Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/fx8K4pR1ZxrfFTpHjypP304DkBo.roa
File: fx8K4pR1ZxrfFTpHjypP304DkBo.roa (raw, json)
Hash identifier: cssJUEth4awYYoKTm99d4hEAQIJCDjGXJJCEkP+Ju+w=
Subject key identifier: 7F:1F:0A:E2:94:75:67:1A:DF:15:3A:47:8F:2A:4F:DF:4E:03:90:1A
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 2FB3F672
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/fx8K4pR1ZxrfFTpHjypP304DkBo.roa
Signing time: Sat 01 Jan 2022 10:04:46 +0000
ROA not before: Sat 01 Jan 2022 10:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 194.120.0.252/32 maxlen: 32
193.141.0.0/23 maxlen: 23
193.141.2.0/24 maxlen: 24
194.120.112.0/22 maxlen: 22
194.120.120.0/22 maxlen: 22
193.242.80.0/20 maxlen: 20
194.121.52.0/22 maxlen: 22
192.16.202.0/24 maxlen: 24
193.141.44.0/23 maxlen: 23
193.141.40.0/22 maxlen: 22
134.222.0.0/16 maxlen: 16
194.45.182.0/23 maxlen: 23
194.122.248.0/22 maxlen: 22
194.123.164.0/24 maxlen: 24
194.120.0.0/24 maxlen: 24
194.123.122.0/24 maxlen: 24
194.120.43.0/24 maxlen: 24
194.122.80.0/21 maxlen: 21
62.132.114.0/23 maxlen: 23
62.132.116.0/23 maxlen: 23
62.132.132.0/23 maxlen: 23
192.129.32.0/23 maxlen: 24
192.129.36.0/24 maxlen: 24
192.129.43.0/24 maxlen: 24
192.129.44.0/24 maxlen: 24
192.129.46.0/23 maxlen: 23
192.129.48.0/23 maxlen: 23
194.45.4.0/23 maxlen: 23
192.129.56.0/23 maxlen: 23
192.129.54.0/24 maxlen: 24
194.122.120.0/21 maxlen: 21
62.41.160.0/24 maxlen: 24
62.41.84.0/23 maxlen: 23
62.41.80.0/22 maxlen: 22
62.41.102.0/24 maxlen: 24
212.1.0.0/19 maxlen: 19
194.122.76.0/22 maxlen: 22
194.45.98.0/23 maxlen: 23
194.122.224.0/20 maxlen: 20
194.45.12.0/23 maxlen: 23
194.45.47.0/24 maxlen: 24
194.151.203.0/24 maxlen: 24
194.121.123.0/24 maxlen: 24
92.71.0.0/17 maxlen: 17
192.67.190.0/23 maxlen: 23
212.189.0.0/17 maxlen: 17
192.67.192.0/22 maxlen: 22
192.67.196.0/24 maxlen: 24
193.141.140.0/23 maxlen: 23
194.121.104.0/23 maxlen: 23
62.41.16.0/21 maxlen: 21
62.132.0.0/22 maxlen: 22
62.41.24.0/22 maxlen: 22
62.132.16.0/22 maxlen: 22
62.41.32.0/24 maxlen: 24
62.132.24.0/23 maxlen: 23
62.41.37.0/24 maxlen: 24
62.132.28.0/24 maxlen: 24
92.71.128.0/18 maxlen: 18
62.41.56.0/21 maxlen: 21
62.132.42.0/23 maxlen: 23
194.41.62.0/24 maxlen: 24
62.41.64.0/20 maxlen: 20
192.54.104.0/24 maxlen: 24
194.121.203.0/24 maxlen: 24
62.41.0.0/20 maxlen: 20
194.121.220.0/22 maxlen: 22
2a00:1750::/32 maxlen: 32
2001:680:12::/48 maxlen: 48
2001:680:19::/48 maxlen: 48
2001:680::/32 maxlen: 32
2001:680:20::/48 maxlen: 48
2001:680:16::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800323186 (0x2fb3f672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 1 10:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f1f0ae29475671adf153a478f2a4fdf4e03901a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:06:15:8f:b6:10:95:31:51:7e:1d:70:3f:
a8:6d:4e:c7:90:0c:b7:b3:e4:ee:4a:77:ee:54:9e:
