Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/0d7Q--xpmJhpOYCCwurUiiNfvKw.roa
File: 0d7Q--xpmJhpOYCCwurUiiNfvKw.roa (raw, json)
Hash identifier: k5Jqw72cPwN/jZiqze+R7Jb+6I7EHdiXY+L6JJOiy4s=
Subject key identifier: D1:DE:D0:FB:EC:69:98:98:69:39:80:82:C2:EA:D4:8A:23:5F:BC:AC
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018B313801A3EA6489E5CA6D000A16B6E1DD
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/0d7Q--xpmJhpOYCCwurUiiNfvKw.roa
Signing time: Sun 15 Oct 2023 02:43:55 +0000
ROA not before: Sun 15 Oct 2023 02:43:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 193.124.20.0/23 maxlen: 24
5.35.192.0/21 maxlen: 24
194.135.26.0/23 maxlen: 24
85.204.160.0/22 maxlen: 24
194.88.112.0/20 maxlen: 24
89.39.172.0/23 maxlen: 24
91.232.136.0/22 maxlen: 24
85.204.148.0/22 maxlen: 22
194.88.96.0/21 maxlen: 24
89.34.124.0/23 maxlen: 24
84.234.16.0/20 maxlen: 24
86.107.108.0/23 maxlen: 24
188.211.250.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:31:38:01:a3:ea:64:89:e5:ca:6d:00:0a:16:b6:e1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Oct 15 02:43:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1ded0fbec69989869398082c2ead48a235fbcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:fd:5f:19:08:a7:31:6c:60:8b:2e:17:9e:
95:df:d8:61:8a:a9:79:c6:e5:7e:76:da:3c:eb:89:
a8:e4:70:90:61:87:6f:6e:dd:1f:ce:ea:ad:9e:53:
08:6b:03:ae:a8:61:5d:99:3e:97:bf:49:43:61:d9:
c0:03:23:a7:17:db:d6:b5:b0:8a:9c:72:a9:b1:23:
2b:fe:30:26:21:51:d6:38:b8:1e:f3:64:63:bd:2b:
b4:3a:8a:3a:38:11:06:fc:97:a0:8a:8b:9b:2a:d3:
25:31:f6:91:28:b1:d2:d7:db:f9:3c:0f:db:c7:f1:
ca:be:c7:52:31:e5:5d:d4:a7:7c:46:2d:45:84:3a:
18:25:72:e6:1a:97:1c:cc:d1:6c:60:7f:e7:51:2f:
ae:dd:2f:ff:54:da:57:d9:ec:8a:c2:d0:e2:a3:43:
60:52:30:5e:a3:f7:70:a3:b9:10:f0:44:cb:57:3a:
54:55:4a:81:b7:a4:bc:e9:e1:e6:d8:d2:f3:0b:68:
ce:f2:6a:52:09:34:27:e4:df:be:07:13:4a:4e:4b:
00:77:56:d5:41:27:0f:67:bd:9c:df:45:8d:8f:18:
b3:fd:9b:00:26:d4:62:eb:a6:8c:94:06:f6:58:49:
4b:66:03:9f:8d:2e:dd:a5:d3:69:0a:09:cc:75:d7:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:D0:FB:EC:69:98:98:69:39:80:82:C2:EA:D4:8A:23:5F:BC:AC
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/0d7Q--xpmJhpOYCCwurUiiNfvKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
84.234.16.0/20
85.204.148.0/22
85.204.160.0/22
86.107.108.0/23
89.34.124.0/23
89.39.172.0/23
91.232.136.0/22
188.211.250.0/23
193.124.20.0/23
194.88.96.0/21
194.88.112.0/20
194.135.26.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:3b:a7:24:fc:ca:39:d4:47:8c:c5:21:9d:3d:0e:88:5b:84:
84:1e:2b:e0:03:36:6a:78:e5:63:0e:57:48:d3:e6:20:64:68:
a7:03:cb:0b:6a:32:a1:40:a0:9d:d8:55:cd:4d:48:98:d1:ec:
5f:03:8d:42:4b:a1:09:78:7a:63:74:1a:90:a8:35:a7:56:92:
c8:2f:19:f5:32:f3:f5:01:e7:bc:26:cf:0f:73:df:bf:d2:fd:
d2:d1:cc:af:99:dd:f6:e1:23:14:80:06:38:4b:82:b4:f6:1f:
bf:63:f2:cc:cf:0c:00:27:66:28:02:02:57:8b:07:42:6c:61:
2e:01:0b:20:6a:d2:8c:ad:7a:ef:af:7c:26:7d:c4:7e:f4:d8:
6f:d9:f4:6c:d6:f3:dc:a7:67:ac:8b:5d:41:8b:f4:d3:9a:13:
93:06:3e:f9:90:cf:df:dd:4b:36:8f:a8:8c:30:13:3e:f1:74:
0d:94:76:75:a5:50:ac:7a:bb:0d:0b:6a:6a:b9:8e:d1:99:4c:
15:c2:8e:99:be:e5:af:b7:62:18:30:8f:84:39:ac:57:b2:92:
55:3b:cf:e5:1b:ee:7f:e2:e0:b1:cf:dd:53:de:21:6e:e5:6d:
8e:0a:79:e3:3f:51:81:94:75:47:01:18:1d:b0:6c:d0:67:2a:
fe:d8:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:48 2024 by rpki-client on console-ams.rpki-client.org