Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nxdUqa5tkrcE180v1lO3kCdaaQc.roa
File: nxdUqa5tkrcE180v1lO3kCdaaQc.roa (raw, json)
Hash identifier: OJsQ9F2ojJ/kAh7LNhIlUtJEOJQFHr5ml/zvPEtiCL4=
Subject key identifier: 9F:17:54:A9:AE:6D:92:B7:04:D7:CD:2F:D6:53:B7:90:27:5A:69:07
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D1C5A8A6678585F04E13278892EC142E0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nxdUqa5tkrcE180v1lO3kCdaaQc.roa
Signing time: Thu 18 Jan 2024 11:35:12 +0000
ROA not before: Thu 18 Jan 2024 11:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.84.89.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.172.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
95.214.24.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:5a:8a:66:78:58:5f:04:e1:32:78:89:2e:c1:42:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 18 11:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f1754a9ae6d92b704d7cd2fd653b790275a6907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1b:d5:a6:fb:36:ba:90:b9:54:c3:94:2f:af:
77:69:f9:49:e7:eb:92:ef:fd:64:3f:4d:06:87:f3:
7e:b5:7d:1d:22:1f:eb:e2:12:d4:e3:2a:db:53:e8:
cc:84:4a:d4:17:38:8c:89:b3:ac:4c:94:17:69:29:
89:5a:2c:00:d8:b5:64:a1:8b:f1:5e:0f:8a:e0:ff:
80:eb:ac:1b:22:60:d3:9e:5c:fb:8d:01:71:f9:6b:
1d:74:f9:70:69:dc:02:d2:43:33:a7:0e:0f:92:09:
a6:4d:d0:9e:d9:bf:1c:83:12:dc:5d:cd:03:9f:72:
bc:49:a7:0c:22:c8:32:44:95:33:a4:b8:2b:23:9a:
45:22:3b:3b:8a:fe:e2:ac:9a:8c:15:df:68:38:57:
5f:ca:b6:46:23:ae:43:8e:b9:d8:ae:b9:1a:23:3a:
d0:ab:1b:77:88:0f:93:f1:6c:6c:bf:dd:d2:2b:9d:
8b:39:e6:f3:39:74:b2:f7:f0:d3:66:48:66:36:8b:
bc:ef:40:93:9d:d8:ab:1d:ca:9b:8a:2c:a0:22:d8:
62:31:d0:51:5d:ee:1d:61:b9:c4:38:2e:81:a9:c2:
2b:84:97:ea:9b:1c:4c:44:b2:aa:7c:67:6e:50:8e:
9b:3b:8a:e5:e3:3c:e3:ec:23:8b:00:fe:00:23:bc:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:17:54:A9:AE:6D:92:B7:04:D7:CD:2F:D6:53:B7:90:27:5A:69:07
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nxdUqa5tkrcE180v1lO3kCdaaQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.88.90.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.154.172.0/24
94.156.239.0/24
94.156.248.0/24
95.214.24.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.226.175.0/24
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:01:95:7b:5a:40:9e:10:f5:fd:45:fb:de:73:ed:d2:33:09:
6e:b0:95:07:d8:da:da:73:80:fa:65:22:67:b0:c0:84:f5:6a:
d5:13:d3:c6:bd:65:7b:40:69:18:20:2d:3f:28:77:3e:ed:eb:
ce:bb:45:7e:92:1a:45:93:a1:43:63:21:ed:32:20:73:a5:08:
b6:f7:81:6f:b9:5c:81:0b:be:11:84:96:c1:b4:17:33:99:e6:
0c:38:8d:45:f0:e6:4f:21:5c:06:d0:0e:bb:77:6b:13:15:ff:
96:5d:b3:8d:6a:7f:14:06:81:c5:87:18:f6:20:e6:b1:4c:4e:
28:af:93:ad:2d:2d:af:a4:7c:df:5d:d2:e3:09:18:f1:ab:d6:
d5:89:33:ee:62:8a:9f:e4:e6:4e:3f:11:f8:b2:8a:72:2f:63:
a4:6d:c1:59:46:d5:0f:6e:ca:db:61:cd:31:90:06:f7:0b:2d:
eb:b6:ab:20:51:b3:9c:b2:e5:e8:c3:67:31:68:87:b2:c4:82:
70:be:fb:ba:f6:3a:b2:58:55:91:e6:a7:27:0d:21:d8:ae:e3:
a2:6a:14:00:95:cf:a6:5e:4b:bb:32:6e:77:fc:ea:b5:ed:de:
2c:5d:8f:52:56:53:b8:70:2f:9c:a6:9d:f4:0b:7c:35:ab:eb:
ac:20:46:d1
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAY0cWopmeFhfBOEyeIkuwULgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTE4MTEzNTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjE3NTRhOWFlNmQ5MmI3MDRkN2NkMmZkNjUzYjc5MDI3NWE2OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBvVpvs2upC5VMOUL693aflJ5+uS
7/1kP00Gh/N+tX0dIh/r4hLU4yrbU+jMhErUFziMibOsTJQXaSmJWiwA2LVkoYvx
Xg+K4P+A66wbImDTnlz7jQFx+WsddPlwadwC0kMzpw4PkgmmTdCe2b8cgxLcXc0D
n3K8SacMIsgyRJUzpLgrI5pFIjs7iv7irJqMFd9oOFdfyrZGI65DjrnYrrkaIzrQ
qxt3iA+T8Wxsv93SK52LOebzOXSy9/DTZkhmNou870CTndirHcqbiiygIthiMdBR
Xe4dYbnEOC6BqcIrhJfqmxxMRLKqfGduUI6bO4rl4zzj7COLAP4AI7xQYQIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFJ8XVKmubZK3BNfNL9ZTt5AnWmkHMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbnhkVXFhNXRrcmNFMTgwdjFsTzNrQ2RhYVFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4DBAAt
VFkDBAAtWFoDBAAtl1kDBABXeFcDBABXeS0DBABXed0DBAFcd8QwDAMEAF6aoQME
Al6aoAMEAF6arAMEAF6c7wMEAF6c+AMEAF/WGDAMAwQAk05lAwQAk05mAwQCqxZI
AwQAstfgAwQAstfsAwQCudhUAwQCudpUAwQAueKtAwQAueKvAwQAufywMA0GCSqG
SIb3DQEBCwUAA4IBAQChAZV7WkCeEPX9Rfvec+3SMwlusJUH2Nrac4D6ZSJnsMCE
9WrVE9PGvWV7QGkYIC0/KHc+7evOu0V+khpFk6FDYyHtMiBzpQi294FvuVyBC74R
hJbBtBczmeYMOI1F8OZPIVwG0A67d2sTFf+WXbONan8UBoHFhxj2IOaxTE4or5Ot
LS2vpHzfXdLjCRjxq9bViTPuYoqf5OZOPxH4sopyL2OkbcFZRtUPbsrbYc0xkAb3
Cy3rtqsgUbOcsuXow2cxaIeyxIJwvvu69jqyWFWR5qcnDSHYruOiahQAlc+mXku7
Mm53/Oq17d4sXY9SVlO4cC+cpp30C3w1q+usIEbR
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:43 2024 by rpki-client on console-ams.rpki-client.org