Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/7IAn9cCiXt7HdGN7VDQNGHGJvzM.roa
File: 7IAn9cCiXt7HdGN7VDQNGHGJvzM.roa (raw, json)
Hash identifier: 2CmV5IEGBa4X90DSkjsbfKfoPsjJXtI3bHTo0Ivijzw=
Subject key identifier: EC:80:27:F5:C0:A2:5E:DE:C7:74:63:7B:54:34:0D:18:71:89:BF:33
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 018F52D5D6BD9FFEB1691582B97926D94C25
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/7IAn9cCiXt7HdGN7VDQNGHGJvzM.roa
Signing time: Tue 07 May 2024 11:34:56 +0000
ROA not before: Tue 07 May 2024 11:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 2.96.0.0/13 maxlen: 24
62.3.192.0/18 maxlen: 24
62.24.128.0/17 maxlen: 24
62.241.160.0/19 maxlen: 24
78.144.0.0/13 maxlen: 24
79.77.0.0/16 maxlen: 24
79.78.0.0/15 maxlen: 24
80.40.0.0/13 maxlen: 24
81.1.64.0/18 maxlen: 24
81.6.192.0/18 maxlen: 24
81.86.0.0/16 maxlen: 24
81.170.0.0/17 maxlen: 24
81.178.0.0/15 maxlen: 24
82.133.0.0/17 maxlen: 24
83.67.0.0/16 maxlen: 24
84.12.0.0/16 maxlen: 24
84.43.0.0/17 maxlen: 24
87.242.128.0/17 maxlen: 24
89.168.128.0/17 maxlen: 24
89.240.0.0/14 maxlen: 24
91.146.112.0/21 maxlen: 24
92.0.0.0/11 maxlen: 24
92.5.0.0/16 maxlen: 24
92.6.0.0/15 maxlen: 24
92.8.0.0/13 maxlen: 24
92.16.0.0/12 maxlen: 24
145.255.240.0/21 maxlen: 24
185.24.12.0/22 maxlen: 24
185.112.212.0/22 maxlen: 24
185.173.116.0/22 maxlen: 24
185.173.120.0/22 maxlen: 24
185.175.48.0/22 maxlen: 24
185.175.144.0/22 maxlen: 24
193.218.99.0/24 maxlen: 24
194.106.32.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
195.112.0.0/18 maxlen: 24
195.137.0.0/17 maxlen: 24
195.149.0.0/18 maxlen: 24
212.1.128.0/19 maxlen: 24
212.67.96.0/19 maxlen: 24
212.74.96.0/19 maxlen: 24
212.139.0.0/16 maxlen: 24
212.159.128.0/18 maxlen: 24
213.78.0.0/16 maxlen: 24
213.208.64.0/18 maxlen: 24
217.8.0.0/19 maxlen: 24
217.68.128.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:d5:d6:bd:9f:fe:b1:69:15:82:b9:79:26:d9:4c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: May 7 11:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec8027f5c0a25edec774637b54340d187189bf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:ee:79:a9:3e:f4:11:4c:21:80:7c:15:1f:
d8:9e:f5:4b:32:ba:9b:87:69:d9:07:c4:80:9f:b5:
6e:47:3c:78:fc:56:74:71:2d:2b:b8:e6:94:bf:fb:
37:42:2b:c3:52:aa:4a:b7:1a:cb:59:cb:86:b8:c9:
ac:a3:b3:94:9b:8f:3c:d6:e8:fe:2f:1d:78:2f:f3:
97:6d:44:b0:9c:96:4f:38:ed:ae:6f:c0:33:1f:cd:
2b:f8:84:e2:0e:85:ac:e3:82:b4:7a:41:9a:88:a6:
a1:4e:f8:bb:71:f8:9d:e3:36:12:18:0a:b7:3f:3e:
8d:00:01:0b:7b:ce:d7:9d:42:3e:6a:64:b5:fd:20:
9d:e3:1a:aa:3b:97:f3:d0:20:71:2a:63:70:3b:c5:
f6:ce:a3:42:54:61:30:b1:3e:f7:31:bb:51:49:dc:
0e:34:73:6a:b4:cb:10:31:7d:64:71:56:b0:7a:6c:
15:e8:be:08:53:04:df:d7:4c:9b:44:59:b7:c5:e9:
8b:6e:5e:c2:73:8c:bc:d7:a7:75:70:4a:26:61:b4:
76:f8:a3:b6:11:7b:e0:23:a0:81:96:7a:42:f1:59:
f6:2b:87:5e:c2:0a:cc:4b:ce:3b:2d:c6:c9:11:53:
65:90:7b:ba:3a:74:de:2b:86:31:0c:b7:ac:bf:c9:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:80:27:F5:C0:A2:5E:DE:C7:74:63:7B:54:34:0D:18:71:89:BF:33
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/7IAn9cCiXt7HdGN7VDQNGHGJvzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.3.192.0/18
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
79.77.0.0-79.79.255.255
80.40.0.0/13
81.1.64.0/18
81.6.192.0/18
81.86.0.0/16
81.170.0.0/17
81.178.0.0/15
82.133.0.0/17
83.67.0.0/16
84.12.0.0/16
84.43.0.0/17
87.242.128.0/17
89.168.128.0/17
89.240.0.0/14
91.146.112.0/21
92.0.0.0/11
145.255.240.0/21
185.24.12.0/22
185.112.212.0/22
185.173.116.0-185.173.123.255
185.175.48.0/22
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.67.96.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.78.0.0/16
213.208.64.0/18
217.8.0.0/19
217.68.128.0/20
Signature Algorithm: sha256WithRSAEncryption
48:69:46:4c:37:f1:00:6d:91:04:41:c1:8f:20:41:b8:e0:80:
6b:05:89:de:8b:d6:08:05:33:07:52:93:2b:4c:30:30:37:fa:
4f:e0:29:94:2a:a3:07:d1:f3:69:2b:c4:67:e8:5b:43:bb:18:
ae:5b:87:39:19:39:b7:77:ef:06:7b:b5:04:dd:6f:12:01:fc:
4e:61:81:94:0c:0f:7e:48:77:7d:6c:2e:59:2d:65:2d:81:65:
ef:bb:73:6b:76:9d:fe:83:01:ac:b0:a7:06:00:b7:e7:ba:9e:
17:59:4c:62:27:5a:02:b1:a6:eb:e4:12:69:8d:f6:61:41:79:
8f:eb:a7:b0:4d:9c:ad:59:83:c4:a3:71:5d:1d:94:1f:b7:05:
8c:39:70:39:dd:45:43:57:de:de:64:56:78:30:48:16:57:fd:
09:5d:12:22:e3:d3:7b:f3:f4:7e:a3:e7:83:ca:a0:72:0d:bd:
e6:9f:76:5c:5f:b6:70:94:e7:c2:bf:c8:e0:38:9f:06:0d:40:
c4:43:30:60:8c:86:11:ee:7e:39:3a:1a:78:6a:e3:e7:a2:4e:
fe:d2:ee:38:af:3d:e2:6c:b0:39:8f:5b:61:65:9f:8c:f6:75:
9c:d8:2a:ac:83:1c:a4:d8:bc:04:02:8f:bc:d4:14:25:3c:2d:
25:ea:25:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:20 2025 by rpki-client