Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/veOLtqt2t29kOuOMf1wBiUcnrug.roa
File: veOLtqt2t29kOuOMf1wBiUcnrug.roa (raw, json)
Hash identifier: e0ZRYc6RJMMvCdOzQKJf/AIJS9lqIeFCnrdQPWjkvGU=
Subject key identifier: BD:E3:8B:B6:AB:76:B7:6F:64:3A:E3:8C:7F:5C:01:89:47:27:AE:E8
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 018CC86F2E55250802121457C8E421F6D168
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/veOLtqt2t29kOuOMf1wBiUcnrug.roa
Signing time: Tue 02 Jan 2024 04:29:38 +0000
ROA not before: Tue 02 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8455
IP address blocks: 95.142.96.0/20 maxlen: 24
185.223.86.0/23 maxlen: 24
89.255.203.0/24 maxlen: 24
89.255.205.0/24 maxlen: 24
89.255.204.0/24 maxlen: 24
89.255.200.0/21 maxlen: 24
89.255.200.0/24 maxlen: 24
89.255.202.0/24 maxlen: 24
89.255.201.0/24 maxlen: 24
89.255.206.0/24 maxlen: 24
195.43.158.0/24 maxlen: 24
89.255.207.0/24 maxlen: 24
195.137.242.0/24 maxlen: 24
178.237.32.0/20 maxlen: 24
193.202.88.0/23 maxlen: 24
185.234.96.0/22 maxlen: 24
185.242.220.0/22 maxlen: 22
185.27.16.0/22 maxlen: 24
185.27.19.0/24 maxlen: 24
193.202.74.0/23 maxlen: 24
31.22.84.0/24 maxlen: 24
31.22.80.0/21 maxlen: 24
45.148.184.0/22 maxlen: 24
85.222.237.0/24 maxlen: 24
85.222.236.0/24 maxlen: 24
85.222.239.0/24 maxlen: 24
85.222.238.0/24 maxlen: 24
2a00:1188:11::/48 maxlen: 64
2a00:1188:c::/48 maxlen: 64
2a00:1188:a::/48 maxlen: 64
2a00:1188:5::/48 maxlen: 64
2a00:1188::/32 maxlen: 64
2a00:1188:14::/48 maxlen: 64
2a00:1188:12::/48 maxlen: 64
2a00:1188:d::/48 maxlen: 64
2a00:1188:8::/48 maxlen: 64
2a00:1188:b::/48 maxlen: 64
2a00:1188::/29 maxlen: 64
2a00:1188:e::/48 maxlen: 64
2a00:1188:9::/48 maxlen: 64
2a00:1188:7::/48 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2e:55:25:08:02:12:14:57:c8:e4:21:f6:d1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Jan 2 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bde38bb6ab76b76f643ae38c7f5c01894727aee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:33:00:0b:e7:24:4d:c8:02:2d:57:f1:95:
b6:2c:c7:be:d6:51:eb:7f:0d:72:34:dd:70:2c:60:
a7:86:c6:43:13:9d:94:1e:5e:c8:97:c3:d7:bc:f7:
d1:26:84:2a:a8:3f:c1:6f:b3:af:b9:63:70:cd:63:
f2:d2:c8:ea:c9:f4:d1:72:b9:5d:c8:09:f5:29:11:
45:7e:6a:31:13:57:34:2f:9b:5f:8c:52:3a:22:ac:
b0:3d:19:69:6d:0c:58:ed:eb:50:3c:71:62:ff:72:
d5:24:ea:c1:8c:b7:6f:85:93:0f:e4:86:fb:e7:59:
5d:2e:fd:63:4d:10:a2:bc:51:79:d7:17:cc:b0:85:
73:74:ad:d5:94:38:51:f1:e7:3c:30:b6:1f:83:2d:
1d:0a:fd:cb:4d:9a:de:01:60:72:90:06:74:c2:e0:
a8:00:e9:4d:36:c2:29:47:9c:e6:06:36:f9:2e:53:
4b:f1:2e:f8:19:7b:81:05:d3:5f:f2:2f:a5:6d:7b:
a0:6e:36:de:f2:75:c6:ca:4d:00:77:c3:48:5a:37:
61:03:db:05:90:61:0f:be:44:f2:e1:6b:a2:b7:1b:
c4:c4:5b:ec:4c:73:5a:78:6a:4a:c5:47:4c:84:dc:
0e:3c:17:19:6c:3a:1c:52:60:ba:07:2a:9b:22:af:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E3:8B:B6:AB:76:B7:6F:64:3A:E3:8C:7F:5C:01:89:47:27:AE:E8
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/veOLtqt2t29kOuOMf1wBiUcnrug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.80.0/21
45.148.184.0/22
85.222.236.0/22
89.255.200.0/21
95.142.96.0/20
178.237.32.0/20
185.27.16.0/22
185.223.86.0/23
185.234.96.0/22
185.242.220.0/22
193.202.74.0/23
193.202.88.0/23
195.43.158.0/24
195.137.242.0/24
IPv6:
2a00:1188::/29
Signature Algorithm: sha256WithRSAEncryption
26:9e:ce:f4:fd:8c:66:03:83:58:92:22:da:ef:93:1b:4a:cb:
5c:67:b9:c2:ca:90:e1:5b:b7:9e:42:d7:b4:64:35:b5:95:d7:
21:1b:db:23:a9:ed:5f:c7:a5:63:eb:ee:18:ff:e0:84:6a:27:
92:ae:32:20:40:f0:b7:13:db:97:46:16:97:00:99:17:7d:0a:
c3:1e:94:d2:ea:55:c7:df:63:eb:93:b3:67:79:98:be:ee:db:
b8:1e:67:f3:93:03:2c:41:cc:ec:56:ca:b7:9f:89:a2:28:b5:
1b:e0:41:0f:fc:38:52:c8:8e:56:12:bb:57:99:90:18:ba:84:
04:4c:04:ce:73:2b:24:43:21:c4:ed:61:93:fe:1c:68:11:f7:
f6:6f:f8:3e:c2:33:8a:9e:03:85:f3:4f:13:f8:de:dd:aa:0f:
58:8f:1b:9e:8d:86:f6:1a:e1:7b:a3:ea:49:e3:6b:53:74:97:
c9:9a:70:37:dd:a0:1f:ba:76:01:00:1c:62:20:3b:f8:4f:6c:
48:93:d0:bb:9f:d3:2f:ab:d7:63:9a:cc:0c:cc:7e:58:98:03:
de:34:5d:b6:5f:47:34:d1:1a:5d:9b:98:13:21:f9:c0:51:c0:
54:57:53:51:52:6c:08:c3:9a:ad:a3:77:ab:8a:a4:b3:03:46:
3c:36:21:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-fra.rpki-client.org