Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/Vrk0_249aNh9XYz9TTrQYyAP3eU.roa
File: Vrk0_249aNh9XYz9TTrQYyAP3eU.roa (raw, json)
Hash identifier: f7d7PIZJ5V8pqxO0xH+roLUE08ZjjMu3YxSnBXh4zb8=
Subject key identifier: 56:B9:34:FF:6E:3D:68:D8:7D:5D:8C:FD:4D:3A:D0:63:20:0F:DD:E5
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 01856DE644463F598D9003DEC261C079478F
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/Vrk0_249aNh9XYz9TTrQYyAP3eU.roa
Signing time: Sun 01 Jan 2023 15:14:45 +0000
ROA not before: Sun 01 Jan 2023 15:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6696
IP address blocks: 94.139.39.0/24 maxlen: 24
109.69.217.16/28 maxlen: 28
62.112.29.0/24 maxlen: 24
62.112.31.0/24 maxlen: 24
94.139.37.0/24 maxlen: 24
94.139.36.0/24 maxlen: 24
94.139.34.0/23 maxlen: 23
46.18.36.0/22 maxlen: 24
46.18.34.0/23 maxlen: 24
46.18.33.0/24 maxlen: 24
5.149.136.0/23 maxlen: 23
5.149.138.0/24 maxlen: 24
5.149.140.0/23 maxlen: 23
5.149.142.0/24 maxlen: 24
86.107.124.0/23 maxlen: 23
86.107.120.0/22 maxlen: 22
87.238.225.0/24 maxlen: 24
86.107.126.0/24 maxlen: 24
87.238.228.0/22 maxlen: 24
185.64.64.0/22 maxlen: 24
85.119.216.0/21 maxlen: 24
109.69.221.192/28 maxlen: 28
185.185.229.0/24 maxlen: 24
185.185.228.0/24 maxlen: 24
109.69.216.0/23 maxlen: 24
109.69.219.0/24 maxlen: 24
109.69.220.0/23 maxlen: 23
109.69.220.0/24 maxlen: 24
109.69.222.0/24 maxlen: 24
109.69.221.0/24 maxlen: 24
37.19.8.0/21 maxlen: 24
85.88.34.0/24 maxlen: 24
2a00:1528::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:44:46:3f:59:8d:90:03:de:c2:61:c0:79:47:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 1 15:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56b934ff6e3d68d87d5d8cfd4d3ad063200fdde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:4a:e0:b4:d6:24:7a:f4:5b:99:c1:4a:9b:
8b:9a:08:4f:8c:6d:f4:82:24:58:19:76:48:62:9d:
80:da:d5:a6:1b:65:cb:d2:81:06:a0:49:96:cc:d3:
20:e7:16:32:6d:c3:9b:19:44:f6:52:62:e6:cd:ca:
c2:b5:b6:59:21:2d:bb:b1:a3:76:2a:49:2d:2b:18:
bd:2b:80:af:f1:47:ae:1f:42:73:fb:34:99:3d:c2:
e4:8a:98:5c:98:62:54:6c:f1:31:70:e6:64:0e:c8:
00:ec:aa:7e:18:b7:46:5f:20:34:c7:b7:54:73:b9:
bb:1d:b1:21:d9:8b:9f:c0:ee:7f:f5:64:a9:96:d9:
25:9e:5b:41:d2:59:39:1e:5c:1d:21:4c:2a:14:80:
45:66:72:9b:da:79:84:d9:fe:0d:1e:b8:e8:18:0b:
08:5b:56:8c:3b:3c:2a:6d:15:03:7e:8d:09:15:dd:
30:c5:db:aa:e8:97:7f:89:51:b4:a2:0a:c4:d7:73:
15:11:de:92:a6:92:6b:a6:1c:3e:5b:ee:2a:5a:27:
2d:70:51:ac:4f:1b:92:45:1f:70:e3:3c:58:66:28:
3d:95:f8:fd:27:53:87:5d:9b:9a:c7:7f:33:e7:f2:
2b:e4:c0:93:ce:c0:30:27:75:46:ad:82:5f:77:2c:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B9:34:FF:6E:3D:68:D8:7D:5D:8C:FD:4D:3A:D0:63:20:0F:DD:E5
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/Vrk0_249aNh9XYz9TTrQYyAP3eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.136.0-5.149.138.255
5.149.140.0-5.149.142.255
37.19.8.0/21
46.18.33.0-46.18.39.255
62.112.29.0/24
62.112.31.0/24
85.88.34.0/24
85.119.216.0/21
86.107.120.0-86.107.126.255
87.238.225.0/24
87.238.228.0/22
94.139.34.0-94.139.37.255
94.139.39.0/24
109.69.216.0/23
109.69.219.0-109.69.222.255
185.64.64.0/22
185.185.228.0/23
IPv6:
2a00:1528::/32
Signature Algorithm: sha256WithRSAEncryption
50:b6:cf:a8:d2:51:78:b6:30:41:86:30:b9:3b:40:6e:84:ee:
ad:0b:6f:65:59:33:87:29:44:37:c8:4d:3d:f0:5c:9f:51:34:
39:bb:67:4d:27:01:97:16:e8:0d:81:55:03:db:84:53:4b:8a:
d9:85:e7:cd:f5:47:38:65:5c:c9:c8:b1:c8:c2:ff:99:85:d0:
9b:56:7a:eb:93:14:34:e6:ec:df:a2:dc:60:55:46:06:71:4a:
ca:4b:53:8a:03:41:75:11:af:71:62:06:cc:bf:4c:40:2a:9e:
a3:c9:37:5e:6d:ed:8d:cb:bd:94:d4:d5:a3:88:48:b3:e7:30:
96:7a:64:f4:9c:d6:bf:1e:5d:4f:d7:f7:dc:f1:b4:58:88:ff:
27:a7:71:0b:cd:ac:bd:65:3f:e4:0c:0a:ed:42:f0:da:23:f3:
4a:b4:80:c2:c7:79:ee:a5:7c:67:06:78:39:5b:9d:fd:ae:f4:
80:d1:ae:fe:bb:d5:1a:ca:90:31:43:d5:9e:ac:7b:8e:49:c2:
8f:da:af:42:db:5d:4a:ca:09:ed:01:15:4a:4c:42:19:c8:ba:
38:b4:f1:fe:fb:f2:e1:da:15:e0:e6:3c:63:45:12:0e:20:50:
2f:f1:22:c0:f7:fd:d0:e0:e3:cf:1a:2f:59:63:1a:71:7e:0c:
8c:84:e6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:29 2024 by rpki-client on console-fra.rpki-client.org