Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/taXj01UeSHxI3Ay8J2gzJaGJOXo.roa
File: taXj01UeSHxI3Ay8J2gzJaGJOXo.roa (raw, json)
Hash identifier: r9LNaGTsdzOM7Q6pOJR4gziDKnjVpSBAzMydJtDWRlM=
Subject key identifier: B5:A5:E3:D3:55:1E:48:7C:48:DC:0C:BC:27:68:33:25:A1:89:39:7A
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 018EC6EEF47A65A26B97F5486E8BFF9C1E1D
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/taXj01UeSHxI3Ay8J2gzJaGJOXo.roa
Signing time: Wed 10 Apr 2024 07:35:32 +0000
ROA not before: Wed 10 Apr 2024 07:35:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5430
IP address blocks: 62.104.0.0/16 maxlen: 16
62.104.10.0/23 maxlen: 23
62.104.12.0/22 maxlen: 22
62.104.16.0/24 maxlen: 24
62.104.17.0/24 maxlen: 24
62.104.18.0/24 maxlen: 24
62.104.20.0/23 maxlen: 24
62.104.45.0/24 maxlen: 24
62.104.46.0/23 maxlen: 23
62.104.48.0/23 maxlen: 23
62.104.50.0/24 maxlen: 24
62.104.56.0/24 maxlen: 24
62.104.66.0/23 maxlen: 23
62.104.95.0/24 maxlen: 24
62.104.96.0/21 maxlen: 22
62.104.104.0/22 maxlen: 22
62.104.164.0/22 maxlen: 22
62.104.164.0/24 maxlen: 24
62.104.168.0/22 maxlen: 22
62.104.172.0/23 maxlen: 23
62.104.174.0/24 maxlen: 24
62.104.175.0/24 maxlen: 24
62.104.176.0/22 maxlen: 22
62.104.182.0/24 maxlen: 24
89.48.0.0/13 maxlen: 24
89.49.126.0/24 maxlen: 24
89.49.127.0/24 maxlen: 24
194.97.0.0/18 maxlen: 18
194.97.46.0/23 maxlen: 24
194.97.58.0/24 maxlen: 24
194.97.96.0/19 maxlen: 19
194.97.96.0/24 maxlen: 24
194.97.102.0/24 maxlen: 24
194.97.118.0/24 maxlen: 24
194.97.119.0/24 maxlen: 24
194.97.120.0/23 maxlen: 23
194.97.122.0/24 maxlen: 24
194.97.160.0/19 maxlen: 19
194.97.164.0/22 maxlen: 22
194.97.192.0/18 maxlen: 18
195.4.0.0/16 maxlen: 16
195.4.0.0/17 maxlen: 17
195.4.6.0/24 maxlen: 24
195.4.12.0/23 maxlen: 23
195.4.16.0/22 maxlen: 22
195.4.16.0/24 maxlen: 24
195.4.27.0/24 maxlen: 24
195.4.70.0/24 maxlen: 24
195.4.71.0/24 maxlen: 24
195.4.104.0/22 maxlen: 22
195.4.176.0/21 maxlen: 21
195.4.176.0/24 maxlen: 24
195.4.216.0/21 maxlen: 21
195.4.224.0/19 maxlen: 19
195.4.234.0/23 maxlen: 24
2001:748::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c6:ee:f4:7a:65:a2:6b:97:f5:48:6e:8b:ff:9c:1e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Apr 10 07:35:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5a5e3d3551e487c48dc0cbc27683325a189397a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6f:0e:47:79:cf:2b:b8:d2:27:47:bd:07:d2:
39:05:ab:47:4e:07:56:d2:31:54:23:c4:2f:5c:a9:
40:3b:c6:0e:36:a4:09:99:c2:54:b1:2b:ee:60:e2:
fb:36:0e:b4:b4:55:96:b1:dd:56:58:69:a1:9d:8f:
bb:99:46:4d:1a:b4:c3:5d:ba:ea:46:ec:65:f5:3c:
3c:e5:1c:c8:31:b3:a1:55:51:ba:23:c6:dc:02:0c:
d9:ba:4d:5a:0f:3c:64:ef:03:f5:53:a2:8f:a6:be:
a4:fd:c2:1e:c9:21:0e:eb:87:2d:3d:e2:8a:76:ff:
9b:86:e8:71:de:c6:3d:9d:95:11:77:ed:5a:81:ec:
4c:ce:0e:57:be:c2:dc:32:6a:4f:82:29:66:8c:54:
3a:5b:73:51:06:73:0a:b5:03:32:d7:82:98:91:d4:
34:1a:9d:c7:4e:40:62:a2:24:8d:83:b4:ed:41:d3:
90:24:b6:c4:28:77:6f:e9:33:8b:9e:c4:74:8e:93:
97:a4:66:04:dd:ff:35:f7:8e:0d:56:11:cf:41:34:
86:f9:88:2d:de:19:9b:78:16:cf:58:e7:27:5e:48:
fa:f2:72:52:b5:bb:11:a3:b5:41:6b:a0:39:92:e3:
ff:5b:12:f9:de:9c:4c:fb:d9:eb:52:4e:17:d1:35:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A5:E3:D3:55:1E:48:7C:48:DC:0C:BC:27:68:33:25:A1:89:39:7A
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/taXj01UeSHxI3Ay8J2gzJaGJOXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.104.0.0/16
89.48.0.0/13
194.97.0.0/18
194.97.96.0/19
194.97.160.0-194.97.255.255
195.4.0.0/16
IPv6:
2001:748::/32
Signature Algorithm: sha256WithRSAEncryption
aa:79:61:fc:47:fb:df:d1:40:18:79:66:1d:3f:b3:78:ef:66:
52:d3:83:60:1c:d3:83:51:f9:8c:23:44:a8:0a:d0:0b:e6:e9:
78:a0:99:17:59:89:1b:aa:30:38:75:5f:3d:48:95:aa:e1:7d:
46:92:5e:7d:d0:53:f4:2d:97:69:07:1c:a0:09:f2:21:74:fa:
94:39:96:a1:a0:b9:87:7a:fb:ab:8b:03:ec:6e:81:79:32:e8:
b9:ec:ab:60:22:81:08:f1:c7:ca:93:3d:79:a9:41:7e:0a:e5:
98:80:d8:d3:30:67:7e:75:6c:96:61:5d:ac:65:dc:61:e1:76:
68:b4:b7:c4:30:b2:6c:94:e1:22:a2:61:d3:d7:2b:53:9d:19:
d4:01:58:2b:53:1a:ee:ea:67:54:dd:03:c0:7b:b7:61:83:ec:
39:60:d0:9b:14:13:0a:7a:fc:c3:54:46:4c:92:82:1b:3e:be:
0c:8e:2b:74:8e:53:64:42:79:c0:04:3e:0a:89:0f:58:2f:82:
da:de:94:a2:c2:18:8a:d5:cf:a5:1e:16:02:ab:d1:66:51:94:
a9:ba:3f:11:3e:3c:68:89:b1:15:55:01:66:d5:6f:e8:5d:72:
a6:09:32:99:8a:fa:48:57:fb:ca:80:42:06:36:76:c6:1a:4d:
ba:ba:4a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:53 2024 by rpki-client on console-ams.rpki-client.org