Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/ccMwW35-a4uj7vgR79DF105Q26o.roa
File: ccMwW35-a4uj7vgR79DF105Q26o.roa (raw, json)
Hash identifier: IgvuOKAmei9AZV3fK+gKkJ0WEOqG/znRbJM4/Vgewrk=
Subject key identifier: 71:C3:30:5B:7E:7E:6B:8B:A3:EE:F8:11:EF:D0:C5:D7:4E:50:DB:AA
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 11652999
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/ccMwW35-a4uj7vgR79DF105Q26o.roa
Signing time: Sat 01 Jan 2022 05:57:07 +0000
ROA not before: Sat 01 Jan 2022 05:57:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
195.80.50.0/24 maxlen: 24
195.80.51.0/24 maxlen: 24
85.92.109.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
45.8.97.0/24 maxlen: 24
45.8.98.0/24 maxlen: 24
45.80.130.0/23 maxlen: 23
45.80.129.0/24 maxlen: 24
91.107.116.0/24 maxlen: 24
91.107.124.0/23 maxlen: 23
194.31.174.0/24 maxlen: 24
194.31.173.0/24 maxlen: 24
91.107.127.0/24 maxlen: 24
194.5.92.0/24 maxlen: 24
194.5.93.0/24 maxlen: 24
5.44.44.0/24 maxlen: 24
5.44.46.0/24 maxlen: 24
5.44.47.0/24 maxlen: 24
45.129.185.0/24 maxlen: 24
194.28.192.0/24 maxlen: 24
45.66.116.0/24 maxlen: 24
45.66.119.0/24 maxlen: 24
109.236.58.0/24 maxlen: 24
109.236.56.0/23 maxlen: 23
92.118.114.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291842457 (0x11652999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 05:57:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71c3305b7e7e6b8ba3eef811efd0c5d74e50dbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:14:cd:54:b2:37:37:b6:2a:5c:89:34:39:
09:0a:16:7a:8f:f5:97:13:8d:cf:32:40:4e:54:59:
16:d6:4b:77:30:80:ba:10:af:61:3e:df:2b:92:29:
6d:14:05:bb:d8:03:05:19:bd:5c:82:70:5c:8b:d0:
9d:a1:84:4d:94:c2:f8:57:33:56:72:b2:58:51:57:
b7:8e:6e:f0:3f:39:9c:41:66:90:44:d0:8d:45:f7:
3c:00:cc:d1:0f:66:45:b6:60:f0:74:2f:9b:a0:0e:
75:f8:f7:a8:96:2b:e1:52:95:9c:64:e2:a9:4f:92:
b6:eb:b2:8b:a3:ba:e9:93:3e:8a:a7:6e:a7:9c:40:
3e:79:17:e2:f6:1e:f0:4b:7a:3d:cd:43:da:d0:54:
b9:c9:c6:1c:5c:12:b6:df:64:f5:87:87:25:26:6d:
dc:49:5e:28:c1:cc:c7:40:eb:a1:8d:5c:ef:6b:bd:
5a:fc:73:91:8e:3d:6e:06:02:e9:f5:99:43:79:d0:
a8:7b:af:3d:b0:53:d7:d5:da:81:92:c8:d6:94:b3:
d1:72:eb:99:b3:e4:c6:a6:ae:c9:c0:ae:74:c6:5f:
1e:eb:1b:be:f1:bc:ab:8a:86:79:7f:f1:fe:4c:f6:
d9:46:e7:57:db:0b:a1:b3:7e:68:72:ff:2b:78:71:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:30:5B:7E:7E:6B:8B:A3:EE:F8:11:EF:D0:C5:D7:4E:50:DB:AA
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/ccMwW35-a4uj7vgR79DF105Q26o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.44.0/24
5.44.46.0/23
45.8.97.0-45.8.98.255
45.66.116.0/24
45.66.119.0/24
45.80.129.0-45.80.131.255
45.129.185.0/24
46.16.14.0/23
85.92.109.0/24
89.191.232.0/24
91.107.116.0/24
91.107.124.0/23
91.107.127.0/24
91.200.84.0/24
92.118.114.0/23
109.236.56.0-109.236.58.255
141.98.233.0-141.98.234.255
194.5.92.0/23
194.28.192.0/24
194.31.173.0-194.31.174.255
195.80.50.0/23
Signature Algorithm: sha256WithRSAEncryption
24:7e:c2:ba:48:6c:d9:54:a1:f8:c8:3d:b6:16:9c:42:37:6a:
a5:b7:c3:2f:30:ef:db:18:02:01:63:34:6a:0a:8e:86:7e:42:
39:bd:6c:6b:00:d9:41:43:9d:82:0b:3e:4b:6a:14:bb:e8:e2:
2e:eb:eb:8f:20:b1:cf:b5:2e:bb:de:18:3a:26:d7:b4:eb:f7:
3c:3a:c0:a0:45:ae:c4:3c:0d:20:7a:b4:61:8d:e5:5f:2b:48:
6d:f7:fa:57:e0:f0:b2:a5:fc:03:91:e6:dc:22:9e:1b:54:d2:
2e:86:aa:5f:3e:7f:9f:69:6c:69:90:08:09:52:0f:d8:d8:6d:
b2:57:9e:3d:e1:d4:e0:0a:7c:d8:93:4c:5e:cb:a9:8d:31:0f:
e5:5c:04:99:4c:f7:95:e7:05:d8:58:f5:d4:d8:aa:bb:9d:59:
39:e9:a4:67:b8:67:82:27:d9:d3:24:0d:4c:c0:a5:49:ca:d2:
01:15:15:5b:2e:cd:6c:1e:31:ec:65:ab:af:36:ec:a7:e5:bf:
05:fc:5f:c4:ab:26:03:3b:72:1d:c0:a1:fa:ed:f3:17:4e:cc:
21:db:74:aa:76:3a:63:13:34:15:4f:c3:8d:5d:28:a9:44:b0:
44:f7:a9:4c:53:dc:99:fa:c8:af:70:43:07:2d:55:46:2a:ac:
6e:c5:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org