Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/KmbYeAGe3wwdG47L6-ClZAhJFjU.roa
File: KmbYeAGe3wwdG47L6-ClZAhJFjU.roa (raw, json)
Hash identifier: hbpctmOoMs4fudqUAoqxdyQBLL74DByU/H7tWtPqLbo=
Subject key identifier: 2A:66:D8:78:01:9E:DF:0C:1D:1B:8E:CB:EB:E0:A5:64:08:49:16:35
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 0184F115AF2DFC5F3F7F9EAEC105433E73A0
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/KmbYeAGe3wwdG47L6-ClZAhJFjU.roa
Signing time: Thu 08 Dec 2022 09:34:00 +0000
ROA not before: Thu 08 Dec 2022 09:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6700
IP address blocks: 217.26.64.0/20 maxlen: 20
195.252.110.0/24 maxlen: 24
195.252.109.0/24 maxlen: 24
195.252.122.0/23 maxlen: 23
195.252.64.0/19 maxlen: 19
195.252.78.0/23 maxlen: 23
195.252.76.0/23 maxlen: 23
195.252.80.0/23 maxlen: 23
195.252.96.0/19 maxlen: 19
195.252.102.0/24 maxlen: 24
213.244.224.0/20 maxlen: 20
194.106.165.0/24 maxlen: 24
194.106.166.0/24 maxlen: 24
194.106.162.0/24 maxlen: 24
194.106.160.0/20 maxlen: 20
194.106.170.0/24 maxlen: 24
194.106.176.0/20 maxlen: 20
194.106.182.0/24 maxlen: 24
62.193.131.0/24 maxlen: 24
62.193.129.0/24 maxlen: 24
62.193.130.0/24 maxlen: 24
62.193.128.0/19 maxlen: 19
62.193.137.0/24 maxlen: 24
62.193.151.0/24 maxlen: 24
91.148.117.0/24 maxlen: 24
91.148.118.0/24 maxlen: 24
91.148.124.0/24 maxlen: 24
91.148.125.0/24 maxlen: 24
91.148.123.0/24 maxlen: 24
91.148.122.0/24 maxlen: 24
91.148.120.0/23 maxlen: 23
91.148.126.0/23 maxlen: 24
85.222.160.0/22 maxlen: 24
85.222.160.0/24 maxlen: 24
91.148.69.0/24 maxlen: 24
91.148.70.0/24 maxlen: 24
91.148.68.0/24 maxlen: 24
91.148.64.0/18 maxlen: 18
91.148.72.0/24 maxlen: 24
91.148.73.0/24 maxlen: 24
91.148.80.0/20 maxlen: 20
91.148.96.0/21 maxlen: 21
91.148.105.0/24 maxlen: 24
91.148.104.0/24 maxlen: 24
185.47.210.0/24 maxlen: 24
185.47.208.0/22 maxlen: 22
185.47.208.0/24 maxlen: 24
178.20.206.0/24 maxlen: 24
62.108.96.0/19 maxlen: 19
178.20.204.0/24 maxlen: 24
178.20.205.0/24 maxlen: 24
178.20.207.0/24 maxlen: 24
2001:8c8::/32 maxlen: 32
2a02:e40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:15:af:2d:fc:5f:3f:7f:9e:ae:c1:05:43:3e:73:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Dec 8 09:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a66d878019edf0c1d1b8ecbebe0a56408491635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:04:8b:31:00:92:4b:e3:c0:46:6d:94:f3:ce:
ca:ca:1b:85:ec:5b:2c:b8:f3:4d:ed:49:44:1f:08:
13:c8:63:75:a0:14:bb:d3:9c:a0:87:aa:b4:13:69:
bd:9b:9f:5e:58:fb:7f:8f:fd:1f:b3:70:38:1e:26:
d4:8f:6f:f0:ff:6b:d9:3f:82:29:6b:4d:93:5a:29:
24:66:14:2b:40:24:10:bc:d7:a3:9e:1e:cf:87:0f:
e8:9f:24:a7:04:a7:0a:60:1e:d1:a0:63:ab:d8:fc:
22:7b:e9:9c:f7:72:84:f1:c6:8c:a8:0b:71:c5:7e:
72:76:fb:29:b3:1d:06:11:be:1c:93:39:d3:00:0c:
63:55:75:ed:de:12:98:65:2a:30:50:3e:1c:f6:87:
28:f1:26:12:bb:4e:4e:77:e9:eb:f4:10:f1:2b:28:
9a:45:4c:c2:6c:a4:6f:e8:29:f2:6f:b3:15:ad:fe:
49:e7:50:96:a0:1d:80:71:87:59:0f:3b:a5:e5:2d:
71:b9:02:db:b1:ac:5e:54:d9:42:4e:1e:34:06:23:
ce:bd:a1:17:c1:bb:28:93:9a:d2:14:89:84:c1:05:
51:20:96:f1:14:74:d9:7c:3f:dc:75:97:f4:78:fb:
7e:fc:7b:24:fc:e6:5c:49:9e:85:72:78:6a:8c:07:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:66:D8:78:01:9E:DF:0C:1D:1B:8E:CB:EB:E0:A5:64:08:49:16:35
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/KmbYeAGe3wwdG47L6-ClZAhJFjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.96.0/19
62.193.128.0/19
85.222.160.0/22
91.148.64.0/18
178.20.204.0/22
185.47.208.0/22
194.106.160.0/19
195.252.64.0/18
213.244.224.0/20
217.26.64.0/20
IPv6:
2001:8c8::/32
2a02:e40::/32
Signature Algorithm: sha256WithRSAEncryption
16:ed:1a:58:58:b9:2e:02:a9:1d:5b:6a:f3:12:78:9a:c8:1e:
ff:26:98:7a:c2:fc:82:be:5d:dc:2f:c2:7c:54:db:ab:77:6e:
1d:4c:af:88:92:f7:16:b3:40:dd:26:29:50:d0:f7:55:b1:3d:
aa:84:fa:c9:6e:aa:db:0a:c3:a5:2e:63:06:b6:16:4c:cd:b9:
1d:0d:67:43:3b:12:00:f5:6a:e4:b7:90:00:42:89:e4:bc:21:
a2:a3:62:3f:38:6d:5b:0f:fc:06:64:07:c7:b9:ec:7c:ed:82:
d1:74:96:8e:19:32:54:ab:75:8c:38:41:93:43:90:ff:85:2f:
f7:9c:7f:12:83:ae:c6:c4:65:9d:bb:58:d8:20:92:2e:7c:a8:
3a:95:af:8b:49:0d:0f:cb:21:c5:cf:2d:66:db:34:8e:07:27:
55:af:22:c5:20:43:a1:c1:bd:69:48:61:4b:58:ff:7f:92:3e:
66:7e:51:e0:cd:26:68:aa:59:3c:7b:e6:bb:80:18:e6:b6:bd:
b9:7a:c5:8d:f6:1b:bd:6b:0e:b7:99:b7:db:dd:55:93:27:80:
c6:d2:8e:f3:7d:93:26:12:33:ea:81:d3:69:12:5f:ea:0a:88:
22:39:5d:37:82:c3:12:68:93:0b:9f:8d:12:bc:a7:fe:be:05:
cc:1d:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:19 2024 by rpki-client on console-ams.rpki-client.org