Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mb4G8xECHKI5oLFd_ZDua5oRmsk.roa
File: mb4G8xECHKI5oLFd_ZDua5oRmsk.roa (raw, json)
Hash identifier: Wg0cnqEvC8HCFGeHEIUCHrDDyUFx7ULuG9+hlF8XYZE=
Subject key identifier: 99:BE:06:F3:11:02:1C:A2:39:A0:B1:5D:FD:90:EE:6B:9A:11:9A:C9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D7EB7D8CB482F63DEFB42109B5B322EFC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mb4G8xECHKI5oLFd_ZDua5oRmsk.roa
Signing time: Tue 06 Feb 2024 13:59:54 +0000
ROA not before: Tue 06 Feb 2024 13:59:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.84.89.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.172.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
95.214.24.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:b7:d8:cb:48:2f:63:de:fb:42:10:9b:5b:32:2e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 6 13:59:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99be06f311021ca239a0b15dfd90ee6b9a119ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:37:eb:c9:d3:f2:98:b3:18:02:fa:6a:47:
d5:51:3d:e0:fa:59:b2:4a:02:4d:85:77:f7:c3:58:
dc:9d:ac:5c:35:e3:3c:9c:ca:d7:db:8f:aa:51:91:
e8:96:b1:a1:17:f2:dd:91:13:16:85:29:95:62:90:
6a:61:5d:52:13:fe:4e:8e:22:08:60:a0:f5:e2:6f:
a0:5c:4c:78:a9:32:1b:78:a4:77:58:68:8b:cd:a9:
a3:d4:9c:9a:d6:88:70:5e:98:83:27:4d:7e:41:e2:
db:40:d4:5e:af:86:17:13:72:01:e4:a5:66:d3:ff:
f5:12:d4:31:ac:db:48:02:6f:7b:4c:1a:ce:10:22:
20:bf:30:cc:6d:ec:f1:37:8c:5a:88:34:78:ec:fe:
3c:3e:73:ab:1d:33:2c:78:ec:e2:4d:a2:6f:3e:27:
b5:26:df:4c:dc:9e:01:d7:b7:3d:1f:51:dc:de:0d:
0f:6a:33:3c:d5:1c:f0:06:06:76:07:ad:22:8d:ba:
38:35:ad:10:79:62:2c:5f:4a:fe:ba:30:de:1d:ec:
9c:a2:4f:f3:69:a5:6f:57:1f:86:08:55:9e:fa:ee:
66:3d:5e:2a:5e:e9:0c:cf:6d:c4:45:c3:ba:3b:9e:
08:12:91:de:51:20:35:67:02:0f:40:04:69:b5:e5:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BE:06:F3:11:02:1C:A2:39:A0:B1:5D:FD:90:EE:6B:9A:11:9A:C9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mb4G8xECHKI5oLFd_ZDua5oRmsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.88.90.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.154.172.0/24
94.156.239.0/24
95.214.24.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.252.176.0/24
185.254.37.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a0:34:d8:a0:a7:89:51:a7:1a:22:a4:bd:1e:5a:07:34:d7:
fa:cf:b9:d9:21:8f:1b:3f:2f:f9:e0:f6:bb:3a:6c:da:97:df:
85:c6:51:fc:16:ed:8e:23:e5:6a:a4:3e:8a:7f:81:11:78:3f:
f0:bc:95:16:bf:6d:6c:ae:3c:e4:dd:f1:f3:dd:cd:a8:cd:31:
eb:be:26:6e:3f:64:55:d1:42:c7:71:20:22:80:8a:62:f8:47:
40:5b:04:57:74:02:af:3a:84:77:1d:ea:50:ea:9d:60:d1:bb:
d6:ba:01:ad:19:74:a9:f0:ed:9b:e7:f8:2d:2c:17:31:57:a8:
fc:ec:80:47:09:16:69:77:21:89:d6:d2:06:2a:58:6c:0a:3c:
99:d5:df:82:27:41:1c:50:7c:bd:c8:eb:65:20:92:fb:7f:a1:
44:fc:7b:81:61:36:c0:de:0a:7d:44:da:bf:ca:96:3e:ef:91:
f2:19:f1:92:94:dd:f6:c4:d6:1a:31:a8:5f:d6:f0:19:46:b8:
af:b2:f6:bf:26:c0:ae:c5:27:44:a6:a7:7e:ea:44:dc:ce:13:
34:6d:42:46:fb:8d:e9:31:3b:29:9c:9d:1c:34:c6:b6:28:5f:
e7:f9:de:c3:63:3d:92:60:89:bb:89:48:3f:47:ae:1e:2f:a8:
e2:cf:b3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:18 2024 by rpki-client on console-fra.rpki-client.org