Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/SGZyau-9A9lPhaVrk0slBd0E0rM.roa
File: SGZyau-9A9lPhaVrk0slBd0E0rM.roa (raw, json)
Hash identifier: Lvg1vsfRyjjQovRI4cQrB7ZRPJDZA0NcypviMBdIlYU=
Subject key identifier: 48:66:72:6A:EF:BD:03:D9:4F:85:A5:6B:93:4B:25:05:DD:04:D2:B3
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 068AD0FF
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/SGZyau-9A9lPhaVrk0slBd0E0rM.roa
Signing time: Mon 25 Apr 2022 20:41:35 +0000
ROA not before: Mon 25 Apr 2022 20:41:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 37.156.226.0/24 maxlen: 24
93.113.31.0/24 maxlen: 24
87.121.136.0/21 maxlen: 24
188.241.246.0/24 maxlen: 24
94.176.96.0/24 maxlen: 24
93.113.175.0/24 maxlen: 24
185.61.156.0/22 maxlen: 24
31.177.0.0/21 maxlen: 24
188.241.223.0/24 maxlen: 24
185.137.36.0/22 maxlen: 24
62.245.0.0/19 maxlen: 24
93.114.129.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.104.228.0/24 maxlen: 24
89.44.77.0/24 maxlen: 24
46.102.116.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109760767 (0x68ad0ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Apr 25 20:41:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4866726aefbd03d94f85a56b934b2505dd04d2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:35:15:ae:9d:0e:4b:7f:ba:d4:2c:2e:d0:
a5:cd:3c:aa:da:1d:9c:68:da:b4:bc:4d:6d:dd:5e:
42:fd:ae:2e:f3:a7:41:44:89:4b:23:f4:53:98:a3:
e3:b9:d9:cf:dc:b3:30:f8:3f:e5:74:8c:43:48:b0:
f8:ca:c4:ca:1b:45:2d:db:61:84:67:23:b9:19:23:
62:61:70:16:9e:ff:ee:4d:37:71:8f:bc:a4:f3:f4:
b4:ea:64:98:e8:b7:f1:24:41:4e:b2:03:57:65:58:
a5:6a:6e:49:b5:28:29:e9:68:7e:27:75:80:9f:e4:
ed:77:99:51:c3:5c:f9:cb:c9:db:08:9b:c6:e2:49:
42:b2:35:a5:88:30:00:9f:34:17:73:98:d6:04:8e:
83:d5:eb:f7:24:ec:a0:4f:c5:e6:a6:a6:f6:0c:fd:
d6:77:0f:c2:a5:72:cd:fe:c0:ef:72:6b:be:3f:1b:
33:be:02:64:7e:bd:b5:39:ab:49:10:3c:c4:b2:8c:
b0:de:0c:54:8a:97:1a:03:fd:66:08:91:1b:87:2f:
da:f6:59:b9:97:3b:5c:9f:2f:82:79:78:f4:f1:15:
b0:27:34:dc:08:a8:89:16:1b:95:49:78:c6:e9:cb:
ce:80:93:0e:7a:81:d3:b9:1f:ff:33:60:d0:f4:00:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:66:72:6A:EF:BD:03:D9:4F:85:A5:6B:93:4B:25:05:DD:04:D2:B3
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/SGZyau-9A9lPhaVrk0slBd0E0rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.0.0/21
37.156.226.0/24
46.102.116.0/24
62.245.0.0/19
86.104.228.0/24
86.106.135.0/24
87.121.136.0/21
89.35.25.0/24
89.44.77.0/24
93.113.31.0/24
93.113.175.0/24
93.114.129.0/24
94.176.96.0/24
185.61.156.0/22
185.137.36.0/22
188.241.223.0/24
188.241.246.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:22:21:38:16:ef:6a:f6:47:f7:5c:a3:81:20:11:e4:26:fc:
0f:71:88:a0:80:92:45:c6:8f:f1:ad:67:b0:20:51:0b:3f:c2:
b1:10:b4:02:0d:40:d1:fa:6b:7c:f1:60:a2:f4:13:a7:74:fa:
ee:0c:d8:fc:f8:6d:1d:1c:21:59:5f:57:77:b3:6c:b8:fa:7a:
bf:e7:cd:ac:30:83:6b:77:49:46:f6:b0:c8:e4:1a:67:d1:08:
b9:c8:78:5f:97:09:7d:69:da:4e:8c:ef:67:39:26:93:0d:21:
16:92:d7:54:21:8f:55:95:2c:f9:e1:31:90:cb:3f:25:b6:af:
df:80:91:6d:8a:a1:4e:8f:94:7c:aa:f5:a8:f2:82:ae:30:cb:
93:71:ac:b3:15:29:38:f8:36:f7:4a:91:15:cc:72:7b:72:9b:
b7:d5:b2:cd:bc:cb:03:1d:0e:44:a4:3a:24:21:e3:b1:59:c8:
36:fc:9a:7f:1a:c1:ec:75:8d:7a:4e:4d:b3:73:02:40:29:36:
9e:17:89:83:d5:76:61:45:0f:a9:06:f5:82:88:6a:57:0a:1f:
77:e1:e2:7a:c5:a7:74:70:e1:8b:43:1a:72:d8:75:60:36:46:
09:6b:51:1b:68:a3:38:58:1b:50:04:b1:24:57:7f:99:cc:c7:
f9:7a:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org