Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/j7VhTkxmoUTMOhRReAE80pntae0.roa
File: j7VhTkxmoUTMOhRReAE80pntae0.roa (raw, json)
Hash identifier: DTlHyg7ykjz8gzOtA9M2sJeOlYfkYGzcK6NLVaLKljQ=
Subject key identifier: 8F:B5:61:4E:4C:66:A1:44:CC:3A:14:51:78:01:3C:D2:99:ED:69:ED
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 01915AFD1AEE59FB23F2A48B8D863CFAD7BD
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/j7VhTkxmoUTMOhRReAE80pntae0.roa
Signing time: Fri 16 Aug 2024 11:40:22 +0000
ROA not before: Fri 16 Aug 2024 11:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31122
IP address blocks: 37.46.16.0/21 maxlen: 21
46.183.104.0/23 maxlen: 23
78.137.128.0/18 maxlen: 18
78.143.128.0/18 maxlen: 18
80.93.16.0/20 maxlen: 20
83.147.128.0/18 maxlen: 18
84.203.0.0/16 maxlen: 16
89.16.64.0/19 maxlen: 19
89.184.32.0/22 maxlen: 22
89.184.40.0/21 maxlen: 21
89.184.48.0/21 maxlen: 21
89.184.56.0/23 maxlen: 23
89.234.64.0/18 maxlen: 18
91.142.96.0/20 maxlen: 20
92.51.192.0/18 maxlen: 18
92.51.192.0/19 maxlen: 19
92.51.208.0/20 maxlen: 20
92.51.232.0/21 maxlen: 21
92.51.240.0/20 maxlen: 20
93.92.8.0/21 maxlen: 21
94.247.48.0/21 maxlen: 21
109.106.96.0/20 maxlen: 20
109.106.112.0/21 maxlen: 21
109.106.124.0/22 maxlen: 22
176.52.216.0/22 maxlen: 22
176.52.220.0/23 maxlen: 23
185.47.144.0/22 maxlen: 22
185.53.32.0/24 maxlen: 24
185.53.35.0/24 maxlen: 24
185.182.72.0/22 maxlen: 22
185.205.228.0/22 maxlen: 22
185.233.176.0/22 maxlen: 22
185.242.236.0/23 maxlen: 23
212.126.32.0/19 maxlen: 19
212.126.60.0/22 maxlen: 22
217.78.0.0/20 maxlen: 20
2001:1bb8::/32 maxlen: 32
2a00:15b8::/32 maxlen: 32
2a00:15b8:400::/40 maxlen: 40
2a01:258::/32 maxlen: 32
2a01:8aa0::/32 maxlen: 32
2a02:220::/32 maxlen: 32
2a0a:e780::/29 maxlen: 30
2a0b:bc0::/29 maxlen: 30
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5a:fd:1a:ee:59:fb:23:f2:a4:8b:8d:86:3c:fa:d7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Aug 16 11:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fb5614e4c66a144cc3a145178013cd299ed69ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:ca:e3:fb:cf:06:b3:ee:b1:be:81:04:74:
20:ce:5c:3f:fc:9c:e3:93:db:09:fa:de:40:f1:a5:
81:70:f5:fa:c7:96:89:37:54:f9:d3:c3:48:c7:3c:
54:af:a7:38:3f:5b:71:b6:ca:35:f1:e5:c4:a8:b2:
c0:95:2e:a0:37:7d:91:06:10:7a:39:75:39:e2:9a:
2c:89:5b:0e:56:a8:7e:18:5c:b3:b7:0f:d6:e8:91:
ec:57:bc:0e:77:43:5d:64:a4:6d:79:0c:72:2a:3f:
00:ea:86:97:15:51:4b:59:e4:07:96:85:1c:19:6e:
40:6a:e3:ce:87:ca:c7:93:10:67:67:d4:68:52:99:
20:b6:ef:79:9c:d5:5f:05:ea:39:0a:af:ec:96:3a:
1e:47:18:be:5c:a7:26:b7:f9:75:c3:0f:c7:4f:eb:
9d:9c:56:c4:4d:37:51:d9:eb:74:3a:9c:b4:2d:13:
70:e6:c3:00:49:d7:b0:9a:64:e0:ed:09:d5:f2:7e:
73:ed:02:e4:25:1d:e1:29:4c:3f:e4:c8:85:9f:e4:
9d:92:65:03:ae:00:71:00:a3:25:78:cd:62:25:14:
1e:46:c7:1b:4a:f2:ed:3f:c9:39:3b:ce:10:5c:f1:
66:6b:c2:4f:ae:c9:81:a9:92:1a:7d:2e:5f:d7:59:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B5:61:4E:4C:66:A1:44:CC:3A:14:51:78:01:3C:D2:99:ED:69:ED
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/j7VhTkxmoUTMOhRReAE80pntae0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.16.0/21
46.183.104.0/23
78.137.128.0/18
78.143.128.0/18
80.93.16.0/20
83.147.128.0/18
84.203.0.0/16
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.57.255
89.234.64.0/18
91.142.96.0/20
92.51.192.0/18
93.92.8.0/21
94.247.48.0/21
109.106.96.0-109.106.119.255
109.106.124.0/22
176.52.216.0-176.52.221.255
185.47.144.0/22
185.53.32.0/24
185.53.35.0/24
185.182.72.0/22
185.205.228.0/22
185.233.176.0/22
185.242.236.0/23
212.126.32.0/19
217.78.0.0/20
IPv6:
2001:1bb8::/32
2a00:15b8::/32
2a01:258::/32
2a01:8aa0::/32
2a02:220::/32
2a0a:e780::/29
2a0b:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
86:7b:fb:27:e3:4d:0d:f8:75:fb:a5:b1:43:b5:25:9c:df:f2:
79:f2:b2:63:35:8d:43:69:7b:bc:8d:fa:d7:95:cb:92:42:6c:
72:9a:f5:02:70:23:43:a8:85:7f:c9:36:03:03:63:17:dc:84:
7a:3a:08:9d:68:e1:ba:1d:8b:aa:78:03:62:46:8b:18:97:5f:
51:ae:bd:0a:b3:75:41:f2:e9:d3:c6:2f:8d:17:dc:89:a7:75:
67:10:25:23:a5:8e:02:2a:49:81:d2:31:66:0b:67:df:95:67:
65:1d:5e:ad:ac:76:e1:ad:2a:eb:1d:43:c4:7a:fe:49:81:59:
4c:a1:42:6e:78:7f:18:c7:23:2a:e7:1a:e2:32:ac:fb:fa:59:
e8:eb:26:52:c4:e3:fe:ec:06:7f:9c:a6:70:53:7f:45:dc:d2:
7d:c2:85:78:c7:5a:b3:47:34:9c:4d:fb:8f:bf:67:3e:22:b3:
76:d8:ae:82:38:3f:89:a5:95:c5:74:7f:fd:64:66:0f:c4:b4:
b2:58:3e:02:7e:81:13:b3:de:a0:a4:e4:76:87:77:61:5f:7d:
a9:b3:b1:46:1f:46:a1:f4:57:cc:3e:a7:7a:5c:35:46:6f:6e:
09:80:bf:0d:6f:ad:7f:e2:80:4b:5c:8f:32:be:fa:f0:cd:66:
41:6f:4d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 10:01:35 2024 by rpki-client on console-ams.rpki-client.org