Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/bB5C0ijI_Ahrh0S9Lq56Nyffd_k.roa
File: bB5C0ijI_Ahrh0S9Lq56Nyffd_k.roa (raw, json)
Hash identifier: E+6Q5naaMysKcXD+0ucQac30OlesCRSb8M/wsbB8oB4=
Subject key identifier: 6C:1E:42:D2:28:C8:FC:08:6B:87:44:BD:2E:AE:7A:37:27:DF:77:F9
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 077F8BEE
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/bB5C0ijI_Ahrh0S9Lq56Nyffd_k.roa
Signing time: Sat 01 Jan 2022 01:03:16 +0000
ROA not before: Sat 01 Jan 2022 01:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8612
IP address blocks: 84.220.0.0/14 maxlen: 24
195.130.224.0/19 maxlen: 19
213.205.0.0/18 maxlen: 18
130.186.128.0/17 maxlen: 17
130.186.32.0/19 maxlen: 19
193.43.2.0/23 maxlen: 23
82.85.26.128/26 maxlen: 26
82.85.53.64/26 maxlen: 26
82.85.53.0/26 maxlen: 26
82.84.0.0/15 maxlen: 24
193.207.0.0/16 maxlen: 21
62.10.0.0/15 maxlen: 24
217.133.0.0/16 maxlen: 16
217.73.208.0/20 maxlen: 20
94.32.0.0/13 maxlen: 24
193.207.96.0/20 maxlen: 21
212.123.64.0/19 maxlen: 19
193.207.112.0/20 maxlen: 20
94.199.8.0/24 maxlen: 24
78.12.0.0/14 maxlen: 24
193.207.128.0/19 maxlen: 19
193.207.128.0/18 maxlen: 22
94.32.0.0/14 maxlen: 14
94.36.0.0/14 maxlen: 14
80.241.160.0/20 maxlen: 20
213.205.0.251/32 maxlen: 32
212.24.0.0/19 maxlen: 19
212.22.128.0/19 maxlen: 19
2a01:7d0:4800:1::/64 maxlen: 64
2a01:7d0::/32 maxlen: 32
2a01:7d0:4811::/64 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125799406 (0x77f8bee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Jan 1 01:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c1e42d228c8fc086b8744bd2eae7a3727df77f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:ac:72:e8:63:01:33:56:27:b3:0d:97:a1:
3c:b1:e9:be:6a:59:b3:5a:93:85:48:5c:83:0b:39:
b9:d5:50:1e:56:96:a7:47:fe:75:80:3a:20:6a:5a:
1c:29:bd:d6:1c:b1:58:e9:e4:22:5a:22:5d:dc:e8:
ae:02:ef:a1:3e:e4:f1:96:47:01:9c:0d:d7:4f:bb:
51:92:97:b4:f7:23:9a:f4:7f:d4:4b:56:b2:98:61:
0c:1f:91:7f:6b:8c:c7:d3:f6:cf:25:1d:5d:0c:09:
d8:f1:59:16:1a:ce:f1:2e:3a:a4:db:79:a3:8c:2e:
0f:de:33:62:55:1b:ed:de:21:30:c0:56:46:82:15:
ab:33:20:22:9c:1f:77:39:a3:4f:84:7f:56:6d:9a:
a0:eb:31:10:f4:e1:f8:e9:96:9f:e3:0b:27:a4:f2:
60:ce:84:80:57:10:40:25:07:3c:5f:8e:49:27:41:
92:a0:80:95:fd:52:b4:a6:f7:bf:24:c8:73:4c:9c:
57:4c:5e:4a:4b:2e:04:b8:f7:87:46:2d:0a:34:f8:
64:51:01:93:9c:c1:56:7f:1e:37:cf:20:7f:b8:a8:
12:17:71:76:6a:02:23:28:da:4f:39:21:99:16:1b:
cf:cc:da:4b:3a:12:8f:e9:ca:a8:9d:2f:26:f6:fb:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1E:42:D2:28:C8:FC:08:6B:87:44:BD:2E:AE:7A:37:27:DF:77:F9
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/bB5C0ijI_Ahrh0S9Lq56Nyffd_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.10.0.0/15
78.12.0.0/14
80.241.160.0/20
82.84.0.0/15
84.220.0.0/14
94.32.0.0/13
94.199.8.0/24
130.186.32.0/19
130.186.128.0/17
193.43.2.0/23
193.207.0.0/16
195.130.224.0/19
212.22.128.0/19
212.24.0.0/19
212.123.64.0/19
213.205.0.0/18
217.73.208.0/20
217.133.0.0/16
IPv6:
2a01:7d0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:96:19:00:44:ec:f1:7a:fd:5e:6f:a9:8f:98:4a:83:d6:9a:
a0:54:a2:81:45:0f:7c:4e:ec:aa:3d:42:c1:85:1b:b5:b0:d6:
76:9e:66:db:ee:2f:e2:49:ce:ae:56:49:4f:65:01:1a:c9:84:
e1:b7:69:23:59:84:06:a1:29:6e:41:b6:c7:b2:ce:9c:c2:df:
e0:fb:74:20:a4:2f:06:c1:4e:f6:70:3e:00:52:8f:51:67:b2:
68:ea:b6:53:23:ba:de:11:1f:cc:24:fb:04:3a:e7:c2:b2:80:
4f:cb:a6:e2:27:bc:c3:8f:a7:4b:fa:b8:10:a9:7a:6d:ed:85:
99:00:60:0c:66:5f:41:2d:d9:14:89:62:9e:c5:cf:18:d6:3f:
2f:be:70:ac:c5:bb:65:2b:69:64:a8:84:5b:0b:ca:0c:88:35:
92:db:cd:2f:0d:96:8e:40:e4:8e:2f:e6:20:7b:8c:56:8c:cc:
2f:5f:1c:8b:fc:39:5c:ba:26:9b:f1:fd:36:8a:aa:7f:e5:77:
e2:35:b9:22:63:59:64:fa:dd:84:01:1a:7c:dc:85:59:bd:45:
52:76:3d:55:4c:fe:24:eb:aa:5d:b3:c4:29:cf:59:63:a0:04:
51:37:aa:9a:4b:cb:55:23:b8:5d:90:43:8c:1a:5d:aa:8d:4e:
9d:2b:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-fra.rpki-client.org