Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wOu34IYeOUKCXaRsA_gpfEmiLjE.roa
File: wOu34IYeOUKCXaRsA_gpfEmiLjE.roa (raw, json)
Hash identifier: Y1nIHqxesSq/ajUSxUdwUOyrxiA68EMqXVSCqhoAWZQ=
Subject key identifier: C0:EB:B7:E0:86:1E:39:42:82:5D:A4:6C:03:F8:29:7C:49:A2:2E:31
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018345E919638A8595D63EC183D0960338AE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wOu34IYeOUKCXaRsA_gpfEmiLjE.roa
Signing time: Fri 16 Sep 2022 10:47:27 +0000
ROA not before: Fri 16 Sep 2022 10:47:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 185.246.223.0/24 maxlen: 24
92.249.51.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
176.125.252.0/22 maxlen: 24
94.154.160.0/24 maxlen: 24
37.139.130.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
94.154.174.0/23 maxlen: 24
109.206.238.0/24 maxlen: 24
212.87.206.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
194.55.184.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:e9:19:63:8a:85:95:d6:3e:c1:83:d0:96:03:38:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 16 10:47:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0ebb7e0861e3942825da46c03f8297c49a22e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:f5:51:03:60:be:ec:52:94:32:1b:8a:e1:
47:64:46:b6:e9:d0:b3:95:e7:bb:c8:90:a0:fb:57:
95:a2:c7:17:91:6a:aa:7e:5b:e5:e2:a6:a2:4b:f1:
29:10:1a:9d:c6:6f:24:d3:1a:6b:b0:00:a1:87:3e:
dd:3c:6a:78:be:ba:3e:a2:78:a4:88:64:07:7a:e2:
5f:05:b2:71:dd:f4:54:75:bf:39:2f:4d:7e:fb:a7:
e9:88:60:cf:57:5b:70:b2:fd:c4:f2:27:cd:1d:28:
df:32:09:b4:da:e4:dc:c6:56:c8:aa:c8:89:53:c8:
c4:cc:60:0d:2f:7b:1e:e2:9a:02:bd:c7:f2:21:a6:
4c:be:e5:4a:3b:db:0d:23:7d:8c:1c:6c:56:ac:90:
c5:74:a4:d3:30:09:1b:fa:6a:3d:3a:b8:89:5e:0c:
70:89:5f:d3:d8:44:d7:3d:f1:a4:b9:56:05:1c:1c:
91:a8:7d:74:45:3a:e3:36:44:ef:7d:ac:a7:df:52:
6e:81:42:cc:05:cf:2c:ca:b1:6f:a3:2e:e7:a6:4d:
f9:6b:24:2d:70:14:ae:9f:d0:2c:df:80:10:89:e7:
db:de:74:d4:b3:92:93:65:92:7b:8d:31:1d:43:68:
2d:0f:65:66:b8:7a:22:22:aa:3f:6f:39:77:c1:68:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:B7:E0:86:1E:39:42:82:5D:A4:6C:03:F8:29:7C:49:A2:2E:31
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wOu34IYeOUKCXaRsA_gpfEmiLjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/23
79.110.61.0/24
79.110.63.0/24
80.76.50.0/24
83.219.97.0/24
85.217.144.0/24
92.249.48.0/24
92.249.51.0/24
94.103.124.0/24
94.103.127.0/24
94.154.160.0/24
94.154.173.0-94.154.175.255
109.206.238.0/24
176.125.252.0/22
178.215.224.0/24
185.246.223.0/24
185.252.177.0/24
185.252.179.0/24
193.25.216.0/24
193.37.44.0/24
193.37.47.0/24
193.47.60.0/24
194.48.250.0/24
194.55.184.0/24
194.55.187.0/24
212.87.205.0-212.87.206.255
Signature Algorithm: sha256WithRSAEncryption
18:7f:88:3f:15:a9:d1:78:a2:8a:46:25:b2:39:29:7e:1c:da:
cd:d4:97:ce:57:66:49:07:c3:31:aa:4f:a4:3c:f7:63:88:0d:
43:dc:2f:ef:ca:40:e4:d5:86:b7:9a:d7:51:fe:c7:30:a2:42:
2f:d3:28:39:6b:96:3e:4f:57:0b:42:9e:09:0f:33:67:18:48:
d3:94:0e:e5:6f:d9:1b:a0:b1:e3:63:2e:e5:f4:8d:ac:32:9a:
52:fb:5b:ae:f2:04:71:03:5b:9e:3b:0f:d0:af:22:f3:60:b1:
c6:fd:4c:f1:f4:df:16:3b:03:99:4e:4e:90:78:fc:86:15:88:
5d:87:32:c8:1c:86:1f:9a:63:af:0c:9b:49:5f:b6:38:24:a2:
4d:aa:30:56:52:2c:20:eb:49:99:ec:f8:7d:30:6b:32:4a:f9:
3f:17:f1:c0:34:af:ec:24:26:d6:03:b0:6e:8c:76:09:10:8f:
d9:23:3f:f0:06:24:46:0e:13:27:dd:af:b7:c7:d5:d8:f7:e1:
5d:77:9e:3d:ee:5c:5f:7c:f9:d4:56:13:b2:d7:fc:8a:5b:67:
40:e6:06:b7:68:13:72:d6:4d:ab:e8:ff:6a:13:7c:5a:d8:ae:
4b:ed:de:78:7d:77:fc:84:1b:5e:e2:1e:95:fc:c9:d2:70:f5:
a7:c7:34:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org