Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vu1tTGfuGtC2TnudzJKt5fTT8NU.roa
File: vu1tTGfuGtC2TnudzJKt5fTT8NU.roa (raw, json)
Hash identifier: XymsE6rj0Xz0Ui2o7Zpaitpy7snyDZ4eHRwbcSgG/vU=
Subject key identifier: BE:ED:6D:4C:67:EE:1A:D0:B6:4E:7B:9D:CC:92:AD:E5:F4:D3:F0:D5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1CF0FEB3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vu1tTGfuGtC2TnudzJKt5fTT8NU.roa
Signing time: Mon 31 Jan 2022 12:49:01 +0000
ROA not before: Mon 31 Jan 2022 12:49:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 87.121.124.0/23 maxlen: 24
87.121.122.0/23 maxlen: 24
81.161.238.0/23 maxlen: 24
91.92.115.0/24 maxlen: 24
87.120.84.0/22 maxlen: 24
185.207.12.0/24 maxlen: 24
193.168.196.0/22 maxlen: 24
193.37.46.0/24 maxlen: 24
94.154.174.0/23 maxlen: 24
84.21.172.0/23 maxlen: 24
88.218.76.0/22 maxlen: 24
109.206.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485555891 (0x1cf0feb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 31 12:49:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beed6d4c67ee1ad0b64e7b9dcc92ade5f4d3f0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:27:fd:b8:00:37:ce:c4:79:5a:ef:3e:3e:
53:b4:a9:62:db:e6:7f:37:5c:c6:b6:17:66:7e:c5:
98:42:51:d2:50:e6:4c:7e:27:ad:a5:cd:5c:2c:0a:
5f:44:21:7b:38:da:a7:d9:54:75:58:d7:37:05:5b:
6a:f1:6d:ec:b8:d1:15:92:5f:97:56:5e:53:6d:b1:
68:c1:bd:0c:cc:e5:93:c4:dc:97:6a:68:4c:40:4b:
c9:da:d8:c7:d5:66:fe:9a:f2:01:15:a2:bf:e8:ae:
3d:95:05:6e:8b:07:74:75:c5:79:7d:30:8a:00:60:
1e:63:81:13:ce:8e:95:68:56:92:01:b2:22:5a:52:
88:14:f7:fa:93:c3:f7:16:4b:a9:ab:3d:26:f1:cb:
b5:7a:79:e0:b2:3d:a4:4d:cd:eb:25:a0:25:ad:4a:
78:79:0c:f9:c2:e3:dd:ff:7a:68:f5:b3:1e:72:21:
39:34:2e:d0:65:55:5b:72:df:6c:74:2d:52:f8:29:
81:b3:e1:ed:ed:96:10:a2:94:a0:aa:89:53:8c:b8:
12:bd:ac:ff:29:58:49:e2:ec:90:7d:10:b2:b1:a4:
11:23:0a:51:de:33:1d:f2:a6:1e:94:38:b6:ba:8c:
9f:85:36:e1:a6:18:06:d1:f5:1b:e9:25:08:fb:62:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:ED:6D:4C:67:EE:1A:D0:B6:4E:7B:9D:CC:92:AD:E5:F4:D3:F0:D5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vu1tTGfuGtC2TnudzJKt5fTT8NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.238.0/23
84.21.172.0/23
87.120.84.0/22
87.121.122.0-87.121.125.255
88.218.76.0/22
91.92.115.0/24
94.154.174.0/23
109.206.238.0/24
185.207.12.0/24
193.37.46.0/24
193.168.196.0/22
Signature Algorithm: sha256WithRSAEncryption
80:70:2f:ad:26:4c:b9:99:15:de:13:be:9b:54:9f:2e:b9:28:
ad:fd:e0:23:98:ec:58:21:30:2e:28:62:bc:d6:25:e2:7b:69:
9a:11:a4:f1:63:08:b5:d5:b9:8f:26:6b:90:74:69:42:00:af:
d3:0f:9a:1e:65:1f:1e:b4:9e:42:8b:e6:e4:df:c3:b1:0d:d6:
6a:17:ea:cb:c0:73:43:dd:05:8f:d1:e7:c0:da:2b:06:f0:e7:
08:09:0f:7d:1e:bb:51:fc:0f:ba:72:83:38:e3:d4:bc:9d:16:
80:c0:2c:60:93:24:10:eb:2f:62:de:af:57:b8:58:8e:b5:56:
67:2f:9a:d6:a3:93:c5:59:82:02:a5:08:81:9a:42:11:26:85:
01:1a:83:4d:f5:e9:d9:cc:cd:56:7f:ec:59:49:21:43:f4:03:
d0:ef:36:de:e8:40:e3:ef:d4:2f:19:12:7e:77:e4:71:d0:8b:
e3:77:68:f0:10:bd:e9:15:a9:1c:2b:4b:a3:89:f0:e4:dd:ed:
61:8c:bf:be:1e:23:8b:83:4a:a8:4a:a8:ce:f6:38:e4:e0:63:
75:0f:bd:71:49:ba:1b:26:d1:35:3b:22:33:88:92:2b:a0:6a:
02:64:7a:fd:48:02:20:68:c2:e9:ee:47:a4:b7:0d:ed:e3:d0:
b4:a8:e7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org