Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/TdpxQaQHQEn6gjX0ScqgJVw2HAQ.roa
File: TdpxQaQHQEn6gjX0ScqgJVw2HAQ.roa (raw, json)
Hash identifier: 9J+JsNAhxqendemQnOxI+3eB6ZdqNltuVpveCLvsjew=
Subject key identifier: 4D:DA:71:41:A4:07:40:49:FA:82:35:F4:49:CA:A0:25:5C:36:1C:04
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01825E3A6C0006FF14563F1D7B54A86C3385
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/TdpxQaQHQEn6gjX0ScqgJVw2HAQ.roa
Signing time: Tue 02 Aug 2022 11:04:23 +0000
ROA not before: Tue 02 Aug 2022 11:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 195.180.128.0/22 maxlen: 24
194.64.89.0/24 maxlen: 24
194.163.192.0/20 maxlen: 22
194.163.96.0/20 maxlen: 24
195.179.108.0/22 maxlen: 22
62.138.64.0/22 maxlen: 22
62.138.72.0/22 maxlen: 22
195.180.224.0/22 maxlen: 22
195.180.232.0/22 maxlen: 22
195.180.228.0/22 maxlen: 22
194.163.64.0/22 maxlen: 22
194.163.208.0/22 maxlen: 22
194.163.212.0/22 maxlen: 22
194.163.220.0/22 maxlen: 22
195.180.196.0/22 maxlen: 22
195.180.200.0/22 maxlen: 22
195.180.204.0/22 maxlen: 22
194.64.152.0/22 maxlen: 22
194.195.32.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:3a:6c:00:06:ff:14:56:3f:1d:7b:54:a8:6c:33:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Aug 2 11:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dda7141a4074049fa8235f449caa0255c361c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ed:1f:a1:89:6b:54:45:6a:48:0d:12:5f:d1:
22:2e:9c:9b:ed:08:0e:09:c4:cc:ec:23:c8:74:78:
55:0c:d5:d9:38:fa:68:ad:b2:9b:ed:b2:9f:b4:58:
07:6d:b8:43:41:90:8b:09:b4:25:7c:b6:98:f7:53:
4a:88:d4:2a:e5:cb:d8:31:5a:50:e4:17:99:34:c7:
f1:12:7d:a0:b5:af:2e:37:2d:d0:22:51:53:72:ac:
6c:82:02:64:27:cc:1c:48:07:2a:2c:fa:96:f4:a5:
fe:4f:a7:f8:fe:b0:99:c1:24:88:ed:1f:4b:6e:ce:
2b:a0:36:b6:a6:53:93:70:4c:62:4a:e9:3e:29:11:
3e:10:7c:f9:7d:a9:54:88:28:2d:6c:3e:88:86:84:
83:67:b5:2f:46:7c:3e:5f:fd:90:0f:e0:10:35:ba:
3d:db:fc:d1:ee:d8:f1:39:08:0a:9e:bb:fb:52:58:
6c:0b:f0:00:a8:35:33:3f:b7:d5:e2:de:8c:82:95:
42:fc:96:d0:e0:a2:b5:df:83:27:1a:12:d1:1f:d2:
d0:c2:23:fb:41:97:32:7e:da:6a:42:85:b5:f1:11:
0f:49:f8:5a:84:d9:e4:3a:25:28:0d:2b:fb:5b:d5:
5a:3d:24:c4:75:e4:5f:56:2e:02:1d:62:63:ce:b9:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DA:71:41:A4:07:40:49:FA:82:35:F4:49:CA:A0:25:5C:36:1C:04
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/TdpxQaQHQEn6gjX0ScqgJVw2HAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.64.0/22
62.138.72.0/22
194.64.89.0/24
194.64.152.0/22
194.163.64.0/22
194.163.96.0/20
194.163.192.0-194.163.215.255
194.163.220.0/22
194.195.32.0/19
195.179.108.0/22
195.180.128.0/22
195.180.196.0-195.180.207.255
195.180.224.0-195.180.235.255
Signature Algorithm: sha256WithRSAEncryption
13:74:8e:6a:ab:e6:5e:5e:ce:0e:e3:bb:fe:86:05:22:64:31:
60:71:a3:e6:44:10:3b:55:06:cb:eb:2a:33:98:c5:8c:5a:10:
7d:71:71:7e:ce:1a:0b:d1:3b:cb:73:d8:d1:ab:b9:07:72:90:
7b:0c:a1:af:8b:5b:d2:12:48:d6:15:6c:21:79:27:c4:cc:a3:
6b:67:fe:df:1f:06:5d:d4:0c:36:90:43:2c:97:eb:17:5b:9a:
b9:0d:75:94:a9:dd:19:6e:77:3d:51:49:db:af:41:72:32:0e:
2d:4c:4e:f5:d7:44:3f:83:36:d5:9a:8a:07:ea:19:2a:e4:cb:
61:84:18:38:fa:68:c6:a6:23:eb:9b:d9:c5:1b:b2:fc:c9:a9:
14:cd:06:95:bd:7f:aa:d1:95:b8:b2:e2:21:d7:3c:cb:a4:9a:
78:dc:c5:87:33:a9:46:07:67:61:55:3c:cf:69:be:80:e4:cc:
ae:9f:87:bd:43:5f:c3:d3:47:5e:83:da:25:10:cb:62:38:b5:
71:ab:04:b9:56:1a:be:e4:e9:e2:ee:14:d2:8d:7c:dd:70:ec:
9d:88:bb:b2:f4:a4:09:c5:4d:b7:a6:43:22:df:53:c3:a0:2e:
93:14:65:e3:db:c7:4c:68:33:a9:1b:c1:91:56:b6:2d:47:4a:
18:63:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org