Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/KG1AvizaJJ-sOjONKVFQgpZza80.roa
File: KG1AvizaJJ-sOjONKVFQgpZza80.roa (raw, json)
Hash identifier: oSpTsccN38zdJbzabfdT0rmekVDBLzMyU6capwIeHDc=
Subject key identifier: 28:6D:40:BE:2C:DA:24:9F:AC:3A:33:8D:29:51:50:82:96:73:6B:CD
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01875FD22E33E8B051DF2904878DB07B3838
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/KG1AvizaJJ-sOjONKVFQgpZza80.roa
Signing time: Sat 08 Apr 2023 07:43:42 +0000
ROA not before: Sat 08 Apr 2023 07:43:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 78.142.242.0/24 maxlen: 24
188.214.27.0/24 maxlen: 24
78.142.243.0/24 maxlen: 24
185.9.55.0/24 maxlen: 24
194.4.157.0/24 maxlen: 24
45.159.152.0/24 maxlen: 24
193.19.106.0/24 maxlen: 24
192.166.208.0/22 maxlen: 24
185.103.75.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:d2:2e:33:e8:b0:51:df:29:04:87:8d:b0:7b:38:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 8 07:43:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=286d40be2cda249fac3a338d2951508296736bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:b2:f4:49:c3:32:2e:6f:54:06:1d:ce:2b:
16:53:0d:f6:3b:53:4c:52:f2:17:a6:16:b8:53:71:
dc:cd:19:45:27:91:7d:16:2b:a4:52:ea:72:90:36:
a3:20:da:e5:94:92:42:99:05:bc:73:42:a5:b9:2d:
1c:86:85:70:0f:86:19:3a:3a:17:f8:c8:81:f1:6b:
13:c2:90:e0:fb:e6:ef:ce:68:0a:c9:47:0e:0e:4f:
3e:02:e8:28:a5:37:8c:40:52:cf:99:1e:b8:5b:57:
e8:5c:eb:e1:d9:02:17:8a:f5:d3:00:92:41:b5:14:
9f:b0:bc:48:ea:43:12:f0:ef:4e:d5:94:79:57:ff:
d7:d1:db:b3:79:ab:d7:1d:29:52:cf:8c:56:ac:aa:
57:03:3a:18:8c:a7:aa:12:2f:d5:84:54:f8:77:f5:
29:92:7a:79:41:5b:4f:b8:ae:30:63:f3:66:ea:77:
b3:35:3b:c7:84:2d:10:a2:d9:e3:5b:0f:4c:e7:be:
b7:d1:8f:c1:5c:03:0d:f6:d4:fd:58:a9:c6:f0:38:
86:7f:29:c0:bf:bd:54:02:c8:e8:7d:f3:f2:72:31:
f9:51:78:3e:6c:98:e0:32:2e:3c:22:32:ff:cc:d9:
ed:a4:b1:7f:a1:01:2e:ba:cf:a6:1a:29:7d:08:d4:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6D:40:BE:2C:DA:24:9F:AC:3A:33:8D:29:51:50:82:96:73:6B:CD
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/KG1AvizaJJ-sOjONKVFQgpZza80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0/24
78.142.242.0/23
185.9.55.0/24
185.103.75.0/24
188.214.27.0/24
192.166.208.0/22
193.19.106.0/24
194.4.157.0/24
Signature Algorithm: sha256WithRSAEncryption
05:16:af:7c:02:b0:8d:6a:b6:2c:3a:4a:b5:1c:47:1b:9e:c2:
b6:97:2e:f7:4c:20:7a:4d:0d:5b:ba:c8:62:63:49:de:f8:de:
a2:af:aa:5b:d9:f9:02:e9:c0:27:23:fe:e1:a0:c3:42:80:1b:
6f:82:d0:5e:86:be:c8:66:21:ff:80:93:b0:52:7f:f0:c2:56:
a4:4a:66:b5:02:05:b5:dc:ad:af:7a:bb:ee:ad:5f:1d:eb:cb:
43:b1:a6:5c:7d:b3:9e:4a:bc:a2:e1:04:20:61:2d:ac:b7:02:
40:e9:90:b8:fb:eb:ee:b5:b6:af:db:5a:d3:33:a3:92:75:52:
8b:b2:b0:52:f2:f4:a1:f3:fc:3a:7a:57:9f:e8:37:f5:b2:27:
f0:aa:d1:db:57:e1:3f:63:9d:fd:c1:2b:96:d1:7c:7f:77:8a:
d5:3f:1e:35:cb:3b:ff:1f:83:ac:6e:56:0c:81:50:e1:16:f1:
87:f0:25:c8:d7:91:27:b0:32:0f:a9:e4:e5:29:fa:50:36:42:
9c:a5:ea:9d:c0:e7:c3:bf:10:d1:a6:10:bf:e8:84:96:c0:b8:
3e:cd:88:fb:66:84:60:8b:88:e0:31:0f:fe:ad:22:2d:b5:4e:
6c:14:42:76:ab:4d:94:b9:f6:f8:1b:6a:71:e9:0c:a6:2d:cc:
c3:6d:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org