Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/kq60BUcw1pitn8EL-c5VDtM_fmE.roa
File: kq60BUcw1pitn8EL-c5VDtM_fmE.roa (raw, json)
Hash identifier: dhmwol/Ts6gFEcCp1hRKaJKus9SUqtNXkoA0tbgm6bM=
Subject key identifier: 92:AE:B4:05:47:30:D6:98:AD:9F:C1:0B:F9:CE:55:0E:D3:3F:7E:61
Certificate issuer: /CN=8dcf82690262f0622eebfaad1433d58fb9ca9e1f
Certificate serial: 01856E26513D08B84275BB17141171710148
Authority key identifier: 8D:CF:82:69:02:62:F0:62:2E:EB:FA:AD:14:33:D5:8F:B9:CA:9E:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/kq60BUcw1pitn8EL-c5VDtM_fmE.roa
Signing time: Sun 01 Jan 2023 16:24:42 +0000
ROA not before: Sun 01 Jan 2023 16:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199493
IP address blocks: 193.221.196.0/22 maxlen: 24
37.220.64.0/24 maxlen: 24
37.220.64.0/20 maxlen: 24
37.220.71.0/24 maxlen: 24
37.220.70.0/24 maxlen: 24
37.220.65.0/24 maxlen: 24
37.220.67.0/24 maxlen: 24
37.220.66.0/24 maxlen: 24
37.220.69.0/24 maxlen: 24
37.220.68.0/24 maxlen: 24
37.220.78.0/24 maxlen: 24
37.220.77.0/24 maxlen: 24
37.220.72.0/23 maxlen: 23
37.220.74.0/24 maxlen: 24
37.220.74.0/23 maxlen: 23
37.220.76.0/24 maxlen: 24
37.220.75.0/24 maxlen: 24
37.220.79.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:51:3d:08:b8:42:75:bb:17:14:11:71:71:01:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcf82690262f0622eebfaad1433d58fb9ca9e1f
Validity
Not Before: Jan 1 16:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92aeb4054730d698ad9fc10bf9ce550ed33f7e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:39:e1:85:75:d9:87:11:34:7d:bf:a9:e6:
f6:bc:f0:d4:0d:a8:22:24:53:44:bd:37:56:dc:19:
d4:5a:bf:f1:f3:f2:6c:b4:62:84:d8:a2:e1:2d:46:
e9:21:98:4d:a9:3a:c3:56:01:c8:03:ff:b6:2d:07:
10:5c:19:f0:14:10:7b:e7:bb:0e:7d:11:09:a5:fb:
c2:0b:f5:c4:be:91:1f:94:a5:6b:e3:da:94:78:18:
18:c1:7e:32:4a:eb:67:9b:7e:d4:bb:7e:a9:ef:de:
60:ed:2f:79:75:41:5c:13:66:7c:1d:90:04:34:a8:
ba:51:a9:ce:0b:e0:96:5b:35:3e:25:23:97:3d:b1:
a8:af:8e:38:c4:71:1b:8b:38:cb:5e:3e:32:01:2f:
8b:05:95:a2:0d:18:70:06:d7:6d:b1:72:0c:89:df:
c6:c0:3b:3c:fd:74:2a:1c:7e:c0:70:13:a9:a2:2b:
54:16:93:a6:7e:11:40:30:95:36:92:26:c8:97:a3:
72:36:68:3a:c2:83:2e:82:87:7f:75:6b:c4:df:61:
a4:1e:f0:07:d5:c6:80:92:02:19:73:bd:08:5f:74:
db:3a:5c:dc:df:41:25:77:af:42:8c:10:57:aa:53:
f7:6f:1d:46:72:4b:a4:09:5a:b4:cc:e9:1e:69:9b:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AE:B4:05:47:30:D6:98:AD:9F:C1:0B:F9:CE:55:0E:D3:3F:7E:61
X509v3 Authority Key Identifier:
keyid:8D:CF:82:69:02:62:F0:62:2E:EB:FA:AD:14:33:D5:8F:B9:CA:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/kq60BUcw1pitn8EL-c5VDtM_fmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.64.0/20
193.221.196.0/22
Signature Algorithm: sha256WithRSAEncryption
58:3d:0c:8f:e3:49:1d:66:05:78:20:28:5b:31:72:c4:b4:fb:
1d:91:e3:58:10:13:87:4a:4a:18:e1:0b:42:e1:88:db:68:76:
46:93:8b:29:d9:ef:e1:62:2d:24:13:ed:6a:51:95:42:b4:e6:
b7:2a:7e:4f:4f:ef:e1:e5:6a:5b:d3:db:fd:2e:ca:a6:d4:15:
0f:a0:10:38:11:a0:7e:e0:13:fd:d9:c9:0c:a6:75:e3:07:42:
4c:00:37:42:50:a6:1c:53:7a:b3:af:04:8e:fe:5f:fb:5c:0a:
c6:e5:3b:5f:93:91:72:f4:84:67:e7:b2:22:e6:cf:81:84:d5:
32:00:44:82:62:51:60:40:11:dd:f6:0a:57:a9:02:73:27:02:
a0:74:87:39:6f:00:81:d2:f0:95:4f:57:27:60:7d:79:03:46:
d4:2a:e2:92:a7:ed:13:cc:5f:27:5c:9a:31:7c:ab:7a:48:2c:
db:60:2a:61:4d:fa:7d:bf:ce:5f:a8:a0:04:37:fb:28:2f:44:
12:11:d0:5b:e4:24:78:75:fb:02:d6:96:96:ea:31:fd:42:e9:
a5:af:35:51:bd:8a:da:81:1d:bc:35:27:e1:59:2d:28:50:1d:
be:9a:23:c1:34:2c:3a:10:94:56:3e:d9:18:a5:61:d6:e5:3f:
4a:d0:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 09:02:41 2023 by rpki-client on console-fra.rpki-client.org