Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/QqWkJJlmcSZQ0eOV03kLCUqFg3I.roa
File: QqWkJJlmcSZQ0eOV03kLCUqFg3I.roa (raw, json)
Hash identifier: DFgN55eYX0NYNpQ4AkljLSm7tg6OwyGV0YbRXNJirOY=
Subject key identifier: 42:A5:A4:24:99:66:71:26:50:D1:E3:95:D3:79:0B:09:4A:85:83:72
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 018A1A070F1608B18DEE531136EBD8A7A446
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/QqWkJJlmcSZQ0eOV03kLCUqFg3I.roa
Signing time: Mon 21 Aug 2023 21:36:24 +0000
ROA not before: Mon 21 Aug 2023 21:36:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 192.6.64.0/22 maxlen: 22
198.151.94.0/24 maxlen: 24
198.151.92.0/24 maxlen: 24
192.6.172.0/22 maxlen: 22
198.151.64.0/24 maxlen: 24
198.151.66.0/24 maxlen: 24
198.151.70.0/24 maxlen: 24
198.151.68.0/24 maxlen: 24
198.151.78.0/24 maxlen: 24
198.151.76.0/24 maxlen: 24
198.151.74.0/24 maxlen: 24
198.151.72.0/24 maxlen: 24
198.151.84.0/24 maxlen: 24
198.151.82.0/24 maxlen: 24
198.151.80.0/24 maxlen: 24
198.151.90.0/24 maxlen: 24
198.151.88.0/24 maxlen: 24
198.151.86.0/24 maxlen: 24
155.193.229.0/24 maxlen: 24
155.193.248.0/24 maxlen: 24
155.193.250.0/24 maxlen: 24
155.193.251.0/24 maxlen: 24
155.193.249.0/24 maxlen: 24
158.120.58.0/24 maxlen: 24
158.120.56.0/24 maxlen: 24
192.25.232.0/22 maxlen: 22
158.120.54.0/24 maxlen: 24
158.120.52.0/24 maxlen: 24
192.137.24.0/22 maxlen: 22
158.120.62.0/24 maxlen: 24
158.120.60.0/24 maxlen: 24
192.25.244.0/22 maxlen: 22
192.25.180.0/22 maxlen: 22
192.25.200.0/22 maxlen: 22
192.25.208.0/22 maxlen: 22
158.120.48.0/24 maxlen: 24
158.120.50.0/24 maxlen: 24
155.193.32.0/19 maxlen: 19
205.149.36.0/22 maxlen: 22
205.149.32.0/22 maxlen: 22
205.149.44.0/22 maxlen: 22
205.149.40.0/22 maxlen: 22
205.149.48.0/22 maxlen: 22
205.149.56.0/22 maxlen: 22
205.149.52.0/22 maxlen: 22
205.149.60.0/22 maxlen: 22
155.193.163.0/24 maxlen: 24
155.193.161.0/24 maxlen: 24
155.193.162.0/24 maxlen: 24
155.193.160.0/24 maxlen: 24
192.6.252.0/22 maxlen: 22
166.108.24.0/24 maxlen: 24
166.108.23.0/24 maxlen: 24
166.108.21.0/24 maxlen: 24
166.108.22.0/24 maxlen: 24
166.108.20.0/24 maxlen: 24
166.108.26.0/24 maxlen: 24
166.108.27.0/24 maxlen: 24
166.108.25.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1a:07:0f:16:08:b1:8d:ee:53:11:36:eb:d8:a7:a4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Aug 21 21:36:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42a5a4249966712650d1e395d3790b094a858372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:0b:bd:43:dd:f2:e4:55:86:3c:77:24:8e:
