Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/IFxHMNURaFCEutaAmAohye3LNR4.roa
File: IFxHMNURaFCEutaAmAohye3LNR4.roa (raw, json)
Hash identifier: OC515zp83OxziJiqxFCgiF5iOSQuyVPRKkoGscc622A=
Subject key identifier: 20:5C:47:30:D5:11:68:50:84:BA:D6:80:98:0A:21:C9:ED:CB:35:1E
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0A362A99
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/IFxHMNURaFCEutaAmAohye3LNR4.roa
Signing time: Tue 22 Feb 2022 19:13:36 +0000
ROA not before: Tue 22 Feb 2022 19:13:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 171.22.146.0/24 maxlen: 24
91.103.120.0/21 maxlen: 24
185.235.71.0/24 maxlen: 24
95.111.128.0/20 maxlen: 24
95.111.144.0/20 maxlen: 24
185.149.12.0/22 maxlen: 24
89.46.96.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171322009 (0xa362a99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Feb 22 19:13:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=205c4730d511685084bad680980a21c9edcb351e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f7:a8:65:4e:bf:e3:c1:8e:e8:85:89:c6:b6:
bc:60:d6:7a:ce:da:db:89:0d:23:1a:5d:b6:60:3e:
1d:23:eb:16:3a:1d:4d:e7:da:0b:12:bd:0a:1a:c3:
de:1c:c4:13:32:08:f5:c5:14:da:fb:11:57:90:21:
15:9b:c6:23:0b:27:1b:d7:ca:2b:e1:5f:19:ce:58:
ce:4e:60:41:74:93:43:8c:2e:81:31:40:38:70:b1:
a5:ac:d2:c2:e8:07:d1:bc:8e:4c:9c:8a:8a:31:f4:
71:17:48:62:f4:df:66:52:dc:4c:6d:23:ea:f6:66:
1c:37:5f:3d:2b:37:6c:cb:d1:45:e9:5e:d8:ce:cc:
33:ea:77:92:45:eb:f8:18:66:6d:6f:c0:11:c3:9a:
85:48:ae:f7:fe:5c:99:9b:d5:8a:ea:e8:3a:c9:c9:
93:df:a3:e4:4c:0e:09:0c:78:22:1c:db:50:45:f6:
53:74:b8:b1:f9:e9:8e:c2:de:56:89:63:d1:fe:0e:
9b:bf:52:7b:11:0f:2f:25:f1:87:9b:8b:b8:b7:0c:
ed:ca:fd:47:a7:91:a7:1a:77:67:93:25:10:72:9a:
61:ba:20:03:72:84:9c:d7:f5:95:81:75:f9:e0:18:
7c:bc:c8:21:6c:a6:b8:f7:66:55:da:c6:bb:60:5e:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:47:30:D5:11:68:50:84:BA:D6:80:98:0A:21:C9:ED:CB:35:1E
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/IFxHMNURaFCEutaAmAohye3LNR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.96.0/22
91.103.120.0/21
95.111.128.0/19
171.22.146.0/24
185.149.12.0/22
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:76:aa:f5:43:e1:c5:3c:ab:b6:7a:be:82:89:84:38:b0:80:
2c:97:25:d8:96:66:a5:9c:77:86:22:53:28:a0:bb:35:9a:41:
83:28:cb:4e:2f:9b:8d:c6:42:cf:e6:0d:b9:0b:ca:dd:69:d7:
bb:84:cf:fa:1f:d5:4c:db:6f:26:98:79:8f:b4:09:6b:ba:b0:
08:01:14:3f:4b:f5:64:7e:7b:11:6c:6f:4a:fb:57:f8:07:a7:
03:a2:36:93:86:c2:82:af:0a:b6:53:90:dc:de:7c:4e:3c:00:
00:3b:b7:25:11:87:8f:eb:6c:31:7d:2a:a5:23:aa:50:4f:a5:
16:d9:5d:34:4c:cd:4d:3f:c1:99:94:98:ec:5c:e0:f9:83:e3:
93:ed:01:d5:d5:85:5b:31:82:7d:a2:20:97:47:ba:eb:69:3e:
2d:37:db:7f:41:7e:53:92:ce:fb:9b:d0:4f:05:7b:14:97:6d:
f5:5d:8c:6a:06:68:3c:42:1b:5f:f8:f4:be:c9:63:5f:79:0d:
46:4d:ae:1c:90:01:ba:4c:83:b5:12:d8:8c:fa:84:6b:54:e2:
23:53:a3:4c:bd:e0:11:19:c2:93:18:7a:20:bc:f0:c7:cb:b9:
6f:b3:7f:c7:4d:2a:49:00:b7:dc:60:a4:ab:ec:24:de:42:1b:
ef:ec:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org