Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/1-N8mRT51ePUeP2sCG7q4hcXr468.roa
File: 1-N8mRT51ePUeP2sCG7q4hcXr468.roa (raw, json)
Hash identifier: zuvlvnCMydREnCHr4Hzu5iAuvEUim/Wxp/fmgymtF+U=
Subject key identifier: F8:DF:26:45:3E:75:78:F5:1E:3F:6B:02:1B:BA:B8:85:C5:EB:E3:AF
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01856EF4252C4CC69436116187C2BCD966EF
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/1-N8mRT51ePUeP2sCG7q4hcXr468.roa
Signing time: Sun 01 Jan 2023 20:09:31 +0000
ROA not before: Sun 01 Jan 2023 20:09:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 78.144.0.0/13 maxlen: 24
213.208.64.0/18 maxlen: 24
193.218.99.0/24 maxlen: 24
217.68.128.0/20 maxlen: 24
212.159.128.0/18 maxlen: 24
81.178.0.0/15 maxlen: 24
85.210.0.0/15 maxlen: 24
84.13.0.0/16 maxlen: 24
92.0.0.0/11 maxlen: 24
195.112.0.0/18 maxlen: 24
84.43.0.0/17 maxlen: 24
62.24.128.0/17 maxlen: 24
212.139.0.0/16 maxlen: 24
89.240.0.0/14 maxlen: 24
80.225.0.0/16 maxlen: 24
80.40.0.0/13 maxlen: 24
79.72.0.0/13 maxlen: 24
88.104.0.0/13 maxlen: 24
212.1.128.0/19 maxlen: 24
81.170.0.0/17 maxlen: 24
91.146.112.0/21 maxlen: 24
82.133.0.0/17 maxlen: 24
87.242.128.0/17 maxlen: 24
185.173.116.0/22 maxlen: 24
217.8.0.0/19 maxlen: 24
81.1.64.0/18 maxlen: 24
89.168.0.0/16 maxlen: 24
83.67.0.0/16 maxlen: 24
2.96.0.0/13 maxlen: 24
84.12.0.0/16 maxlen: 24
212.74.96.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
79.66.0.0/15 maxlen: 24
185.175.144.0/22 maxlen: 24
62.3.192.0/18 maxlen: 24
212.67.96.0/19 maxlen: 24
185.173.120.0/22 maxlen: 24
185.175.48.0/22 maxlen: 24
81.6.192.0/18 maxlen: 24
194.106.32.0/19 maxlen: 24
81.86.0.0/16 maxlen: 24
79.68.0.0/14 maxlen: 24
62.241.160.0/19 maxlen: 24
195.149.0.0/18 maxlen: 24
213.78.0.0/16 maxlen: 24
195.137.0.0/17 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:25:2c:4c:c6:94:36:11:61:87:c2:bc:d9:66:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jan 1 20:09:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8df26453e7578f51e3f6b021bbab885c5ebe3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0c:73:d6:a1:5f:c6:ea:32:9b:12:92:08:aa:
ca:5a:9e:db:b9:9a:bc:dd:c7:f3:70:ca:fb:08:03:
7a:71:88:51:ea:8a:a7:76:00:90:35:65:86:b9:66:
a0:e4:59:4d:7d:7c:26:18:c0:cd:3c:9f:6d:ad:1a:
78:8c:79:a8:22:7e:10:16:d0:3b:23:17:28:0c:88:
7f:5c:3b:bc:16:5f:29:4a:6c:a6:b1:e7:8e:f3:cf:
f1:68:f7:29:74:da:f2:ae:0b:c4:5c:0f:31:a8:df:
a7:20:9e:a9:cc:56:e0:b7:55:98:68:af:40:89:5d:
5e:6e:07:2e:f0:8a:29:5d:9b:15:85:93:20:41:f8:
c2:d6:64:24:bd:4a:d9:e8:14:79:52:b0:9d:30:b3:
1f:61:7c:b9:14:69:a0:72:06:b3:f2:c2:ed:ca:c3:
91:cf:21:df:c2:80:75:ad:7f:e9:83:95:89:7f:a7:
38:25:df:cb:4f:db:94:0b:5c:60:8c:36:d0:72:94:
7f:88:98:71:e8:07:bb:80:59:7c:f4:27:a3:79:67:
53:89:4f:09:59:cf:2f:6d:5e:4a:62:d7:54:d0:38:
d7:52:21:27:65:35:29:0b:bb:f8:82:4e:c7:10:46:
f9:72:75:8b:36:6f:57:6f:f8:48:64:51:c5:ae:a1:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DF:26:45:3E:75:78:F5:1E:3F:6B:02:1B:BA:B8:85:C5:EB:E3:AF
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/1-N8mRT51ePUeP2sCG7q4hcXr468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.3.192.0/18
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
79.66.0.0-79.79.255.255
80.40.0.0/13
80.225.0.0/16
81.1.64.0/18
81.6.192.0/18
81.86.0.0/16
81.170.0.0/17
81.178.0.0/15
82.133.0.0/17
83.67.0.0/16
84.12.0.0/15
84.43.0.0/17
85.210.0.0/15
87.242.128.0/17
88.104.0.0/13
89.168.0.0/16
89.240.0.0/14
91.146.112.0/21
92.0.0.0/11
185.173.116.0-185.173.123.255
185.175.48.0/22
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.67.96.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.78.0.0/16
213.208.64.0/18
217.8.0.0/19
217.68.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:cb:6b:05:44:db:3a:78:3d:ff:7e:ef:cd:f8:06:63:c6:40:
10:cf:2b:49:51:9a:89:2f:2e:60:13:52:61:a9:e1:8a:e1:0d:
61:43:c9:95:4c:e1:4c:3c:04:f4:df:9b:7a:cc:cb:36:43:6c:
b6:78:a2:c5:01:eb:22:f9:2b:9e:98:5c:67:16:31:c5:d1:95:
50:af:34:a9:24:b8:6b:33:22:55:7f:1b:dc:e5:60:1c:24:83:
db:54:e9:5f:43:cc:2d:b6:d7:a5:da:7d:20:74:68:a8:9f:2c:
02:47:c2:8a:f2:46:04:91:27:87:07:5e:67:1a:be:cd:e9:b8:
75:1d:98:32:b7:a9:33:7b:11:fc:8a:9a:44:9c:db:36:a7:16:
34:af:fc:54:44:22:00:4a:f1:1d:e8:c5:ec:86:bf:0b:98:54:
b6:89:4c:fb:18:1a:d7:88:22:7e:a7:ec:c6:e2:3d:80:ad:67:
50:39:19:b6:e2:39:9d:d2:e8:22:d6:21:ba:a3:ac:28:4a:43:
be:35:36:64:f8:88:5d:21:44:e4:e2:36:55:2c:b7:9f:96:14:
17:33:1e:6f:92:79:06:24:27:cb:31:cb:95:0c:c4:7a:2f:9c:
30:59:1f:c9:e7:b4:07:74:9a:4c:47:d3:0c:38:de:17:9d:13:
06:d9:03:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-fra.rpki-client.org