Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xv2WJQmhmfHqQBZdZa0j-fRbwzg.roa
File: xv2WJQmhmfHqQBZdZa0j-fRbwzg.roa (raw, json)
Hash identifier: 85kCd6D+kz+Yju0HQCmBrzyY+pavr+5riLmScP1bCgg=
Subject key identifier: C6:FD:96:25:09:A1:99:F1:EA:40:16:5D:65:AD:23:F9:F4:5B:C3:38
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01874B1AB788B27D1291ADA05E4E05D286D8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xv2WJQmhmfHqQBZdZa0j-fRbwzg.roa
Signing time: Tue 04 Apr 2023 07:10:54 +0000
ROA not before: Tue 04 Apr 2023 07:10:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 81.161.230.0/24 maxlen: 24
94.156.234.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
45.139.104.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
176.125.253.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:1a:b7:88:b2:7d:12:91:ad:a0:5e:4e:05:d2:86:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 4 07:10:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6fd962509a199f1ea40165d65ad23f9f45bc338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:40:87:76:1c:f3:65:8a:b2:b4:7d:ec:92:
e0:11:65:0d:41:61:00:a3:9c:e5:0a:3e:08:f0:45:
64:8e:32:33:1c:54:01:d1:6f:af:4d:a9:c6:ed:07:
f5:58:76:5c:ff:eb:e5:75:7c:d3:d9:75:3a:8d:08:
75:35:78:9c:f5:cc:63:42:8b:4e:2e:31:20:05:53:
21:6b:0e:86:57:45:4e:de:65:7c:ef:06:f7:22:48:
63:84:8a:3f:1d:66:6b:3b:a6:86:b3:97:ba:68:22:
b1:14:9f:76:8e:e0:cb:ab:45:8e:16:13:08:30:12:
74:9c:c0:27:b6:74:f2:25:2b:40:5f:1e:97:12:2a:
2c:b5:4d:1a:d2:07:5f:b9:f8:1d:b1:c3:c3:f5:8d:
f4:60:d3:a6:23:f5:23:c4:f4:2b:36:c9:83:7c:56:
85:a7:eb:50:26:5c:0a:89:ce:e6:a3:85:ae:94:c4:
9e:5e:40:6a:9a:02:39:cb:a9:bf:d4:66:98:31:43:
13:54:08:f4:f7:e1:18:61:25:18:03:cd:9c:40:db:
f7:dd:65:2c:0f:e0:c6:26:5c:d6:41:60:db:d5:02:
e5:2f:aa:96:f7:3b:16:aa:df:c1:0d:da:26:4f:6f:
ea:a1:b8:66:41:a8:19:a7:71:5a:f3:66:73:e5:68:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FD:96:25:09:A1:99:F1:EA:40:16:5D:65:AD:23:F9:F4:5B:C3:38
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xv2WJQmhmfHqQBZdZa0j-fRbwzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.12.255.0/24
45.66.228.0/24
45.129.84.0/24
45.129.86.0/24
45.139.104.0/24
81.161.230.0/24
94.154.162.0/24
94.156.160.0/24
94.156.234.0/24
176.125.252.0/23
178.215.226.0/24
185.222.162.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e3:ad:b8:60:b3:fe:c3:4c:88:8e:df:f3:9e:66:ce:de:e0:
df:8b:f5:31:c5:cb:f5:c7:ce:09:33:ce:0a:e5:e4:d2:fb:86:
4b:ba:0d:f5:98:ca:68:08:9a:ef:08:ef:0b:5b:63:4c:1f:2c:
9b:54:4d:ec:4a:45:94:03:39:d7:dc:4f:dd:65:6c:06:16:d6:
cb:aa:e7:81:55:98:6b:9f:f1:72:e4:82:22:7d:1b:d6:15:55:
ce:77:90:14:d9:a5:46:fc:22:61:11:59:ec:7a:96:8c:e9:b6:
0d:7f:e4:81:a3:bf:11:c9:16:bc:b0:cd:43:55:b4:a9:d4:c3:
60:ae:02:33:ef:b3:0e:d2:93:03:d7:df:34:02:a0:06:5f:45:
ab:e8:1a:38:21:f7:94:f5:96:67:58:69:6b:14:57:24:2c:44:
99:97:79:cd:96:de:72:25:98:76:1c:2f:86:ef:98:91:9b:22:
1d:0f:84:06:51:b9:f7:59:c6:f3:2a:aa:95:86:42:c1:e5:d3:
3e:d8:1b:cb:c4:60:cd:41:80:3b:60:2d:9a:fc:09:59:70:92:
fe:b3:6a:4e:30:de:9b:42:3f:d0:af:f8:54:0c:17:10:24:51:
aa:34:db:f1:ac:58:00:98:47:56:ac:eb:1c:50:f4:15:bf:e5:
65:32:9b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-ams.rpki-client.org