Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/8vjn49z8s4z8iLUjaLNJm5f83Sk.roa
File: 8vjn49z8s4z8iLUjaLNJm5f83Sk.roa (raw, json)
Hash identifier: JTZcdsDe2fBcotBmSfclcXtgUKdFk6xuDyzQM+ZqjwU=
Subject key identifier: F2:F8:E7:E3:DC:FC:B3:8C:FC:88:B5:23:68:B3:49:9B:97:FC:DD:29
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 019078E73C1D385571318FFAA09ED21A2C80
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/8vjn49z8s4z8iLUjaLNJm5f83Sk.roa
Signing time: Wed 03 Jul 2024 14:02:18 +0000
ROA not before: Wed 03 Jul 2024 14:02:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8831
IP address blocks: 62.108.64.0/21 maxlen: 21
62.108.64.0/22 maxlen: 24
62.108.68.0/22 maxlen: 24
62.108.72.0/22 maxlen: 24
62.108.76.0/22 maxlen: 24
62.108.88.0/21 maxlen: 21
62.108.88.0/22 maxlen: 24
62.108.92.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:e7:3c:1d:38:55:71:31:8f:fa:a0:9e:d2:1a:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Jul 3 14:02:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2f8e7e3dcfcb38cfc88b52368b3499b97fcdd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:1a:51:b5:eb:e6:95:cc:69:7f:b3:64:95:
14:1e:82:b2:e5:5e:ec:89:01:10:f8:dc:8e:61:cd:
f4:98:bb:eb:f7:a1:43:60:e8:c5:fb:30:db:61:3f:
45:95:13:b4:b8:51:8f:64:37:76:66:26:80:66:63:
66:84:75:a1:96:9f:37:f5:84:4a:e3:54:c3:0a:52:
e6:46:2e:1d:7e:1e:7e:28:79:98:b2:b7:fb:e1:d8:
96:36:be:3a:e0:cb:a3:e0:b9:c2:e4:63:13:f8:62:
58:bb:fa:7a:f8:7b:16:2c:c7:30:00:94:a8:29:ce:
c6:34:4e:b7:8e:9f:6b:15:1b:c0:9b:04:cf:aa:b6:
1e:f2:c6:6d:bc:9d:41:7e:5d:f4:83:4a:35:fa:3b:
99:a1:22:57:8c:a7:ae:49:95:f7:59:7c:b3:47:c2:
64:b3:6c:77:33:a7:5b:cb:ae:4b:eb:75:b6:96:5b:
af:fa:56:93:ce:54:2d:57:3a:88:be:f7:cf:16:3d:
75:6f:73:18:47:44:d2:54:9e:86:47:00:81:22:49:
de:0f:c7:3d:8b:21:da:21:1f:f8:f9:8f:85:29:62:
e4:27:73:b9:9e:b0:c2:1f:f9:17:4f:cc:e7:62:4a:
51:93:e3:04:12:33:d4:76:55:a3:40:cb:56:c2:f7:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:E7:E3:DC:FC:B3:8C:FC:88:B5:23:68:B3:49:9B:97:FC:DD:29
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/8vjn49z8s4z8iLUjaLNJm5f83Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0/20
62.108.88.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:cf:ed:cc:19:46:ec:54:3f:12:01:cf:56:e6:99:ec:b8:f3:
08:1b:17:ab:c2:bf:52:5d:ef:6f:e1:4b:87:4a:fb:26:42:a2:
a7:b6:56:61:3c:5a:a0:91:27:a9:0a:a5:ea:ea:a9:52:bd:69:
07:84:d4:31:e1:f8:a7:42:31:21:e1:87:6f:12:d9:6b:8b:c9:
e2:4d:87:5d:00:69:ee:96:b0:a6:87:10:cd:3e:77:e3:d8:89:
96:79:73:14:b4:9c:80:4c:0d:22:ee:ec:9d:48:6c:46:4c:6f:
c7:ee:92:e1:62:09:65:1a:01:1a:75:c9:41:31:6e:99:f8:4f:
23:43:db:ae:70:1f:02:4f:4b:8b:f4:5f:d7:fa:70:1f:70:b2:
ac:e2:e7:5e:19:7d:20:21:94:bd:c3:0c:a1:12:4a:1c:cb:48:
d0:61:ce:fc:44:04:ac:41:29:2a:23:2e:eb:93:78:d4:43:b5:
95:9c:b0:11:34:ff:60:23:ca:5a:13:98:a3:9e:21:77:b2:96:
58:6c:f2:48:52:5a:01:63:fd:3f:d9:7a:32:12:44:53:bb:21:
c5:4f:de:bc:63:19:d2:6f:56:4b:10:e6:ba:7b:1b:98:86:2f:
1f:f8:60:50:d4:a8:be:02:0a:b2:80:a1:85:bd:89:d7:eb:60:
ce:ad:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 15:05:26 2024 by rpki-client on console-ams.rpki-client.org