Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i4dqj4AZzv6-elkd_BrUN_4RNEo.roa
File: i4dqj4AZzv6-elkd_BrUN_4RNEo.roa (raw, json)
Hash identifier: 0fnuGPK4fWHlnEZeuL45FYtvL+RkSs7ifOGTBzSmcZM=
Subject key identifier: 8B:87:6A:8F:80:19:CE:FE:BE:7A:59:1D:FC:1A:D4:37:FE:11:34:4A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C0F96100B4DC052140AA7402D643289BE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i4dqj4AZzv6-elkd_BrUN_4RNEo.roa
Signing time: Mon 27 Nov 2023 07:02:21 +0000
ROA not before: Mon 27 Nov 2023 07:02:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206003
IP address blocks: 45.9.156.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
92.249.48.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
45.139.104.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
81.161.230.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.248.0/24 maxlen: 24
94.156.250.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:96:10:0b:4d:c0:52:14:0a:a7:40:2d:64:32:89:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 27 07:02:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b876a8f8019cefebe7a591dfc1ad437fe11344a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:d3:f5:c1:c4:1f:d6:72:d6:97:17:7d:d4:
24:b3:57:29:8b:34:a4:88:45:08:d0:89:e8:dd:ea:
25:1f:4c:ca:2d:c3:ad:f2:6a:3e:f7:66:45:06:36:
da:3b:43:cb:79:fd:96:af:20:e4:4c:1c:af:0d:9b:
28:03:56:e0:51:c1:79:27:13:84:df:8f:4b:33:a5:
5b:46:4b:50:d1:59:74:19:e8:3a:ad:bc:d7:0e:de:
71:c0:be:47:1f:e7:3c:ee:f3:1e:b7:98:ba:43:b3:
17:1f:a4:58:10:c0:cd:69:0b:51:02:b2:57:0b:f7:
07:ce:11:4a:9f:e8:31:da:c2:50:ac:d9:45:02:a7:
cb:e4:60:36:0a:79:b5:af:c3:a9:38:86:e4:15:88:
ac:c2:b0:68:8b:12:80:39:80:bf:2e:ea:96:f1:d4:
45:93:e9:9a:63:bf:e1:1c:7c:c7:ee:52:6e:bb:0e:
d7:e0:f7:5c:1c:f2:83:9e:41:c2:25:97:fc:32:8b:
0a:7c:80:74:76:54:65:f0:72:6f:7e:56:6b:6c:b0:
aa:0a:8b:05:86:34:46:fd:8c:36:b4:a3:cc:ea:f8:
3e:54:76:c3:44:b0:32:07:09:22:95:bd:c0:3d:d4:
fd:a9:46:ce:60:b7:07:c7:e0:a3:1d:ed:e3:ad:40:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:87:6A:8F:80:19:CE:FE:BE:7A:59:1D:FC:1A:D4:37:FE:11:34:4A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i4dqj4AZzv6-elkd_BrUN_4RNEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.9.156.0/24
45.129.84.0/24
45.129.86.0/24
45.139.104.0/24
45.141.158.0/24
79.110.61.0/24
81.161.230.0/24
81.161.239.0/24
83.219.97.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
92.249.48.0/24
94.154.172.0/24
94.156.248.0/24
94.156.250.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
171.22.31.0/24
178.215.226.0/24
193.25.216.0/24
193.35.19.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:54:24:6c:bc:43:13:13:d0:35:0f:b4:03:a0:11:74:f0:d5:
35:db:39:ca:7b:bd:b1:28:7d:10:27:56:80:07:85:52:ce:b7:
34:7e:96:17:81:97:5d:11:8a:0b:f2:b4:b9:1e:c1:09:a8:86:
c8:6f:34:16:13:a9:e7:e4:d8:96:4c:40:17:3d:b0:07:50:0c:
b3:bc:cc:53:ee:c2:9d:44:f3:3a:8b:dc:9e:f9:f2:1b:05:f7:
2d:00:75:b3:b6:78:91:e5:dd:d4:e8:6f:f1:85:1a:94:e0:62:
9e:58:a3:99:7d:41:81:d3:6a:68:ca:e5:a8:d3:b6:33:18:b1:
27:de:15:60:c8:bd:38:d7:d6:08:bd:1c:2f:d7:76:68:5b:68:
5a:49:71:80:3f:9f:c5:44:f6:2b:44:4c:cd:85:02:08:01:bb:
33:a7:e6:bc:d5:dc:4b:50:a1:24:82:7f:79:66:40:4d:f3:e5:
1c:17:8d:b0:9a:7d:d0:a2:18:37:bd:d1:d0:a9:f4:e5:4b:47:
2c:cb:8a:dd:82:ad:80:3b:58:50:ac:93:d5:b6:4a:2e:a8:b6:
85:cf:be:81:54:c2:8a:22:ff:ed:b6:7e:ea:e8:0d:57:0c:d1:
9f:fc:d1:d3:15:a2:46:11:39:f9:99:b4:15:f9:3e:04:52:e2:
bc:8f:6b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:52:51 2025 by rpki-client