Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/tfgoPyfgi6Vl01kdSqNxKNpeaI4.roa
File: tfgoPyfgi6Vl01kdSqNxKNpeaI4.roa (raw, json)
Hash identifier: /igSkugvClNkLEy14KPUXiHww5XkyyOpot46zg5Ju0A=
Subject key identifier: B5:F8:28:3F:27:E0:8B:A5:65:D3:59:1D:4A:A3:71:28:DA:5E:68:8E
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 067B5189
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/tfgoPyfgi6Vl01kdSqNxKNpeaI4.roa
Signing time: Tue 19 Apr 2022 19:38:59 +0000
ROA not before: Tue 19 Apr 2022 19:38:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.43.48.0/24 maxlen: 24
37.156.226.0/24 maxlen: 24
93.113.31.0/24 maxlen: 24
87.121.136.0/21 maxlen: 24
188.241.246.0/24 maxlen: 24
94.176.96.0/24 maxlen: 24
93.113.175.0/24 maxlen: 24
185.61.156.0/22 maxlen: 24
31.177.0.0/21 maxlen: 24
188.241.223.0/24 maxlen: 24
185.137.36.0/22 maxlen: 24
62.245.0.0/19 maxlen: 24
93.114.129.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.104.228.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.44.77.0/24 maxlen: 24
46.102.116.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108745097 (0x67b5189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Apr 19 19:38:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5f8283f27e08ba565d3591d4aa37128da5e688e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:5a:fd:c0:d9:6b:50:30:20:fb:2c:9a:36:
e2:7e:1a:a1:03:61:58:5d:85:25:86:a5:62:6b:a9:
b9:5c:cf:62:e4:fd:88:30:bd:cb:ca:5a:3f:60:4c:
29:ec:ad:f6:69:60:f7:87:57:c5:43:87:a7:52:0c:
35:81:52:06:87:f5:f3:a1:ea:61:22:9f:60:cb:0d:
58:08:65:31:9b:f2:b7:b4:2c:b6:67:8b:ce:64:22:
2e:a7:9f:28:1d:5a:d2:78:93:2d:98:20:2a:d8:b8:
1f:34:13:e0:83:0f:ed:c0:11:5d:63:23:67:9d:e4:
d7:d0:8a:48:41:e2:21:27:02:84:a0:72:1e:38:a6:
8f:93:da:8e:fe:6a:fa:5f:c6:1a:8a:16:30:b0:44:
cd:db:5c:62:78:cb:18:ef:48:d9:c9:72:e3:f1:7b:
22:7f:2f:b1:19:c1:e1:4c:4b:ab:60:97:78:f5:3a:
03:ce:83:ac:ee:5b:b1:ba:95:85:00:0f:77:e7:63:
9f:57:13:08:66:6a:8e:f2:66:25:5e:ec:83:b1:7c:
8c:79:f4:54:7d:34:24:51:ae:4a:89:ed:d2:27:8d:
df:52:88:a4:8a:4d:bb:be:2a:33:32:1f:7d:43:2a:
17:07:9b:89:50:03:89:ec:73:a2:72:ec:90:45:5b:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:28:3F:27:E0:8B:A5:65:D3:59:1D:4A:A3:71:28:DA:5E:68:8E
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/tfgoPyfgi6Vl01kdSqNxKNpeaI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.0.0/21
37.156.226.0/24
46.102.116.0/24
62.245.0.0/19
86.104.228.0/24
86.106.135.0/24
87.121.136.0/21
89.32.127.0/24
89.35.25.0/24
89.43.48.0/24
89.44.77.0/24
93.113.31.0/24
93.113.175.0/24
93.114.129.0/24
94.176.96.0/24
185.61.156.0/22
185.137.36.0/22
188.241.223.0/24
188.241.246.0/24
Signature Algorithm: sha256WithRSAEncryption
10:24:e2:16:bc:38:6b:c1:91:aa:2b:ab:03:40:69:8c:80:96:
ab:37:6c:bb:db:e5:35:4b:6b:03:75:51:81:c5:af:aa:62:55:
39:77:dd:84:5d:dc:95:1f:3e:c7:98:ef:88:53:1c:d6:0d:01:
0b:24:19:5e:58:a2:99:af:ab:18:11:2b:4e:66:6c:b5:5e:ec:
5a:2b:46:a7:4c:24:ad:8c:ea:d0:ad:cb:86:d9:6f:48:9a:8d:
ce:2b:3f:8c:a9:d7:59:10:29:a3:05:1b:d6:2a:cc:79:bf:34:
11:1a:b7:93:f1:5f:52:86:14:ac:2f:6e:4f:d1:16:a4:9b:d1:
4b:c4:2e:84:88:a9:04:47:b2:54:26:f5:5f:a6:62:8c:d7:6e:
d4:fc:e3:23:bf:74:f7:ca:63:d6:dd:09:5e:ba:c0:25:bf:d0:
db:76:21:0c:4e:c1:e5:e9:5c:ad:81:31:54:e7:b9:0a:e0:9b:
27:d1:a6:16:89:68:3d:ff:cb:8c:c8:fc:ba:25:ad:92:f3:42:
cc:ac:f4:c6:37:e1:77:d1:1d:18:70:0d:76:5d:89:98:64:d1:
d1:6c:e4:cb:4a:74:6d:92:04:de:16:16:7f:42:a3:49:d6:0a:
b7:5f:32:1b:6a:57:1a:d2:5a:43:bf:de:e8:34:e0:1a:0a:09:
9e:2f:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org