76:0c:62:7f:79:
f4:03:2f:9b:ef:45:78:38:68:36:a0:4c:75:3c:ea:0e:d4:25:
22:44:39:80:0f:ad:26:0d:70:9b:9b:40:5f:b9:3b:09:b4:e9:
6d:92:c4:b4:62:68:da:f0:bf:38:c9:56:c3:6c:85:a1:82:74:
e4:31:95:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 09:18:59 2024 by rpki-client on console-fra.rpki-client.org