Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/ePC8qIXEvbWoP0dUDXS7DJtCQSc.roa
File: ePC8qIXEvbWoP0dUDXS7DJtCQSc.roa (raw, json)
Hash identifier: 4PfVM1t9ZD/CaU6WsVJyGGGp+zbZw5Zb3qCt1OZBqBg=
Subject key identifier: 78:F0:BC:A8:85:C4:BD:B5:A8:3F:47:54:0D:74:BB:0C:9B:42:41:27
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 0550DB47
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/ePC8qIXEvbWoP0dUDXS7DJtCQSc.roa
Signing time: Sat 01 Jan 2022 06:53:49 +0000
ROA not before: Sat 01 Jan 2022 06:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.43.48.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
84.247.0.0/24 maxlen: 24
185.142.164.0/22 maxlen: 24
37.156.40.0/21 maxlen: 24
94.176.96.0/24 maxlen: 24
93.113.175.0/24 maxlen: 24
185.144.24.0/22 maxlen: 24
185.61.156.0/22 maxlen: 24
89.21.64.0/22 maxlen: 24
188.241.223.0/24 maxlen: 24
93.114.83.0/24 maxlen: 24
185.178.88.0/22 maxlen: 24
89.40.66.0/24 maxlen: 24
176.121.52.0/22 maxlen: 24
93.114.129.0/24 maxlen: 24
89.20.49.0/24 maxlen: 24
128.127.148.0/22 maxlen: 24
89.41.188.0/24 maxlen: 24
89.40.37.0/24 maxlen: 24
46.102.116.0/24 maxlen: 24
185.255.180.0/22 maxlen: 24
89.35.25.0/24 maxlen: 24
94.177.17.0/24 maxlen: 24
37.156.226.0/24 maxlen: 24
185.143.100.0/22 maxlen: 24
86.106.89.0/24 maxlen: 24
87.121.136.0/21 maxlen: 24
93.113.31.0/24 maxlen: 24
185.180.152.0/22 maxlen: 24
86.107.241.0/24 maxlen: 24
31.177.0.0/21 maxlen: 24
89.35.135.0/24 maxlen: 24
185.137.36.0/22 maxlen: 24
176.111.240.0/22 maxlen: 24
62.245.0.0/19 maxlen: 24
86.106.135.0/24 maxlen: 24
185.145.72.0/22 maxlen: 24
86.104.226.0/24 maxlen: 24
85.204.70.0/24 maxlen: 24
86.104.228.0/24 maxlen: 24
89.44.77.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
85.204.72.0/24 maxlen: 24
185.179.12.0/22 maxlen: 24
87.121.208.0/21 maxlen: 24
185.3.236.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89185095 (0x550db47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Jan 1 06:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78f0bca885c4bdb5a83f47540d74bb0c9b424127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:e6:d2:d5:2f:54:35:2d:d3:87:07:b0:01:
a7:1b:d1:7c:a0:9b:53:07:35:43:d0:fc:19:41:93:
f6:6d:94:84:08:1a:55:86:b5:9a:ce:df:19:bd:23:
c4:34:0e:c1:07:ac:e5:1b:ae:30:36:1d:3f:08:ce:
38:9e:76:fe:71:fb:49:4e:d6:2f:5a:a0:f4:9b:b9:
4e:b4:7b:c8:c3:a0:9c:0d:80:7b:88:23:fd:af:99:
3d:cb:67:70:87:c4:96:19:f6:5b:d5:c4:27:5b:d2:
3d:04:ab:8d:87:16:e9:0d:53:ff:4c:93:84:75:10:
38:df:75:8b:5c:a7:aa:ff:ce:58:22:46:65:e7:ce:
ba:17:ee:3a:ba:6e:b3:ad:b9:c2:71:7d:c4:e5:92:
4e:ae:71:96:84:df:ba:cc:c5:cd:3f:96:6a:ca:5e:
c9:fd:4a:b9:26:66:54:c7:dc:ff:19:e6:07:96:c6:
e1:0c:51:10:7e:a9:0b:ae:79:8a:a1:64:0a:b3:57:
2c:6f:db:ec:08:fe:6d:d0:3d:2d:04:88:03:e3:95:
37:61:f5:c2:00:90:5b:48:50:4f:0f:bb:b2:4c:ca:
22:3c:3e:ac:5a:e5:c5:6d:b7:69:98:bd:4e:83:4e:
ae:4d:1f:dc:e4:82:38:99:36:76:44:a2:83:62:5c:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F0:BC:A8:85:C4:BD:B5:A8:3F:47:54:0D:74:BB:0C:9B:42:41:27
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/ePC8qIXEvbWoP0dUDXS7DJtCQSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.0.0/21
37.156.40.0/21
37.156.226.0/24
46.102.116.0/24
62.245.0.0/19
84.247.0.0/24
85.204.70.0/24
85.204.72.0/24
86.104.226.0/24
86.104.228.0/24
86.106.89.0/24
86.106.135.0/24
86.107.241.0/24
87.121.136.0/21
87.121.208.0/21
89.20.49.0/24
89.21.64.0/22
89.32.127.0/24
89.35.25.0/24
89.35.135.0/24
89.40.37.0/24
89.40.66.0/24
89.41.188.0/24
89.43.48.0/24
89.44.77.0/24
93.113.31.0/24
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
94.176.96.0/24
94.177.17.0/24
128.127.148.0/22
176.111.240.0/22
176.121.52.0/22
185.3.236.0/22
185.61.156.0/22
185.137.36.0/22
185.142.164.0/22
185.143.100.0/22
185.144.24.0/22
185.145.72.0/22
185.178.88.0/22
185.179.12.0/22
185.180.152.0/22
185.255.180.0/22
188.241.223.0/24
188.241.246.0/24
Signature Algorithm: sha256WithRSAEncryption
91:15:4b:7a:95:6b:b9:bf:2a:19:6d:c1:b6:5d:b6:21:91:c4:
3a:60:a5:40:f3:34:e4:ab:70:45:a9:1a:d7:2c:56:27:d6:eb:
33:1c:e6:7b:7a:f7:da:c7:f1:fe:5b:42:fc:63:23:4c:1c:80:
0e:f8:0c:28:0e:17:0e:f2:aa:f1:7d:ba:c4:8f:db:63:e6:72:
c3:4d:63:ed:f2:a8:eb:e3:fc:ef:63:4f:70:3a:e0:43:67:1e:
f8:79:df:85:d7:4a:8a:d7:af:3a:fa:67:e7:06:13:53:12:4b:
48:c5:13:a4:25:0a:04:9c:19:29:71:ba:4f:ae:81:62:1a:a9:
3e:24:d0:f8:dc:9f:da:09:8e:8d:63:62:6d:cd:ce:55:51:32:
3f:c7:ce:23:de:d3:64:92:7c:b0:23:7f:79:30:fa:df:8d:69:
53:d6:54:20:6f:94:53:6c:07:56:24:67:25:47:5c:6a:da:5b:
d7:cc:90:e3:28:73:b9:01:24:52:1a:b5:f2:99:b9:71:1a:bd:
01:a7:d2:24:5c:ef:a5:bb:3b:c0:75:80:53:44:88:88:1c:ac:
d3:6c:6a:a0:77:68:48:0c:a5:a5:a2:26:d2:ed:0b:b0:7c:cb:
54:be:3f:84:06:96:99:8f:22:67:fc:eb:04:66:2c:b8:06:7d:
35:91:72:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org