Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qcxUiLPIec6fQXZEHdjsdh3ScTc.roa
File: qcxUiLPIec6fQXZEHdjsdh3ScTc.roa (raw, json)
Hash identifier: G0SQkffW9TbgczLxnnXwN7HtyszEyX1xw1iuN3Sk4ao=
Subject key identifier: A9:CC:54:88:B3:C8:79:CE:9F:41:76:44:1D:D8:EC:76:1D:D2:71:37
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018852862D1D41A79979C51A732FA2FAAD34
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qcxUiLPIec6fQXZEHdjsdh3ScTc.roa
Signing time: Thu 25 May 2023 10:48:25 +0000
ROA not before: Thu 25 May 2023 10:48:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206003
IP address blocks: 45.9.156.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
87.120.130.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
185.246.223.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
82.115.210.0/23 maxlen: 24
45.139.104.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.248.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
94.156.250.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:86:2d:1d:41:a7:99:79:c5:1a:73:2f:a2:fa:ad:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 25 10:48:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9cc5488b3c879ce9f4176441dd8ec761dd27137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:76:26:36:8b:62:9b:8d:a7:23:b5:6d:4a:
9c:a0:f3:0b:5a:94:aa:4a:6e:b6:97:77:99:5a:3a:
ac:2e:c4:a5:49:61:d4:c5:24:06:9b:d6:65:2c:50:
fd:df:9d:46:a0:03:2b:ef:a3:1d:e0:f7:99:a2:31:
20:80:57:9d:86:86:87:c2:ba:3b:39:7f:17:b2:d7:
4f:fb:64:fd:69:d3:ad:75:da:76:40:de:16:9b:c5:
26:12:00:fc:a5:82:64:84:e0:1c:ba:50:ea:c1:5d:
b4:6d:42:45:79:80:ce:ab:7b:80:3f:92:24:7b:0d:
12:2e:62:c8:bb:c6:c4:25:d2:8b:d9:37:2f:34:df:
f4:ef:27:c3:40:75:ba:8c:45:69:35:5d:82:b2:72:
ea:fb:45:19:2b:e6:f9:b7:c6:bb:ad:bb:4b:78:8e:
f9:1b:4b:85:80:8b:9b:c9:97:2f:ba:10:c5:4f:06:
ba:32:c9:4e:b5:5f:2d:e5:00:f0:47:37:34:cb:d7:
57:46:75:3b:7a:73:cf:e3:b2:8e:4e:60:76:f5:6b:
0e:ba:56:4d:8e:fc:f7:04:cb:00:91:db:67:0f:2d:
f2:b7:be:23:5f:8d:05:fb:cc:b1:ba:b0:4e:dc:b6:
9c:2e:d6:5e:66:6f:20:c4:b3:e7:38:9f:3a:b7:e6:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CC:54:88:B3:C8:79:CE:9F:41:76:44:1D:D8:EC:76:1D:D2:71:37
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qcxUiLPIec6fQXZEHdjsdh3ScTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.9.156.0/24
45.12.255.0/24
45.66.228.0/24
45.129.84.0/24
45.129.86.0/24
45.139.104.0/24
45.141.158.0/24
79.110.61.0/24
81.161.230.0/24
81.161.239.0/24
82.115.210.0/23
83.219.97.0/24
87.120.130.0/24
87.121.124.0/23
87.121.162.0/24
87.121.220.0/24
91.200.192.0/22
92.249.48.0/24
93.123.39.0/24
94.154.172.0/24
94.156.160.0/24
94.156.248.0/24
94.156.250.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
171.22.31.0/24
178.215.226.0/24
178.215.238.0/24
185.246.223.0/24
193.25.216.0/24
193.35.19.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:60:fd:13:b6:da:4a:c6:6c:bd:e4:ef:3b:b8:b0:03:6c:78:
44:d7:d1:1b:08:72:51:74:b8:69:55:11:a9:32:e0:55:b2:be:
f2:d3:b0:c0:0d:3b:e3:63:f7:6b:76:a2:a7:fb:2a:79:47:2e:
bf:94:89:9d:76:b5:18:9a:9f:32:a1:fc:2d:fa:e3:ef:27:4f:
87:5b:b3:ec:22:bf:85:55:93:e3:30:6b:8f:0d:86:5f:d5:32:
bd:c2:31:ff:06:6f:0c:92:94:be:c5:6c:1b:ce:bb:fb:05:9b:
af:48:87:d2:0e:32:ec:b1:a7:e1:e5:dd:5c:56:0f:0b:34:d5:
c8:ca:f5:86:2f:56:c3:87:d9:04:6c:d3:89:ee:d0:f6:86:6f:
03:59:1b:b8:f9:6d:7a:ed:7b:cc:0c:ce:e3:a5:e2:29:f8:64:
0b:84:7f:df:5e:81:ad:9b:3b:4c:14:c0:1c:50:dc:8c:dc:1f:
ed:fd:ca:a6:4c:60:e0:21:9b:45:3b:c7:9d:71:75:b6:3b:08:
0b:26:ac:5b:70:49:a1:3a:be:24:d2:6c:0b:8b:51:f2:ed:d6:
41:44:12:2c:b4:8e:58:09:40:98:12:ef:15:93:dc:a0:16:da:
8b:b6:03:02:03:be:b1:b0:c9:3b:99:03:e3:a7:c4:8d:0a:cb:
4d:1e:49:a5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:44 2024 by rpki-client on console-ams.rpki-client.org