Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qcuF5zK0u6lQ-mx8gFns6wuU5v4.roa
File: qcuF5zK0u6lQ-mx8gFns6wuU5v4.roa (raw, json)
Hash identifier: svT9T6eM8jvvCmZhIErxWvbli8H8qgWd/Qcrbm3tlYQ=
Subject key identifier: A9:CB:85:E7:32:B4:BB:A9:50:FA:6C:7C:80:59:EC:EB:0B:94:E6:FE
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01825E3A6C94FA2F8B3E5E9CAA6566B039F2
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qcuF5zK0u6lQ-mx8gFns6wuU5v4.roa
Signing time: Tue 02 Aug 2022 11:04:23 +0000
ROA not before: Tue 02 Aug 2022 11:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21700
IP address blocks: 151.106.80.0/20 maxlen: 24
194.233.240.0/20 maxlen: 24
195.180.168.0/22 maxlen: 22
195.180.172.0/22 maxlen: 22
194.163.224.0/20 maxlen: 24
194.195.16.0/20 maxlen: 24
62.138.68.0/22 maxlen: 22
62.138.76.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:3a:6c:94:fa:2f:8b:3e:5e:9c:aa:65:66:b0:39:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Aug 2 11:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9cb85e732b4bba950fa6c7c8059eceb0b94e6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:68:87:b7:bf:36:45:3e:85:ce:62:17:e8:
02:87:55:8f:c8:51:b2:ad:5f:db:1f:fc:26:16:5a:
65:77:e3:50:fe:61:41:48:e5:00:da:da:d2:bc:02:
d7:69:e1:01:9c:27:c0:a5:61:e8:19:01:43:c5:9d:
03:b1:d2:d7:a8:d9:50:de:96:e0:08:4d:1a:22:07:
a3:4e:2d:67:fb:88:71:83:1b:f7:8d:20:89:b7:c8:
67:18:49:30:21:a0:da:01:3a:03:08:27:ae:e6:06:
c7:7e:34:b3:ee:22:2e:1f:cc:24:a4:1a:12:d8:ac:
77:61:83:04:b8:53:4c:e4:58:8c:ef:83:cf:1f:36:
18:09:14:1f:07:56:56:32:8e:29:91:b1:88:e0:56:
53:d4:d3:58:64:a8:4d:9a:1b:97:36:0d:c0:f4:a3:
48:5e:81:f2:9c:f9:18:bb:22:4b:36:1b:a7:ed:9c:
3e:78:77:e8:3a:87:a8:6a:a8:dc:cc:34:4a:8c:df:
a1:73:18:72:0f:8a:81:c9:43:78:24:1d:2a:54:95:
12:f0:e3:64:0d:12:48:42:12:13:6b:00:a2:ed:7b:
eb:c2:12:5b:28:bb:1e:ab:55:c3:08:b5:35:a8:99:
27:cf:c8:fe:30:86:1d:71:51:91:ff:0d:7f:d5:51:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:85:E7:32:B4:BB:A9:50:FA:6C:7C:80:59:EC:EB:0B:94:E6:FE
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qcuF5zK0u6lQ-mx8gFns6wuU5v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.68.0/22
62.138.76.0/22
151.106.80.0/20
194.163.224.0/20
194.195.16.0/20
194.233.240.0/20
195.180.168.0/21
Signature Algorithm: sha256WithRSAEncryption
01:20:40:a5:9c:a0:0d:3c:9b:de:17:3f:40:67:c5:7e:09:0b:
58:2d:c2:42:a9:28:40:8b:7c:ac:72:42:1c:89:65:c9:6d:28:
f7:76:b5:13:3d:82:98:4b:77:d4:d6:9a:9e:e3:f1:9c:32:9c:
d2:c6:48:ff:39:17:14:f6:68:ce:25:82:0b:6a:d6:04:2a:fe:
d2:d3:f1:68:50:94:7e:fd:0b:35:6a:81:21:be:ff:88:9b:13:
9a:40:cd:be:b4:ad:63:cf:b9:d0:70:c8:da:ba:06:32:e1:8d:
a8:c4:dc:17:2a:fb:f5:fd:88:eb:dc:a6:45:70:6e:ce:e7:db:
c3:f1:88:c9:67:3a:30:b5:36:7b:91:3b:e3:67:65:4c:83:5e:
47:7c:95:57:db:89:a6:cc:47:53:1c:c8:d7:2b:a0:7a:f2:02:
ce:9e:33:5a:e4:57:5c:2c:8a:d9:9d:4e:3b:3f:78:9b:3e:c8:
8f:d8:9a:5f:f7:b0:98:60:7c:c6:9e:ae:07:d9:6c:62:03:b3:
38:28:38:cd:9b:a1:9a:ad:43:2e:a7:29:c9:9c:b0:b0:1d:f3:
eb:43:e7:d2:8e:d0:67:58:1f:3f:19:b0:10:80:bb:9d:9b:1a:
2c:75:73:a6:e0:ab:19:ac:4a:c2:dc:16:f8:fa:38:0c:56:b7:
c4:5b:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org