Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/AU_2f7d6nkKRLHHTorPPBZ8NBt8.roa
File: AU_2f7d6nkKRLHHTorPPBZ8NBt8.roa (raw, json)
Hash identifier: TYYoQVE4jz5B2rqoHAOmNA5Wn193mkdFFOGB8Hn53bw=
Subject key identifier: 01:4F:F6:7F:B7:7A:9E:42:91:2C:71:D3:A2:B3:CF:05:9F:0D:06:DF
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 018DADC7B180427DFC61EBAAE35468C09409
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/AU_2f7d6nkKRLHHTorPPBZ8NBt8.roa
Signing time: Thu 15 Feb 2024 17:19:21 +0000
ROA not before: Thu 15 Feb 2024 17:19:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9105
IP address blocks: 79.77.0.0/16 maxlen: 24
79.78.0.0/15 maxlen: 24
80.40.0.0/13 maxlen: 24
81.1.64.0/18 maxlen: 24
81.86.0.0/16 maxlen: 24
81.170.0.0/17 maxlen: 24
81.178.0.0/15 maxlen: 24
82.133.0.0/17 maxlen: 24
83.67.0.0/16 maxlen: 24
84.12.0.0/16 maxlen: 24
89.168.128.0/17 maxlen: 24
194.106.32.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
195.137.0.0/17 maxlen: 24
212.1.128.0/19 maxlen: 24
212.74.96.0/19 maxlen: 24
212.139.0.0/16 maxlen: 24
212.159.128.0/18 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:c7:b1:80:42:7d:fc:61:eb:aa:e3:54:68:c0:94:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Feb 15 17:19:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=014ff67fb77a9e42912c71d3a2b3cf059f0d06df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:b3:20:30:fe:26:d1:a9:14:22:0b:c4:06:
74:12:53:38:2f:10:43:72:68:6a:82:94:e8:aa:84:
3e:78:25:b3:a6:05:70:fc:5c:fe:c5:ff:82:f0:7c:
bb:cf:8a:82:40:73:52:a4:80:88:a8:b3:a3:0b:d9:
7d:4f:47:99:04:46:dc:55:59:0d:93:6a:64:01:b9:
8d:54:1e:ac:66:1c:f1:80:39:78:eb:4c:64:0f:02:
7b:75:04:ba:46:1b:41:d0:d9:ca:58:70:ac:95:7d:
42:d6:25:f1:a7:08:72:8d:a4:c6:50:95:d2:8f:0f:
e0:4e:17:b3:e9:55:d5:90:86:18:05:3c:14:10:72:
88:31:92:f2:dc:91:6a:ec:5d:c1:bc:04:07:46:f2:
d0:e9:f7:bd:98:8a:e0:ed:f6:91:a0:a7:02:24:79:
d8:1b:1e:e2:86:a7:f7:79:47:13:87:f7:fb:bc:3d:
84:87:6f:3b:b4:08:4d:3e:8d:1f:f8:73:ee:cf:21:
3c:74:73:2b:e1:23:27:bd:99:00:ec:55:fe:fa:30:
6b:18:44:fb:9f:d0:38:bb:ac:44:5c:57:3c:2b:3d:
d7:53:79:2f:2a:17:8a:dc:96:03:d7:f9:ef:bd:6b:
dd:3d:bb:38:29:a7:a7:89:0e:4e:bd:62:0b:36:bc:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4F:F6:7F:B7:7A:9E:42:91:2C:71:D3:A2:B3:CF:05:9F:0D:06:DF
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/AU_2f7d6nkKRLHHTorPPBZ8NBt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.77.0.0-79.79.255.255
80.40.0.0/13
81.1.64.0/18
81.86.0.0/16
81.170.0.0/17
81.178.0.0/15
82.133.0.0/17
83.67.0.0/16
84.12.0.0/16
89.168.128.0/17
194.106.32.0/19
194.247.224.0/19
195.137.0.0/17
212.1.128.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:f4:54:54:b7:ae:ac:63:19:79:fe:8c:da:98:70:07:00:71:
7a:55:e2:27:29:76:ed:35:43:b9:bd:2b:08:d6:9f:3e:b1:9b:
45:b4:3d:4f:0b:6a:84:c6:fe:8c:14:54:4e:fa:3c:bb:7a:df:
0e:46:8b:6c:4e:2f:e2:44:f1:e1:d0:a8:b6:e1:ac:fd:ed:eb:
13:42:ef:9f:38:f4:da:fe:cd:36:55:51:6b:f5:49:00:fb:fc:
55:69:3a:59:4f:16:f1:31:b2:7a:7e:1f:19:e5:db:34:ef:c1:
db:0f:41:e3:96:0c:8d:3d:46:82:7f:9b:e4:a0:0b:6f:c9:34:
f6:6c:f4:3f:2b:ed:69:e7:36:c9:7d:09:56:39:20:5f:8b:b3:
c8:ed:80:bb:c6:18:af:c2:b2:5d:29:77:aa:52:a5:e4:ed:14:
ac:4f:af:f7:11:32:69:d5:de:b9:7e:56:02:c1:60:ff:f6:83:
7d:72:cf:7e:b9:c8:b1:96:60:bf:78:ac:6e:ef:1c:d6:4e:75:
be:3b:3c:49:f8:bc:8a:af:b7:f8:02:62:5c:a8:27:d3:30:11:
8e:b9:ea:37:ec:65:f2:53:69:48:3c:db:7b:41:24:2f:27:10:
e4:18:ea:c8:31:3e:0b:51:44:33:d7:47:4e:c2:b7:15:78:6d:
f6:bc:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:35 2025 by rpki-client