Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/hVDfEV3rsDYEskWRnBC0D1Kgrrg.roa
File: hVDfEV3rsDYEskWRnBC0D1Kgrrg.roa (raw, json)
Hash identifier: V0URB7ZUMFcnoRHdhXFj1drJ3WKNG+fnAITmZdLxQ64=
Subject key identifier: 85:50:DF:11:5D:EB:B0:36:04:B2:45:91:9C:10:B4:0F:52:A0:AE:B8
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 31668602
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/hVDfEV3rsDYEskWRnBC0D1Kgrrg.roa
Signing time: Fri 10 Jun 2022 14:45:02 +0000
ROA not before: Fri 10 Jun 2022 14:45:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20649
IP address blocks: 80.93.212.0/24 maxlen: 24
80.93.210.0/24 maxlen: 24
80.93.211.0/24 maxlen: 24
80.93.208.0/24 maxlen: 24
80.93.213.0/24 maxlen: 24
80.93.219.0/24 maxlen: 24
80.93.218.0/24 maxlen: 24
80.93.215.0/24 maxlen: 24
80.93.216.0/24 maxlen: 24
80.93.214.0/24 maxlen: 24
80.93.222.0/24 maxlen: 24
80.93.223.0/24 maxlen: 24
78.111.96.0/24 maxlen: 24
78.111.97.0/24 maxlen: 24
78.111.98.0/24 maxlen: 24
78.111.105.0/24 maxlen: 24
78.111.104.0/24 maxlen: 24
78.111.111.0/24 maxlen: 24
78.111.108.0/24 maxlen: 24
78.111.109.0/24 maxlen: 24
78.111.106.0/24 maxlen: 24
217.195.192.0/24 maxlen: 24
217.195.198.0/24 maxlen: 24
217.195.196.0/24 maxlen: 24
217.195.206.0/24 maxlen: 24
217.195.204.0/24 maxlen: 24
217.195.203.0/24 maxlen: 24
217.195.200.0/24 maxlen: 24
217.195.201.0/24 maxlen: 24
217.195.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828802562 (0x31668602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jun 10 14:45:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8550df115debb03604b245919c10b40f52a0aeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:05:d1:e9:0c:5a:d4:cc:ca:aa:c5:06:65:
83:c1:2f:4f:db:40:ed:d7:6f:4c:45:ee:67:3b:59:
52:1f:21:b7:0e:a1:6a:7e:ce:60:28:d7:bb:a2:ee:
1c:2f:9a:c9:62:9c:95:ba:3f:90:d9:72:3e:b7:8d:
96:a4:3f:1e:0d:35:67:18:62:5d:70:7e:55:21:02:
74:c5:0e:b3:6d:ac:2f:c1:3d:70:0c:20:30:1e:0c:
e6:34:81:4f:10:2a:72:af:0a:a3:12:75:5d:e8:22:
20:56:84:65:36:25:69:5b:b5:37:19:bd:3f:2d:03:
99:a9:c6:3d:7e:9e:a4:85:c7:ba:5c:ea:dd:ca:60:
0f:aa:eb:83:0a:7f:04:d3:a7:3a:55:1f:c1:14:1c:
9e:e8:37:93:30:91:6d:fc:c6:4e:e5:f0:a9:cd:26:
5f:52:47:f8:05:46:c1:93:18:ff:4f:7b:1e:93:31:
c8:c9:75:05:60:86:86:bf:2b:71:fe:66:74:b2:f2:
59:74:8e:ea:38:64:84:3e:05:b6:87:03:8c:84:ad:
00:e0:6f:a1:7b:c0:8b:27:10:e5:3e:7a:31:c5:74:
02:d3:47:3a:8a:af:1e:27:4d:1c:58:3e:6d:29:0a:
2d:15:fd:dc:e4:49:b9:e1:d4:01:46:66:3e:a5:53:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:50:DF:11:5D:EB:B0:36:04:B2:45:91:9C:10:B4:0F:52:A0:AE:B8
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/hVDfEV3rsDYEskWRnBC0D1Kgrrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.96.0-78.111.98.255
78.111.104.0-78.111.106.255
78.111.108.0/23
78.111.111.0/24
80.93.208.0/24
80.93.210.0-80.93.216.255
80.93.218.0/23
80.93.222.0/23
217.195.192.0/24
217.195.196.0/24
217.195.198.0/24
217.195.200.0/23
217.195.203.0-217.195.204.255
217.195.206.0/23
Signature Algorithm: sha256WithRSAEncryption
02:42:d3:ff:b1:3e:3d:a0:1d:e9:f7:f1:91:33:ea:0e:56:c6:
3e:bc:4a:1c:1e:5c:08:b2:db:33:54:c9:57:f4:c2:bb:56:87:
b0:60:f9:54:a5:87:08:59:66:7e:39:c6:3f:73:08:0b:44:96:
53:2b:fc:9d:c3:33:63:00:4b:c9:b6:3b:6e:d7:5d:75:b8:57:
3e:cc:e7:e2:3a:c8:db:e3:a9:a7:3a:b1:d1:c9:ca:ca:7f:d5:
36:8c:15:2d:13:ae:d9:6e:c9:33:b3:c9:59:88:46:51:fb:9b:
88:13:8e:46:a0:4d:56:a1:fd:e1:8a:06:c0:f4:6a:14:50:36:
fd:8b:0c:a8:3d:5e:63:43:94:9e:4f:a7:b0:d4:1a:c7:e1:f2:
0d:6f:bf:5a:32:9a:73:7c:fd:05:32:51:8d:46:9c:2a:e3:ad:
2c:58:f6:57:f9:80:7d:b9:1b:54:7b:71:c9:a7:8f:3a:af:a0:
ae:98:4f:4c:d9:8d:5e:37:17:28:0f:7b:40:3c:70:dd:67:6d:
8c:fe:0a:9a:5c:08:27:8c:b4:e4:37:9f:f6:ec:a7:12:b2:8b:
3c:cd:f0:6c:a8:a9:15:75:32:1a:cf:c0:e8:c8:d4:f1:62:67:
ec:ae:ba:c5:74:ef:06:45:d8:ef:6f:74:e8:47:88:28:e9:63:
9d:59:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:33 2024 by rpki-client on console-ams.rpki-client.org