Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/gL7Njx5DUnZse5APE7-YMXXukjA.roa
File: gL7Njx5DUnZse5APE7-YMXXukjA.roa (raw, json)
Hash identifier: W6yB/lD62U2+4vAX1hLrg8y8FSOHnpXWxLZPu1bP41E=
Subject key identifier: 80:BE:CD:8F:1E:43:52:76:6C:7B:90:0F:13:BF:98:31:75:EE:92:30
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 03BB011A
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/gL7Njx5DUnZse5APE7-YMXXukjA.roa
Signing time: Mon 28 Mar 2022 09:38:43 +0000
ROA not before: Mon 28 Mar 2022 09:38:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197518
IP address blocks: 185.225.20.0/22 maxlen: 22
185.199.212.0/22 maxlen: 24
45.157.208.0/22 maxlen: 22
185.251.228.0/22 maxlen: 24
185.194.176.0/22 maxlen: 22
185.108.204.0/22 maxlen: 22
194.5.64.0/22 maxlen: 22
45.155.252.0/22 maxlen: 24
185.255.200.0/22 maxlen: 22
194.146.92.0/23 maxlen: 23
45.90.16.0/22 maxlen: 22
185.218.20.0/22 maxlen: 22
188.95.248.0/21 maxlen: 21
185.250.24.0/22 maxlen: 24
193.58.144.0/22 maxlen: 22
185.221.24.0/22 maxlen: 22
45.147.224.0/22 maxlen: 22
176.125.248.0/22 maxlen: 22
194.147.16.0/23 maxlen: 23
185.214.108.0/22 maxlen: 22
130.193.104.0/21 maxlen: 21
185.36.204.0/22 maxlen: 22
2a03:680::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62587162 (0x3bb011a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 28 09:38:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80becd8f1e4352766c7b900f13bf983175ee9230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:9f:8f:74:ad:00:e1:a5:34:1b:38:b1:18:
d5:b1:11:dd:59:87:dc:d6:6b:ed:b8:21:c6:1f:c3:
e4:9d:20:f8:08:f0:1c:be:79:01:3c:9e:e0:51:b4:
3d:04:18:c8:51:05:c2:bc:4a:62:d1:dc:ff:a8:78:
2b:1e:e1:f8:dd:28:98:1e:7c:30:ee:62:47:c3:83:
d6:22:3f:50:fd:98:68:f5:8a:09:13:9c:18:a9:d1:
50:57:bb:38:26:70:b2:7f:ab:38:bc:12:15:57:9d:
08:47:64:97:b7:4d:51:b3:7d:35:42:80:4e:d9:94:
4d:f3:06:c8:f8:d1:b5:18:86:66:af:fb:e4:e1:8d:
be:f6:f1:f2:56:0c:21:45:e2:f1:1e:40:2f:98:6b:
f4:fa:fb:b3:82:5a:9f:93:0e:f5:48:2f:63:20:a3:
4e:43:06:c6:4d:17:6e:c7:5a:c8:95:b7:f6:7c:aa:
a3:ff:c9:44:e5:48:fa:10:57:e9:4c:4f:7a:a5:e9:
54:87:a7:d1:92:3b:5c:8c:3b:17:19:f4:0a:e0:65:
12:47:86:86:a3:4b:3e:a5:b5:bb:0c:28:f3:dd:1b:
73:48:9d:8e:9c:08:85:3c:43:7a:ce:ba:5e:98:57:
94:2e:eb:8f:49:be:3f:d0:55:36:4b:da:0e:1a:f1:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BE:CD:8F:1E:43:52:76:6C:7B:90:0F:13:BF:98:31:75:EE:92:30
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/gL7Njx5DUnZse5APE7-YMXXukjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/22
45.147.224.0/22
45.155.252.0/22
45.157.208.0/22
130.193.104.0/21
176.125.248.0/22
185.36.204.0/22
185.108.204.0/22
185.194.176.0/22
185.199.212.0/22
185.214.108.0/22
185.218.20.0/22
185.221.24.0/22
185.225.20.0/22
185.250.24.0/22
185.251.228.0/22
185.255.200.0/22
188.95.248.0/21
193.58.144.0/22
194.5.64.0/22
194.146.92.0/23
194.147.16.0/23
IPv6:
2a03:680::/32
Signature Algorithm: sha256WithRSAEncryption
53:e6:a2:60:ce:94:50:bb:5b:d6:21:ca:a8:7a:3c:d0:92:ae:
14:80:9f:90:34:4f:ef:66:05:5f:39:54:c7:dc:31:9a:a3:75:
82:23:2a:e6:38:1d:36:bf:98:5b:13:72:6f:1f:92:3f:5a:76:
86:29:ee:e8:5b:c2:b6:1b:fd:66:7f:6e:c1:22:95:53:ef:9d:
ea:c9:dd:75:9e:b1:92:d7:67:04:7f:a8:a2:ef:f5:e9:c1:5a:
76:36:c4:5d:6d:29:30:2d:1f:92:4c:e0:ba:4e:96:b6:10:a5:
1e:7c:28:a0:fe:6d:58:60:b1:bb:0a:e7:ea:cf:82:12:ae:49:
4a:48:ad:a8:0d:25:96:25:91:dc:50:73:b7:60:86:19:4a:00:
ae:2a:5a:a3:10:f4:17:c7:47:42:50:2b:63:e4:5e:ff:46:86:
c5:d2:36:0d:3b:9f:b7:dc:94:35:50:11:eb:35:da:2c:a6:ba:
a0:d0:bd:55:09:49:64:43:3a:ca:df:dc:35:a9:1c:6a:bc:4e:
e1:a8:39:00:36:7c:af:79:03:be:41:c0:e2:dd:68:c5:c6:37:
d0:c5:ad:fe:1e:5b:9a:80:5d:b5:a9:2b:cc:c3:4b:73:96:9b:
03:19:96:05:4f:4f:bf:c4:97:46:0e:f7:ae:22:94:3b:d5:cd:
ac:bf:90:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:12 2023 by rpki-client on console-ams.rpki-client.org