Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/qcf7ZTPtC85a3ZLbIkvFzuKEhnE.roa
File: qcf7ZTPtC85a3ZLbIkvFzuKEhnE.roa (raw, json)
Hash identifier: c6RAk+nnSrlEiMVJTUZ8Tq8pPxQo130LnGW/hpCI1kg=
Subject key identifier: A9:C7:FB:65:33:ED:0B:CE:5A:DD:92:DB:22:4B:C5:CE:E2:84:86:71
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 06F4AC7B
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/qcf7ZTPtC85a3ZLbIkvFzuKEhnE.roa
Signing time: Sat 01 Jan 2022 01:58:01 +0000
ROA not before: Sat 01 Jan 2022 01:58:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203061
IP address blocks: 5.181.88.0/22 maxlen: 32
176.124.48.0/22 maxlen: 22
95.214.188.0/22 maxlen: 22
92.119.152.0/22 maxlen: 22
185.12.184.0/22 maxlen: 22
170.245.40.0/22 maxlen: 22
171.22.228.0/22 maxlen: 22
85.208.40.0/22 maxlen: 22
95.214.20.0/22 maxlen: 22
168.205.72.0/22 maxlen: 22
78.142.252.0/22 maxlen: 22
5.252.120.0/22 maxlen: 22
194.32.116.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116698235 (0x6f4ac7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Jan 1 01:58:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9c7fb6533ed0bce5add92db224bc5cee2848671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:4c:0d:10:ed:b1:be:f5:4d:93:23:a4:85:
24:e2:4b:25:91:c3:69:46:cf:75:da:cf:b9:49:73:
6e:bb:a8:7c:94:0b:f3:85:b2:17:31:81:ff:3e:de:
6d:46:e2:33:ea:05:91:54:9a:f9:de:de:2c:a7:60:
0b:86:42:01:84:93:3a:d1:64:4c:48:1d:03:58:9d:
c9:6b:4d:3f:9b:83:43:63:86:a9:a0:88:75:02:74:
36:c4:93:c4:71:b0:48:89:5e:24:c9:31:21:37:7f:
b8:32:3c:e2:e4:dc:4a:2f:c7:0b:e6:77:af:25:e5:
27:fb:42:b1:4e:0a:b1:17:65:ea:19:b1:31:fb:27:
7e:9b:e2:33:dd:e1:03:29:d7:f3:51:88:dc:6a:a6:
de:d9:60:84:a3:fa:e4:57:17:18:6b:28:a9:88:3e:
de:b3:23:4c:16:ec:f2:48:ea:2d:d4:df:f1:de:2b:
00:65:8c:a1:36:f2:14:7c:a8:bf:5c:5d:92:b7:de:
ba:55:b9:6f:be:0c:12:8e:f9:2c:20:08:a5:c2:b2:
e6:7b:15:20:66:a5:af:74:1b:4c:cd:14:12:57:ee:
6b:1f:77:5c:1c:d0:5e:fc:2d:a9:ea:5a:eb:b5:30:
c4:a6:e9:4b:c7:fa:4c:89:69:98:69:ea:0c:aa:6d:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C7:FB:65:33:ED:0B:CE:5A:DD:92:DB:22:4B:C5:CE:E2:84:86:71
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/qcf7ZTPtC85a3ZLbIkvFzuKEhnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.88.0/22
5.252.120.0/22
78.142.252.0/22
85.208.40.0/22
92.119.152.0/22
95.214.20.0/22
95.214.188.0/22
168.205.72.0/22
170.245.40.0/22
171.22.228.0/22
176.124.48.0/22
185.12.184.0/22
194.32.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:00:5c:04:b5:52:f0:71:c3:dc:22:a2:5b:73:7a:70:12:5b:
e0:77:f0:39:2f:92:dc:d0:e4:99:95:7b:2e:db:84:5e:3f:49:
f3:d3:79:4c:1c:76:76:cb:9b:87:83:14:9a:bb:54:0b:d2:74:
80:71:ac:cd:6a:ce:14:c4:2d:e3:94:dd:4d:ee:83:04:44:5c:
81:1b:ca:76:03:b1:d4:72:77:1e:a2:00:3f:78:1d:b0:e0:17:
e2:b3:19:4f:a6:c0:92:6c:7a:35:97:96:f1:fb:c3:60:bf:d9:
39:5d:bf:82:55:ed:44:09:27:6b:f6:de:16:6c:13:b6:00:bd:
83:38:1e:ca:13:3e:91:64:78:35:ed:9a:9a:67:60:ff:5c:f8:
77:fd:6f:d0:27:46:29:c8:8e:ef:77:b2:fb:3f:d0:33:1c:4b:
a9:82:af:d8:83:26:8b:2b:c0:9f:62:e3:12:9e:71:b2:43:54:
3c:1d:42:d5:85:b5:fe:1f:92:e7:d3:91:ec:38:0d:1b:a4:fa:
8f:a2:c2:b1:12:87:bd:2e:34:c0:1f:80:4e:95:23:d4:ad:b2:
92:a7:b9:c3:82:26:32:42:e8:87:39:f5:7b:57:55:b9:68:16:
73:62:4a:82:f3:16:45:30:9d:1e:9c:a8:4e:aa:8c:3f:6f:53:
bd:06:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org