Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/vA9imFtIQEuRAD37W8sy7G7hako.roa
File: vA9imFtIQEuRAD37W8sy7G7hako.roa (raw, json)
Hash identifier: wuagFd0fBPo+ebFOIRQc/Lwscsigl+QScPL5Q47EUhs=
Subject key identifier: BC:0F:62:98:5B:48:40:4B:91:00:3D:FB:5B:CB:32:EC:6E:E1:6A:4A
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 01847862F7660551329CC8DE12D76DFD08E9
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/vA9imFtIQEuRAD37W8sy7G7hako.roa
Signing time: Mon 14 Nov 2022 23:04:22 +0000
ROA not before: Mon 14 Nov 2022 23:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29134
IP address blocks: 185.102.76.0/22 maxlen: 22
37.46.80.0/21 maxlen: 21
62.109.128.0/19 maxlen: 19
217.31.48.0/20 maxlen: 20
213.109.164.0/22 maxlen: 24
185.100.92.0/22 maxlen: 22
130.193.8.0/21 maxlen: 24
185.102.20.0/22 maxlen: 22
171.33.136.0/21 maxlen: 21
185.123.128.0/22 maxlen: 22
2a03:b780::/32 maxlen: 32
2a09:ec00::/29 maxlen: 29
2001:1ab0::/32 maxlen: 32
2a00:ca80::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:78:62:f7:66:05:51:32:9c:c8:de:12:d7:6d:fd:08:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Nov 14 23:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc0f62985b48404b91003dfb5bcb32ec6ee16a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:59:9d:d3:0a:23:98:b6:e4:f5:92:7f:73:
78:d6:2e:78:75:cb:16:d0:95:7f:eb:60:a8:c2:69:
27:c9:0d:33:37:a4:2b:cc:af:bc:b2:15:50:e2:bf:
5b:cc:ce:ca:8a:89:01:00:16:48:d9:6e:68:98:ee:
6c:0b:c8:16:e2:ba:de:1d:94:fd:4b:f7:65:a0:1b:
c4:61:85:0c:d0:b1:2a:4f:6b:6e:df:23:51:9a:b3:
8b:66:f8:55:d8:ee:3a:61:11:cc:59:39:c6:da:71:
41:d6:df:2e:33:31:3f:e4:6e:e4:28:e0:a8:ac:0f:
6c:35:b8:fe:f2:2b:06:c4:2f:cb:c2:dc:36:d8:f5:
e6:44:cb:97:c3:d4:b0:15:96:fa:6f:2a:22:c6:be:
b6:8d:a1:99:13:9a:b0:9f:20:65:4b:21:a4:71:e3:
1b:20:23:0b:0e:c2:20:ef:ef:86:a7:81:3c:af:00:
81:37:42:99:e2:f8:aa:41:03:00:cb:fc:06:82:88:
70:07:47:a7:b2:7c:07:fc:22:78:4f:14:be:90:b0:
32:f5:07:da:e1:94:f8:be:41:15:e3:fe:ac:88:74:
34:e0:a3:86:63:07:ba:88:0b:d7:ca:f3:86:4b:3c:
b7:9e:ea:b9:cf:c2:45:63:58:cc:bd:a4:42:3f:9b:
ea:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0F:62:98:5B:48:40:4B:91:00:3D:FB:5B:CB:32:EC:6E:E1:6A:4A
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/vA9imFtIQEuRAD37W8sy7G7hako.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.80.0/21
62.109.128.0/19
130.193.8.0/21
171.33.136.0/21
185.100.92.0/22
185.102.20.0/22
185.102.76.0/22
185.123.128.0/22
213.109.164.0/22
217.31.48.0/20
IPv6:
2001:1ab0::/32
2a00:ca80::/32
2a03:b780::/32
2a09:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
1e:3f:68:6a:de:a8:d4:19:4b:6e:c7:be:67:63:79:bd:84:a9:
95:dd:15:d7:67:e9:5c:9a:b0:0d:3c:5c:82:8a:25:fb:9d:48:
fc:98:cb:cb:48:d5:7d:6c:f0:a0:55:04:b0:d8:f6:f1:7f:52:
27:8e:3a:18:22:e6:29:21:b0:05:40:dd:df:29:62:e7:05:1e:
fa:19:15:43:06:9b:a9:fd:57:20:2a:99:41:de:8a:81:34:66:
65:a7:d6:fe:0d:cd:42:0b:47:bd:0e:2d:83:7a:fe:e2:dc:f8:
65:2a:4f:16:03:8e:46:62:08:11:41:65:df:b9:2f:02:b1:66:
5b:b8:69:8e:ae:9e:2a:21:ae:4c:c6:34:11:ae:ac:be:6d:2e:
f2:a7:f6:34:1c:92:cc:83:77:3c:6e:17:48:99:7b:3e:b8:62:
1e:13:f3:a2:b2:1c:18:f6:92:5f:c6:5b:bc:2b:d5:d0:81:8e:
d5:04:b9:da:fb:b8:cd:48:7c:d7:ed:f8:81:8e:e3:68:d1:4b:
20:a5:1b:70:db:6e:b8:5c:97:0c:ec:3f:82:ea:65:c9:79:74:
18:3a:3e:d2:d0:4f:02:fa:a1:65:27:88:43:02:4f:0d:b8:c5:
8a:70:9d:68:ef:00:60:df:46:b6:45:d2:fc:7f:7f:6f:aa:12:
fc:04:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:46 2023 by rpki-client on console-ams.rpki-client.org