Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/DQgoirE0nr9y6CwrR3ydof54qAY.roa
File: DQgoirE0nr9y6CwrR3ydof54qAY.roa (raw, json)
Hash identifier: JBIxEDRVitcJlOQFBk9joVUQgClKd2qFQnY/m6/hHZw=
Subject key identifier: 0D:08:28:8A:B1:34:9E:BF:72:E8:2C:2B:47:7C:9D:A1:FE:78:A8:06
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 018A94224B3FC8637D8ADEEA4504C9604F01
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/DQgoirE0nr9y6CwrR3ydof54qAY.roa
Signing time: Thu 14 Sep 2023 14:39:50 +0000
ROA not before: Thu 14 Sep 2023 14:39:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 192.46.184.0/22 maxlen: 22
192.46.184.0/21 maxlen: 21
198.151.95.0/24 maxlen: 24
198.151.93.0/24 maxlen: 24
192.46.188.0/24 maxlen: 24
192.46.200.0/22 maxlen: 22
198.151.71.0/24 maxlen: 24
198.151.67.0/24 maxlen: 24
198.151.65.0/24 maxlen: 24
198.151.69.0/24 maxlen: 24
198.151.73.0/24 maxlen: 24
198.151.77.0/24 maxlen: 24
198.151.75.0/24 maxlen: 24
198.151.81.0/24 maxlen: 24
198.151.79.0/24 maxlen: 24
198.151.83.0/24 maxlen: 24
198.151.85.0/24 maxlen: 24
198.151.87.0/24 maxlen: 24
198.151.91.0/24 maxlen: 24
198.151.89.0/24 maxlen: 24
158.120.53.0/24 maxlen: 24
158.120.57.0/24 maxlen: 24
158.120.55.0/24 maxlen: 24
158.120.61.0/24 maxlen: 24
158.120.59.0/24 maxlen: 24
158.120.63.0/24 maxlen: 24
158.120.51.0/24 maxlen: 24
158.120.49.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:94:22:4b:3f:c8:63:7d:8a:de:ea:45:04:c9:60:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 14 14:39:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d08288ab1349ebf72e82c2b477c9da1fe78a806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:80:39:71:3f:6d:37:0b:2d:ad:3c:e1:48:0d:
e7:4e:84:a5:9b:92:8b:e9:da:24:f8:c9:80:5a:cd:
03:78:73:af:8a:d8:ab:28:b1:91:78:9b:c5:b8:31:
e2:0f:1a:e3:e0:c5:bb:a9:22:7c:a6:59:5c:3c:f8:
0c:c8:4d:04:6b:78:1b:9a:a5:83:c1:9f:b5:66:ad:
a5:48:1b:19:a4:ec:bc:78:d9:c6:0b:33:a9:58:6a:
98:dc:78:15:30:18:38:95:60:66:46:0e:86:aa:e8:
b5:d6:74:7e:1e:09:9b:46:67:69:09:0f:0b:64:2b:
c0:65:9b:a5:85:4b:19:b0:54:12:83:5e:a3:75:13:
bb:a5:11:c5:f8:ec:b1:38:13:e0:4e:9b:b7:5e:c7:
16:33:b3:c5:05:0c:0f:69:e6:be:12:24:55:ba:b3:
49:63:a8:43:99:63:83:f0:b1:eb:6b:fe:07:86:3f:
ce:d1:df:73:74:7d:81:cc:aa:f4:08:b3:1e:b3:99:
de:cd:0e:93:6b:73:e0:d3:d1:3f:f4:5b:6f:52:80:
7d:b2:d2:1d:27:10:51:13:79:93:c7:92:8c:3f:2b:
bf:d5:75:89:6b:11:8b:6f:84:2d:03:e6:28:f4:a5:
66:d9:96:2f:65:c8:cd:72:c9:52:ba:09:98:bb:ed:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:08:28:8A:B1:34:9E:BF:72:E8:2C:2B:47:7C:9D:A1:FE:78:A8:06
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/DQgoirE0nr9y6CwrR3ydof54qAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.120.49.0/24
158.120.51.0/24
158.120.53.0/24
158.120.55.0/24
158.120.57.0/24
158.120.59.0/24
158.120.61.0/24
158.120.63.0/24
192.46.184.0/21
192.46.200.0/22
198.151.65.0/24
198.151.67.0/24
198.151.69.0/24
198.151.71.0/24
198.151.73.0/24
198.151.75.0/24
198.151.77.0/24
198.151.79.0/24
198.151.81.0/24
198.151.83.0/24
198.151.85.0/24
198.151.87.0/24
198.151.89.0/24
198.151.91.0/24
198.151.93.0/24
198.151.95.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8a:bc:fe:2a:8b:8a:6f:88:1c:ac:33:d0:a9:d1:19:bf:a8:
12:dd:f0:78:38:31:a9:1d:3a:cc:63:fa:0c:f3:3a:5f:64:a9:
76:be:e7:48:40:84:be:f9:25:ed:b1:65:85:99:80:82:3d:b0:
d2:40:f3:d5:b8:cb:fc:75:75:1c:c9:52:bb:94:77:08:82:14:
d7:ed:88:43:d4:95:64:2c:56:f8:11:84:d6:bf:6c:31:91:86:
c9:f0:ee:8f:a7:97:4a:d8:6f:fb:a1:be:27:bd:7c:c8:b3:14:
f4:95:c8:70:54:69:9d:71:1b:91:c9:de:37:22:85:14:a0:33:
08:6b:65:e5:6e:a8:40:8b:e3:6f:f0:26:a1:2d:9b:70:19:73:
cc:52:6c:68:84:d1:b9:7a:af:f0:96:c9:96:da:68:3f:64:b0:
1d:02:9d:d2:5f:06:ad:2d:80:24:5b:b3:b6:87:bc:6b:8c:8f:
71:ca:6f:bf:b6:d4:f7:e4:a2:af:60:5c:28:23:77:6d:e7:7c:
90:c4:38:43:a8:56:b0:39:c4:88:67:50:61:f8:f6:a2:8c:70:
c3:ea:49:ef:8a:bc:e3:29:aa:86:a2:2f:8d:f8:28:8d:f2:d7:
d1:18:c7:d7:f4:48:3d:ce:8e:63:4a:98:e5:93:a5:ac:1e:40:
eb:f4:27:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:17 2024 by rpki-client on console-ams.rpki-client.org