Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/lAQCmF20vXEYVGEF8jcYv0Jsueg.roa
File: lAQCmF20vXEYVGEF8jcYv0Jsueg.roa (raw, json)
Hash identifier: sD/wa6v2hJoC72Vepvq+iCytSt+7EkElYTd8vvdqYmA=
Subject key identifier: 94:04:02:98:5D:B4:BD:71:18:54:61:05:F2:37:18:BF:42:6C:B9:E8
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 0189AF58ED1E619A480C9AEC4955001D3788
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/lAQCmF20vXEYVGEF8jcYv0Jsueg.roa
Signing time: Tue 01 Aug 2023 04:26:27 +0000
ROA not before: Tue 01 Aug 2023 04:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203872
IP address blocks: 128.0.60.0/22 maxlen: 24
188.215.12.0/22 maxlen: 24
162.250.216.0/22 maxlen: 24
95.215.144.0/22 maxlen: 24
79.110.184.0/22 maxlen: 24
217.144.108.0/22 maxlen: 24
173.214.200.0/22 maxlen: 24
141.193.108.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:af:58:ed:1e:61:9a:48:0c:9a:ec:49:55:00:1d:37:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Aug 1 04:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=940402985db4bd7118546105f23718bf426cb9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:78:0e:eb:b0:a4:6e:9c:7a:43:fc:72:c2:c0:
ab:1a:d6:a2:a6:b1:f3:27:c8:11:94:ae:25:82:90:
28:2d:05:e2:df:f9:b1:0e:81:4a:23:e5:a7:fe:38:
9e:9d:d3:fc:c6:87:5c:1e:b2:84:38:1a:6e:9d:bf:
ba:45:8e:03:3e:9f:fe:fc:57:4b:21:5f:7b:bd:7f:
fe:43:19:6e:c8:b0:9b:4b:ac:f6:ce:93:e6:95:3b:
dc:5a:b7:46:2f:b4:69:5d:fa:4f:02:8c:df:7a:9a:
45:ff:51:8d:44:53:83:e0:57:1d:7d:97:e0:1d:e9:
ed:a8:d3:8d:ac:94:da:c9:c1:8e:73:9e:a1:dd:dd:
ec:81:d5:e2:7d:65:cc:ce:23:1b:85:16:4c:10:8f:
15:11:a2:43:e9:9c:b3:b5:c3:d7:18:8c:c8:4b:c1:
88:a9:cd:89:21:63:e0:ed:ad:da:d9:87:b8:51:71:
90:db:90:8a:be:0f:fb:73:3d:03:59:98:88:d0:62:
73:5f:11:92:97:a2:c2:12:46:fc:80:95:a3:64:69:
b4:78:7b:f1:8e:c3:3b:f2:c0:59:59:18:e6:41:67:
49:47:8f:05:23:33:a0:da:1c:2e:c2:d9:68:01:4b:
44:e6:17:32:92:21:1f:41:19:1e:ec:66:51:f0:f8:
3e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:04:02:98:5D:B4:BD:71:18:54:61:05:F2:37:18:BF:42:6C:B9:E8
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/lAQCmF20vXEYVGEF8jcYv0Jsueg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.184.0/22
95.215.144.0/22
128.0.60.0/22
141.193.108.0/22
162.250.216.0/22
173.214.200.0/22
188.215.12.0/22
217.144.108.0/22
Signature Algorithm: sha256WithRSAEncryption
76:a3:fd:47:05:73:e1:e0:bb:65:2b:43:fb:a6:22:d0:ae:0f:
8b:a4:d0:7f:ed:8e:96:89:22:84:6f:db:7e:41:7d:76:45:80:
0f:7c:87:0f:03:71:0b:33:bf:1b:b8:84:3a:83:74:9a:df:68:
ad:99:71:63:f4:f0:e6:9e:b2:5f:37:3b:82:f8:f9:40:5b:1a:
1c:1a:41:3a:ab:55:24:8f:2b:73:41:0f:e7:1f:57:45:9f:fc:
cd:28:b6:f5:e2:0f:35:07:4e:92:b4:66:5b:d1:e3:64:4f:03:
ef:3f:3a:49:a5:6e:ab:aa:ae:c7:ef:2c:9e:e2:88:7f:4f:8a:
5d:d6:15:85:3b:76:a1:ce:d7:a6:5e:5e:0e:f2:b3:40:28:c6:
62:c2:4f:3d:ac:07:1d:ac:7c:89:24:20:b4:d0:62:0b:ef:5c:
4b:3c:13:e9:fa:0b:09:f0:41:8b:f5:94:9a:7a:0e:a2:8c:96:
d8:ca:87:3e:26:50:18:5f:b7:97:e8:9a:eb:99:09:49:56:74:
5d:94:e4:26:87:e4:be:73:7c:2b:bb:44:e0:fd:28:b9:97:2d:
27:aa:d8:0e:11:90:61:f7:33:7d:04:5d:c0:a0:c4:ec:e0:5b:
48:09:9d:32:90:ab:aa:0b:af:a1:57:d2:80:61:a5:31:7a:69:
c6:bc:6d:f2
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 3 09:53:03 2023 by rpki-client on console-fra.rpki-client.org