Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/d5DM-D2sAXEb_oBsVghSyv7pbRA.roa
File: d5DM-D2sAXEb_oBsVghSyv7pbRA.roa (raw, json)
Hash identifier: M6ejyLwHmNCoH7b+85n+GJ42JRXp4TwqI2Ro0wPLIr0=
Subject key identifier: 77:90:CC:F8:3D:AC:01:71:1B:FE:80:6C:56:08:52:CA:FE:E9:6D:10
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 060EDB0F
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/d5DM-D2sAXEb_oBsVghSyv7pbRA.roa
Signing time: Fri 11 Mar 2022 20:37:39 +0000
ROA not before: Fri 11 Mar 2022 20:37:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.43.48.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
185.142.164.0/22 maxlen: 24
94.176.96.0/24 maxlen: 24
93.113.175.0/24 maxlen: 24
185.61.156.0/22 maxlen: 24
89.21.64.0/22 maxlen: 24
188.241.223.0/24 maxlen: 24
89.40.66.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
89.41.188.0/24 maxlen: 24
46.102.116.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
37.156.226.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
87.121.136.0/21 maxlen: 24
93.113.31.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
31.177.0.0/21 maxlen: 24
89.35.135.0/24 maxlen: 24
185.137.36.0/22 maxlen: 24
176.111.240.0/22 maxlen: 24
62.245.0.0/19 maxlen: 24
86.106.135.0/24 maxlen: 24
86.104.226.0/24 maxlen: 24
85.204.70.0/24 maxlen: 24
86.104.228.0/24 maxlen: 24
89.44.77.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
85.204.72.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101636879 (0x60edb0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Mar 11 20:37:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7790ccf83dac01711bfe806c560852cafee96d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:b3:00:09:60:3e:30:db:21:dd:a3:fb:c5:
9c:c1:20:bb:cc:fd:c0:1a:62:5b:be:33:38:77:12:
48:a7:36:d4:62:32:8b:ab:22:22:75:6a:77:25:0d:
f3:34:5c:11:dd:37:45:7e:71:3c:52:58:3f:bc:6b:
d0:16:6c:bc:28:d6:0b:57:bf:75:7a:72:26:ad:14:
1a:37:60:8a:b4:24:27:ea:7b:64:4a:ce:9f:37:b6:
57:e7:23:b4:28:1d:cf:77:2f:6a:70:7f:ac:35:3d:
f8:95:99:d8:e0:ea:24:35:7b:c2:87:77:5f:43:ae:
0f:49:3f:9f:cc:9f:f5:7c:a8:4d:a0:35:5a:a2:73:
3e:77:17:0c:6e:b5:73:c6:d2:ab:f9:00:b0:94:c6:
29:dc:e9:dc:f9:35:5f:b8:51:53:ad:8b:5e:0a:b0:
4c:26:52:7b:31:a0:54:2b:e2:62:a5:6e:c4:af:68:
ec:a6:f6:6b:2d:2b:52:16:08:fc:6f:20:65:dc:61:
ec:51:6c:ea:a0:a8:d7:ec:ef:d1:2e:9f:2b:5b:9c:
2f:2b:72:2c:4a:23:fd:4a:e7:96:f3:52:1a:0c:70:
2a:55:8e:b8:60:17:0f:f0:11:b8:52:c8:1f:e8:21:
21:7e:cb:ac:9c:ef:66:61:e0:c6:43:75:a2:9d:bd:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:90:CC:F8:3D:AC:01:71:1B:FE:80:6C:56:08:52:CA:FE:E9:6D:10
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/d5DM-D2sAXEb_oBsVghSyv7pbRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.0.0/21
37.156.226.0/24
46.102.116.0/24
62.245.0.0/19
85.204.70.0/24
85.204.72.0/24
86.104.226.0/24
86.104.228.0/24
86.106.89.0/24
86.106.135.0/24
86.107.241.0/24
87.121.136.0/21
89.21.64.0/22
89.32.127.0/24
89.35.25.0/24
89.35.135.0/24
89.40.66.0/24
89.41.188.0/24
89.43.48.0/24
89.44.77.0/24
93.113.31.0/24
93.113.175.0/24
93.114.129.0/24
94.176.96.0/24
176.111.240.0/22
185.61.156.0/22
185.137.36.0/22
185.142.164.0/22
188.241.223.0/24
188.241.246.0/24
Signature Algorithm: sha256WithRSAEncryption
21:95:b6:fc:06:89:de:d1:12:b3:68:f6:02:0f:2e:b3:4d:fd:
ec:ca:fd:da:d9:08:9d:af:c0:4b:e8:a8:80:26:18:98:94:81:
98:91:47:2d:cb:d8:cb:40:f1:b2:e0:e8:94:a5:ec:2c:6a:c0:
1c:c0:17:7d:8a:13:4e:7f:3a:d0:40:94:40:a2:88:3b:ac:39:
a8:a2:f0:f9:33:8e:35:ef:cb:69:26:dd:29:f1:b0:d9:4c:f9:
a6:c6:d0:ce:6c:84:e5:f1:d0:33:a7:21:50:18:13:38:96:1f:
9b:47:a7:4c:b1:2c:e2:7f:75:c3:89:69:0c:fb:f2:c9:54:79:
54:9b:a9:dd:ce:6d:e6:7b:0e:cc:77:25:ec:85:1a:2d:c1:64:
23:03:41:28:26:e2:c5:29:9d:c8:0a:06:c5:bc:82:6d:0c:c9:
f1:7c:34:3a:35:4d:6a:00:b1:f4:25:db:23:bd:d1:7d:5b:cf:
9d:87:47:8b:9e:f4:9c:f3:95:aa:f5:ac:14:9f:be:51:2b:8a:
a0:27:bf:30:84:47:5f:a9:02:35:27:ae:0c:bb:2a:83:e6:3b:
34:42:16:e1:a4:20:0b:08:00:6e:44:89:e2:fd:e9:8b:06:31:
2d:8f:de:22:f3:1b:c3:55:ae:6f:61:7a:b0:22:95:52:c6:4b:
60:af:18:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org