Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/O0AvAaM3kCUeYQDxE98NnYYeRMU.roa
File: O0AvAaM3kCUeYQDxE98NnYYeRMU.roa (raw, json)
Hash identifier: k6Ro/GpsOf18GCvN0+twg3TucpA2880gDAEPCeswEgM=
Subject key identifier: 3B:40:2F:01:A3:37:90:25:1E:61:00:F1:13:DF:0D:9D:86:1E:44:C5
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018CC64B2AEBBCE48CDAF3A480CC3C67D1E5
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/O0AvAaM3kCUeYQDxE98NnYYeRMU.roa
Signing time: Mon 01 Jan 2024 18:31:04 +0000
ROA not before: Mon 01 Jan 2024 18:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206065
IP address blocks: 45.140.228.0/22 maxlen: 22
85.198.48.0/20 maxlen: 20
45.156.180.0/22 maxlen: 22
45.156.192.0/22 maxlen: 22
45.156.194.0/23 maxlen: 24
45.156.200.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:2a:eb:bc:e4:8c:da:f3:a4:80:cc:3c:67:d1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 18:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b402f01a33790251e6100f113df0d9d861e44c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:9d:6b:bc:14:9e:2e:3b:9f:21:72:87:3e:
b8:5c:9c:ca:ee:cc:1e:7f:54:ad:e9:99:31:40:7e:
e6:51:1f:24:69:39:7b:b6:d4:31:b3:61:23:ff:bb:
d4:5d:49:a9:9f:15:89:d9:dc:57:2b:e2:f5:51:79:
33:cc:fe:8f:73:06:32:76:a7:bc:71:7d:99:3a:9a:
88:c3:eb:85:b2:35:87:53:c1:a9:67:c9:96:ad:50:
a6:6e:e3:41:63:53:bc:c7:0f:b7:db:aa:7e:18:f3:
d3:93:a4:e1:1c:3a:c9:a4:f4:c0:c5:20:64:00:53:
7f:6f:30:5c:75:3a:d9:14:72:32:b6:07:97:43:47:
73:c4:5c:d7:7e:e7:3c:2f:c2:00:9e:13:ef:0a:93:
ef:a4:d1:81:69:57:ef:ea:46:bc:d3:01:c6:bd:cc:
cf:01:d7:2e:19:60:5b:95:d0:63:eb:10:a3:8c:ef:
3d:f2:47:85:f2:ce:1e:9b:6c:c2:94:7e:38:8a:6c:
61:d2:5f:6d:5c:9e:ce:69:3a:62:00:7f:a8:af:77:
58:eb:21:26:ff:6c:00:e6:6e:02:19:1c:29:05:c9:
65:16:3e:7c:e7:ae:a8:52:9c:ac:e4:d4:cf:d3:40:
94:6c:88:96:06:32:fd:00:e9:7c:a5:61:48:bc:9e:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:2F:01:A3:37:90:25:1E:61:00:F1:13:DF:0D:9D:86:1E:44:C5
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/O0AvAaM3kCUeYQDxE98NnYYeRMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.228.0/22
45.156.180.0/22
45.156.192.0/22
45.156.200.0/22
85.198.48.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:d5:47:62:31:ce:5f:25:48:73:ce:20:39:58:3c:db:5b:15:
c8:44:1a:05:83:fb:17:a1:58:4e:84:22:a7:0e:bb:d9:a9:2c:
74:21:45:a3:a8:6e:27:da:0b:e2:a8:d2:7b:e8:62:7e:68:c2:
72:0b:b1:bc:e6:12:91:0f:3c:14:96:05:3d:aa:d2:57:fc:be:
0e:46:53:5a:a8:0f:0d:aa:f5:84:19:86:4b:60:a8:7a:9f:eb:
10:3d:0a:a3:69:c6:08:aa:5b:b2:24:51:56:e3:99:5c:de:73:
05:81:c6:c7:f7:6d:6d:f8:0d:c8:1a:2a:83:5b:77:ff:c9:5c:
43:be:2a:35:9f:8d:7e:1b:62:a7:51:63:49:41:7d:b7:95:a3:
46:a8:f9:08:f5:7c:18:1e:ed:69:06:a9:6f:c4:47:3a:18:3b:
8a:82:27:ac:0f:15:7c:73:43:cd:b0:a1:8c:96:83:8d:46:70:
cc:26:f5:8f:c8:b5:ce:48:f4:f6:17:3f:fd:3e:14:50:1a:66:
aa:bc:0c:2f:34:94:e3:30:da:4f:b1:2f:e8:92:58:36:66:53:
87:47:a7:34:40:41:95:27:35:58:4a:00:11:fa:87:ad:9e:64:
d2:5d:64:ad:69:d5:e6:b3:ae:7d:a7:4d:0d:73:84:48:32:e3:
e5:24:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org