Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/GICMJIPntPKmcEu-sdH-ZcwGjhs.roa
File: GICMJIPntPKmcEu-sdH-ZcwGjhs.roa (raw, json)
Hash identifier: 1VoPUGbKZWq83WXTDEv+gGrlQRPZ2lFihPziCVZ+go0=
Subject key identifier: 18:80:8C:24:83:E7:B4:F2:A6:70:4B:BE:B1:D1:FE:65:CC:06:8E:1B
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01846D9E0A9E18CA84E7356E557C93E136B0
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/GICMJIPntPKmcEu-sdH-ZcwGjhs.roa
Signing time: Sat 12 Nov 2022 20:53:04 +0000
ROA not before: Sat 12 Nov 2022 20:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 193.32.164.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
45.136.69.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6d:9e:0a:9e:18:ca:84:e7:35:6e:55:7c:93:e1:36:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Nov 12 20:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18808c2483e7b4f2a6704bbeb1d1fe65cc068e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:29:75:ce:7d:0e:a4:ab:62:22:56:d4:5d:
c6:2e:80:0f:b6:a0:81:17:a4:4d:45:71:b8:da:9b:
7e:42:d2:d5:c6:8d:34:ff:04:03:af:05:7a:49:26:
b0:4f:7a:3e:4a:e1:e7:5a:1e:83:f5:4b:76:45:38:
75:42:74:72:14:e6:3c:7b:c9:25:a7:ae:a6:f6:95:
32:1f:21:e9:e3:e1:e6:0e:ad:5d:a0:38:b1:2d:e8:
e3:a5:fc:30:ff:e5:c1:30:f8:8c:34:a5:69:09:19:
fb:af:da:fb:bf:33:74:4b:25:0e:58:af:26:06:bf:
0e:c3:c6:3c:8d:eb:c9:8c:8b:08:67:02:c3:50:5c:
72:35:9c:38:7e:70:78:b7:7f:e1:bb:61:de:f7:06:
9d:0f:7f:0a:2d:b9:80:17:f6:00:f9:17:8a:c1:23:
c0:ce:04:61:ba:87:e8:0b:a3:f2:68:03:46:34:fa:
f0:ba:7e:4d:17:a0:9a:4d:5f:d1:77:93:35:26:72:
b6:d5:34:73:02:26:9c:a8:56:bb:fe:5f:69:59:76:
2d:d8:f6:53:e1:3e:4a:20:35:9c:13:62:f3:7e:27:
aa:2e:f2:c1:6f:13:2c:65:03:fd:db:c2:9e:73:ea:
d5:19:2e:2c:74:35:6f:7b:38:3d:ae:2c:06:00:2c:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:80:8C:24:83:E7:B4:F2:A6:70:4B:BE:B1:D1:FE:65:CC:06:8E:1B
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/GICMJIPntPKmcEu-sdH-ZcwGjhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.69.0/24
45.159.85.0/24
193.32.164.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:2b:03:94:95:fd:0c:56:cd:86:24:9c:4f:6c:cc:94:cf:c5:
7d:ed:d1:88:bc:d1:28:d4:65:52:41:bf:2e:7c:48:7d:44:4e:
bd:c6:3d:d3:d5:ee:68:e0:34:61:72:5e:d1:f9:ec:c1:f1:f5:
d3:fb:56:66:c3:e9:ee:cb:dd:1f:9d:be:36:19:cc:56:37:45:
dc:bf:5c:43:09:f1:3e:d8:29:04:6a:ee:33:df:6e:e7:32:86:
9c:23:fd:c2:26:79:ef:cd:8c:cb:d2:11:70:3f:99:3c:00:b3:
4f:eb:28:5d:0f:8c:5d:e4:02:62:4a:49:db:4c:73:f6:65:62:
49:0a:9b:a2:10:50:66:47:f5:1b:d4:fc:ee:70:31:c3:8c:d2:
13:92:62:57:ac:16:90:60:b6:cf:ec:b0:f3:cc:cf:8a:e0:e0:
bd:b5:e5:03:f7:cc:7a:17:e6:e0:10:2c:88:74:b7:e9:04:27:
1f:35:29:98:2e:6b:6a:19:9a:d8:63:d3:ca:b6:68:89:0a:0b:
58:ce:48:91:37:88:7b:3d:18:c3:48:44:48:ee:9b:f9:84:04:
9a:00:4b:48:d0:ae:04:07:2b:73:80:5c:9a:ed:f1:b0:90:9e:
62:ff:ee:32:a3:08:c4:a7:aa:e1:e2:c1:d0:1d:a8:f4:3c:6a:
09:10:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org