Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/84I3agu-iIfvUrqwybzbVjqK2iw.roa
File: 84I3agu-iIfvUrqwybzbVjqK2iw.roa (raw, json)
Hash identifier: vrbZeV67vi3q/vKjLpfSO4Jr3Ih7JCV8AP6iw+6PSpQ=
Subject key identifier: F3:82:37:6A:0B:BE:88:87:EF:52:BA:B0:C9:BC:DB:56:3A:8A:DA:2C
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 01824F21FB3B9CA7483E72B72D0741D7FD52
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/84I3agu-iIfvUrqwybzbVjqK2iw.roa
Signing time: Sat 30 Jul 2022 12:43:23 +0000
ROA not before: Sat 30 Jul 2022 12:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202505
IP address blocks: 185.225.37.0/24 maxlen: 24
185.225.38.0/24 maxlen: 24
185.225.36.0/24 maxlen: 24
89.43.78.0/24 maxlen: 24
93.114.130.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
193.31.118.0/24 maxlen: 24
193.31.117.0/24 maxlen: 24
193.31.119.0/24 maxlen: 24
84.54.14.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
213.226.116.0/24 maxlen: 24
185.81.154.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
2a06:f7c5::/32 maxlen: 32
2a05:88c5::/32 maxlen: 32
2a10:7f46::/32 maxlen: 32
2a10:7f45::/32 maxlen: 32
2a05:88c4::/32 maxlen: 32
2a06:f7c4::/32 maxlen: 32
2a10:7f44::/32 maxlen: 32
2a10:7f47::/32 maxlen: 32
2a06:f7c7::/32 maxlen: 32
2a05:88c7::/32 maxlen: 32
2a11:d102::/32 maxlen: 32
2a11:d101::/32 maxlen: 32
2a10:7f40::/32 maxlen: 32
2a06:f7c3::/32 maxlen: 32
2a05:88c6::/32 maxlen: 32
2a10:7fc5::/32 maxlen: 32
2a10:7f43::/32 maxlen: 32
2a06:f7c0::/32 maxlen: 32
2a05:88c0::/32 maxlen: 32
2a05:88c3::/32 maxlen: 32
2a06:f7c6::/32 maxlen: 32
2a11:d105::/32 maxlen: 32
2a10:7fc2::/32 maxlen: 32
2a11:d104::/32 maxlen: 32
2a10:7fc1::/32 maxlen: 32
2a11:d107::/32 maxlen: 32
2a10:7fc4::/32 maxlen: 32
2a10:7fc0::/32 maxlen: 32
2a10:7fc3::/32 maxlen: 32
2a05:88c1::/32 maxlen: 32
2a06:f7c1::/32 maxlen: 32
2a10:7f42::/32 maxlen: 32
2a10:7fc6::/32 maxlen: 32
2a10:7f41::/32 maxlen: 32
2a10:7fc7::/32 maxlen: 32
2a06:f7c2::/32 maxlen: 32
2a05:88c2::/32 maxlen: 32
2a11:d106::/32 maxlen: 32
2a11:d100::/32 maxlen: 32
2a11:d103::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4f:21:fb:3b:9c:a7:48:3e:72:b7:2d:07:41:d7:fd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jul 30 12:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f382376a0bbe8887ef52bab0c9bcdb563a8ada2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:31:f6:73:4e:9c:52:51:84:85:6a:b6:3f:
ab:d0:e3:7c:7b:1e:e3:29:0e:fc:b3:24:29:a1:52:
79:e3:c1:17:9f:07:86:f9:a3:10:ec:c9:e0:11:17:
ed:97:ed:04:85:64:ac:4e:4f:f3:be:68:b2:ef:b6:
33:ab:c2:34:0d:43:c2:40:ea:40:e9:af:36:fb:78:
a3:10:02:8f:5d:89:f8:2d:44:50:c8:fa:45:7d:23:
61:14:1f:99:42:03:33:6b:44:38:f4:7c:32:e6:a8:
57:15:38:88:9c:0d:07:43:e1:cd:cd:26:1a:0d:9a:
29:4e:78:8d:e3:12:c8:fd:b0:f3:70:f0:ef:f6:7f:
89:e0:d5:f0:7d:64:06:16:7b:29:92:2d:cd:a0:ce:
f1:0d:8b:4b:55:f0:a9:02:a3:20:44:43:70:0d:5c:
92:40:20:fb:6f:5b:fb:5d:c1:0b:ed:01:6e:54:23:
a6:e2:09:f7:d0:b1:84:56:f7:1b:bf:f3:2f:fa:7d:
0d:57:fc:f1:c5:54:c1:60:1a:4c:f5:1d:8f:34:96:
01:ef:b3:35:36:83:c6:56:91:2a:a3:5a:92:d9:fa:
87:b5:b9:c8:ca:a3:20:b3:30:ad:d5:28:9d:66:e9:
e1:69:33:87:5f:b2:ad:91:81:f0:90:f5:d7:71:7f:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:82:37:6A:0B:BE:88:87:EF:52:BA:B0:C9:BC:DB:56:3A:8A:DA:2C
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/84I3agu-iIfvUrqwybzbVjqK2iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.14.0/24
86.104.14.0/24
89.43.78.0/24
93.114.130.0/24
176.98.42.0/23
185.81.152.0/22
185.225.36.0-185.225.38.255
193.31.117.0-193.31.119.255
213.226.116.0/24
IPv6:
2a05:88c0::/29
2a06:f7c0::/29
2a10:7f40::/29
2a10:7fc0::/29
2a11:d100::/29
Signature Algorithm: sha256WithRSAEncryption
66:c8:6a:14:80:e3:5e:1c:eb:03:6c:3e:25:0c:78:9d:85:b8:
ca:c6:2a:b5:d9:5b:b1:da:d1:4f:1e:8b:bb:ca:ba:ba:5c:e1:
08:a6:c5:c5:be:e5:af:72:ad:dc:e7:c0:2e:3c:b2:8d:0e:93:
3a:bd:bc:84:e2:59:99:cf:f5:69:8d:f9:a9:85:78:05:7c:42:
ce:58:16:26:50:99:87:96:61:3a:bd:f6:09:87:5d:4e:cd:b0:
33:33:b4:24:a4:54:2e:d6:ee:e9:c8:8f:0f:be:76:4d:3d:39:
e8:4a:9e:f6:42:fc:2b:b8:72:f3:2c:fa:9a:37:bf:dc:36:20:
cf:1f:30:42:a4:9e:3d:13:14:76:99:87:13:6b:92:b7:31:31:
92:cc:a8:dc:7e:b0:6b:63:7c:6d:c0:51:be:68:9f:8b:7a:44:
00:b6:29:10:35:09:54:68:76:20:74:d0:32:14:5e:55:e4:dd:
1a:b6:8d:7a:2b:df:54:dd:57:34:4a:a1:4c:88:d6:d7:4f:95:
20:a8:ee:30:45:dd:7e:a3:a7:67:8e:33:40:70:d9:95:1b:24:
ab:4b:7f:b8:79:4d:80:07:5c:18:1d:82:03:ce:ee:9e:e8:0c:
41:7f:bd:08:7a:96:26:d9:23:ad:79:3b:f3:03:02:20:66:c8:
33:b4:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-fra.rpki-client.org