Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/T_UHpwuisDq6Czzs6uNZ92U4LNY.roa
File: T_UHpwuisDq6Czzs6uNZ92U4LNY.roa (raw, json)
Hash identifier: m4EPbGuqyrEyClp7pZ/fLxTbhbWlQ24FMxW/L/FoAfI=
Subject key identifier: 4F:F5:07:A7:0B:A2:B0:3A:BA:0B:3C:EC:EA:E3:59:F7:65:38:2C:D6
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 0183B1D1F93C908E810A2AEB3146AD0BC64C
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/T_UHpwuisDq6Czzs6uNZ92U4LNY.roa
Signing time: Fri 07 Oct 2022 09:41:11 +0000
ROA not before: Fri 07 Oct 2022 09:41:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202505
IP address blocks: 193.31.118.0/24 maxlen: 24
193.31.117.0/24 maxlen: 24
193.31.119.0/24 maxlen: 24
89.43.78.0/24 maxlen: 24
93.114.130.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
84.54.14.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
213.226.116.0/24 maxlen: 24
185.81.154.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
2a06:f7c5::/32 maxlen: 32
2a11:d105::/32 maxlen: 32
2a10:7fc2::/32 maxlen: 32
2a10:7f46::/32 maxlen: 32
2a10:7f45::/32 maxlen: 32
2a06:f7c4::/32 maxlen: 32
2a11:d104::/32 maxlen: 32
2a10:7f44::/32 maxlen: 32
2a10:7fc1::/32 maxlen: 32
2a10:7f47::/32 maxlen: 32
2a11:d107::/32 maxlen: 32
2a10:7fc4::/32 maxlen: 32
2a06:f7c7::/32 maxlen: 32
2a10:7fc0::/32 maxlen: 32
2a10:7fc3::/32 maxlen: 32
2a11:d102::/32 maxlen: 32
2a11:d101::/32 maxlen: 32
2a06:f7c1::/32 maxlen: 32
2a10:7f42::/32 maxlen: 32
2a10:7fc6::/32 maxlen: 32
2a10:7f41::/32 maxlen: 32
2a10:7fc7::/32 maxlen: 32
2a06:f7c2::/32 maxlen: 32
2a10:7f40::/32 maxlen: 32
2a06:f7c3::/32 maxlen: 32
2a10:7fc5::/32 maxlen: 32
2a11:d106::/32 maxlen: 32
2a10:7f43::/32 maxlen: 32
2a06:f7c0::/32 maxlen: 32
2a11:d100::/32 maxlen: 32
2a11:d103::/32 maxlen: 32
2a06:f7c6::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:d1:f9:3c:90:8e:81:0a:2a:eb:31:46:ad:0b:c6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Oct 7 09:41:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ff507a70ba2b03aba0b3ceceae359f765382cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:e7:2a:47:1c:7f:ca:0e:e4:3d:89:e5:7e:
34:6d:20:d0:1f:f4:cb:b1:f2:df:e5:3f:60:b9:c5:
22:ed:f9:9e:12:7b:9a:64:38:bb:e1:cf:36:a7:15:
72:59:6c:2e:13:4d:93:34:84:91:38:9b:70:9b:9d:
cc:81:1c:07:a1:99:ae:30:85:f5:a3:4c:6c:56:ee:
36:fa:bf:47:0e:d6:f6:77:78:07:46:b7:74:b7:d1:
95:48:4d:f1:ce:44:81:aa:e1:57:1a:a0:ee:e9:e2:
b8:38:9d:09:08:7c:31:18:d6:91:2e:b0:31:c9:95:
b3:d8:e8:40:5c:8e:92:5d:d3:19:d0:90:a6:53:ae:
80:25:7c:46:10:20:69:69:06:47:0e:dd:9c:9c:e8:
a6:d3:e8:b2:65:da:48:14:c3:c9:d5:b3:66:c6:ed:
c3:83:8e:4e:95:2a:68:08:fd:45:d6:83:cc:10:97:
79:61:07:e5:6d:e7:de:b0:65:8a:1d:74:02:5f:42:
d1:91:8b:12:84:7f:c1:95:0d:87:95:05:3e:48:b9:
ab:b6:3e:7c:ea:d6:49:13:c5:30:4e:3d:3b:7d:ba:
92:35:40:c9:5a:65:77:c4:ad:b2:17:aa:93:57:8c:
f2:60:c0:1a:1b:e0:3d:ad:6e:c5:24:c3:68:4e:30:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F5:07:A7:0B:A2:B0:3A:BA:0B:3C:EC:EA:E3:59:F7:65:38:2C:D6
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/T_UHpwuisDq6Czzs6uNZ92U4LNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.14.0/24
86.104.14.0/24
89.43.78.0/24
93.114.130.0/24
176.98.42.0/23
185.81.152.0/22
193.31.117.0-193.31.119.255
213.226.116.0/24
IPv6:
2a06:f7c0::/29
2a10:7f40::/29
2a10:7fc0::/29
2a11:d100::/29
Signature Algorithm: sha256WithRSAEncryption
58:de:47:32:d9:e0:0c:26:4b:eb:5e:23:d1:f2:06:6f:0d:7f:
fc:5c:de:ee:20:52:fb:fe:4b:99:8e:b9:21:04:b3:23:97:7b:
84:92:0d:92:02:52:05:14:d5:78:60:2d:1e:5a:87:24:ce:4d:
e1:78:1a:a0:3f:19:e4:0c:22:7f:a3:62:f8:d2:53:53:a3:11:
46:12:3c:50:aa:0b:60:be:26:09:0e:11:76:27:8d:8c:af:31:
41:48:e6:22:0f:c1:b4:49:cc:6a:ee:30:f1:a6:26:ef:a4:17:
0d:94:ff:d3:29:19:d3:14:92:50:ee:02:68:bf:2e:5f:53:f0:
7d:8d:03:d9:f1:10:f5:70:80:de:9c:34:8c:6b:3e:3a:85:0f:
8a:a0:ef:9e:35:c8:0f:87:76:54:bc:4b:c8:42:b4:c0:ab:fe:
0d:c5:2e:e6:fd:ba:44:27:5e:c5:34:0a:71:bf:42:4e:91:19:
e2:cf:f4:90:f1:bc:f4:27:6f:b3:5f:67:6f:11:44:3e:46:34:
2b:1c:61:99:b7:82:43:db:43:22:10:bb:8d:a6:96:3d:df:ac:
27:32:25:43:9b:e8:c1:c8:b3:4a:bd:38:b2:33:63:39:b1:c2:
bd:53:ba:0e:1b:24:ee:55:5e:af:da:20:5d:5e:34:00:9a:f5:
7f:89:6d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-fra.rpki-client.org