Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gvYCpM79CAtO7bBEdguHYSFef_8.roa
File: gvYCpM79CAtO7bBEdguHYSFef_8.roa (raw, json)
Hash identifier: IY3qYpCTO2wnbnXNDEllSXW7LALmrTWm5pEBqIUqTH0=
Subject key identifier: 82:F6:02:A4:CE:FD:08:0B:4E:ED:B0:44:76:0B:87:61:21:5E:7F:FF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BEBFDD135E13F50734C7946036156D2D7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gvYCpM79CAtO7bBEdguHYSFef_8.roa
Signing time: Mon 20 Nov 2023 09:09:21 +0000
ROA not before: Mon 20 Nov 2023 09:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
91.92.24.0/23 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.59.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
45.88.90.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:fd:d1:35:e1:3f:50:73:4c:79:46:03:61:56:d2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 20 09:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82f602a4cefd080b4eedb044760b8761215e7fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:ca:02:91:74:40:db:46:29:27:37:33:25:
7e:d9:65:b9:54:be:19:a3:38:13:5c:52:1c:c0:95:
4d:2d:7e:37:95:ad:43:a4:8c:69:5f:79:d9:96:38:
37:d8:d9:cb:d3:59:24:5d:d7:81:5a:88:0a:65:39:
25:7b:74:b1:83:c6:65:8a:8c:0b:2b:80:ef:48:ca:
b2:af:3b:63:a5:02:e9:e3:84:ab:c4:76:c8:57:b1:
5c:e7:d5:f0:06:3d:07:91:53:02:4c:0f:a2:63:e6:
35:8e:41:77:5b:ea:5d:c3:ba:d2:88:22:0e:4c:c4:
db:86:71:4a:9b:be:6d:b6:eb:d4:f1:f6:d7:35:3d:
92:2e:8d:76:f6:5e:9e:5b:b0:0d:d9:c1:dd:91:cd:
98:a2:28:cd:e3:b7:09:64:3f:c8:68:fb:a6:93:8d:
6e:8b:da:51:a8:19:66:38:b0:77:4d:46:cd:5f:16:
72:53:cd:31:1b:e1:81:03:6a:99:16:8e:92:1b:ed:
f3:64:a6:df:8b:a4:eb:87:a9:7f:9d:42:51:94:2e:
7d:af:c2:aa:11:88:ab:4e:b8:1f:df:46:f3:0c:2e:
03:c6:1d:12:96:3f:de:d0:2a:4a:88:ae:c6:d1:28:
b3:d5:c2:ee:cd:cd:87:87:16:8f:4d:5b:88:5e:8c:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F6:02:A4:CE:FD:08:0B:4E:ED:B0:44:76:0B:87:61:21:5E:7F:FF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gvYCpM79CAtO7bBEdguHYSFef_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.151.89.0/24
87.120.33.0/24
87.120.87.0/24
87.121.45.0/24
87.121.59.0/24
87.121.220.0/23
91.92.24.0/23
92.119.196.0/23
93.123.116.0/24
94.154.161.0-94.154.163.255
94.156.78.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
176.125.255.0/24
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.226.175.0/24
185.246.223.0/24
185.252.176.0/24
194.169.174.0/24
194.180.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a8:3e:5e:38:ad:d3:23:f7:93:fa:c0:20:6b:9a:31:32:80:
df:9f:0f:c4:fc:31:61:24:19:43:db:78:43:a3:d9:bd:c2:22:
76:d1:f6:32:77:ba:b7:94:24:f1:a3:56:86:a4:12:69:b5:bf:
38:1d:ad:63:8d:64:3a:b2:bb:6b:cd:79:0f:fb:f9:88:45:6a:
b4:6a:87:c7:21:73:14:d7:6b:40:d2:d6:94:48:68:60:00:55:
48:ab:32:44:2f:da:9c:cc:51:b8:b6:45:7a:ef:bf:28:7a:08:
86:17:da:c5:71:29:a2:22:d5:33:42:f7:8f:15:80:f2:bd:c9:
f3:21:fc:e1:d7:bf:4c:1f:48:1b:2b:c4:e2:b0:3e:79:be:17:
c4:2b:22:44:8b:5d:a3:42:34:61:5f:79:1c:30:35:21:29:c1:
aa:70:32:ba:e7:a2:a8:f4:85:42:5d:1d:c9:45:53:d8:4e:f3:
5e:e4:e6:33:47:60:df:93:c3:82:32:c8:02:a6:5e:e3:1f:f7:
8f:1c:2c:96:a1:75:a1:91:c3:e5:ed:49:19:cf:98:41:e2:e3:
2c:ec:9d:d0:9b:2e:fb:a4:d7:7d:6d:68:ea:d5:4b:73:5c:88:
89:ea:13:bf:a4:42:a7:35:6d:ce:dd:db:58:dd:58:25:92:48:
78:7a:d3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:40 2024 by rpki-client on console-ams.rpki-client.org