Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/LJ_dqf89DgYW9z1xTjzpLxFIlGM.roa
File: LJ_dqf89DgYW9z1xTjzpLxFIlGM.roa (raw, json)
Hash identifier: VbeLgVyX7VXHFV28kSnSEjw1FAAQGPxglzFe53APIk4=
Subject key identifier: 2C:9F:DD:A9:FF:3D:0E:06:16:F7:3D:71:4E:3C:E9:2F:11:48:94:63
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0BAF7B48
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/LJ_dqf89DgYW9z1xTjzpLxFIlGM.roa
Signing time: Mon 03 Jan 2022 09:59:43 +0000
ROA not before: Mon 03 Jan 2022 09:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 195.180.132.0/22 maxlen: 22
195.180.140.0/22 maxlen: 22
195.180.144.0/22 maxlen: 22
194.64.88.0/21 maxlen: 24
212.224.0.0/22 maxlen: 24
195.252.160.0/22 maxlen: 24
194.233.16.0/22 maxlen: 24
194.233.20.0/22 maxlen: 22
194.163.68.0/22 maxlen: 22
194.163.72.0/22 maxlen: 22
194.163.76.0/22 maxlen: 22
195.180.160.0/22 maxlen: 24
195.179.32.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196049736 (0xbaf7b48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 3 09:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c9fdda9ff3d0e0616f73d714e3ce92f11489463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:f2:6a:d9:9d:fd:96:d0:12:bf:4f:bb:56:
bf:0d:77:e8:d8:39:04:cc:a2:1e:cd:2b:68:7f:92:
5a:63:ec:88:9a:fe:c6:4e:c0:f6:aa:1d:2b:65:3c:
1e:96:79:bb:54:fc:92:84:95:a4:af:18:fa:91:8a:
f8:1a:23:e6:39:f5:77:fb:58:9b:cd:2f:fd:56:0b:
9a:67:99:2d:43:54:58:e3:3f:e2:86:60:97:4c:0f:
0a:7b:3e:95:67:85:07:87:fb:e8:81:80:60:ae:58:
7a:ba:0e:0b:cd:51:80:96:ca:11:83:86:b2:70:23:
82:c4:6d:20:57:61:ec:10:05:7f:5d:c8:ed:86:32:
3f:86:2b:1e:13:a7:0c:2f:9b:8f:f8:50:31:33:08:
57:e4:73:d5:de:13:5e:4a:ed:15:6c:4f:98:3d:95:
de:bd:d4:e6:e1:d9:0a:9e:5a:6a:5f:5d:07:78:19:
fd:fe:2f:44:4f:78:21:e2:58:3a:7f:a1:40:ff:3a:
9b:37:32:da:ab:72:9c:fc:d1:39:48:71:81:30:77:
d8:e8:c9:2f:e8:6f:3e:08:ff:bd:1f:a9:0a:d5:a7:
73:2c:94:2a:e1:26:9b:4b:04:42:ca:92:6c:d9:e0:
4e:b8:dc:b9:66:70:12:a1:7d:74:b2:61:2b:f0:ed:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9F:DD:A9:FF:3D:0E:06:16:F7:3D:71:4E:3C:E9:2F:11:48:94:63
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/LJ_dqf89DgYW9z1xTjzpLxFIlGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.88.0/21
194.163.68.0-194.163.79.255
194.233.16.0/21
195.179.32.0/21
195.180.132.0/22
195.180.140.0-195.180.147.255
195.180.160.0/22
195.252.160.0/22
212.224.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:23:d8:0c:32:11:ac:11:ba:1e:50:7d:b5:d2:a3:c9:9c:cd:
12:ae:52:ea:93:21:69:0d:fb:e4:45:e1:e4:dd:a7:20:da:19:
1a:2e:9f:94:58:38:23:17:8e:de:54:d2:1d:60:e1:75:01:94:
d4:7d:27:13:73:6e:1f:18:ad:e7:5f:92:bb:84:06:f0:c6:26:
e2:12:b4:ec:65:c8:4a:47:3c:4d:a1:b5:d0:fe:81:39:a3:ef:
89:0f:e1:c1:0b:7d:c9:1b:b2:8b:ef:80:9d:a2:6e:e8:66:63:
f8:e5:f7:dc:ea:54:a5:c8:12:26:b8:e7:0b:fa:fe:cd:45:38:
d8:e9:48:cb:8d:77:ec:00:83:89:92:1a:99:cf:e9:eb:3e:e0:
88:e8:e8:9b:7e:04:88:1c:fd:e5:bb:cb:f0:3f:39:04:04:95:
6b:30:6a:8b:34:5b:26:79:d4:f2:5a:f8:2a:05:62:6b:26:c3:
05:d1:3a:b1:7b:fc:7b:54:e2:c6:da:3a:7b:14:b8:a6:45:0d:
7f:42:a5:84:41:d3:bf:e9:d9:05:8c:85:d3:c7:1e:a0:27:9f:
83:c5:12:44:50:84:1b:e4:b8:e6:97:d7:1a:fb:a8:2c:2d:01:
b3:39:4c:00:96:0a:99:b2:9c:01:77:5d:8d:43:ba:47:4f:79:
2a:c7:8b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org