Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PmFjzwRX9cpFXyrE5qk3hZ4sg4c.roa
File: PmFjzwRX9cpFXyrE5qk3hZ4sg4c.roa (raw, json)
Hash identifier: 1KFc345HGuAarBqCdaOXVNtLfpDgTD2A5Ss6XpPlUzk=
Subject key identifier: 3E:61:63:CF:04:57:F5:CA:45:5F:2A:C4:E6:A9:37:85:9E:2C:83:87
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01857102FB48E1E97E44FD8B17EE19A5FEEC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PmFjzwRX9cpFXyrE5qk3hZ4sg4c.roa
Signing time: Mon 02 Jan 2023 05:44:58 +0000
ROA not before: Mon 02 Jan 2023 05:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7922
IP address blocks: 185.230.248.0/22 maxlen: 22
185.229.104.0/22 maxlen: 22
45.94.176.0/22 maxlen: 22
45.128.32.0/22 maxlen: 22
45.159.88.0/22 maxlen: 22
45.94.60.0/22 maxlen: 22
185.240.196.0/22 maxlen: 22
185.241.164.0/22 maxlen: 22
45.95.248.0/22 maxlen: 22
162.249.64.0/21 maxlen: 21
45.159.152.0/22 maxlen: 22
185.236.60.0/22 maxlen: 22
185.111.172.0/22 maxlen: 22
185.238.220.0/22 maxlen: 22
185.237.60.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:fb:48:e1:e9:7e:44:fd:8b:17:ee:19:a5:fe:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e6163cf0457f5ca455f2ac4e6a937859e2c8387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:c8:f9:6e:62:c3:78:97:65:45:27:cb:a4:
2f:eb:ea:cf:f8:31:9a:0f:6c:ae:73:af:f3:3e:87:
65:c2:00:a8:23:13:2c:b6:de:1e:70:e2:c0:8b:e5:
98:97:8b:a1:b4:7d:be:c6:51:59:1e:d7:b7:ef:cc:
79:ad:e6:2b:fb:d0:4d:31:86:ae:c1:fe:fe:2d:ea:
0e:1e:71:65:9f:7a:aa:a1:f4:6b:d4:91:40:05:03:
f7:18:8f:b4:96:72:b0:0b:d8:c9:28:c6:ca:77:0f:
a6:c1:4c:8e:bb:9d:18:0d:10:df:31:23:06:65:eb:
56:b7:9a:db:e1:94:e4:df:55:b6:96:94:aa:58:1c:
ea:f5:13:f9:03:e1:19:96:b2:4f:a7:18:0a:12:f9:
cb:20:90:31:c6:3c:07:29:75:1a:18:f0:6a:4e:76:
ac:7f:64:c2:03:a6:67:59:5a:11:0c:c9:0d:34:b7:
bf:76:86:4f:4a:fa:e8:cd:14:1d:bf:59:07:e8:3d:
59:d0:44:b4:65:3e:7c:4e:f7:db:2c:ca:21:b2:98:
c8:d3:01:3f:eb:54:8c:11:01:16:14:16:e0:85:a8:
59:2a:7f:0e:b6:da:d9:30:5b:f3:e7:a2:33:b8:5c:
5c:c5:17:c2:e7:7c:77:fd:da:a8:f6:e8:30:0a:b2:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:61:63:CF:04:57:F5:CA:45:5F:2A:C4:E6:A9:37:85:9E:2C:83:87
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PmFjzwRX9cpFXyrE5qk3hZ4sg4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.60.0/22
45.94.176.0/22
45.95.248.0/22
45.128.32.0/22
45.159.88.0/22
45.159.152.0/22
162.249.64.0/21
185.111.172.0/22
185.229.104.0/22
185.230.248.0/22
185.236.60.0/22
185.237.60.0/22
185.238.220.0/22
185.240.196.0/22
185.241.164.0/22
Signature Algorithm: sha256WithRSAEncryption
21:05:fe:e2:0d:3d:6c:41:8a:eb:b9:5c:94:14:29:a2:93:15:
07:35:9c:34:d2:1a:b1:93:08:da:c2:a9:81:dc:9d:5c:fb:cd:
95:76:2b:01:1e:d8:08:a9:d4:62:5f:53:7d:78:b9:a1:27:83:
1e:e3:7f:c2:3d:98:6a:86:8b:ab:d8:2f:e3:98:e5:ce:cc:9c:
8b:47:61:36:e4:95:f9:53:ce:a7:07:a0:86:98:60:ad:61:02:
e6:93:c2:30:36:10:5d:dc:58:95:8f:c8:0a:c6:3e:74:a9:13:
53:10:cf:0d:11:8a:0e:04:79:2c:e1:a0:c2:35:70:88:04:7f:
ad:39:fd:93:f7:37:a8:9a:37:80:2b:ca:e7:e6:96:48:87:18:
72:e3:9b:99:3b:4f:2c:0e:44:80:11:86:b2:28:8a:8b:cf:b6:
8b:55:e0:d4:fd:9e:30:38:74:b4:04:dc:cc:e7:8f:15:a7:40:
f4:b4:af:f2:a2:e5:d1:99:fd:97:41:a1:7e:cc:78:17:a9:97:
68:3f:b9:f6:4e:b2:f0:c2:07:a4:c7:94:75:47:cb:f2:45:1c:
7d:ad:6a:a4:2f:59:d8:4c:17:a1:14:16:86:bd:4f:a9:1b:68:
d7:9b:df:82:1f:db:96:ad:ae:bc:9d:6e:b4:d7:f5:b7:65:ff:
dd:bb:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org