Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/1-hu84m5U7JbwtHAp1tHHpxZT20.roa
File: 1-hu84m5U7JbwtHAp1tHHpxZT20.roa (raw, json)
Hash identifier: Q0ARFD20rm2TRLqp9V4e5K+9sak1lf98t9lwliZyqIc=
Subject key identifier: D7:E8:6E:F3:89:B9:53:B2:5B:C2:D1:C0:A7:5B:47:1E:9C:59:4F:6D
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 0186A6EF8559C8F208DB38BBF7D9980C8FE1
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/1-hu84m5U7JbwtHAp1tHHpxZT20.roa
Signing time: Fri 03 Mar 2023 10:06:00 +0000
ROA not before: Fri 03 Mar 2023 10:06:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5430
IP address blocks: 194.97.46.0/23 maxlen: 24
194.97.58.0/24 maxlen: 24
194.97.0.0/18 maxlen: 18
194.97.120.0/23 maxlen: 23
194.97.119.0/24 maxlen: 24
194.97.122.0/24 maxlen: 24
62.104.56.0/24 maxlen: 24
62.104.66.0/23 maxlen: 23
194.97.160.0/19 maxlen: 19
62.104.95.0/24 maxlen: 24
62.104.96.0/22 maxlen: 22
62.104.96.0/21 maxlen: 22
194.97.164.0/22 maxlen: 22
62.104.104.0/22 maxlen: 22
62.104.0.0/16 maxlen: 16
62.104.10.0/23 maxlen: 23
62.104.12.0/22 maxlen: 22
62.104.16.0/24 maxlen: 24
62.104.17.0/24 maxlen: 24
62.104.20.0/24 maxlen: 24
62.104.18.0/24 maxlen: 24
194.97.96.0/24 maxlen: 24
194.97.96.0/19 maxlen: 19
194.97.102.0/24 maxlen: 24
62.104.48.0/23 maxlen: 23
194.97.118.0/24 maxlen: 24
62.104.50.0/24 maxlen: 24
62.104.46.0/23 maxlen: 23
62.104.45.0/24 maxlen: 24
89.49.127.0/24 maxlen: 24
89.49.126.0/24 maxlen: 24
89.48.0.0/13 maxlen: 24
195.4.70.0/24 maxlen: 24
195.4.71.0/24 maxlen: 24
195.4.104.0/22 maxlen: 22
195.4.234.0/23 maxlen: 24
195.4.176.0/24 maxlen: 24
62.104.164.0/24 maxlen: 24
62.104.164.0/22 maxlen: 22
62.104.168.0/22 maxlen: 22
62.104.172.0/23 maxlen: 23
62.104.174.0/24 maxlen: 24
62.104.175.0/24 maxlen: 24
62.104.176.0/22 maxlen: 22
62.104.182.0/24 maxlen: 24
194.97.192.0/18 maxlen: 18
195.4.0.0/16 maxlen: 16
195.4.16.0/24 maxlen: 24
195.4.16.0/22 maxlen: 22
195.4.28.0/23 maxlen: 23
195.4.27.0/24 maxlen: 24
195.4.43.0/24 maxlen: 24
2001:748::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:ef:85:59:c8:f2:08:db:38:bb:f7:d9:98:0c:8f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Mar 3 10:06:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7e86ef389b953b25bc2d1c0a75b471e9c594f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:08:e4:2d:d5:cd:ab:53:78:c0:3c:59:12:e2:
9f:e4:89:ea:ac:52:35:bf:41:37:34:ce:22:17:17:
31:4e:89:81:a2:54:0c:ca:33:3c:31:9b:e0:8f:df:
eb:8e:a2:53:a1:7a:26:c1:d8:c7:0a:8d:a5:56:b5:
7f:9b:75:91:6e:09:05:df:79:f9:e6:5b:04:dd:60:
d0:8e:3b:c8:e0:88:be:e5:ad:26:5b:6f:f5:08:87:
6f:21:a1:ad:1b:d5:f6:5e:28:f3:19:88:dc:d6:04:
c3:54:a9:6e:f1:64:c4:7e:ca:92:ae:51:3c:68:e6:
da:98:69:65:37:7a:6c:68:95:08:bc:c9:eb:64:52:
2b:cf:fc:ca:49:db:a6:07:81:55:b3:a5:46:42:e5:
5b:62:b8:a0:5a:23:43:d0:65:bf:8e:aa:13:fa:c6:
17:59:31:d8:4c:30:6f:ca:44:d7:80:b2:be:02:87:
a5:b0:d8:68:e4:de:59:d0:bb:4e:52:df:db:a2:99:
e5:47:c6:71:8c:de:91:ab:f3:d7:44:73:e3:3b:27:
2e:4c:ee:d2:76:cf:35:98:20:d7:d4:aa:1a:c9:64:
87:98:78:03:1b:31:35:d0:f7:ec:4f:29:d0:6e:dc:
fb:32:35:ba:fc:ee:ce:f7:58:21:34:e8:5e:39:da:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E8:6E:F3:89:B9:53:B2:5B:C2:D1:C0:A7:5B:47:1E:9C:59:4F:6D
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/1-hu84m5U7JbwtHAp1tHHpxZT20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.104.0.0/16
89.48.0.0/13
194.97.0.0/18
194.97.96.0/19
194.97.160.0-194.97.255.255
195.4.0.0/16
IPv6:
2001:748::/32
Signature Algorithm: sha256WithRSAEncryption
0b:0e:68:70:0e:6f:29:d3:7c:84:0e:bd:e8:e8:bb:6c:72:80:
1a:a9:c1:21:55:a1:8f:06:dd:ae:f3:f8:0a:6f:c4:98:ae:c5:
e8:4e:64:e5:d4:72:d5:fa:71:b0:c6:31:c9:ce:b4:d1:43:61:
c1:77:6a:dd:a1:2c:11:2b:b9:e6:a4:c4:51:f3:f3:21:ff:f5:
b6:47:c4:18:b3:13:1f:55:6c:ff:f2:e3:bd:0e:ff:e0:10:86:
f1:6e:50:53:d2:cd:51:64:76:91:16:fc:05:fa:02:ee:5d:02:
81:33:91:15:47:e6:ff:ad:fb:46:2f:1e:29:3f:08:4a:94:11:
a6:77:62:94:ba:d0:41:b2:62:a5:59:59:82:bb:5a:6c:83:0a:
27:25:23:ed:76:b3:ae:46:d7:be:29:6b:97:90:a0:d0:05:d2:
1d:79:54:d0:02:d8:cb:28:f9:2c:e5:4a:19:c4:2d:aa:3b:65:
4d:18:e2:16:57:c6:5b:f1:4c:c6:07:af:77:9d:fd:2e:ca:c9:
04:56:be:09:d7:df:9c:d5:37:7a:87:9b:46:64:34:38:09:9f:
0d:ac:81:fd:00:a7:fb:15:48:8f:4c:78:c3:99:12:b7:e1:44:
e2:0c:7c:af:6b:60:d4:ec:33:df:e8:d0:10:e6:8c:ea:f4:43:
22:11:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:45 2024 by rpki-client on console-fra.rpki-client.org