Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jRCZsVGqbJ6wIPo2d0s4az9b-IY.roa
File: jRCZsVGqbJ6wIPo2d0s4az9b-IY.roa (raw, json)
Hash identifier: YQqS/mboK/+kP+SgqNNUDq5CVd5FmSjcBFUZyqaJC5U=
Subject key identifier: 8D:10:99:B1:51:AA:6C:9E:B0:20:FA:36:77:4B:38:6B:3F:5B:F8:86
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DD00E836D10615B874D173AC875E1EB85
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jRCZsVGqbJ6wIPo2d0s4az9b-IY.roa
Signing time: Thu 22 Feb 2024 09:03:48 +0000
ROA not before: Thu 22 Feb 2024 09:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.84.89.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
95.214.24.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:0e:83:6d:10:61:5b:87:4d:17:3a:c8:75:e1:eb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 22 09:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d1099b151aa6c9eb020fa36774b386b3f5bf886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:ad:14:46:e9:3e:5d:c8:0d:58:db:35:ca:
42:66:f2:1a:a9:cf:fe:94:1b:1a:56:7b:86:98:4b:
cb:48:3b:ba:fe:32:23:b7:a6:3c:d6:87:12:87:a0:
f2:da:8a:f6:0a:59:92:bf:25:57:91:61:f3:52:26:
ae:e7:91:1b:b9:e7:32:25:fa:19:2c:a0:fc:d9:b8:
a3:40:35:da:b6:ce:08:46:27:78:ee:be:4a:68:6c:
24:0c:17:68:d6:3e:48:31:ec:3b:c4:1f:ca:2c:64:
3f:86:54:55:4a:bc:80:6e:73:61:e1:e9:72:8a:4f:
93:4b:72:5f:22:a5:9e:92:34:f3:c4:7c:21:4e:b7:
36:81:78:9b:86:0f:81:8c:14:13:f8:9e:df:e5:95:
67:cc:91:5f:04:c1:a5:e1:65:e7:7b:05:42:55:90:
8c:28:52:f4:56:1f:48:fe:ce:12:56:d4:ef:28:c5:
60:04:18:e8:50:ce:b6:4b:08:5d:13:12:9b:c9:d9:
4e:8e:a8:80:6b:12:fe:29:87:e2:a1:fb:f9:48:b8:
3c:b1:32:b3:52:a6:0d:13:4c:96:97:ad:83:ca:37:
ec:16:b4:7f:6c:29:5d:9a:b9:33:f4:c5:9c:f2:11:
e6:8a:c1:24:c6:b3:71:7c:fe:f0:84:1d:8f:b8:f1:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:10:99:B1:51:AA:6C:9E:B0:20:FA:36:77:4B:38:6B:3F:5B:F8:86
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jRCZsVGqbJ6wIPo2d0s4az9b-IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.239.0/24
95.214.24.0/24
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.252.176.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:0d:19:04:04:46:02:bb:79:1c:a4:d1:90:f1:19:f0:ea:c9:
4b:ef:9c:61:84:2d:87:42:18:5a:c4:22:10:ba:35:bb:d2:6f:
de:d1:2e:be:17:a4:87:7d:0c:e7:c5:d4:eb:95:2c:38:52:41:
14:47:76:d7:da:d4:5e:b5:90:d4:80:4a:dc:50:f7:d5:15:3a:
68:32:bd:09:76:e3:b6:5e:f8:83:84:13:5a:51:99:94:a8:14:
40:21:db:cd:e7:e1:fc:19:2b:61:d5:90:ca:dc:17:42:48:77:
2d:ca:04:69:78:e3:b3:15:19:f8:64:46:7c:90:41:12:44:03:
e7:cd:23:5d:48:46:4b:8b:b0:35:ca:27:cd:b4:4a:9e:9a:88:
78:a5:80:d4:5d:23:aa:b9:b3:f6:f0:e7:4b:06:8c:28:69:ff:
3e:80:66:a7:38:53:2d:6c:cf:1b:b7:52:d0:80:57:40:ec:df:
9f:e1:dd:30:62:f2:9b:d8:32:42:ec:0a:f5:a2:d2:34:00:10:
65:ee:47:85:f1:06:82:db:5f:b7:da:a0:12:f2:bd:75:29:15:
92:45:8a:fe:1e:9c:56:c3:64:40:3c:49:dc:72:ea:a5:e5:40:
3c:b6:ce:95:24:52:3a:61:af:a8:46:5a:4e:20:b8:53:d6:09:
76:84:ff:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:33 2024 by rpki-client on console-ams.rpki-client.org