Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ntAdxJUxciQYH_sHZ2INyLB1YII.roa
File: ntAdxJUxciQYH_sHZ2INyLB1YII.roa (raw, json)
Hash identifier: Januv6D/hSzcEvCH7/YBhe/qz1EzoiPlzrt7L9oDXWU=
Subject key identifier: 9E:D0:1D:C4:95:31:72:24:18:1F:FB:07:67:62:0D:C8:B0:75:60:82
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D41F5D71940482460C10FE337D1A57BDE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ntAdxJUxciQYH_sHZ2INyLB1YII.roa
Signing time: Thu 25 Jan 2024 18:50:46 +0000
ROA not before: Thu 25 Jan 2024 18:50:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.84.89.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.172.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
95.214.24.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:f5:d7:19:40:48:24:60:c1:0f:e3:37:d1:a5:7b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 25 18:50:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ed01dc495317224181ffb0767620dc8b0756082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:c4:af:4e:f5:cd:dd:d2:30:92:84:f4:17:
9a:08:a1:e1:a8:43:90:43:e0:38:25:aa:ef:45:1a:
5a:5a:18:d2:05:3d:59:e4:46:d1:4f:4f:7a:c1:c5:
c5:e1:01:ea:9a:b4:fe:9f:63:03:31:c7:eb:74:e2:
c1:5f:e6:99:37:b5:35:94:e1:7f:6e:1b:74:b3:0e:
f6:e0:95:45:3a:b5:7c:a0:8b:dc:39:a7:26:ba:fd:
4b:4c:78:b1:37:df:d1:32:79:73:d0:16:84:77:43:
88:3e:d2:ed:73:e9:12:df:41:62:a7:a6:91:14:49:
61:cc:75:62:83:60:05:fc:5b:48:05:ad:70:b5:5d:
c9:ae:c7:79:91:fa:db:97:a7:cc:8e:e7:ff:40:01:
f6:b9:0d:a2:30:bf:60:a0:49:91:60:9e:12:4b:c6:
de:bc:cf:cf:5d:23:fb:26:87:2a:21:d1:c9:f9:63:
cc:c1:60:b7:22:13:12:db:80:3f:57:f3:35:af:80:
42:f8:f1:f9:50:aa:64:dc:a9:5f:1d:4c:a9:73:4d:
e7:f0:26:c2:03:dc:a6:88:c4:85:d8:6d:d5:fb:0b:
47:6b:eb:45:5c:e2:92:db:5c:3f:fb:d0:40:81:3a:
c5:b7:ff:fc:5e:5f:01:0d:aa:74:ef:28:20:9a:d2:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D0:1D:C4:95:31:72:24:18:1F:FB:07:67:62:0D:C8:B0:75:60:82
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ntAdxJUxciQYH_sHZ2INyLB1YII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.88.90.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.154.172.0/24
94.156.239.0/24
95.214.24.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.252.176.0/24
194.48.251.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b2:a0:c0:fd:90:21:98:2e:27:c0:16:ea:b6:e8:cb:de:90:
36:0c:30:f2:49:d2:bb:dc:3b:54:48:b3:63:49:49:fc:29:a1:
2b:33:8b:e7:7a:39:bc:3f:a1:bb:30:56:c6:bb:c6:0a:4e:29:
2d:55:44:ff:92:2a:0d:bb:9f:f7:ad:f1:71:ca:5c:b0:e5:37:
1b:0c:9a:f5:87:d8:2f:7c:0f:c3:3b:b3:b7:ec:0b:2a:33:40:
fd:f2:97:d0:47:32:1c:9c:d6:6c:76:d1:29:a4:16:5d:f0:71:
11:0a:fb:6e:cd:e4:3e:a6:f9:6a:11:f1:2d:16:87:42:7a:fe:
b3:04:ab:e4:7f:65:bf:fd:18:f7:ec:31:dd:5f:6e:d0:be:1d:
c1:84:a5:1e:1b:e1:de:6f:15:f2:8f:7a:fe:73:90:67:2c:57:
0a:ac:de:bd:e9:6c:03:0d:57:9d:0c:3b:ff:e4:bf:f8:32:c5:
d8:66:3a:1d:36:12:a7:8c:44:05:fd:b6:1e:2e:21:b7:80:10:
be:f6:8a:12:d8:73:29:3c:85:73:5d:cc:4d:3d:7f:f9:b9:b5:
3e:6f:71:74:48:9b:b0:36:2c:b6:da:fe:84:f8:ca:4f:1b:24:
64:ce:7d:4b:e5:ef:a3:13:0b:aa:26:c1:f7:2a:05:81:4c:62:
6c:00:40:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:18 2024 by rpki-client on console-fra.rpki-client.org