Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/GiwJZ0Lg0_y3P96n4n1CZV-QPbM.roa
File: GiwJZ0Lg0_y3P96n4n1CZV-QPbM.roa (raw, json)
Hash identifier: lqNaTOOEIWf0xulqW4GldaEssAQ5z8IRjv3+uk1nKO4=
Subject key identifier: 1A:2C:09:67:42:E0:D3:FC:B7:3F:DE:A7:E2:7D:42:65:5F:90:3D:B3
Certificate issuer: /CN=271c9ac525c0b842bbf65d3ec67689703cca325b
Certificate serial: 02D3E074
Authority key identifier: 27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/GiwJZ0Lg0_y3P96n4n1CZV-QPbM.roa
Signing time: Sat 01 Jan 2022 02:51:04 +0000
ROA not before: Sat 01 Jan 2022 02:51:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64413
IP address blocks: 185.233.12.0/24 maxlen: 24
185.233.15.0/24 maxlen: 24
185.233.14.0/24 maxlen: 24
185.233.13.0/24 maxlen: 24
185.237.10.0/24 maxlen: 24
185.237.9.0/24 maxlen: 24
185.237.11.0/24 maxlen: 24
185.237.8.0/24 maxlen: 24
185.189.122.0/24 maxlen: 24
185.189.121.0/24 maxlen: 24
185.189.123.0/24 maxlen: 24
185.189.120.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47439988 (0x2d3e074)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271c9ac525c0b842bbf65d3ec67689703cca325b
Validity
Not Before: Jan 1 02:51:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a2c096742e0d3fcb73fdea7e27d42655f903db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:3c:aa:55:7c:97:af:7d:fa:b1:60:31:e4:
f8:06:c4:1b:49:ff:c7:6f:e8:de:8a:56:fa:50:c6:
24:50:f0:42:81:ee:66:65:25:dc:f9:7c:16:3e:67:
a6:57:d0:5e:85:5b:53:72:7b:d5:45:67:33:8e:eb:
d1:cc:d9:80:82:5e:18:e7:8b:12:8e:14:56:ba:e5:
94:68:39:0a:2b:0f:6e:3f:78:6d:cd:04:a3:8e:c8:
4c:68:ef:54:7d:cf:26:be:92:74:1c:d5:fd:a3:2c:
56:0b:88:f4:67:ba:c7:6a:b5:a9:5e:f8:f7:e8:08:
ff:1f:cd:d9:8b:f4:8a:81:59:20:93:fa:3f:1d:bb:
30:25:9f:d4:10:68:62:07:61:e4:cb:b4:69:95:13:
ad:0b:94:f1:b2:9d:03:42:0c:11:4e:9c:c0:33:da:
3b:96:24:6c:18:6e:a5:a7:c3:81:4c:bc:e6:95:8d:
cf:66:2c:3e:8d:ab:89:47:d8:41:3c:17:84:eb:7d:
e1:74:01:79:32:3b:a1:a4:9e:8c:dd:58:18:51:38:
78:67:56:87:29:fe:41:53:0b:a2:41:34:89:c4:81:
1d:6d:e8:9f:ee:5b:63:c6:9c:55:7a:52:1c:ea:fd:
37:0c:f8:3c:c9:8e:77:83:54:68:5b:8e:7e:3e:23:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:09:67:42:E0:D3:FC:B7:3F:DE:A7:E2:7D:42:65:5F:90:3D:B3
X509v3 Authority Key Identifier:
keyid:27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/GiwJZ0Lg0_y3P96n4n1CZV-QPbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.120.0/22
185.233.12.0/22
185.237.8.0/22
Signature Algorithm: sha256WithRSAEncryption
05:86:e7:4d:8f:b4:0f:36:66:a8:0b:13:f5:e0:e4:e9:10:d9:
a3:26:59:49:67:e8:2c:50:5a:7f:60:ef:fc:93:48:5f:e9:93:
37:57:28:74:a5:23:72:df:70:b8:7d:f2:5c:70:11:93:22:b4:
c2:fe:e1:20:bb:91:c2:92:96:ed:a3:3c:01:7e:e2:4c:9d:b7:
3a:a2:b5:57:7c:b6:ec:d3:d3:52:d4:60:55:c8:9b:5d:02:0c:
d6:13:6f:3f:20:1e:a4:b2:63:63:77:e8:72:95:b5:03:e9:e5:
a4:cf:85:ea:07:4f:ce:3a:b5:2c:96:a8:6b:e9:23:76:4b:a0:
54:41:83:0e:b3:d8:89:c1:f5:50:49:95:cd:8f:b3:f8:c4:8b:
53:ee:92:dd:38:dc:f8:ed:79:a1:1f:dd:32:fd:94:e8:b7:23:
63:09:90:74:f8:fb:ab:06:3d:bc:c5:f3:7a:6e:ff:0e:2a:58:
33:76:0e:65:b3:88:9c:6b:da:dd:8c:d0:3c:45:21:43:af:de:
ca:0e:3f:72:47:70:1d:5f:e8:d1:74:58:81:c3:f6:ae:70:05:
e5:60:d8:56:f4:ed:bf:6c:ad:63:95:b7:99:1c:d6:06:c6:a0:
98:a4:fc:19:ed:57:e4:cc:af:d9:10:aa:45:b8:08:65:fd:25:
12:84:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org