Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/xxqcnR0eCvU3q2m11w57_-h1sB0.roa
File: xxqcnR0eCvU3q2m11w57_-h1sB0.roa (raw, json)
Hash identifier: 5CmXgFK25SiVxr2SPQJyZATiaD49eGc+isJtIq+68bo=
Subject key identifier: C7:1A:9C:9D:1D:1E:0A:F5:37:AB:69:B5:D7:0E:7B:FF:E8:75:B0:1D
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0185F2D37453F6BF69EAE20D7126B36B32B2
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/xxqcnR0eCvU3q2m11w57_-h1sB0.roa
Signing time: Fri 27 Jan 2023 10:43:42 +0000
ROA not before: Fri 27 Jan 2023 10:43:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.39.242.0/24 maxlen: 24
194.56.152.0/23 maxlen: 24
94.231.198.0/24 maxlen: 24
91.242.81.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
91.242.107.0/24 maxlen: 24
45.89.44.0/22 maxlen: 24
185.40.105.0/24 maxlen: 24
194.242.28.0/23 maxlen: 24
86.104.19.0/24 maxlen: 24
193.46.211.0/24 maxlen: 24
193.203.127.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
91.242.70.0/23 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/24 maxlen: 24
91.242.75.0/24 maxlen: 24
89.40.161.0/24 maxlen: 24
86.104.192.0/24 maxlen: 24
45.140.32.0/22 maxlen: 22
80.94.81.0/24 maxlen: 24
80.94.80.0/24 maxlen: 24
80.94.80.0/23 maxlen: 23
45.67.117.0/24 maxlen: 24
45.15.64.0/24 maxlen: 24
91.239.59.0/24 maxlen: 24
45.15.64.0/22 maxlen: 22
45.15.66.0/24 maxlen: 24
45.15.67.0/24 maxlen: 24
45.15.65.0/24 maxlen: 24
45.150.180.0/22 maxlen: 22
194.213.10.0/24 maxlen: 24
185.173.247.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:d3:74:53:f6:bf:69:ea:e2:0d:71:26:b3:6b:32:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 27 10:43:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c71a9c9d1d1e0af537ab69b5d70e7bffe875b01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:7b:34:c3:fb:80:14:16:2a:62:d6:e5:ec:
f6:84:fd:83:06:b0:ab:c5:04:19:c3:07:db:29:47:
97:a2:32:d6:b5:bf:ba:d6:3b:ab:4e:c5:84:68:3c:
ec:33:6b:3e:2f:59:2a:90:ec:5d:13:a0:54:34:a4:
2e:a8:97:d2:87:54:e4:b7:c6:99:bd:d6:35:c3:32:
11:7f:f7:1e:85:be:a9:6c:ec:97:7b:00:5e:a5:26:
db:e4:4a:8f:47:a8:2b:28:b4:7d:b3:9a:03:94:8b:
4e:77:35:61:5e:71:a0:ad:b7:ae:12:5d:71:e3:b0:
8b:32:31:1e:de:a5:a8:66:ba:e4:db:8f:28:81:3f:
cb:9a:a1:5e:6b:6f:b3:61:20:a9:2f:ed:d9:fb:e4:
f9:40:c7:3c:13:4d:7b:4c:d0:68:48:5f:a1:2a:ca:
22:d8:64:44:d7:bb:a8:8f:28:94:5e:ad:2f:e3:33:
85:7b:7f:9d:2a:97:82:0f:38:78:65:44:bf:8a:94:
36:b9:72:d2:28:fb:cc:c8:01:8e:68:a8:da:e2:05:
a6:5e:93:f1:32:e6:3d:fd:6b:e1:d4:97:08:75:0c:
fa:5b:3b:2f:82:ac:75:4a:3a:1a:d1:4b:da:4a:b5:
20:a7:d6:81:95:86:c6:04:92:26:75:66:2b:61:04:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1A:9C:9D:1D:1E:0A:F5:37:AB:69:B5:D7:0E:7B:FF:E8:75:B0:1D
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/xxqcnR0eCvU3q2m11w57_-h1sB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.64.0/22
45.67.117.0/24
45.89.44.0/22
45.140.32.0/22
45.150.180.0/22
80.94.80.0/23
86.104.19.0/24
86.104.192.0/24
89.39.242.0/24
89.40.35.0/24
89.40.161.0/24
91.239.59.0/24
91.242.70.0-91.242.75.255
91.242.81.0/24
91.242.103.0/24
91.242.107.0/24
94.231.198.0/24
176.126.223.0/24
185.40.105.0/24
185.173.247.0/24
185.212.11.0/24
193.46.211.0/24
193.203.127.0/24
194.56.152.0/23
194.213.10.0/24
194.242.28.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:80:a5:e6:66:46:c1:e8:5f:1d:c1:af:b7:ed:88:d5:1c:00:
cf:f3:d4:ad:06:2d:fb:fb:63:68:96:0f:2d:e8:d0:c9:34:a0:
d7:b9:49:ee:93:c2:20:2e:30:5e:b8:76:97:82:1b:90:72:a9:
47:e6:21:51:7d:43:af:51:53:d1:64:63:2d:15:29:59:a3:e8:
ed:07:8b:b4:ba:fc:d3:77:1f:68:0b:f5:34:29:7e:f3:52:44:
67:6d:a0:8d:87:49:cc:ca:15:4a:6e:07:a5:cd:10:46:4b:d0:
20:df:fa:e2:ba:50:44:1a:e1:48:c4:bc:8f:64:08:e2:f0:ee:
29:f9:0b:49:0b:f9:c0:06:df:d5:66:fb:85:ef:f2:91:cc:1a:
de:5b:cb:ee:c7:93:bc:c4:1f:cf:a7:ad:46:b4:fe:2d:78:52:
a0:02:3a:38:56:14:d8:73:fa:b4:f9:c3:66:f0:c9:c6:d5:58:
6e:e7:da:ee:60:9e:45:98:60:08:e2:b3:ad:b4:21:c5:a2:86:
fb:00:64:1e:f0:d9:b5:6f:61:f6:75:61:c7:58:27:8c:96:49:
4f:09:ac:ef:c9:90:6c:b7:aa:0e:ca:13:93:50:c8:93:bd:4b:
e2:b7:ea:4c:f2:b7:ac:df:ee:b8:bd:54:86:95:31:1d:eb:65:
14:b8:fc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:27 2024 by rpki-client on console-ams.rpki-client.org