Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/nOzhrwm19_zzi7irHVGhMrSC-QA.roa
File: nOzhrwm19_zzi7irHVGhMrSC-QA.roa (raw, json)
Hash identifier: kTnbGnVbRdTnZCLXiA2hGbKREUC/ufV2UPuBow1fToY=
Subject key identifier: 9C:EC:E1:AF:09:B5:F7:FC:F3:8B:B8:AB:1D:51:A1:32:B4:82:F9:00
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 07D26D5A
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/nOzhrwm19_zzi7irHVGhMrSC-QA.roa
Signing time: Fri 08 Apr 2022 08:59:18 +0000
ROA not before: Fri 08 Apr 2022 08:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 45.150.252.0/22 maxlen: 32
45.134.76.0/22 maxlen: 32
170.245.40.0/22 maxlen: 32
185.46.116.0/22 maxlen: 32
194.48.164.0/22 maxlen: 32
168.205.72.0/22 maxlen: 32
193.201.248.0/22 maxlen: 32
95.181.216.0/22 maxlen: 32
193.19.205.0/24 maxlen: 32
193.19.206.0/24 maxlen: 32
193.19.207.0/24 maxlen: 32
63.141.36.0/23 maxlen: 32
63.141.34.0/23 maxlen: 32
31.223.188.0/23 maxlen: 32
150.107.200.0/22 maxlen: 32
185.202.28.0/22 maxlen: 32
185.75.208.0/22 maxlen: 32
185.28.180.0/22 maxlen: 32
45.143.68.0/22 maxlen: 32
45.139.232.0/22 maxlen: 32
103.225.200.0/22 maxlen: 32
185.253.68.0/22 maxlen: 32
194.76.108.0/23 maxlen: 32
188.68.0.0/22 maxlen: 32
194.76.120.0/23 maxlen: 32
45.66.48.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131231066 (0x7d26d5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Apr 8 08:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cece1af09b5f7fcf38bb8ab1d51a132b482f900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:7d:32:06:46:14:b1:94:fc:64:4a:e6:94:
0d:28:97:9a:e7:3e:b5:20:b8:d2:c3:0a:b7:c5:64:
ce:d5:b9:59:7b:86:45:44:bd:d9:2b:8f:11:da:ef:
27:23:97:4e:56:7b:75:65:88:d2:cf:ba:36:90:6b:
e2:bb:66:c9:63:62:27:66:eb:f8:af:46:81:4a:e1:
8f:80:94:b8:82:c9:ea:fb:30:80:24:80:3d:8f:c6:
f2:64:e0:30:2b:46:88:53:41:94:e4:b6:59:08:41:
0e:3f:1d:49:56:a4:81:88:b4:0c:77:ed:84:16:9c:
a2:d6:f7:18:2f:2d:8c:f1:8b:47:d4:d7:cc:25:4b:
f6:f5:b7:46:d1:a8:df:82:6e:3b:3b:e7:ca:a9:f6:
0a:ba:20:fe:84:d3:50:95:ec:e1:36:91:bf:31:d9:
ee:cb:09:13:51:95:08:6b:36:26:6c:38:c3:3a:35:
84:f0:1f:b8:16:7e:d4:26:19:bf:00:05:75:f4:3b:
fd:19:75:56:80:a8:b6:8d:e7:7d:d0:0c:02:15:5d:
af:d3:ec:69:ec:c7:50:88:0c:e5:76:31:37:c0:f6:
c2:8a:55:61:d3:4a:67:68:2d:45:28:6c:28:fe:80:
e2:f8:f0:27:82:d6:68:b9:28:33:38:09:e5:5c:e2:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EC:E1:AF:09:B5:F7:FC:F3:8B:B8:AB:1D:51:A1:32:B4:82:F9:00
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/nOzhrwm19_zzi7irHVGhMrSC-QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.188.0/23
45.66.48.0/22
45.134.76.0/22
45.139.232.0/22
45.143.68.0/22
45.150.252.0/22
63.141.34.0-63.141.37.255
95.181.216.0/22
103.225.200.0/22
150.107.200.0/22
168.205.72.0/22
170.245.40.0/22
185.28.180.0/22
185.46.116.0/22
185.75.208.0/22
185.202.28.0/22
185.253.68.0/22
188.68.0.0/22
193.19.205.0-193.19.207.255
193.201.248.0/22
194.48.164.0/22
194.76.108.0/23
194.76.120.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:0e:a7:ae:de:ee:07:5f:7c:cb:69:e3:65:ba:ab:32:8f:80:
a7:9e:95:22:cc:ea:37:f8:3b:0a:88:47:0a:f0:4e:75:79:b0:
f9:1e:78:48:a5:c1:a9:a9:c6:3f:98:9e:94:0d:2c:7f:22:a2:
b4:c9:19:e2:b4:c2:b0:ff:83:b3:57:d6:30:35:46:ef:cb:c2:
27:32:77:f0:28:d1:d1:4c:6b:c3:7b:9e:61:e5:1b:28:9d:91:
4e:be:74:76:10:e0:94:cd:85:24:76:25:34:f4:d2:54:ec:09:
c1:6c:2d:99:9b:ae:18:db:d9:e5:36:fd:4d:8e:1c:7d:4c:c0:
80:5b:27:1a:46:ff:9c:aa:69:a8:2b:31:9f:6b:4d:4f:2d:38:
f7:ba:b9:dd:c7:f6:10:45:4a:4d:fb:6d:5b:fc:08:3b:22:cd:
bb:de:8f:5a:ea:40:78:34:33:0c:11:5e:55:b0:4c:3e:ed:c6:
92:d5:ee:29:b4:7f:17:61:36:a5:9f:4f:ae:2e:75:a7:cf:d0:
7a:23:f1:4c:2a:5a:33:b9:e3:34:79:a7:dd:7d:fa:d7:c9:97:
5a:6b:c3:97:f6:96:71:15:95:46:17:96:04:e6:d6:ca:30:65:
8b:a6:23:c8:b8:78:d1:17:8f:1b:06:bc:8f:0e:05:3f:1c:5d:
be:a2:e0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org