Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/gDwJVauPppRSGxk2tQWfT55oWmw.roa
File: gDwJVauPppRSGxk2tQWfT55oWmw.roa (raw, json)
Hash identifier: AGRHXxo/NpwWHpfgHtsWKSOh/rwlFL6sPQTRbI0j/ag=
Subject key identifier: 80:3C:09:55:AB:8F:A6:94:52:1B:19:36:B5:05:9F:4F:9E:68:5A:6C
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 074920ED
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/gDwJVauPppRSGxk2tQWfT55oWmw.roa
Signing time: Thu 03 Feb 2022 09:46:54 +0000
ROA not before: Thu 03 Feb 2022 09:46:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 45.150.252.0/22 maxlen: 32
45.134.76.0/22 maxlen: 32
170.245.40.0/22 maxlen: 32
185.46.116.0/22 maxlen: 32
194.48.164.0/22 maxlen: 32
168.205.72.0/22 maxlen: 32
193.201.248.0/22 maxlen: 32
95.181.216.0/22 maxlen: 32
193.19.205.0/24 maxlen: 32
193.19.206.0/24 maxlen: 32
45.136.8.0/22 maxlen: 32
193.19.207.0/24 maxlen: 32
63.141.36.0/23 maxlen: 32
63.141.34.0/23 maxlen: 32
31.223.188.0/23 maxlen: 32
150.107.200.0/22 maxlen: 32
185.202.28.0/22 maxlen: 32
185.75.208.0/22 maxlen: 32
185.28.180.0/22 maxlen: 32
45.143.68.0/22 maxlen: 32
45.139.232.0/22 maxlen: 32
103.225.200.0/22 maxlen: 32
185.253.68.0/22 maxlen: 32
194.76.108.0/23 maxlen: 32
194.76.120.0/23 maxlen: 32
45.66.48.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122233069 (0x74920ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Feb 3 09:46:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=803c0955ab8fa694521b1936b5059f4f9e685a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:e8:a0:67:64:d9:d2:6a:ca:20:5f:ac:13:
87:a6:fe:16:f9:fb:58:df:36:eb:ab:66:6e:84:83:
39:4a:08:2a:b1:5a:83:9d:28:6e:42:11:0b:82:0a:
ea:d0:4d:c9:e3:d5:43:18:d6:cc:c2:f7:5d:d8:3f:
bf:54:2a:76:3a:b7:ee:2e:98:46:02:0e:27:17:f9:
fb:ed:48:62:c1:b2:b0:ea:f1:17:34:c6:54:d5:16:
50:d2:b8:6b:2e:5a:8f:31:89:19:e0:53:36:35:5b:
96:ff:83:ad:8c:10:f0:8f:86:24:a9:2f:d6:d5:59:
3e:73:59:5f:0d:a1:2d:24:72:a7:d6:ed:83:b2:c0:
19:0a:37:ee:ed:ec:ce:bf:bc:16:24:42:aa:37:df:
89:86:bb:f8:a9:ee:a1:3f:fc:0e:5c:8d:12:fc:c4:
30:c2:c6:fa:c5:c4:9c:6d:e4:1e:76:24:61:52:e2:
80:7f:e4:55:ea:cd:e9:85:c9:b5:18:7d:7b:34:ac:
7d:a1:54:33:ef:b3:26:da:c3:92:13:d0:87:71:d8:
05:64:de:37:91:44:eb:a0:ef:08:6a:96:93:f1:f3:
49:73:ba:1f:79:1d:13:ce:36:f5:1a:b9:8d:c6:9d:
04:ab:d5:a1:cb:ab:1f:f5:94:7b:bd:a7:e5:c6:20:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3C:09:55:AB:8F:A6:94:52:1B:19:36:B5:05:9F:4F:9E:68:5A:6C
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/gDwJVauPppRSGxk2tQWfT55oWmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.188.0/23
45.66.48.0/22
45.134.76.0/22
45.136.8.0/22
45.139.232.0/22
45.143.68.0/22
45.150.252.0/22
63.141.34.0-63.141.37.255
95.181.216.0/22
103.225.200.0/22
150.107.200.0/22
168.205.72.0/22
170.245.40.0/22
185.28.180.0/22
185.46.116.0/22
185.75.208.0/22
185.202.28.0/22
185.253.68.0/22
193.19.205.0-193.19.207.255
193.201.248.0/22
194.48.164.0/22
194.76.108.0/23
194.76.120.0/23
Signature Algorithm: sha256WithRSAEncryption
42:0d:1d:37:eb:46:9c:58:e0:1d:93:fb:fe:07:78:7d:94:05:
a9:15:fa:c6:6b:d0:b0:f3:8a:f9:17:5f:ad:d1:4c:7c:f2:a6:
1f:19:29:f0:e6:9f:71:ff:cb:8c:82:63:0c:ee:ab:44:51:14:
c8:70:83:1a:31:e6:79:df:aa:6b:fc:1f:c7:c9:04:52:20:32:
51:25:61:f6:fe:33:da:5a:3a:2e:09:02:d5:c3:84:33:46:5c:
c4:ea:36:48:e4:2b:b2:97:42:b2:6e:1c:de:da:32:b1:f5:ef:
32:f3:dc:f2:65:50:06:6f:f1:32:a1:ab:26:be:be:46:01:2d:
b9:6b:fe:fb:4d:93:37:57:05:59:2c:95:ce:17:c8:21:e9:76:
d3:d7:f8:82:c2:af:f4:0a:a3:00:1a:19:98:84:20:93:32:62:
e4:29:32:7d:40:64:4c:82:e7:60:06:31:68:ec:c0:05:d8:3e:
9b:60:43:09:e9:e7:55:51:23:fd:7d:79:40:32:f2:81:dc:4e:
c8:80:62:c4:42:28:87:fa:86:ac:ad:22:1f:a8:70:d4:f6:96:
6c:d8:83:94:02:ef:32:f2:82:11:ef:86:58:05:8e:10:b6:ba:
34:63:a8:94:fa:c2:f4:e7:cd:a4:e7:4b:1c:58:08:62:1a:c9:
60:de:ba:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org