Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/QiagKLPKiNUDpNqP3LQGLA60aQw.roa
File: QiagKLPKiNUDpNqP3LQGLA60aQw.roa (raw, json)
Hash identifier: ezY3IswOirFldWtvAONxgw6uPHAMkz+tOCWsJRc8Axc=
Subject key identifier: 42:26:A0:28:B3:CA:88:D5:03:A4:DA:8F:DC:B4:06:2C:0E:B4:69:0C
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018964895C250DBD11E79F991E707B1F4DC5
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/QiagKLPKiNUDpNqP3LQGLA60aQw.roa
Signing time: Mon 17 Jul 2023 15:47:50 +0000
ROA not before: Mon 17 Jul 2023 15:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.80.223.0/24 maxlen: 24
45.80.222.0/24 maxlen: 24
45.80.221.0/24 maxlen: 24
92.119.192.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
45.153.227.0/24 maxlen: 24
193.32.164.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
45.142.37.0/24 maxlen: 24
45.129.130.0/24 maxlen: 24
45.129.129.0/24 maxlen: 24
45.129.131.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
45.136.69.0/24 maxlen: 24
193.36.231.0/24 maxlen: 24
45.138.4.0/24 maxlen: 24
176.222.58.0/24 maxlen: 24
45.138.6.0/24 maxlen: 24
45.138.5.0/24 maxlen: 24
45.146.26.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:89:5c:25:0d:bd:11:e7:9f:99:1e:70:7b:1f:4d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jul 17 15:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4226a028b3ca88d503a4da8fdcb4062c0eb4690c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:32:56:f4:f9:72:84:f8:b6:24:2b:9c:de:
a5:fa:01:ee:0d:51:d1:be:df:eb:89:52:3c:62:c2:
7e:ce:22:82:a3:7c:5d:02:83:ad:4e:9f:da:0a:79:
9c:41:5d:c5:9b:70:b3:78:c3:e8:68:69:81:47:74:
05:60:f2:90:7d:b8:98:77:37:d5:2c:6b:be:22:2a:
b6:92:bb:01:48:74:b3:94:a7:8f:a2:33:b1:dc:6a:
30:83:a9:7f:c7:65:97:be:63:91:82:f7:67:29:70:
ed:cf:1a:ab:b7:35:73:d3:f2:80:b6:d5:2d:38:16:
3d:14:a9:f9:33:e5:2f:6c:be:d5:ac:13:c5:92:a5:
14:42:9f:56:48:de:1b:64:c2:a6:ac:3e:37:81:f8:
db:1d:31:38:e4:19:17:98:be:e3:20:95:ca:ff:ce:
d1:53:9c:b7:e3:51:ea:b7:52:55:c9:93:3d:e0:d4:
c1:66:d2:9f:5c:e5:dd:3c:1e:e5:c7:6b:54:9e:50:
d8:a2:00:eb:55:ab:8d:3b:43:8d:ef:7f:68:2d:93:
e1:96:2e:38:1b:36:9f:6a:68:49:82:5e:b6:a7:67:
08:e4:45:ac:05:70:3e:5c:52:41:75:e2:5f:04:a9:
01:4b:38:19:42:ac:e5:2f:3b:a7:02:f9:15:f8:5f:
0b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:26:A0:28:B3:CA:88:D5:03:A4:DA:8F:DC:B4:06:2C:0E:B4:69:0C
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/QiagKLPKiNUDpNqP3LQGLA60aQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.221.0-45.80.223.255
45.129.129.0-45.129.131.255
45.136.69.0/24
45.138.4.0-45.138.6.255
45.142.37.0/24
45.146.26.0/24
45.153.227.0/24
45.159.85.0/24
92.119.192.0/24
176.222.58.0/24
193.32.164.0/22
193.36.231.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:55:f5:f1:45:b6:7d:01:c8:bb:a6:db:97:bb:34:df:b4:6b:
89:fa:3c:9f:a1:b5:9e:72:e0:99:3f:1f:a9:b1:74:09:20:a8:
39:64:a3:1a:21:59:a7:04:84:24:53:bd:91:a1:1b:35:78:63:
e8:25:d6:a9:1b:49:6e:b6:44:94:46:e5:46:59:5c:04:52:51:
86:4b:18:9e:12:a3:75:d7:bb:44:ee:95:10:d7:ad:c5:2b:92:
b3:3a:b5:91:11:bd:47:a7:a3:81:87:a4:c0:47:ee:cb:7e:c4:
5d:cc:b5:c4:d4:2d:57:49:b2:fa:17:8e:57:40:78:03:99:b6:
48:d8:3c:24:c4:83:d9:a9:2c:14:7d:4a:a3:d3:20:46:a3:39:
50:82:4c:a9:09:ab:d9:f9:12:ee:95:d1:b5:c7:56:46:bb:46:
0c:d2:fc:df:88:f0:03:7c:52:da:04:21:9c:0b:84:67:81:af:
58:c7:cf:b3:38:e8:3c:8f:a6:9f:d4:9b:c9:69:e5:eb:18:cf:
93:1c:16:28:dc:79:e5:c3:f5:28:da:d8:8a:ee:b5:42:a8:51:
c6:03:6f:3f:de:9a:94:99:31:04:ad:5e:08:51:f8:f9:1a:a7:
e9:c0:51:2f:c6:c2:94:e2:e5:20:08:27:9c:28:17:05:be:8d:
62:97:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org