Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/Qo3DDEAKwy9QLgc7iaraG2t4bb8.roa
File: Qo3DDEAKwy9QLgc7iaraG2t4bb8.roa (raw, json)
Hash identifier: KQHLDGrYTGfjODCBXZXoQ+M9lcsbL6EO8+eemzutkLA=
Subject key identifier: 42:8D:C3:0C:40:0A:C3:2F:50:2E:07:3B:89:AA:DA:1B:6B:78:6D:BF
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 0ADB96BB
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/Qo3DDEAKwy9QLgc7iaraG2t4bb8.roa
Signing time: Tue 05 Apr 2022 06:33:37 +0000
ROA not before: Tue 05 Apr 2022 06:33:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202505
IP address blocks: 185.225.37.0/24 maxlen: 24
185.225.38.0/24 maxlen: 24
185.225.36.0/24 maxlen: 24
89.43.78.0/24 maxlen: 24
93.114.130.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
185.132.125.0/24 maxlen: 24
185.132.127.0/24 maxlen: 24
193.31.117.0/24 maxlen: 24
193.31.119.0/24 maxlen: 24
84.54.14.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
213.226.116.0/24 maxlen: 24
185.81.154.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
2a06:f7c5::/32 maxlen: 32
2a10:7f46::/32 maxlen: 32
2a10:7f45::/32 maxlen: 32
2a06:f7c4::/32 maxlen: 32
2a10:7f44::/32 maxlen: 32
2a10:7f47::/32 maxlen: 32
2a06:f7c7::/32 maxlen: 32
2a11:d102::/32 maxlen: 32
2a11:d101::/32 maxlen: 32
2a10:7f40::/32 maxlen: 32
2a06:f7c3::/32 maxlen: 32
2a10:7fc5::/32 maxlen: 32
2a10:7f43::/32 maxlen: 32
2a06:f7c0::/32 maxlen: 32
2a06:f7c6::/32 maxlen: 32
2a11:d105::/32 maxlen: 32
2a10:7fc2::/32 maxlen: 32
2a11:d104::/32 maxlen: 32
2a10:7fc1::/32 maxlen: 32
2a11:d107::/32 maxlen: 32
2a10:7fc4::/32 maxlen: 32
2a10:7fc0::/32 maxlen: 32
2a10:7fc3::/32 maxlen: 32
2a06:f7c1::/32 maxlen: 32
2a10:7f42::/32 maxlen: 32
2a10:7fc6::/32 maxlen: 32
2a10:7f41::/32 maxlen: 32
2a10:7fc7::/32 maxlen: 32
2a06:f7c2::/32 maxlen: 32
2a11:d106::/32 maxlen: 32
2a11:d100::/32 maxlen: 32
2a11:d103::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182163131 (0xadb96bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Apr 5 06:33:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=428dc30c400ac32f502e073b89aada1b6b786dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:29:28:ef:c4:3b:43:20:e1:47:2e:3a:85:04:
60:f3:0c:75:c9:ea:b8:5c:a9:d1:49:cf:98:6a:e8:
04:91:f8:31:31:56:9a:d7:01:df:7a:26:05:59:a8:
d6:66:7c:d0:a0:34:6c:4d:ef:41:af:61:90:b6:b5:
dd:47:4f:8d:09:06:99:29:33:ea:05:e4:f8:c8:21:
d8:25:69:be:af:93:32:c9:8e:3f:c3:8a:27:00:f1:
37:4b:d7:22:cf:de:f8:3f:1d:42:dd:57:31:17:1d:
24:cf:66:d3:a6:6c:8d:9c:04:72:21:1c:f3:90:25:
5b:c1:a7:70:38:74:e6:98:a1:77:34:e7:e5:4c:cd:
70:4b:2b:d9:a6:4f:d7:84:64:8d:4e:60:19:aa:26:
c0:e7:e5:ac:04:01:ec:08:97:09:8b:0c:7d:c9:77:
3b:90:b6:bc:85:42:c0:ae:6a:a5:b1:ad:97:1b:62:
01:95:ab:2f:8e:36:03:d6:ad:d1:9c:c2:78:1d:91:
b6:c6:7d:35:6d:05:cc:e0:ae:35:97:4a:c6:bf:55:
51:20:f3:5f:17:96:00:54:b7:11:0e:42:26:53:ac:
26:47:f7:2c:de:2a:0c:99:23:fb:5f:61:18:36:d1:
4c:fb:e0:4e:b4:74:af:aa:1c:e1:93:1e:d4:66:b6:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8D:C3:0C:40:0A:C3:2F:50:2E:07:3B:89:AA:DA:1B:6B:78:6D:BF
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/Qo3DDEAKwy9QLgc7iaraG2t4bb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.14.0/24
86.104.14.0/24
89.43.78.0/24
93.114.130.0/24
176.98.42.0/23
185.81.152.0/22
185.132.125.0/24
185.132.127.0/24
185.225.36.0-185.225.38.255
193.31.117.0/24
193.31.119.0/24
213.226.116.0/24
IPv6:
2a06:f7c0::/29
2a10:7f40::/29
2a10:7fc0::/29
2a11:d100::/29
Signature Algorithm: sha256WithRSAEncryption
2d:49:82:97:9e:bc:6e:f0:54:7b:51:74:60:d4:53:e5:35:62:
ee:af:86:01:e4:3d:5a:e3:3e:76:13:cb:ad:75:60:2f:40:77:
85:b9:93:64:c6:63:40:1a:56:1e:95:89:c0:77:66:c7:1d:8f:
f7:37:25:9a:c8:af:23:b5:1c:06:ec:c7:82:83:8f:6c:1f:bf:
f3:9a:46:03:57:f6:30:9c:11:88:bc:42:db:a6:a4:43:50:c8:
b7:98:9a:77:03:e4:33:42:0a:fe:01:7a:c5:86:4f:bb:c2:cd:
7a:65:db:4e:27:a0:44:65:af:ab:70:7f:9f:d1:f0:db:38:c0:
f4:65:85:cf:c0:ed:ab:bf:4a:7b:08:db:2c:fc:66:52:1f:f7:
46:f9:b3:7f:a4:83:bd:ee:79:2c:4b:d0:fc:3c:95:54:02:3f:
42:f9:52:c8:54:5d:a6:3d:c4:c4:03:f0:81:5a:b0:d6:85:d5:
55:a9:dd:87:a1:54:b0:26:af:f9:9d:ab:ae:48:b3:06:cc:ca:
2b:64:8a:33:47:13:6c:b4:28:24:a1:04:04:cf:35:66:0e:4d:
ea:b0:26:67:33:f2:c8:3e:bc:a9:a2:a3:9e:d0:2a:ea:67:31:
01:c0:ce:ee:d7:1d:18:b0:fe:64:80:20:1e:b7:73:81:b3:b6:
7b:e3:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:22 2023 by rpki-client on console-ams.rpki-client.org