Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/e1KF3cMPl5INjPk_vROtsdy2_eo.roa
File: e1KF3cMPl5INjPk_vROtsdy2_eo.roa (raw, json)
Hash identifier: OV3BgBRF5ZiRk2iu+g83fOBaLvlFcxGaOO/HPxG2n5Q=
Subject key identifier: 7B:52:85:DD:C3:0F:97:92:0D:8C:F9:3F:BD:13:AD:B1:DC:B6:FD:EA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0E26706D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/e1KF3cMPl5INjPk_vROtsdy2_eo.roa
Signing time: Thu 12 May 2022 09:13:02 +0000
ROA not before: Thu 12 May 2022 09:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.198.241.0/24 maxlen: 24
185.198.243.0/24 maxlen: 24
185.192.69.0/24 maxlen: 24
185.165.45.0/24 maxlen: 24
185.217.117.0/24 maxlen: 24
45.80.157.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237400173 (0xe26706d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 12 09:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b5285ddc30f97920d8cf93fbd13adb1dcb6fdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:3b:fb:95:01:eb:1e:66:e8:55:b5:39:12:
dc:f0:cd:e4:6a:0b:1d:8e:9e:dc:9e:e2:64:13:a8:
e3:b7:59:ca:64:b0:2f:94:f8:2f:c1:83:af:5b:a1:
3e:a6:1c:b6:9a:95:98:f3:b8:da:9b:34:d3:62:06:
96:7c:4e:96:9a:33:78:82:36:24:ab:8a:3a:f7:b1:
23:a1:05:63:77:f1:33:a8:09:ef:f5:b3:36:bb:63:
ce:47:a6:79:7d:04:44:93:5f:4d:20:1d:9b:fd:bc:
e7:fc:5b:da:87:b8:21:53:ce:f5:3a:00:a8:66:4f:
4d:b6:41:44:d5:99:1b:8e:41:55:ae:5c:4a:fa:fb:
4e:44:e7:5f:f1:9e:74:aa:26:6b:13:4c:23:ca:10:
82:6a:f9:74:90:a2:cf:28:9f:6e:99:65:2c:a9:cb:
5a:48:5b:ff:c6:8f:52:6e:3e:a2:92:3d:70:78:44:
9f:46:7b:14:30:44:2b:0b:75:cb:53:40:9e:8e:5e:
22:c9:a3:ee:58:20:6b:6b:0e:6e:1a:ca:76:53:f1:
b2:36:d5:50:80:3f:5f:6a:6b:3e:68:e9:59:e8:29:
50:95:51:b2:af:1a:1c:ba:c8:c4:b3:61:84:60:62:
c5:51:6d:42:9f:e5:0d:c0:53:d7:a2:f2:08:1b:79:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:52:85:DD:C3:0F:97:92:0D:8C:F9:3F:BD:13:AD:B1:DC:B6:FD:EA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/e1KF3cMPl5INjPk_vROtsdy2_eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.157.0/24
185.165.45.0/24
185.192.69.0/24
185.198.241.0/24
185.198.243.0/24
185.217.117.0/24
Signature Algorithm: sha256WithRSAEncryption
21:dc:ac:1b:50:20:2b:ac:56:4f:1b:0d:de:ff:bb:8c:ed:23:
ee:0b:d6:ee:e4:ea:0a:7e:ec:83:66:7d:07:94:7a:04:e5:80:
67:40:f0:27:14:fa:c8:5c:ef:48:23:b7:8f:e4:81:84:df:52:
25:84:bd:a2:a5:3e:0d:b2:31:f7:9e:5d:2b:84:81:6d:d3:92:
e3:47:30:e1:a2:5d:20:76:6a:12:34:35:1e:6d:2a:72:39:98:
a2:86:6e:60:f7:4d:a6:a8:e1:4d:51:61:7d:0e:41:b4:16:d5:
0f:8b:d3:bd:b8:87:7b:53:a3:75:80:b6:15:8b:90:7f:c6:41:
2d:50:55:d8:26:74:d4:87:e5:53:44:e4:5c:35:17:f5:aa:d4:
31:3c:bd:21:c1:45:63:10:e6:1f:33:65:09:4d:a2:87:f8:39:
fe:bb:bb:03:b8:43:6a:aa:8f:6c:ed:a3:48:88:cc:7d:b9:7d:
80:75:8a:4f:55:17:47:ca:f6:53:4d:98:91:85:d3:cb:61:9f:
3a:c2:62:fd:05:b9:38:07:a2:72:47:a9:34:76:c9:f4:9c:ae:
e7:9b:c2:88:76:90:21:90:90:26:02:44:2f:da:17:47:0b:b8:
50:28:7f:f0:58:75:df:20:35:6b:11:ca:0f:a9:61:15:32:bc:
64:34:bd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org