Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1-U0HPjnH2wW1yQjPK84OUs-41-g.roa
File: 1-U0HPjnH2wW1yQjPK84OUs-41-g.roa (raw, json)
Hash identifier: 6nWxQUSsQymhOBF7kL9OG68PKa1uT8DVB5zC/6m3xwU=
Subject key identifier: F9:4D:07:3E:39:C7:DB:05:B5:C9:08:CF:2B:CE:0E:52:CF:B8:D7:E8
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 03AC2B96
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1-U0HPjnH2wW1yQjPK84OUs-41-g.roa
Signing time: Fri 15 Apr 2022 08:45:10 +0000
ROA not before: Fri 15 Apr 2022 08:45:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.124.20.0/23 maxlen: 24
85.204.160.0/22 maxlen: 24
93.113.184.0/21 maxlen: 24
89.39.172.0/23 maxlen: 24
89.36.231.0/24 maxlen: 24
89.36.236.0/22 maxlen: 24
86.107.108.0/23 maxlen: 24
89.40.43.0/24 maxlen: 24
188.211.249.0/24 maxlen: 24
188.211.250.0/23 maxlen: 24
188.211.252.0/22 maxlen: 24
94.177.27.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
212.237.224.0/22 maxlen: 24
94.190.248.0/22 maxlen: 24
195.133.202.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
89.36.32.0/22 maxlen: 24
85.204.148.0/22 maxlen: 24
94.177.65.0/24 maxlen: 24
217.19.1.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
93.115.155.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
62.112.0.0/21 maxlen: 24
89.37.228.0/22 maxlen: 24
194.88.112.0/20 maxlen: 24
89.37.236.0/22 maxlen: 24
93.115.111.0/24 maxlen: 24
62.112.12.0/23 maxlen: 24
89.34.171.0/24 maxlen: 24
86.105.104.0/22 maxlen: 24
194.58.64.0/23 maxlen: 24
188.240.40.0/23 maxlen: 24
89.44.210.0/24 maxlen: 24
84.234.16.0/20 maxlen: 24
46.102.174.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
89.40.166.0/24 maxlen: 24
89.40.176.0/22 maxlen: 24
185.172.20.0/22 maxlen: 24
194.135.26.0/23 maxlen: 24
89.37.106.0/24 maxlen: 24
185.64.100.0/22 maxlen: 24
86.104.209.0/24 maxlen: 24
91.232.136.0/22 maxlen: 24
77.81.1.0/24 maxlen: 24
188.212.104.0/22 maxlen: 24
77.81.124.0/22 maxlen: 24
89.37.188.0/22 maxlen: 24
213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
64.239.236.0/22 maxlen: 24
194.135.132.0/23 maxlen: 24
89.34.124.0/23 maxlen: 24
194.88.96.0/21 maxlen: 24
77.81.160.0/22 maxlen: 24
185.77.250.0/23 maxlen: 24
185.77.249.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61614998 (0x3ac2b96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 15 08:45:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f94d073e39c7db05b5c908cf2bce0e52cfb8d7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:25:02:19:fd:4d:3c:b3:83:25:22:08:6d:
a1:dc:c8:90:c6:bb:de:5d:4e:db:7e:79:31:35:46:
7c:f4:ee:c0:b4:cd:85:53:78:75:38:f3:74:3f:6d:
41:6c:98:71:e6:68:17:98:2e:b3:ee:ca:a3:01:34:
