Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QgA-jy-CCMNKdsJJQQFFHwK8LM4.roa
File: QgA-jy-CCMNKdsJJQQFFHwK8LM4.roa (raw, json)
Hash identifier: VOK6JSVhr0kwcUi/UV3g70t0hNo0L+c72F4DsIfgSZ8=
Subject key identifier: 42:00:3E:8F:2F:82:08:C3:4A:76:C2:49:41:01:45:1F:02:BC:2C:CE
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 145AAD21
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QgA-jy-CCMNKdsJJQQFFHwK8LM4.roa
Signing time: Mon 28 Mar 2022 14:14:01 +0000
ROA not before: Mon 28 Mar 2022 14:14:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.8.164.0/22 maxlen: 24
212.90.100.0/22 maxlen: 24
185.248.184.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.253.0.0/23 maxlen: 24
91.132.59.0/24 maxlen: 24
193.36.73.0/24 maxlen: 24
193.36.85.0/24 maxlen: 24
193.36.84.0/24 maxlen: 24
185.234.144.0/22 maxlen: 24
82.115.20.0/23 maxlen: 24
82.115.24.0/22 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341486881 (0x145aad21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 28 14:14:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42003e8f2f8208c34a76c2494101451f02bc2cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:7c:b7:36:f7:b8:82:18:e8:05:eb:61:34:
32:b7:04:a3:42:7a:dc:b3:de:5e:bc:91:b2:d0:c1:
70:48:a2:5b:67:43:1c:55:8a:1f:2a:fb:7e:d3:2b:
a0:7a:9c:f1:76:0a:26:ea:5c:5a:05:44:f0:0d:d8:
20:5a:a1:b9:10:cb:25:0e:af:e4:cb:c7:cb:cb:3d:
7a:e3:2f:50:10:3d:80:c9:25:d3:ec:bf:8e:ce:c5:
21:8b:bb:df:70:bb:cb:89:47:a7:35:92:c4:77:b9:
85:5e:97:70:96:a4:70:95:af:16:1b:9f:ab:33:5e:
96:a6:73:0a:21:41:f4:d1:97:14:a7:b3:21:e5:96:
5d:49:9b:f2:7d:95:13:5e:35:90:29:da:a3:1f:09:
22:ca:e6:2e:61:4e:44:6b:87:d5:b0:89:66:2f:e5:
7a:96:a3:08:17:6b:7c:8b:e0:23:12:ae:1a:78:18:
8d:ac:f0:0e:64:39:07:e7:c6:a2:58:fd:af:fc:f3:
5c:8c:45:cd:ef:27:dd:fd:44:df:97:1e:0e:f6:a5:
5e:79:fe:0e:bb:43:8a:aa:5f:da:90:da:65:fe:0f:
7a:e1:87:c2:67:2f:71:cb:1f:2d:69:14:2b:bc:ea:
96:1f:c9:84:34:d6:9d:f0:3b:58:d2:91:e4:8f:88:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:00:3E:8F:2F:82:08:C3:4A:76:C2:49:41:01:45:1F:02:BC:2C:CE
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QgA-jy-CCMNKdsJJQQFFHwK8LM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.20.0/23
82.115.24.0/22
85.8.164.0/22
91.132.59.0/24
185.129.108.0/23
185.220.236.0/22
185.234.144.0/22
185.248.184.0/22
188.253.0.0/23
193.36.73.0/24
193.36.84.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:3d:b2:34:b9:4c:74:b5:27:22:8c:c4:16:62:d2:c7:4e:2e:
45:9b:98:a0:42:e6:1a:63:d3:3e:b8:4f:ac:a6:67:a1:33:d7:
d1:d6:32:85:9e:c2:9c:a8:39:60:a7:ab:f9:65:01:4e:28:27:
44:56:c1:24:b0:5e:80:6c:c3:ea:2e:36:e3:c0:9f:52:ef:cd:
5a:46:32:e2:b8:a6:f4:7e:a8:24:13:d2:82:2c:d3:35:71:cf:
66:09:76:8c:27:38:5b:37:21:00:bc:d1:6d:de:18:b1:69:c3:
56:c6:ed:f9:05:a0:19:ca:28:a5:c1:28:f5:e6:05:c5:83:a1:
b6:4c:53:f5:8a:e4:73:29:c1:9e:e4:4f:21:8d:69:80:07:c9:
51:65:82:64:e9:42:97:a3:5e:7c:3c:88:2f:80:20:62:dd:eb:
35:ff:df:2d:ee:2c:f2:0c:dc:95:2d:3a:93:b3:4e:59:ba:2a:
e5:a3:27:59:4e:35:27:43:0f:0a:77:7d:64:e3:32:ca:f9:1f:
1f:57:0b:0d:61:1c:a6:8b:cf:39:d9:f5:1e:5a:cf:2b:7f:6e:
ed:67:aa:68:11:dc:5a:77:15:90:06:ef:d3:2c:e5:7b:ca:a3:
be:9c:0d:09:e2:61:c3:94:a1:aa:4c:d6:ea:84:a4:52:bc:3e:
d9:2a:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org