Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yXVqRoiOiVxpycQhNW1Xri76p3k.roa
File: yXVqRoiOiVxpycQhNW1Xri76p3k.roa (raw, json)
Hash identifier: iVydFoMOP6EKmEzb4xbFLLNDq6EfXBrWtOaT0t0hIkc=
Subject key identifier: C9:75:6A:46:88:8E:89:5C:69:C9:C4:21:35:6D:57:AE:2E:FA:A7:79
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183C1034AF4DBB95943917A05DE08659ADC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yXVqRoiOiVxpycQhNW1Xri76p3k.roa
Signing time: Mon 10 Oct 2022 08:29:21 +0000
ROA not before: Mon 10 Oct 2022 08:29:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
194.55.226.0/24 maxlen: 24
164.40.185.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
185.218.139.0/24 maxlen: 24
176.125.252.0/22 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:03:4a:f4:db:b9:59:43:91:7a:05:de:08:65:9a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 10 08:29:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9756a46888e895c69c9c421356d57ae2efaa779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:de:db:6f:f7:c0:83:ce:55:06:ba:e8:a4:
0d:52:36:db:9a:4d:37:8f:35:a6:a3:1c:7f:05:36:
e8:53:5a:98:a6:ac:45:8d:43:84:e4:8e:b7:a9:2a:
77:dd:4d:6e:e8:02:c6:7d:f2:87:1a:a2:9f:c8:d7:
01:ab:76:9e:cd:3c:e7:d1:1f:62:18:ab:c0:9c:a1:
d6:2d:c6:a7:5d:94:aa:ea:a1:4b:fc:c7:59:56:9a:
a6:c9:5f:2a:08:60:dc:2d:d6:69:16:e3:f5:34:6c:
51:4b:e7:ec:ff:3d:b8:9c:65:ed:19:ab:13:52:54:
3c:09:7d:e8:5f:b6:9a:e8:3f:98:2c:ff:8e:ce:5f:
a1:e9:dc:74:0b:8d:78:b7:49:52:ba:57:35:60:69:
17:bf:67:c5:59:0b:fb:bf:be:43:8c:98:a8:fe:46:
69:d1:a4:bb:b5:a6:15:a8:0c:18:3f:b1:91:29:a2:
e1:6c:c6:7e:40:c8:74:62:8c:2c:94:11:bf:c7:c4:
2d:1e:98:58:d5:a4:cd:2a:e4:c2:22:11:03:1f:ce:
25:9d:e4:0a:a0:1b:ef:c4:0e:2b:e2:53:7e:01:11:
84:11:e4:0d:8f:49:60:69:f3:bd:4e:2f:d5:4c:60:
91:be:4f:d9:e0:24:5d:d0:e4:7b:c5:47:a4:ce:cc:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:75:6A:46:88:8E:89:5C:69:C9:C4:21:35:6D:57:AE:2E:FA:A7:79
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yXVqRoiOiVxpycQhNW1Xri76p3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.124.0/23
94.154.161.0-94.154.163.255
164.40.185.0/24
176.125.252.0/22
185.218.137.0/24
185.218.139.0/24
194.48.248.0/24
194.55.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:4a:f2:81:da:a1:aa:16:21:cf:f0:63:93:75:e4:32:ad:1f:
af:8e:bc:69:31:5a:08:39:43:ca:32:8c:33:5f:33:cc:ac:9a:
92:ec:0f:2a:e2:0c:3f:61:37:9b:80:48:6a:a5:eb:36:2c:ac:
c4:4b:ea:72:53:15:fa:1c:d6:67:c5:45:92:8c:a5:6f:36:f8:
70:8c:09:74:7b:08:48:fa:f9:61:63:16:90:a7:c0:09:9d:92:
02:d9:fb:66:a6:be:05:38:a0:7c:bb:e3:ef:35:be:f1:58:00:
41:f1:6e:95:fe:6e:23:db:e7:51:ac:17:27:f9:85:49:43:24:
b7:f4:9c:cf:15:03:92:f6:c7:5a:c2:c0:d4:ba:ce:0f:41:14:
98:01:b0:60:e3:be:93:4e:14:3c:1a:2d:b2:c0:e8:44:ec:25:
3f:1e:5f:39:1e:9b:94:2a:3a:3b:52:23:1a:a6:c3:9e:fc:3c:
38:87:e6:d4:2e:bc:97:41:d3:64:57:da:82:cf:35:3d:5e:7e:
ed:57:fd:db:58:38:da:dd:f3:c1:ba:e3:fe:dd:cb:c2:64:a7:
a3:40:36:b9:ec:b0:0f:a6:2c:fa:dc:04:e5:59:8c:8a:8f:77:
2c:5b:ce:be:e1:19:a2:d3:87:e8:06:ee:62:6e:cf:29:25:87:
9c:22:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-ams.rpki-client.org