Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/Jlg766WmSHbKrPOgcSMhxwTCk-w.roa
File: Jlg766WmSHbKrPOgcSMhxwTCk-w.roa (raw, json)
Hash identifier: 89oOorPdu+IBR0S3FJWE3YA4WcPpslF8Ewn0aouk6KM=
Subject key identifier: 26:58:3B:EB:A5:A6:48:76:CA:AC:F3:A0:71:23:21:C7:04:C2:93:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01893CE6D73CE8FDECF928C5A17C7516F759
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/Jlg766WmSHbKrPOgcSMhxwTCk-w.roa
Signing time: Sun 09 Jul 2023 23:05:08 +0000
ROA not before: Sun 09 Jul 2023 23:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9105
IP address blocks: 213.208.64.0/18 maxlen: 24
193.218.99.0/24 maxlen: 24
212.159.128.0/18 maxlen: 24
81.178.0.0/15 maxlen: 24
195.112.0.0/18 maxlen: 24
79.75.0.0/16 maxlen: 24
212.139.0.0/16 maxlen: 24
80.40.0.0/13 maxlen: 24
88.104.0.0/13 maxlen: 24
212.1.128.0/19 maxlen: 24
81.170.0.0/17 maxlen: 24
82.133.0.0/17 maxlen: 24
81.1.64.0/18 maxlen: 24
83.67.0.0/16 maxlen: 24
84.12.0.0/16 maxlen: 24
212.74.96.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
79.76.0.0/14 maxlen: 24
62.3.192.0/18 maxlen: 24
185.175.144.0/22 maxlen: 24
194.106.32.0/19 maxlen: 24
81.6.192.0/18 maxlen: 24
89.168.128.0/17 maxlen: 24
81.86.0.0/16 maxlen: 24
195.149.0.0/18 maxlen: 24
195.137.0.0/17 maxlen: 24
79.73.0.0/16 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3c:e6:d7:3c:e8:fd:ec:f9:28:c5:a1:7c:75:16:f7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jul 9 23:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26583beba5a64876caacf3a0712321c704c293ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:b7:82:65:0c:18:a4:75:96:a4:1f:38:20:
5e:24:e0:f8:2b:22:b8:a5:8f:74:45:05:d5:ed:99:
f5:45:8e:12:2b:4c:9a:44:0f:f8:be:df:27:e3:04:
01:8d:53:73:fa:28:5c:53:36:f0:44:08:57:bd:3b:
32:0e:b9:31:60:72:59:ad:63:b0:fb:ff:86:e4:19:
c3:e1:b7:95:9e:29:bf:d9:ec:04:0d:0a:2b:54:8a:
c8:ff:6e:5a:a7:2a:22:2d:5f:60:48:7c:52:a7:84:
41:b0:05:af:9f:26:2b:9a:c4:3c:48:f6:18:9d:56:
70:60:20:6b:1e:66:1a:23:1b:6a:a7:1e:3b:be:ad:
c1:c8:ce:3d:c2:68:78:25:e2:e7:95:b7:fd:6b:6a:
5d:97:25:a8:2e:df:34:6b:13:88:81:e8:ed:4d:48:
7f:e7:01:dd:6e:cf:7a:df:ed:4b:e8:bc:ea:04:8f:
1a:02:f6:ba:ca:90:6d:a4:48:6d:10:08:ad:d9:ad:
02:4f:65:21:8b:02:40:a1:1a:19:f2:ab:4a:b9:ab:
df:8a:0e:0a:1f:78:1b:03:92:75:0f:2c:f4:92:fb:
64:84:47:ef:c6:cc:66:69:72:e7:40:dd:f1:89:30:
c3:72:eb:0d:4d:3d:b2:05:61:2e:ae:0d:7d:ea:a8:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:3B:EB:A5:A6:48:76:CA:AC:F3:A0:71:23:21:C7:04:C2:93:EC
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/Jlg766WmSHbKrPOgcSMhxwTCk-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.192.0/18
79.73.0.0/16
79.75.0.0-79.79.255.255
80.40.0.0/13
81.1.64.0/18
81.6.192.0/18
81.86.0.0/16
81.170.0.0/17
81.178.0.0/15
82.133.0.0/17
83.67.0.0/16
84.12.0.0/16
88.104.0.0/13
89.168.128.0/17
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.208.64.0/18
Signature Algorithm: sha256WithRSAEncryption
58:e8:83:b0:00:7b:01:34:c2:04:86:5f:1e:58:38:81:73:d1:
70:69:9f:fa:f9:60:57:84:f9:e9:fa:9f:78:13:96:1f:19:9a:
c4:cc:1d:26:d9:f2:04:a6:34:30:f6:41:56:ed:b6:be:e6:96:
86:fe:04:69:9a:c5:70:84:93:63:4a:03:98:5c:ee:83:21:33:
ce:24:fe:aa:33:4d:47:49:b5:00:76:d1:48:9e:73:f3:ea:e7:
21:dd:38:c1:91:76:aa:5f:db:1f:d6:43:5d:90:3f:c4:40:44:
f4:94:ee:a3:e9:f1:86:e1:31:5b:f2:09:20:89:0f:fb:10:ed:
8a:9b:f5:6d:a8:4b:53:6c:75:52:9a:1b:3c:fc:47:74:63:70:
01:e9:0c:f8:23:8b:6f:fb:76:1b:1a:c8:59:6f:4b:9b:ff:27:
4d:27:cd:2b:a1:65:1c:e8:2d:ca:f8:6d:54:b2:60:ed:37:10:
0a:ca:9d:9e:e6:c0:aa:8d:a4:57:a7:33:39:cb:13:6d:fa:75:
1f:23:ed:c1:4d:8b:86:83:1a:51:4d:02:fd:88:44:35:24:bc:
17:77:37:a0:e8:75:02:93:e0:52:0d:36:6c:58:85:9b:05:00:
f2:c4:de:92:5b:f5:46:bf:83:88:63:a2:0f:b2:25:17:38:89:
99:f4:af:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:31 2025 by rpki-client