Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/3Tr-NXDuVWfu2qji0AewmeJ-qVk.roa
File: 3Tr-NXDuVWfu2qji0AewmeJ-qVk.roa (raw, json)
Hash identifier: O6O9abbRDAJXwIxOBJcpIif6gPXl/P7BqSlOvs+un2E=
Subject key identifier: DD:3A:FE:35:70:EE:55:67:EE:DA:A8:E2:D0:07:B0:99:E2:7E:A9:59
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 3558CAC8
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/3Tr-NXDuVWfu2qji0AewmeJ-qVk.roa
Signing time: Mon 28 Feb 2022 10:32:32 +0000
ROA not before: Mon 28 Feb 2022 10:32:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5430
IP address blocks: 194.97.46.0/23 maxlen: 24
194.97.58.0/24 maxlen: 24
194.97.0.0/18 maxlen: 18
194.97.119.0/24 maxlen: 24
62.104.56.0/24 maxlen: 24
62.104.66.0/23 maxlen: 23
62.104.68.0/22 maxlen: 22
62.104.72.0/21 maxlen: 21
62.104.80.0/21 maxlen: 21
62.104.88.0/21 maxlen: 21
194.97.160.0/19 maxlen: 19
62.104.96.0/21 maxlen: 21
194.97.164.0/22 maxlen: 22
62.104.104.0/22 maxlen: 22
194.97.167.0/24 maxlen: 24
194.97.168.0/24 maxlen: 24
62.104.0.0/16 maxlen: 16
62.104.8.0/21 maxlen: 21
62.104.16.0/24 maxlen: 24
62.104.17.0/24 maxlen: 24
62.104.20.0/24 maxlen: 24
62.104.20.0/23 maxlen: 23
62.104.18.0/23 maxlen: 23
62.104.28.0/22 maxlen: 22
194.97.96.0/19 maxlen: 19
62.104.32.0/21 maxlen: 21
62.104.40.0/22 maxlen: 22
62.104.48.0/23 maxlen: 23
194.97.118.0/24 maxlen: 24
62.104.50.0/24 maxlen: 24
62.104.46.0/23 maxlen: 23
62.104.45.0/24 maxlen: 24
89.49.127.0/24 maxlen: 24
89.49.126.0/24 maxlen: 24
89.48.0.0/13 maxlen: 24
195.4.70.0/24 maxlen: 24
195.4.71.0/24 maxlen: 24
195.4.104.0/22 maxlen: 22
195.4.234.0/23 maxlen: 24
195.4.176.0/24 maxlen: 24
62.104.164.0/24 maxlen: 24
62.104.164.0/22 maxlen: 22
62.104.168.0/22 maxlen: 22
62.104.172.0/23 maxlen: 23
62.104.174.0/24 maxlen: 24
62.104.175.0/24 maxlen: 24
62.104.176.0/21 maxlen: 21
62.104.178.0/24 maxlen: 24
62.104.182.0/24 maxlen: 24
62.104.184.0/22 maxlen: 22
62.104.188.0/23 maxlen: 23
62.104.130.0/23 maxlen: 23
62.104.132.0/22 maxlen: 22
194.97.192.0/18 maxlen: 18
62.104.136.0/21 maxlen: 21
62.104.144.0/22 maxlen: 22
62.104.156.0/22 maxlen: 22
195.4.0.0/16 maxlen: 16
195.4.16.0/24 maxlen: 24
195.4.16.0/22 maxlen: 22
195.4.27.0/24 maxlen: 24
2001:748::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895011528 (0x3558cac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Feb 28 10:32:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd3afe3570ee5567eedaa8e2d007b099e27ea959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:c3:89:c2:af:16:2f:f9:db:a9:79:75:b4:
39:24:f8:7b:9e:91:6d:13:36:5e:e3:bd:96:87:7d:
35:bb:6f:61:88:db:e1:24:d3:e2:8f:d7:8c:06:76:
3d:5d:e8:cc:32:17:19:4d:f6:41:d0:02:42:eb:73:
51:3f:cf:f8:20:73:b4:76:34:6f:29:c3:f5:31:d3:
49:15:f3:a2:82:b5:f8:96:42:98:7e:8f:a3:b9:d0:
c9:a2:17:80:4b:72:d5:6b:0b:77:21:78:9c:8e:a7:
36:5a:db:bf:c5:b5:ef:fe:83:71:20:66:dd:09:05:
81:ff:e4:8a:a5:ef:04:2c:aa:a1:60:7c:71:77:b4:
74:65:06:ff:69:ef:7a:7b:ea:ce:b3:35:f6:07:24:
68:58:fd:83:be:41:5d:09:6b:58:79:80:9e:ff:96:
bd:ca:0f:ff:db:83:7f:0e:43:05:4b:cb:59:7e:9f:
eb:98:f6:33:be:d2:a4:9f:ea:38:e0:bb:e6:87:2f:
30:a4:a5:10:03:a6:32:9d:17:9e:93:34:91:69:e4:
f7:9e:57:26:9b:26:0a:27:66:1d:35:f5:e9:40:20:
34:6d:d3:40:97:2c:ac:57:92:fe:71:2d:bb:09:a9:
81:79:0f:62:56:62:9c:19:ce:5b:b8:6a:f0:a7:80:
b7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3A:FE:35:70:EE:55:67:EE:DA:A8:E2:D0:07:B0:99:E2:7E:A9:59
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/3Tr-NXDuVWfu2qji0AewmeJ-qVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.104.0.0/16
89.48.0.0/13
194.97.0.0/18
194.97.96.0/19
194.97.160.0-194.97.255.255
195.4.0.0/16
IPv6:
2001:748::/32
Signature Algorithm: sha256WithRSAEncryption
5c:ac:bc:3f:9f:e1:b0:10:88:89:08:62:3a:fa:f0:e4:78:51:
3f:5b:fe:5f:7c:c5:cf:bc:d5:fc:7f:65:53:d8:d1:7b:88:a9:
40:71:73:62:ca:80:8f:d3:06:c3:8b:15:1d:72:ed:a6:66:a4:
04:b2:24:90:22:75:c9:ac:70:dc:c6:49:46:ef:a4:9c:17:fa:
0c:44:d7:97:8b:58:7f:3d:1f:17:4a:79:8b:8d:0a:48:a1:fb:
4f:f5:34:28:3a:b8:b1:e2:fa:03:ae:86:a7:b8:6b:bd:d8:42:
04:23:29:ad:fd:86:ae:ae:77:1e:aa:d8:1d:04:8e:44:e2:4e:
a6:1c:27:9d:77:7d:fb:6d:51:51:a2:69:17:64:b2:68:81:98:
67:d7:f1:c4:d1:21:bc:39:e6:d5:51:91:f5:98:7d:04:79:67:
65:3b:26:9a:52:34:0c:3c:3d:72:55:ce:d2:8d:c6:8c:65:9a:
7c:3e:be:70:ec:95:c3:ac:36:3f:79:99:28:9e:72:4b:02:98:
51:b7:d4:09:68:fe:b4:6c:f8:0f:8b:ed:5e:dc:91:2f:19:58:
10:5a:93:f3:71:9a:bc:2b:b5:cb:b5:f7:65:97:ea:11:95:40:
36:ac:58:a6:1e:f8:d9:99:9b:c1:e2:09:28:46:0f:2e:38:9f:
b3:dd:99:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:45 2024 by rpki-client on console-fra.rpki-client.org