Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Ljbqdlkicwc2Fi66LQnfZIpYUL8.roa
File: Ljbqdlkicwc2Fi66LQnfZIpYUL8.roa (raw, json)
Hash identifier: GYoEWJyFsb84dEV84eW9DbRmm3EsuIwqxu4gzlu5NAM=
Subject key identifier: 2E:36:EA:76:59:22:73:07:36:16:2E:BA:2D:09:DF:64:8A:58:50:BF
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0CF26E1F
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Ljbqdlkicwc2Fi66LQnfZIpYUL8.roa
Signing time: Wed 20 Apr 2022 07:25:56 +0000
ROA not before: Wed 20 Apr 2022 07:25:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 195.180.128.0/22 maxlen: 24
194.163.192.0/19 maxlen: 24
194.64.92.0/22 maxlen: 22
195.252.160.0/22 maxlen: 24
194.163.96.0/19 maxlen: 24
212.224.16.0/22 maxlen: 22
212.224.24.0/22 maxlen: 22
62.138.64.0/22 maxlen: 22
62.138.72.0/22 maxlen: 22
195.180.224.0/20 maxlen: 24
194.163.64.0/22 maxlen: 22
194.163.80.0/22 maxlen: 22
195.180.192.0/20 maxlen: 24
194.64.152.0/22 maxlen: 22
194.195.32.0/19 maxlen: 24
194.233.224.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217214495 (0xcf26e1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 20 07:25:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e36ea765922730736162eba2d09df648a5850bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:f0:a5:9d:6d:8a:97:32:0b:35:46:7c:fe:
e5:99:57:6d:5e:de:4a:9e:dd:e9:5e:f1:d8:69:f4:
92:5a:bc:3b:00:0d:0a:b8:b4:fe:c8:9c:a0:bb:82:
cb:6f:19:c0:db:f4:73:92:36:52:8f:39:99:ab:81:
10:7d:bc:e2:dc:09:6e:0f:87:a7:0c:0b:a4:cf:9d:
88:08:2a:35:04:64:ec:0f:0b:93:eb:5c:39:a7:36:
8d:fb:e4:74:ad:e6:7e:92:db:f1:04:11:6b:fa:56:
a7:7a:6b:5f:3d:32:0d:c7:75:20:b1:f8:44:a3:17:
03:0f:8f:f0:3d:06:48:d4:4c:f1:ec:df:14:cd:13:
59:c6:bf:49:f8:e2:ae:1d:ea:2e:15:7c:28:54:73:
7a:f8:78:8e:26:37:dd:62:39:21:38:58:6a:8d:4c:
8f:97:c2:38:26:9a:2b:23:70:47:a8:b8:61:90:20:
f8:7b:20:a9:06:f4:78:f2:3b:3f:56:bf:23:76:44:
f5:37:e2:ae:e3:16:b3:44:44:db:58:d0:b6:8d:05:
25:ac:06:4a:48:95:01:93:7b:e6:64:75:4a:bd:ac:
40:0e:64:45:d6:cb:61:2f:32:95:8f:c3:da:76:6c:
6c:b1:41:3c:6d:e3:cf:05:e2:d5:e3:68:66:5a:a7:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:36:EA:76:59:22:73:07:36:16:2E:BA:2D:09:DF:64:8A:58:50:BF
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Ljbqdlkicwc2Fi66LQnfZIpYUL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.64.0/22
62.138.72.0/22
194.64.92.0/22
194.64.152.0/22
194.163.64.0/22
194.163.80.0/22
194.163.96.0/19
194.163.192.0/19
194.195.32.0/19
194.233.224.0/20
195.180.128.0/22
195.180.192.0/20
195.180.224.0/20
195.252.160.0/22
212.224.16.0/22
212.224.24.0/22
Signature Algorithm: sha256WithRSAEncryption
af:5f:cc:53:9b:8a:ec:09:be:93:da:6c:4d:14:d3:e1:49:6b:
a1:a8:ff:31:4b:4a:71:5b:c7:07:f3:f0:f4:11:0a:96:17:03:
5a:2f:78:3c:f9:4d:cb:b3:24:fd:87:f5:4a:45:7f:91:9e:21:
7d:f9:cb:84:46:63:7a:50:47:a7:0d:0b:a2:da:67:ed:e8:58:
32:19:74:8d:95:f2:2d:87:25:1f:5c:1e:2e:32:d1:94:3d:3e:
28:92:4f:57:23:f3:70:8a:35:2d:9f:fe:1d:da:ec:15:bc:86:
82:1a:9d:cc:45:96:56:19:ee:8c:9a:4e:8b:d9:70:08:74:4f:
6f:3b:4d:c3:4f:f7:29:36:ac:30:00:17:35:3e:73:58:a0:a6:
d1:e1:49:0c:e5:9f:cd:73:49:b5:af:8a:24:a4:ac:ff:45:42:
49:b3:d7:01:53:bb:03:ef:f2:b7:d8:6f:79:3f:ea:fd:2d:d3:
4a:87:13:1a:ce:b4:48:d0:9f:e3:e1:e3:ab:df:ba:dc:cc:e2:
79:27:f4:dc:3a:fb:d2:61:5f:b0:e1:43:62:1e:91:2f:f5:d0:
06:f9:1e:43:ba:c9:b3:88:df:b2:93:75:38:86:aa:85:10:3a:
98:ce:07:b2:48:ee:1a:51:5b:86:8d:5a:9f:e0:6c:42:d1:8b:
f1:75:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org