Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/7jhJvAjI0IiWIt8b4Ay55KRkUJw.roa
File: 7jhJvAjI0IiWIt8b4Ay55KRkUJw.roa (raw, json)
Hash identifier: TkmTeHMjZEi/fvEEt15fsJwAyK41ueBtBd2JHZEBTDk=
Subject key identifier: EE:38:49:BC:08:C8:D0:88:96:22:DF:1B:E0:0C:B9:E4:A4:64:50:9C
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 14C7366F
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/7jhJvAjI0IiWIt8b4Ay55KRkUJw.roa
Signing time: Sat 01 Jan 2022 05:55:47 +0000
ROA not before: Sat 01 Jan 2022 05:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206509
IP address blocks: 194.46.80.0/20 maxlen: 20
109.176.0.0/16 maxlen: 16
212.104.128.0/19 maxlen: 19
194.46.32.0/19 maxlen: 19
91.84.0.0/15 maxlen: 16
81.5.188.0/24 maxlen: 24
194.46.64.0/19 maxlen: 19
81.168.0.0/17 maxlen: 17
81.5.128.0/18 maxlen: 18
82.152.0.0/15 maxlen: 16
212.108.80.0/21 maxlen: 21
213.152.34.0/24 maxlen: 24
213.152.32.0/19 maxlen: 19
212.108.88.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348599919 (0x14c7366f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Jan 1 05:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee3849bc08c8d0889622df1be00cb9e4a464509c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:3d:52:be:d5:17:06:9b:4a:44:7c:91:04:
68:2e:2a:6a:0c:a8:b9:4d:bf:01:53:f0:18:e8:37:
a9:4d:77:c2:1c:02:d4:41:1d:99:bc:81:1c:54:db:
13:3c:3f:b1:51:2e:6f:07:d9:d2:93:ed:4f:a7:0f:
29:87:e9:ba:de:f6:e4:83:7b:d6:a0:6e:dc:fd:36:
6c:c4:1a:5a:3b:45:60:b1:24:cf:0e:46:8d:d7:d8:
0f:77:b9:20:14:cf:55:69:9d:61:38:50:9b:6b:03:
cd:c7:37:fe:08:04:9c:59:a8:e8:3e:57:ff:79:81:
87:0a:e0:41:40:4f:ea:82:36:52:6a:93:8a:a4:9c:
fc:4b:93:0c:b3:4e:55:f4:4f:c4:13:75:35:a5:63:
79:39:b4:0e:f0:3e:92:a1:d3:fc:56:4d:29:f9:b1:
bc:c3:d8:ec:ac:d2:cc:30:ae:9c:40:04:a6:3d:5f:
ce:56:0e:54:8d:0f:be:e4:b0:04:05:a9:eb:3c:51:
16:fc:c9:19:4a:09:1e:39:0e:a0:c6:ec:e6:2a:6e:
fc:2a:93:9c:7c:7d:3f:42:65:99:83:c0:f5:8b:fd:
06:d4:df:fd:0b:94:f0:5c:ed:e0:d9:ca:02:19:11:
2b:6f:19:d2:79:c8:ea:b4:2b:22:bc:f8:77:b1:4e:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:38:49:BC:08:C8:D0:88:96:22:DF:1B:E0:0C:B9:E4:A4:64:50:9C
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/7jhJvAjI0IiWIt8b4Ay55KRkUJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
91.84.0.0/15
109.176.0.0/16
194.46.32.0-194.46.95.255
212.104.128.0/19
212.108.80.0-212.108.91.255
213.152.32.0/19
Signature Algorithm: sha256WithRSAEncryption
26:93:29:29:e9:e2:ae:2f:77:f2:fd:32:f6:90:a0:c4:6f:75:
aa:05:d5:7e:08:46:f2:2c:74:41:dc:1e:c1:d0:9a:c6:38:43:
d3:37:9b:71:1d:a8:57:ae:44:2a:8d:77:73:41:88:0f:44:d4:
9f:28:db:7e:98:15:67:c8:e7:f2:7c:22:5c:67:26:4a:72:3c:
6b:2d:c0:8a:15:f0:ca:0a:31:fd:86:87:61:14:83:2e:5e:6b:
7a:e7:0c:fe:60:31:a5:af:99:a7:7f:6b:50:fc:8e:b0:7f:37:
3f:51:9b:15:1d:5a:05:b2:3a:5d:52:9e:f2:19:36:ad:8f:d9:
e8:c8:c4:e6:dd:8f:01:ce:10:87:79:b1:9c:30:de:95:50:3d:
62:56:e9:86:2a:fe:2b:77:68:1e:57:dd:9c:e4:ba:a5:0e:f3:
40:c5:e6:ee:40:8f:05:0e:7b:57:d4:7b:cb:23:24:89:b7:9a:
6f:fc:a7:f6:7c:83:a0:a4:c0:e9:e2:62:51:e8:40:44:c9:7c:
17:c6:97:fa:2a:87:ae:80:fa:42:18:fe:92:13:a8:c6:ec:45:
be:d9:99:ed:cc:8d:05:b8:db:8a:62:9d:50:ac:c3:99:0f:c6:
41:fc:4e:02:94:91:76:d0:14:1e:3b:34:39:92:cc:06:69:0c:
4d:aa:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:37 2024 by rpki-client on console-ams.rpki-client.org