Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s7RkNjLSe9rAurfFaUkv6aW2xE0.roa
File: s7RkNjLSe9rAurfFaUkv6aW2xE0.roa (raw, json)
Hash identifier: NjB/hAHBwqzv78ImGTwHCzexpyOqy7fzyoc+l/RxFb8=
Subject key identifier: B3:B4:64:36:32:D2:7B:DA:C0:BA:B7:C5:69:49:2F:E9:A5:B6:C4:4D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01852FD80D17C8582A184D3EE43B41E44C6C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s7RkNjLSe9rAurfFaUkv6aW2xE0.roa
Signing time: Tue 20 Dec 2022 14:02:46 +0000
ROA not before: Tue 20 Dec 2022 14:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 81.161.237.0/24 maxlen: 24
94.156.234.0/23 maxlen: 24
93.123.81.0/24 maxlen: 24
94.156.160.0/23 maxlen: 24
94.156.182.0/23 maxlen: 24
193.37.40.0/23 maxlen: 24
194.48.250.0/23 maxlen: 24
194.55.184.0/24 maxlen: 24
194.59.30.0/23 maxlen: 24
94.103.124.0/23 maxlen: 24
87.121.58.0/24 maxlen: 24
83.219.98.0/23 maxlen: 24
82.115.210.0/23 maxlen: 24
87.120.5.0/24 maxlen: 24
176.125.252.0/22 maxlen: 24
94.154.174.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:d8:0d:17:c8:58:2a:18:4d:3e:e4:3b:41:e4:4c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 20 14:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3b4643632d27bdac0bab7c569492fe9a5b6c44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:9f:08:47:bc:7e:e2:8d:3d:17:7c:66:df:
a5:52:83:a4:1c:af:1d:91:26:fa:9a:6b:3e:15:65:
c7:58:b1:09:6f:7a:34:3b:b3:bf:c5:d1:f5:55:d6:
95:2c:27:22:f3:ae:76:42:f5:e3:58:95:67:aa:a7:
20:d0:a6:2d:7d:44:21:e3:9e:8f:f4:e3:5b:fb:0e:
1b:a7:bb:54:15:6d:6f:1c:2d:eb:ec:e6:2f:d2:2f:
4e:fd:e7:53:13:c9:6a:5c:8b:61:4f:97:68:87:64:
f6:1b:f4:7f:1e:cf:52:38:40:5d:bb:f6:14:8d:16:
8d:df:17:17:f3:f1:83:8b:2f:c4:3a:94:5a:7b:dc:
1e:90:63:76:44:d4:36:ae:13:b0:89:f2:0f:ea:63:
09:2e:90:85:c0:78:de:f3:6a:14:8a:93:9d:63:13:
db:ef:99:45:a6:30:3b:dc:f1:fe:c3:5c:1d:dd:d3:
21:c6:9b:8f:a3:21:62:d9:c9:cc:08:98:b8:3c:a6:
1c:a6:fd:e3:d9:e5:09:4f:56:5c:05:42:8e:f3:e3:
c4:ac:59:46:a3:44:44:75:f8:97:a1:a4:70:f8:b4:
e5:11:49:02:cb:75:ca:63:d2:5f:d5:df:e5:70:26:
e4:79:01:97:58:2d:d4:7f:d6:d6:c2:ca:7b:86:8a:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B4:64:36:32:D2:7B:DA:C0:BA:B7:C5:69:49:2F:E9:A5:B6:C4:4D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s7RkNjLSe9rAurfFaUkv6aW2xE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
82.115.210.0/23
83.219.98.0/23
87.120.5.0/24
87.121.58.0/24
93.123.81.0/24
94.103.124.0/23
94.154.174.0/23
94.156.160.0/23
94.156.182.0/23
94.156.234.0/23
176.125.252.0/22
193.37.40.0/23
194.48.250.0/23
194.55.184.0/24
194.59.30.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:80:15:67:ff:26:31:b4:ed:73:3e:e5:e2:9a:fd:3d:62:91:
18:84:81:97:8b:b1:18:9f:6b:bc:04:49:65:64:30:df:5d:94:
a5:df:ce:d2:fa:f5:4e:af:08:6e:c4:bf:a8:2d:3e:bb:27:0a:
27:5e:8e:bf:7e:44:d3:b6:d7:b7:c8:7d:e0:29:b1:eb:ad:0a:
4e:b5:80:58:73:7f:5f:18:9d:16:ed:0d:38:d9:a8:ad:e2:7f:
15:08:96:8b:b3:59:cf:d8:df:f2:dc:8b:66:cf:26:86:11:cc:
53:1e:07:10:c1:58:a3:56:35:28:1d:5c:e9:a6:6c:a6:23:26:
3f:17:36:b7:1b:24:2f:39:6d:24:ac:bb:31:97:78:80:b9:e7:
b1:b0:92:5d:dd:6e:28:d2:32:89:60:a6:d0:e9:cb:b9:5d:9e:
f0:dd:e6:cf:51:17:cd:21:fb:32:02:0b:c7:81:6c:ed:8f:4f:
20:33:cf:98:96:e1:58:1a:24:99:e9:f4:dc:57:17:59:6f:67:
62:b2:1f:c9:85:a3:fa:54:47:e2:47:11:03:4c:c4:ce:b3:59:
04:8d:b0:d2:08:82:9a:de:1a:22:db:9a:29:04:42:38:cc:53:
20:56:48:bb:15:91:6c:36:59:bc:8c:fc:ac:5e:72:a3:33:b2:
e8:7a:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org