Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/gfFwAk4uQIXNxzLjZ_sEkkmR0eM.roa
File: gfFwAk4uQIXNxzLjZ_sEkkmR0eM.roa (raw, json)
Hash identifier: 8elIzaSvV5t3/xnHtyMcyIgQ0fiF9XgjBf6nLmxmHV4=
Subject key identifier: 81:F1:70:02:4E:2E:40:85:CD:C7:32:E3:67:FB:04:92:49:91:D1:E3
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01896550F77055C4965E0A8F674C43D28742
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/gfFwAk4uQIXNxzLjZ_sEkkmR0eM.roa
Signing time: Mon 17 Jul 2023 19:25:51 +0000
ROA not before: Mon 17 Jul 2023 19:25:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 45.81.138.0/24 maxlen: 24
91.188.245.0/24 maxlen: 24
45.86.171.0/24 maxlen: 24
45.95.31.0/24 maxlen: 24
176.119.143.0/24 maxlen: 24
193.187.104.0/24 maxlen: 24
193.187.107.0/24 maxlen: 24
84.252.70.0/23 maxlen: 23
45.91.239.0/24 maxlen: 24
78.142.239.0/24 maxlen: 24
176.53.172.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:50:f7:70:55:c4:96:5e:0a:8f:67:4c:43:d2:87:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jul 17 19:25:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81f170024e2e4085cdc732e367fb04924991d1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:e0:ae:ad:99:1b:db:af:48:f1:ef:7a:2e:
e7:30:f3:04:0a:f9:8c:25:93:31:55:8e:b5:d7:d8:
82:0f:72:62:10:a2:e7:6a:ac:ab:63:5f:4b:c9:d0:
b2:26:a3:3a:16:3d:9e:7c:7a:fd:0f:cc:86:4a:96:
03:2f:31:0d:57:2f:4c:71:35:6e:22:8e:df:52:fc:
b9:7e:a9:a1:86:1c:67:77:d2:46:14:e6:45:6e:ed:
c7:50:ea:d2:f1:73:bc:29:e8:28:d8:45:1e:f5:27:
82:f9:93:1a:95:dc:fd:97:9e:b7:36:78:9b:27:35:
e8:1f:5e:f2:e6:76:4e:5a:e8:cb:7c:ad:a8:bb:54:
e5:65:60:82:c1:12:a5:5a:c5:79:e1:5d:49:d6:5c:
9e:92:a2:d6:b7:95:95:36:06:50:a0:e0:b4:42:03:
63:7e:92:6b:c1:70:c4:8d:38:7f:ff:e3:71:79:a4:
30:31:26:48:84:a7:69:10:16:fd:ac:b1:a4:c1:84:
9a:bd:c3:52:68:13:f5:88:a3:21:ce:9b:ad:bb:fa:
af:b9:bd:2d:37:ec:aa:04:6c:5a:28:44:82:69:ff:
19:e6:df:0a:30:0d:0a:71:3f:3d:8f:58:84:18:bb:
cb:a1:df:d3:77:7b:01:15:2a:20:83:27:95:4d:f3:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F1:70:02:4E:2E:40:85:CD:C7:32:E3:67:FB:04:92:49:91:D1:E3
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/gfFwAk4uQIXNxzLjZ_sEkkmR0eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.138.0/24
45.86.171.0/24
45.91.239.0/24
45.95.31.0/24
78.142.239.0/24
84.252.70.0/23
91.188.245.0/24
176.53.172.0/22
176.119.143.0/24
193.187.104.0/24
193.187.107.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3f:2f:98:a4:89:28:ab:72:3f:4a:10:c1:dc:d8:1a:ab:59:
cc:e7:a7:9f:61:05:1c:61:f3:a3:f9:57:86:31:94:6c:7a:a7:
04:f4:cc:04:a3:d8:9a:12:a7:bf:e9:94:c4:1e:7c:ea:2e:4a:
d6:31:e1:ae:5c:ac:53:8d:d6:f2:b1:72:96:bb:6b:18:18:26:
45:f9:44:49:22:92:77:17:20:27:7a:86:cb:81:46:47:0f:0b:
c6:5d:e1:d0:51:e6:06:ec:f2:de:c8:91:8c:58:71:34:33:76:
12:ae:c5:89:b3:fb:d1:7a:bc:c9:74:6f:4f:4d:af:e3:58:c2:
2c:99:a6:ab:d0:75:03:c8:aa:8a:24:46:0f:2a:2d:54:d9:8b:
a5:79:8a:12:b5:dc:37:be:63:86:30:74:6a:62:23:61:0d:a2:
e4:1e:ee:6f:8c:56:38:71:4c:32:d2:26:5b:f2:2f:ab:6f:ec:
36:dd:05:5e:ed:6b:c1:47:5e:89:b1:26:54:9b:dc:da:59:4d:
d9:e6:1d:7f:b1:1c:7d:e0:8e:87:01:eb:7a:3a:f8:0d:3a:80:
b4:22:63:2c:7f:22:3a:af:44:c3:f8:de:ff:8f:a6:d0:be:0c:
c2:8c:a9:ae:7e:b1:f9:d5:7c:49:52:fe:f7:f4:7d:b1:3e:83:
05:01:9d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org