Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/47hPpnWzPXRhFFJ6LxtjqTdZKZE.roa
File: 47hPpnWzPXRhFFJ6LxtjqTdZKZE.roa (raw, json)
Hash identifier: 2/IS8s3BAJmDETG1+WexWsc+xZvlHfLpiEvRqEE7KBA=
Subject key identifier: E3:B8:4F:A6:75:B3:3D:74:61:14:52:7A:2F:1B:63:A9:37:59:29:91
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 04BC448D
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/47hPpnWzPXRhFFJ6LxtjqTdZKZE.roa
Signing time: Tue 19 Apr 2022 15:51:18 +0000
ROA not before: Tue 19 Apr 2022 15:51:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60159
IP address blocks: 194.146.191.0/24 maxlen: 24
194.146.190.0/24 maxlen: 24
194.146.189.0/24 maxlen: 24
194.146.188.0/22 maxlen: 22
185.41.20.0/22 maxlen: 22
193.57.44.0/22 maxlen: 22
193.57.46.0/24 maxlen: 24
185.212.248.0/22 maxlen: 22
185.239.24.0/22 maxlen: 22
2a0c:d540::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79447181 (0x4bc448d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Apr 19 15:51:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3b84fa675b33d746114527a2f1b63a937592991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:a3:3c:08:54:af:d3:b5:e3:76:08:b0:4e:
e8:c4:ca:e6:09:0c:e9:8f:f7:db:6c:a7:ed:12:d4:
df:52:aa:91:e4:3f:5d:bd:8f:49:2d:b6:79:22:40:
7f:b6:9e:2b:17:93:70:f3:01:b7:c2:66:3c:64:7c:
30:e8:bf:40:b0:8e:1b:06:97:d5:f2:45:ad:35:33:
13:c7:65:ec:bf:17:d8:e9:69:4e:62:b0:aa:4a:45:
af:c2:52:fe:90:52:01:33:dd:8c:80:46:6d:e0:f5:
9d:5f:d0:67:1b:38:9c:a1:91:64:ce:93:80:c4:7c:
66:b4:53:04:9f:c9:cc:b0:58:ed:77:3a:53:6a:42:
42:1a:50:77:7e:6c:3b:d8:3b:b5:32:4a:6f:57:13:
67:bb:4d:96:50:db:bf:12:6e:42:38:3e:a9:dc:1a:
2a:e6:dc:39:a9:de:74:a0:4c:56:f3:94:d3:e4:36:
b9:59:e8:4f:b7:26:85:64:0a:c4:71:81:0d:78:c7:
9d:37:fb:03:e6:48:ea:9d:b6:f2:d1:ca:f9:4c:02:
66:d3:7c:74:57:54:bf:51:70:d8:94:b1:3d:f2:5e:
9d:96:20:35:47:5a:08:1c:78:75:24:96:23:53:4a:
3e:ea:67:f8:e5:61:89:f6:64:d0:86:5a:f1:9d:f2:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B8:4F:A6:75:B3:3D:74:61:14:52:7A:2F:1B:63:A9:37:59:29:91
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/47hPpnWzPXRhFFJ6LxtjqTdZKZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.20.0/22
185.212.248.0/22
185.239.24.0/22
193.57.44.0/22
194.146.188.0/22
IPv6:
2a0c:d540::/32
Signature Algorithm: sha256WithRSAEncryption
11:ba:e6:86:df:a5:3b:49:0f:ad:39:9f:f9:b9:ea:e5:7d:56:
4d:50:db:36:df:6b:d3:8d:3c:47:c9:ea:e9:c8:8e:87:f3:4c:
d7:31:23:fa:b8:09:eb:7c:1f:ba:69:78:12:b6:39:8c:7b:41:
a1:b3:c8:0a:3c:3e:34:7f:36:b3:42:7e:10:13:d9:77:03:96:
07:8f:2d:8f:4c:c7:f8:7b:a0:bc:c2:99:22:40:73:de:ce:39:
09:5d:82:1b:a2:9b:44:bd:5d:58:7a:e0:16:cc:17:4b:f4:78:
f0:66:bb:c8:d1:3e:d5:d1:5b:c6:51:ad:58:18:86:de:4c:ab:
2f:0a:d4:fe:09:05:91:47:d2:55:e1:c6:ce:36:0b:78:b5:55:
90:a1:38:33:3e:ef:9d:53:2a:b1:7d:58:63:a8:db:04:0a:31:
c0:58:aa:81:81:3c:ad:47:47:a7:ff:68:0d:07:fd:26:47:9a:
61:4d:19:79:9c:65:2e:21:08:6e:c2:52:6a:fe:a3:48:50:f8:
e5:2c:46:9f:de:67:ec:e4:17:7a:e6:98:81:6c:ab:88:5a:7f:
1a:9d:88:f0:c0:a7:6a:39:cd:a8:33:50:e7:0b:38:f5:35:4b:
73:1b:0c:c1:11:ac:ef:69:62:7c:98:06:87:d7:45:70:c6:9e:
b4:8f:52:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net