Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/LRNKzyQqBMmOoBUlo3y8GNsf9H4.roa
File: LRNKzyQqBMmOoBUlo3y8GNsf9H4.roa (raw, json)
Hash identifier: t8KPxsfioVroV7vEjKh9OALa0EbJYYO+oQ2fpeKKnTk=
Subject key identifier: 2D:13:4A:CF:24:2A:04:C9:8E:A0:15:25:A3:7C:BC:18:DB:1F:F4:7E
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018571FA07A3AFA3C6C129AF464F3EF2C1A2
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/LRNKzyQqBMmOoBUlo3y8GNsf9H4.roa
Signing time: Mon 02 Jan 2023 10:14:49 +0000
ROA not before: Mon 02 Jan 2023 10:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43370
IP address blocks: 62.32.84.0/23 maxlen: 23
37.221.202.0/24 maxlen: 24
37.221.207.0/24 maxlen: 24
62.32.92.0/23 maxlen: 23
37.77.128.0/24 maxlen: 24
95.161.184.0/22 maxlen: 22
79.142.94.0/23 maxlen: 23
46.34.146.0/23 maxlen: 23
79.142.93.0/24 maxlen: 24
95.161.196.0/22 maxlen: 24
95.161.224.0/22 maxlen: 22
37.46.48.0/22 maxlen: 22
46.34.130.0/23 maxlen: 23
178.16.157.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:07:a3:af:a3:c6:c1:29:af:46:4f:3e:f2:c1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 2 10:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d134acf242a04c98ea01525a37cbc18db1ff47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0c:19:37:3b:13:f6:55:df:db:73:96:bf:33:
16:a0:d2:c2:09:45:c7:44:f7:88:cc:39:f2:37:82:
65:c2:38:d1:bf:96:de:ef:a1:ea:b0:48:d6:67:5f:
39:b5:5a:3e:72:08:0f:ad:ab:6b:05:31:7a:f2:48:
2f:4a:07:72:6d:db:02:e8:e9:4d:7a:49:1e:49:ff:
a8:35:aa:4d:93:90:6b:60:72:27:98:ef:2b:b7:06:
d1:49:c1:19:0f:3f:b7:cb:e6:17:f5:24:bb:cb:e2:
e0:10:3f:02:fd:bc:c3:f7:70:3c:09:51:46:e4:db:
1c:86:02:68:cc:1b:11:d3:a1:aa:a6:1c:c2:bd:fb:
7a:73:23:b0:ab:6e:97:6c:e6:e2:ef:f7:8a:f8:b5:
46:a3:88:00:48:42:ca:50:8b:f5:4b:78:42:b8:c0:
86:95:b8:50:a4:9f:ff:18:a9:a0:5d:34:3a:bf:64:
1d:0c:8a:43:a0:a1:28:8c:f2:6e:ac:95:7e:11:a7:
d9:38:87:0e:f0:0f:06:e7:bf:d2:f6:e7:94:69:f3:
b3:85:59:20:38:c2:9e:fd:10:d7:4b:1e:83:62:5f:
0a:05:88:80:2d:94:27:1d:6b:ba:88:1f:2f:ab:1c:
39:1f:bf:35:b8:90:28:b3:22:3e:f7:c8:b1:36:e5:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:13:4A:CF:24:2A:04:C9:8E:A0:15:25:A3:7C:BC:18:DB:1F:F4:7E
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/LRNKzyQqBMmOoBUlo3y8GNsf9H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.48.0/22
37.77.128.0/24
37.221.202.0/24
37.221.207.0/24
46.34.130.0/23
46.34.146.0/23
62.32.84.0/23
62.32.92.0/23
79.142.93.0-79.142.95.255
95.161.184.0/22
95.161.196.0/22
95.161.224.0/22
178.16.157.0/24
Signature Algorithm: sha256WithRSAEncryption
be:c7:81:93:fd:8b:05:d1:25:90:5b:52:7b:29:73:db:e9:98:
ff:52:31:89:1b:eb:70:6c:6a:76:51:99:0b:c2:a3:37:b2:15:
e5:37:66:2d:35:cb:49:ce:c9:bd:66:3f:e2:b2:ac:48:46:69:
58:97:52:03:54:9f:e5:64:3a:8d:91:59:c1:7a:0d:f3:be:46:
2f:5e:1b:71:0c:0f:f1:a1:c7:24:e7:9e:49:a6:bc:47:cc:04:
c9:f7:f8:e8:7e:49:5f:38:1d:a8:96:f2:a2:de:95:4c:af:94:
b6:02:ec:1e:d4:a1:f1:6f:e7:9e:6e:4e:22:29:5d:30:0b:ff:
99:0d:c2:25:3e:04:36:bc:bf:d7:f9:3e:fd:a8:ef:bf:1c:88:
2a:e5:14:9e:4b:f3:5c:7e:62:4d:e2:12:72:7e:30:e6:62:1f:
7f:93:54:d3:11:dc:74:1c:29:44:4e:e4:ff:83:67:12:2f:60:
70:c3:52:e2:f2:f7:f1:ea:5c:8c:e5:a3:d1:bf:8e:38:56:e2:
a7:ea:31:e6:f1:6f:46:13:5d:1f:8b:f6:6e:06:49:c7:c1:fa:
0d:06:0b:a9:1f:da:42:4b:e6:aa:45:1a:0b:57:56:3e:bc:d9:
ec:43:47:15:8c:45:e1:64:a4:d6:f8:78:16:6e:3f:90:2d:05:
3f:09:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org