dd:b9:cb:39:84:f5:f0:de:54:1f:e5:29:b2:f9:e9:
cf:2f:db:c0:28:10:e9:5e:06:27:7a:fa:89:c7:6c:
75:70:f2:40:07:12:61:ed:07:03:70:a5:da:e5:1a:
fd:15:22:1c:39:5b:90:19:4b:10:36:da:73:72:32:
58:cb:13:20:eb:e3:57:18:f4:fa:1f:5a:3c:e4:bf:
1e:8d:37:8e:61:14:a7:ba:bc:c1:1f:a0:4f:9c:c8:
6d:11:e7:29:fa:11:47:02:5d:26:ce:87:f0:0e:54:
ce:ff:94:bd:ce:a7:ea:94:46:31:a9:9c:a2:1b:6b:
49:45:f9:60:b0:73:4d:cb:fc:c6:8e:aa:6c:51:28:
19:a9:66:cf:a3:36:3c:79:77:f5:88:ec:25:e9:2c:
1f:e2:d5:30:23:75:03:bf:fb:49:98:5c:3f:03:b1:
d5:b4:49:4c:17:9a:c4:98:d8:00:70:1a:7f:b1:1d:
8d:62:f4:20:9a:ba:a5:78:76:94:dd:cf:80:b5:c7:
bd:5c:ef:9d:c2:81:56:d6:04:3b:be:3a:c4:29:44:
24:36:1c:10:9d:e4:9b:75:ce:53:bd:76:f9:34:dd:
42:11:f2:20:3e:39:d1:52:9d:6f:7f:51:4e:88:cb:
29:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A5:A4:24:99:66:71:26:50:D1:E3:95:D3:79:0B:09:4A:85:83:72
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/QqWkJJlmcSZQ0eOV03kLCUqFg3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.32.0/19
155.193.160.0/22
155.193.229.0/24
155.193.248.0/22
158.120.48.0/24
158.120.50.0/24
158.120.52.0/24
158.120.54.0/24
158.120.56.0/24
158.120.58.0/24
158.120.60.0/24
158.120.62.0/24
166.108.20.0-166.108.27.255
192.6.64.0/22
192.6.172.0/22
192.6.252.0/22
192.25.180.0/22
192.25.200.0/22
192.25.208.0/22
192.25.232.0/22
192.25.244.0/22
192.137.24.0/22
198.151.64.0/24
198.151.66.0/24
198.151.68.0/24
198.151.70.0/24
198.151.72.0/24
198.151.74.0/24
198.151.76.0/24
198.151.78.0/24
198.151.80.0/24
198.151.82.0/24
198.151.84.0/24
198.151.86.0/24
198.151.88.0/24
198.151.90.0/24
198.151.92.0/24
198.151.94.0/24
205.149.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:49:69:71:9a:94:fe:cc:90:82:6e:b1:18:82:71:23:4b:a4:
67:9f:c1:f0:ad:18:64:62:6d:64:b0:30:60:73:70:42:1d:43:
1f:b1:cd:40:c7:dd:35:40:04:31:37:50:bd:3b:ae:2d:45:be:
85:7f:29:72:e3:72:82:9e:1e:3d:db:0f:83:03:36:10:83:6f:
f5:8e:21:a8:a4:ed:c9:d6:e9:91:93:3e:6c:a4:d3:a6:48:61:
4c:a6:74:bd:0a:ad:1c:22:4b:43:16:18:e3:fa:ad:01:a8:41:
f0:76:4d:27:3f:f9:35:a5:9b:ea:cc:be:2d:ed:30:db:2e:c4:
2f:cb:ba:f1:d0:a0:74:24:87:75:c3:09:15:f1:d5:b0:50:f6:
01:04:55:d3:31:cf:27:b6:63:0d:a8:cd:00:dd:74:d2:97:99:
4c:e2:c5:a0:43:1c:54:e3:97:f2:c3:36:06:a2:d2:fb:5f:dc:
39:27:6a:e7:4f:6e:e0:4d:52:19:0e:24:30:71:fd:b6:d2:aa:
4f:6d:7c:e7:4a:6e:71:6f:b4:09:cc:a7:54:b5:54:a0:b3:f0:
f2:8f:d3:61:74:3d:b5:40:0e:f9:6a:a1:6f:10:32:65:a5:ca:
16:82:57:85:4a:aa:ac:53:fc:7b:79:08:c3:3f:cd:6e:43:d0:
2c:69:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:17 2024 by rpki-client on console-ams.rpki-client.org