d7:47:47:f1:9c:b7:cd:de:a0:be:01:29:29:c2:8c:
61:4b:b8:05:12:27:8a:ea:d6:54:d8:2c:ea:6e:1c:
52:76:fa:3f:95:1f:6f:df:01:98:85:66:8a:82:e0:
a0:76:12:41:eb:66:48:92:f4:29:5b:1c:4b:19:f2:
f4:e9:c6:bb:64:7d:8b:46:b5:6c:37:8b:5a:ca:f2:
a1:db:05:4b:41:68:22:02:02:a4:97:33:2c:40:04:
76:6f:ee:b8:97:43:0c:4a:c2:c2:51:80:8e:77:8a:
26:2c:bc:7c:90:b7:ea:e3:14:a5:94:53:0b:f0:67:
10:8c:82:69:be:86:f8:07:a3:03:24:5d:9c:33:49:
25:5b:f6:a0:f2:1f:e0:68:65:b4:f8:03:e7:70:7a:
12:d7:53:d9:1a:de:5c:6c:41:70:00:e9:b9:1a:49:
26:ae:ba:ec:ba:a6:10:cc:85:30:8f:e9:98:34:5d:
2a:00:21:5f:bf:cd:28:19:84:e2:d1:19:59:4b:3d:
ef:44:bf:d8:28:49:e4:cd:46:28:82:99:ae:09:fb:
0e:13:2d:fc:ee:98:d1:da:38:ba:da:7d:8a:c4:8e:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1F:0A:E2:94:75:67:1A:DF:15:3A:47:8F:2A:4F:DF:4E:03:90:1A
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/fx8K4pR1ZxrfFTpHjypP304DkBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.0.0-62.41.27.255
62.41.32.0/24
62.41.37.0/24
62.41.56.0-62.41.85.255
62.41.102.0/24
62.41.160.0/24
62.132.0.0/22
62.132.16.0/22
62.132.24.0/23
62.132.28.0/24
62.132.42.0/23
62.132.114.0-62.132.117.255
62.132.132.0/23
92.71.0.0-92.71.191.255
134.222.0.0/16
192.16.202.0/24
192.54.104.0/24
192.67.190.0-192.67.196.255
192.129.32.0/23
192.129.36.0/24
192.129.43.0-192.129.44.255
192.129.46.0-192.129.49.255
192.129.54.0/24
192.129.56.0/23
193.141.0.0-193.141.2.255
193.141.40.0-193.141.45.255
193.141.140.0/23
193.242.80.0/20
194.41.62.0/24
194.45.4.0/23
194.45.12.0/23
194.45.47.0/24
194.45.98.0/23
194.45.182.0/23
194.120.0.0/24
194.120.43.0/24
194.120.112.0/22
194.120.120.0/22
194.121.52.0/22
194.121.104.0/23
194.121.123.0/24
194.121.203.0/24
194.121.220.0/22
194.122.76.0-194.122.87.255
194.122.120.0/21
194.122.224.0/20
194.122.248.0/22
194.123.122.0/24
194.123.164.0/24
194.151.203.0/24
212.1.0.0/19
212.189.0.0/17
IPv6:
2001:680::/32
2a00:1750::/32
Signature Algorithm: sha256WithRSAEncryption
01:b7:d3:54:79:a4:80:81:bb:64:83:15:16:04:4e:99:61:e9:
3d:56:aa:f2:bb:8c:91:fd:e2:11:02:af:fb:06:1a:9d:33:70:
68:0a:1a:e1:4d:21:ee:4f:92:23:88:e3:5a:5a:01:06:f3:88:
1f:ee:5f:3e:7c:a7:da:53:ad:ba:fe:8f:1d:17:9d:bb:a3:0f:
4b:cc:13:3e:8f:8d:91:9d:c2:df:a2:12:62:ea:ca:2d:2e:c3:
1a:3d:97:e8:5c:7c:9d:bc:70:e3:28:53:48:c8:b7:db:1d:3d:
07:d6:bf:59:2c:e2:a4:0d:02:63:d9:bf:e9:c3:00:8f:e5:98:
ee:b5:94:56:e9:5f:36:17:e2:50:78:96:b1:b6:be:4f:ae:8a:
e0:79:63:69:5c:e7:d9:14:3a:56:78:d8:db:a7:f0:e3:21:2d:
47:da:ef:be:f9:99:52:b9:d2:a7:da:3f:42:6c:9d:41:cf:05:
c4:98:55:02:e5:eb:9c:e1:b0:9c:68:26:13:0c:c2:12:32:68:
a7:ef:5b:e4:ff:39:6e:ce:df:b6:22:54:02:74:ca:64:0f:62:
03:c5:9b:18:70:95:02:6e:21:f6:e7:10:0f:59:e3:e5:cb:4a:
00:d0:d5:22:28:27:8a:a7:40:db:42:ca:25:bb:ad:67:38:2e:
66:bb:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:02 2024 by rpki-client on console-fra.rpki-client.org