Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eaVBrXNfNv8WW6wtx94M4ARjhgU.roa
File: eaVBrXNfNv8WW6wtx94M4ARjhgU.roa (raw, json)
Hash identifier: i/Y5KmKhfwNoT0PnVouWsv6fRMNzHoIgaQel24P/p8M=
Subject key identifier: 79:A5:41:AD:73:5F:36:FF:16:5B:AC:2D:C7:DE:0C:E0:04:63:86:05
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01882F4E829EF4EC99281D210B7DDE091EDB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eaVBrXNfNv8WW6wtx94M4ARjhgU.roa
Signing time: Thu 18 May 2023 14:40:54 +0000
ROA not before: Thu 18 May 2023 14:40:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 45.9.156.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
87.120.130.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
185.246.223.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
45.139.104.0/24 maxlen: 24
82.115.210.0/23 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
171.22.31.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.250.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:4e:82:9e:f4:ec:99:28:1d:21:0b:7d:de:09:1e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 18 14:40:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79a541ad735f36ff165bac2dc7de0ce004638605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:75:12:5e:99:44:56:18:f5:91:71:8a:13:e5:
ea:57:81:77:90:69:b7:91:d2:29:96:84:17:c7:62:
21:3c:83:4b:cd:36:0c:4d:6c:15:3a:d1:ee:79:90:
ba:9b:54:af:5b:4e:0f:d2:bd:09:66:7f:7a:e6:1b:
bf:95:6b:0e:6a:15:cf:11:d3:b7:eb:db:5a:e7:75:
56:44:dd:b8:e8:e3:c7:c0:b2:be:ce:da:ca:59:51:
ee:83:5d:7d:85:c3:90:e6:58:07:72:f4:a4:60:61:
0b:28:4c:0c:c6:a4:2f:68:e8:2f:9a:db:ab:c4:b9:
7f:cc:a8:44:1b:6e:c6:6c:00:67:bd:74:4f:bc:6a:
a0:d3:92:99:1b:57:4d:1f:6e:d6:0d:67:dd:30:d4:
42:bb:96:4e:4d:cc:8c:14:ab:fa:8d:a8:90:e4:9f:
f1:4c:2b:79:d8:bf:11:76:19:03:ef:c5:fd:37:d7:
6e:03:8e:0f:76:f8:f0:38:31:81:90:c9:1d:aa:f4:
7b:99:1b:16:f9:39:22:3a:bb:8f:f5:19:e8:b8:46:
0f:b1:f2:20:c3:18:03:bb:0c:80:c2:3b:dd:42:4b:
53:0d:84:81:21:e8:13:bd:1c:11:4c:a8:75:59:ab:
6b:04:b4:69:50:e3:d1:d1:fb:07:4c:de:12:18:d1:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A5:41:AD:73:5F:36:FF:16:5B:AC:2D:C7:DE:0C:E0:04:63:86:05
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eaVBrXNfNv8WW6wtx94M4ARjhgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.12.255.0/24
45.66.228.0/24
45.129.84.0/24
45.129.86.0/24
45.139.104.0/24
45.141.158.0/24
81.161.230.0/24
81.161.239.0/24
82.115.210.0/23
83.219.97.0/24
87.120.130.0/24
87.121.124.0/23
87.121.162.0/24
87.121.220.0/24
91.200.192.0/22
93.123.39.0/24
94.154.172.0/24
94.156.160.0/24
94.156.248.0/24
94.156.250.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
171.22.31.0/24
178.215.226.0/24
185.246.223.0/24
193.35.19.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:69:3e:34:36:3b:0e:f3:5d:95:c9:b1:54:62:b6:04:df:5e:
df:f0:5f:0e:67:d8:f1:2a:b8:dd:ab:0c:8e:3c:fc:05:17:d2:
f0:19:15:7e:f8:1d:26:0e:b9:d9:0a:91:db:aa:51:22:45:32:
34:06:91:7a:01:e3:6d:7e:0c:c9:0e:2c:85:7b:f6:fe:82:1a:
96:5b:72:78:40:d7:26:e5:61:98:b3:b0:a2:0f:17:e0:27:2d:
d7:f7:1c:45:8a:a5:59:8a:ba:30:6e:35:20:f6:ce:5a:f1:d2:
7a:07:74:d6:5c:88:db:8a:1d:03:37:9d:15:2c:07:f0:91:83:
c3:44:f5:26:74:f1:fd:be:46:7c:b7:cf:01:70:37:d8:46:7e:
c2:53:f4:ae:e6:3d:42:47:fb:86:5c:bb:83:b3:82:4e:f8:b7:
ab:cc:e7:b4:9e:37:c1:71:b6:72:29:85:0a:53:3f:fd:61:d8:
3a:7e:e5:41:26:95:2f:3c:58:f2:52:c2:17:f1:44:b7:05:bb:
0c:26:a3:9b:7f:99:9c:51:43:1a:a3:a7:16:c1:24:30:d3:a0:
42:34:f1:49:c5:6a:b4:48:50:2e:e8:bf:91:9e:a9:ad:da:51:
35:b1:57:fc:5a:50:ba:70:94:5a:2e:bd:c5:ed:64:d6:00:61:
36:01:95:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:15 2024 by rpki-client on console-fra.rpki-client.org