Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Si0rg3TC1vIXA8vyi-Pig3SZNcg.roa
File: Si0rg3TC1vIXA8vyi-Pig3SZNcg.roa (raw, json)
Hash identifier: 2lNlr4Qi5g+nM7+5hJPMfoh9r1zMKqGRXBSOMvtEF2o=
Subject key identifier: 4A:2D:2B:83:74:C2:D6:F2:17:03:CB:F2:8B:E3:E2:83:74:99:35:C8
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0189784DAC98EED45C9F248C316C5254A89E
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Si0rg3TC1vIXA8vyi-Pig3SZNcg.roa
Signing time: Fri 21 Jul 2023 11:55:03 +0000
ROA not before: Fri 21 Jul 2023 11:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 194.59.222.0/24 maxlen: 24
212.107.25.0/24 maxlen: 24
88.218.187.0/24 maxlen: 24
45.87.124.0/24 maxlen: 24
45.87.125.0/24 maxlen: 24
45.87.127.0/24 maxlen: 24
84.252.69.0/24 maxlen: 24
45.128.124.0/24 maxlen: 24
194.60.76.0/24 maxlen: 24
88.218.184.0/24 maxlen: 24
88.218.186.0/24 maxlen: 24
88.218.185.0/24 maxlen: 24
2a0f:3101::/32 maxlen: 32
2a0d:3c46::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:4d:ac:98:ee:d4:5c:9f:24:8c:31:6c:52:54:a8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jul 21 11:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a2d2b8374c2d6f21703cbf28be3e283749935c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:09:b6:58:6a:1a:32:04:1a:5a:8a:12:67:86:
d3:5d:99:e2:2f:aa:1e:e7:f4:5a:d0:10:39:cb:b8:
4b:67:09:cf:ef:a9:a8:bf:66:f0:ae:ae:13:d7:bc:
b2:73:83:ad:7d:f7:37:ab:a7:eb:62:8c:0a:30:e2:
de:89:be:80:fd:79:00:91:30:2e:f2:10:d6:af:cd:
25:9f:55:54:b2:0e:d0:11:a6:81:34:29:83:1a:a1:
00:8f:70:92:bc:75:1c:f4:2a:84:56:7c:de:af:c6:
fb:d6:2d:97:8c:b5:aa:66:4a:3c:f0:4b:e2:6c:89:
d1:06:e8:f7:74:ac:20:a3:02:b3:9d:bc:1e:52:6f:
7d:17:a8:11:ee:7a:d5:6f:b2:0c:01:66:3f:45:89:
6b:ad:c1:07:32:f0:46:35:d6:27:71:2c:d6:f5:b7:
e2:5a:2e:29:05:7e:e4:e7:51:dc:e7:20:e5:5a:b9:
e4:95:f4:24:3b:c8:b9:30:3d:39:60:3c:a9:7d:99:
fc:11:d9:1d:5c:47:d1:5b:c8:ac:75:de:6f:e4:ef:
21:f9:4b:5c:bd:10:c0:ee:fe:3d:c7:13:6c:8b:8b:
f6:91:d6:ac:c6:6a:4d:7f:cf:53:90:4f:7e:71:6c:
44:54:e2:06:df:f4:19:cb:5a:0b:38:20:a0:07:38:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2D:2B:83:74:C2:D6:F2:17:03:CB:F2:8B:E3:E2:83:74:99:35:C8
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Si0rg3TC1vIXA8vyi-Pig3SZNcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.124.0/23
45.87.127.0/24
45.128.124.0/24
84.252.69.0/24
88.218.184.0/22
194.59.222.0/24
194.60.76.0/24
212.107.25.0/24
IPv6:
2a0d:3c46::/32
2a0f:3101::/32
Signature Algorithm: sha256WithRSAEncryption
8d:97:81:ad:c9:a6:8e:9c:f4:fc:55:94:16:6e:f9:1f:31:26:
7d:be:cf:94:25:8f:15:82:c2:10:8d:e3:a1:32:78:40:74:3c:
3b:93:98:09:11:3a:0a:5a:48:7d:cb:82:7e:29:b4:99:1e:84:
d3:c9:66:92:65:84:61:ee:e1:34:0b:ce:37:af:ff:80:6b:27:
1b:f1:e0:a5:43:49:be:01:33:c7:9a:e8:46:1c:f2:30:c3:dc:
02:52:59:4c:e4:86:fd:0d:4d:7d:bf:84:54:d8:90:a5:46:75:
7b:c1:ba:63:97:5d:4b:51:a9:07:d0:2d:9f:22:1d:ac:76:8b:
21:2e:62:a6:67:f8:d5:1e:e4:cd:ea:7d:ba:ff:32:03:5a:58:
a3:96:ad:87:dc:91:2c:6e:8b:db:78:db:54:64:c4:62:60:e4:
98:f9:bd:5e:b6:ac:d1:fc:32:0d:ae:b3:45:6e:e1:00:93:1b:
f8:dd:dd:a7:67:27:a5:42:60:60:65:eb:71:21:d9:e2:03:5c:
86:5c:ab:25:c8:e1:6f:c7:df:08:fa:d6:80:cc:25:04:cd:b3:
de:97:9e:ec:c7:b3:bb:74:ea:7c:ae:64:01:6d:50:ac:60:a2:
34:6c:1c:48:01:33:00:fe:50:2c:e3:d2:51:87:a2:21:1d:6e:
a7:80:fa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org