bf:46:64:02:56:41:6a:41:c6:8f:2d:a7:7d:71:6f:
fd:c1:de:fb:30:c6:7e:e2:96:c8:1b:65:3e:1c:57:
a0:ae:4a:09:ac:b1:29:36:fc:22:b8:01:e3:4e:12:
c9:27:54:1f:c1:fd:b4:86:63:03:32:3c:e1:aa:ef:
50:1b:72:f7:eb:dd:f4:75:21:75:87:2c:37:57:73:
98:88:44:a8:e8:8b:4b:b6:b8:cb:8b:62:8a:39:f3:
ab:11:5e:03:82:6d:c9:13:c1:00:8c:99:ca:79:bd:
dd:c1:1c:4a:49:7e:bc:2f:c8:11:48:ae:75:7c:f4:
73:3b:34:de:83:1e:b4:96:3f:a6:97:94:ce:10:13:
9e:f4:92:a3:9a:42:13:80:07:31:7f:d5:88:4a:a2:
36:f0:58:0b:a7:a2:3e:14:f4:1d:93:74:cc:f3:04:
70:86:4a:ce:74:86:80:0a:e0:6c:90:56:d1:1e:23:
8f:f5:bd:50:ea:23:17:8d:ef:61:8a:61:72:6a:41:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4D:07:3E:39:C7:DB:05:B5:C9:08:CF:2B:CE:0E:52:CF:B8:D7:E8
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1-U0HPjnH2wW1yQjPK84OUs-41-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
46.102.174.0/24
62.112.0.0/21
62.112.12.0/23
64.239.236.0/22
77.81.1.0/24
77.81.124.0/22
77.81.160.0/22
84.234.16.0/20
84.247.20.0/24
84.247.59.0/24
85.204.148.0/22
85.204.160.0/22
86.104.209.0/24
86.105.104.0/22
86.107.108.0/23
89.34.124.0/23
89.34.171.0/24
89.36.32.0/22
89.36.231.0/24
89.36.236.0/22
89.37.106.0/24
89.37.188.0/22
89.37.228.0/22
89.37.236.0/22
89.39.172.0/23
89.40.43.0/24
89.40.166.0/24
89.40.176.0/22
89.44.210.0/24
91.232.136.0/22
93.113.184.0/21
93.115.111.0/24
93.115.155.0/24
94.177.27.0/24
94.177.65.0/24
94.177.118.0/24
94.190.248.0/22
176.223.181.0/24
185.64.100.0/22
185.77.249.0-185.77.251.255
185.172.20.0/22
188.211.249.0-188.211.255.255
188.212.104.0/22
188.240.40.0/23
193.124.20.0/23
194.58.64.0/23
194.88.96.0/21
194.88.112.0/20
194.135.26.0/23
194.135.132.0/23
195.133.202.0/23
195.133.208.0/23
212.237.224.0/22
213.159.10.0-213.159.13.255
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:02:30:d0:ee:94:7a:4e:e6:35:e3:8a:2a:2b:f8:f9:3e:8f:
ed:3c:35:a2:f8:98:b0:e4:8e:7e:f5:65:b7:56:a1:8b:ba:b6:
bf:be:1f:da:2b:66:31:e4:fe:3f:41:68:68:01:83:35:fa:5c:
72:39:f9:79:d7:92:68:1b:94:69:1c:e7:a2:50:83:48:6c:16:
84:d5:ed:6b:0e:24:3f:b4:30:f8:ad:a1:92:8b:5c:04:29:29:
17:86:e5:96:6d:3b:04:2e:17:a3:92:ef:73:aa:82:4e:a7:48:
2e:99:0f:92:26:41:49:c5:6c:f8:3a:0f:b9:ae:d6:b4:64:00:
e2:21:66:05:c3:0b:cc:23:c8:d9:bf:91:2d:8c:d5:bd:fb:2a:
29:1f:74:6a:ec:84:54:d2:8d:3e:3b:fc:10:d5:10:a3:b4:be:
f9:c6:28:09:ed:28:fa:01:95:63:6f:1b:10:7a:78:67:41:4a:
b1:97:f0:fe:1d:cf:27:47:58:d8:a5:0a:bd:cd:13:92:37:73:
9c:bf:7b:0e:9f:9c:0d:d1:8c:36:dc:11:a4:ee:41:8f:86:1e:
b3:5b:b8:6a:e5:cb:3d:ca:bb:ff:9a:dc:d8:ea:ba:ed:82:d1:
59:a1:74:ed:d3:e2:5e:80:19:f4:16:be:de:c2:43:ba:64:44:
d9:df:be:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org