Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dHyZ3J-e0QzZ7SWBqiUotD4lTZk.roa
File: dHyZ3J-e0QzZ7SWBqiUotD4lTZk.roa (raw, json)
Hash identifier: XEst9CHoKB5HwzkoQ73IZx6wpw0AVZXeuEgV8hwYRT0=
Subject key identifier: 74:7C:99:DC:9F:9E:D1:0C:D9:ED:25:81:AA:25:28:B4:3E:25:4D:99
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018774C6F5F973A947A86EFF5BA1E2A16D32
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dHyZ3J-e0QzZ7SWBqiUotD4lTZk.roa
Signing time: Wed 12 Apr 2023 09:23:28 +0000
ROA not before: Wed 12 Apr 2023 09:23:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.239.203.0/24 maxlen: 24
185.229.106.0/24 maxlen: 24
45.159.152.0/24 maxlen: 24
45.159.154.0/24 maxlen: 24
185.245.237.0/24 maxlen: 24
193.19.106.0/24 maxlen: 24
192.166.208.0/22 maxlen: 24
185.103.75.0/24 maxlen: 24
89.47.89.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:c6:f5:f9:73:a9:47:a8:6e:ff:5b:a1:e2:a1:6d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 12 09:23:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=747c99dc9f9ed10cd9ed2581aa2528b43e254d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:27:eb:20:6f:c3:f8:e8:e0:dc:68:29:72:
b8:76:86:90:74:75:d3:75:68:e5:ae:c0:18:dc:d8:
0a:4d:0e:14:bb:45:bd:09:a2:06:af:88:8d:b5:42:
19:c4:41:cb:f4:d7:f0:07:19:2a:e9:4e:16:0b:04:
70:10:30:33:2f:2b:a4:d5:16:16:48:e8:79:ed:25:
d3:7d:69:0b:3f:e0:12:c6:62:b5:3e:67:2b:84:0d:
eb:fe:ab:b6:33:97:bd:0e:a3:8b:74:c3:b0:a3:ac:
81:93:41:0c:77:3a:26:c6:15:73:5b:64:11:8a:d0:
07:c5:dc:3d:da:c9:ba:5f:6b:88:ea:ef:bf:95:0f:
16:5a:fb:53:8d:a0:2a:93:d1:8f:04:30:d5:7d:1d:
f1:47:85:2b:a0:84:f6:e5:21:3e:21:fa:cd:20:1f:
8c:e4:02:98:5c:61:bc:d3:47:0b:df:b5:89:f5:31:
82:82:c8:87:6c:d0:9b:e6:ec:31:a0:74:1c:1e:c7:
a6:04:b5:df:48:42:63:6c:f1:61:86:0b:c8:14:5b:
ac:89:b5:90:88:e8:cb:b8:ea:4d:3d:11:9e:68:78:
f5:a9:2b:ef:28:87:94:65:e7:a9:81:cb:5e:e1:58:
09:73:c6:03:49:7d:52:68:9b:4a:df:c4:d6:c2:36:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7C:99:DC:9F:9E:D1:0C:D9:ED:25:81:AA:25:28:B4:3E:25:4D:99
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dHyZ3J-e0QzZ7SWBqiUotD4lTZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0/24
45.159.154.0/24
89.47.89.0/24
178.239.203.0/24
185.103.75.0/24
185.229.106.0/24
185.245.237.0/24
192.166.208.0/22
193.19.106.0/24
Signature Algorithm: sha256WithRSAEncryption
38:34:76:7b:92:22:ec:ff:72:60:a1:4d:42:7b:6c:d5:01:0d:
ad:dd:f5:ce:d5:87:cb:22:28:cd:2e:9a:d6:31:09:98:99:da:
38:5c:d6:75:a2:a2:a0:57:ca:4e:94:77:e2:05:7a:4f:44:5f:
23:c6:22:b6:11:4e:da:b3:23:49:a9:a5:1b:eb:50:66:a8:60:
25:f2:73:3e:89:0e:aa:82:45:85:9a:19:fa:f8:ca:f3:3f:f2:
9a:54:e6:c4:e3:0c:33:06:99:d2:49:a2:07:01:96:85:e7:f2:
c1:45:44:30:e9:74:af:10:79:b9:f2:36:d0:1a:c0:b9:f6:6b:
7f:d4:15:97:f0:23:74:9e:b5:e5:e2:fb:48:62:d0:7b:08:22:
be:33:48:9d:4a:a5:27:4c:cd:63:25:42:21:6d:ce:bc:50:8a:
1c:a0:d0:e9:44:7a:b1:7f:c8:64:00:c4:5c:3e:d9:2f:8a:1c:
17:98:92:7c:e7:e2:df:eb:8c:1f:13:c2:ac:21:3a:bf:ff:89:
88:c9:02:03:4d:ae:93:bc:a7:93:09:b1:48:45:ba:e9:26:e1:
7a:06:28:e4:db:1d:53:02:83:34:14:71:33:b2:6e:b0:08:bc:
31:13:3f:ea:5f:f5:ba:bf:37:a3:88:2c:e2:e9:f1:66:4f:19:
b9:4d:ea:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org