Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/exnXsGTSfzpejFg0Al7eAauoTcE.roa
File: exnXsGTSfzpejFg0Al7eAauoTcE.roa (raw, json)
Hash identifier: IjEDPbfufYmYhs4CF4nYffy6rJjCEJMsaD033AgmFAk=
Subject key identifier: 7B:19:D7:B0:64:D2:7F:3A:5E:8C:58:34:02:5E:DE:01:AB:A8:4D:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183A2C7CAC5373969653832E066F56E2C3C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/exnXsGTSfzpejFg0Al7eAauoTcE.roa
Signing time: Tue 04 Oct 2022 11:35:46 +0000
ROA not before: Tue 04 Oct 2022 11:35:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 212.87.206.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
194.55.184.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
92.249.51.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
109.206.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:c7:ca:c5:37:39:69:65:38:32:e0:66:f5:6e:2c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 4 11:35:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b19d7b064d27f3a5e8c5834025ede01aba84dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:f6:19:98:dc:a8:bb:21:98:58:e9:9d:a0:
d0:c4:3b:8b:43:5f:9e:74:01:cc:ea:bd:88:b2:3f:
b3:97:a1:79:71:8c:8b:c0:d4:4b:f9:14:3b:7b:1e:
87:c8:65:9b:45:0e:86:e1:2c:d4:72:9d:ed:f6:cc:
42:13:97:16:d1:cd:86:e4:e3:e5:33:80:84:76:c1:
7a:c4:cd:e9:cd:ff:57:18:ef:31:82:b7:01:69:19:
80:a7:98:6b:56:84:1b:23:f4:b8:e8:02:4c:9d:a5:
9f:7b:96:25:28:bc:71:7b:69:e5:f5:0a:0b:64:69:
0e:8f:c5:a7:06:24:9b:ab:ba:28:0d:c9:74:2a:b5:
45:7f:c3:8c:b6:3f:68:b4:96:9c:5d:8a:2f:ae:a4:
75:ba:f8:7d:6d:34:04:d7:d2:70:b7:b9:fa:93:08:
e0:c3:4b:d7:5e:ca:ab:b8:9a:c7:5d:1a:32:31:d3:
70:21:c7:84:01:37:38:2a:63:5c:d3:a8:d3:f8:05:
32:3a:63:2b:53:b9:1e:bb:75:8d:e4:22:db:40:20:
d8:ab:a7:55:c3:5a:9a:5c:6b:d8:20:55:d7:0a:2b:
6f:46:34:50:a8:eb:d3:5b:92:51:c6:d3:de:0c:5b:
c7:05:e2:33:a6:80:70:d4:90:c9:37:ef:06:9a:07:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:19:D7:B0:64:D2:7F:3A:5E:8C:58:34:02:5E:DE:01:AB:A8:4D:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/exnXsGTSfzpejFg0Al7eAauoTcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.61.0/24
83.219.97.0/24
85.217.144.0/24
92.249.48.0/24
92.249.51.0/24
94.103.127.0/24
109.206.238.0/24
178.215.224.0/24
185.252.179.0/24
193.25.216.0/24
193.37.44.0/24
193.47.60.0/24
194.55.184.0/24
212.87.206.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:9b:5f:11:ea:e5:d2:da:7a:d5:ea:83:24:57:5f:c0:38:8a:
06:ff:08:b1:32:a6:86:d7:93:08:f1:ae:65:05:92:78:48:ee:
83:09:14:60:75:0c:c0:a2:e8:71:81:1b:bd:d9:46:9e:57:55:
57:05:16:e5:67:a1:c9:3e:98:47:99:45:40:92:49:25:76:48:
04:e4:3d:f9:73:f2:c1:6d:ed:08:0a:59:63:df:9d:03:b3:23:
00:78:a5:15:62:46:54:9a:b4:b3:c9:c2:d9:fb:08:08:2d:08:
a7:a3:76:80:55:4e:b5:8b:aa:7f:d4:20:e5:a5:cc:6e:c1:db:
1a:22:80:37:20:e5:d2:f2:b3:72:ef:7e:63:b5:00:e3:94:70:
ba:46:7a:0b:1a:db:ad:3e:1d:63:37:28:02:07:33:60:e2:80:
4c:f1:e1:d8:87:b5:ba:d6:c8:79:8b:39:50:83:5e:8f:0a:b2:
18:97:19:5c:9f:0f:38:73:16:76:45:12:6c:5e:d7:8c:75:bc:
43:92:d4:77:21:49:14:44:aa:df:b8:84:bc:4a:ac:c9:1a:80:
f2:73:b4:8a:be:6f:e3:52:40:4e:3f:73:6c:64:9b:37:ac:c7:
4d:d8:62:de:ee:ec:25:98:07:c3:b9:25:1d:e7:02:f3:53:01:
31:83:7c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:16 2024 by rpki-client on console-fra.rpki-client.org