Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/ljhW7t3iKBY8eLZ4nPHX42Zu88U.roa
File: ljhW7t3iKBY8eLZ4nPHX42Zu88U.roa (raw, json)
Hash identifier: Rzj+Owr5htF3C+W/A1QgfLL/axacpd4FJ2MorQmO8Yc=
Subject key identifier: 96:38:56:EE:DD:E2:28:16:3C:78:B6:78:9C:F1:D7:E3:66:6E:F3:C5
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 10CEB78E
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/ljhW7t3iKBY8eLZ4nPHX42Zu88U.roa
Signing time: Sat 01 Jan 2022 02:51:06 +0000
ROA not before: Sat 01 Jan 2022 02:51:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 78.144.0.0/13 maxlen: 24
213.208.64.0/18 maxlen: 24
193.218.99.0/24 maxlen: 24
217.68.128.0/20 maxlen: 24
212.159.128.0/18 maxlen: 24
81.178.0.0/15 maxlen: 24
85.210.0.0/15 maxlen: 24
84.13.0.0/16 maxlen: 24
92.0.0.0/11 maxlen: 24
195.112.0.0/18 maxlen: 24
84.43.0.0/17 maxlen: 24
88.144.0.0/15 maxlen: 24
62.24.128.0/17 maxlen: 24
212.139.0.0/16 maxlen: 24
89.240.0.0/14 maxlen: 24
80.225.0.0/16 maxlen: 24
80.40.0.0/13 maxlen: 24
88.104.0.0/13 maxlen: 24
212.1.128.0/19 maxlen: 24
81.170.0.0/17 maxlen: 24
82.133.0.0/17 maxlen: 24
87.242.128.0/17 maxlen: 24
185.173.116.0/22 maxlen: 24
217.8.0.0/19 maxlen: 24
81.1.64.0/18 maxlen: 24
89.168.0.0/16 maxlen: 24
83.67.0.0/16 maxlen: 24
2.96.0.0/13 maxlen: 24
84.12.0.0/16 maxlen: 24
212.74.96.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
185.175.144.0/22 maxlen: 24
62.3.192.0/18 maxlen: 24
212.67.96.0/19 maxlen: 24
185.173.120.0/22 maxlen: 24
185.175.48.0/22 maxlen: 24
81.6.192.0/18 maxlen: 24
194.106.32.0/19 maxlen: 24
81.86.0.0/16 maxlen: 24
62.241.160.0/19 maxlen: 24
195.149.0.0/18 maxlen: 24
79.64.0.0/12 maxlen: 24
62.64.128.0/17 maxlen: 24
213.78.0.0/16 maxlen: 24
195.137.0.0/17 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281982862 (0x10ceb78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jan 1 02:51:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=963856eedde228163c78b6789cf1d7e3666ef3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:b7:23:a6:45:e0:7c:34:c5:e1:03:9d:3f:
d6:09:2c:69:eb:de:55:10:61:61:94:a4:03:14:f3:
11:76:0f:d5:32:cb:c2:a7:0d:94:6c:7f:91:ec:dc:
7b:04:61:f7:a1:9d:00:06:3e:6b:9e:53:67:90:59:
04:1c:3b:95:cf:eb:7b:44:2b:d0:30:a5:f7:08:4a:
02:b9:e6:73:b6:e6:d2:ef:f2:88:ed:69:44:ad:8d:
a3:90:e7:d2:ac:61:92:6a:d9:7a:49:f5:f0:55:7c:
ed:90:5d:72:90:4d:14:cb:6a:ec:32:f9:0f:7b:d4:
eb:4b:b9:a6:38:f9:98:18:16:00:e2:67:fd:95:58:
30:68:82:4d:59:2c:4a:53:9d:a3:f9:f1:5b:a8:b9:
b0:f5:14:55:e7:5f:6e:49:71:1a:2a:5a:68:34:57:
e5:29:f6:44:8a:50:29:a9:01:f1:28:6d:62:73:b3:
ae:6d:45:79:77:7c:69:1d:5c:66:a2:a9:83:96:b5:
09:bd:18:84:f9:f1:36:96:9c:25:2b:82:b3:bf:93:
62:40:ab:73:12:bf:39:bd:db:60:0d:ca:fe:da:55:
03:0b:ab:c8:15:63:5b:60:03:0b:51:60:cd:33:7a:
66:77:8a:3d:56:2d:2b:c9:18:a7:5d:89:3e:2e:f6:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:38:56:EE:DD:E2:28:16:3C:78:B6:78:9C:F1:D7:E3:66:6E:F3:C5
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/ljhW7t3iKBY8eLZ4nPHX42Zu88U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.3.192.0/18
62.24.128.0/17
62.64.128.0/17
62.241.160.0/19
78.144.0.0/13
79.64.0.0/12
80.40.0.0/13
80.225.0.0/16
81.1.64.0/18
81.6.192.0/18
81.86.0.0/16
81.170.0.0/17
81.178.0.0/15
82.133.0.0/17
83.67.0.0/16
84.12.0.0/15
84.43.0.0/17
85.210.0.0/15
87.242.128.0/17
88.104.0.0/13
88.144.0.0/15
89.168.0.0/16
89.240.0.0/14
92.0.0.0/11
185.173.116.0-185.173.123.255
185.175.48.0/22
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.67.96.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.78.0.0/16
213.208.64.0/18
217.8.0.0/19
217.68.128.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:9e:83:16:71:06:ba:3b:1f:0c:c1:76:57:a0:e4:b4:39:77:
a3:43:0d:bf:ca:3c:34:31:2b:7e:09:11:e0:43:12:2d:65:b6:
48:14:47:75:4d:25:83:8f:9b:f8:5b:4a:2b:0c:69:53:23:5b:
93:f5:f1:aa:07:25:af:14:95:32:3f:bf:ea:49:31:3b:93:2e:
92:e6:f4:a5:ca:42:73:ac:fc:ee:6f:1e:52:74:34:65:2d:29:
75:28:de:ec:2b:69:31:6d:6a:a8:cd:40:17:f9:20:ec:52:e7:
f8:80:4a:2b:01:9a:59:cc:c8:0f:ed:93:45:16:a2:36:ea:57:
de:c5:08:25:6b:bb:73:0c:8d:c3:d3:c9:83:c9:53:f9:6c:e4:
d0:40:16:37:1e:ae:33:2a:f0:98:55:f0:51:3a:8c:16:b8:e8:
ea:77:de:9f:09:4a:e3:66:d9:da:b8:0a:fe:d4:62:93:8f:2d:
b3:fb:10:d2:33:69:9a:59:99:86:65:c6:a7:1d:68:04:e6:27:
bf:f6:96:1f:b2:b7:a0:aa:3c:f6:3f:3c:95:27:37:9f:b6:b1:
f7:7d:00:dd:7f:5e:32:8b:06:12:21:fb:75:d9:38:80:d1:53:
d6:0a:a2:7a:b3:38:48:86:14:b8:f6:cd:14:31:4a:78:c4:46:
5a:d9:b9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-fra.rpki-client.org