Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2QuJQJ1mnUPiyrsHeXrETu7MDSY.roa
File: 2QuJQJ1mnUPiyrsHeXrETu7MDSY.roa (raw, json)
Hash identifier: MhpqM/47zTCn7j9qhlTS2Cq/QVENUNuLSTmCcoYyHeg=
Subject key identifier: D9:0B:89:40:9D:66:9D:43:E2:CA:BB:07:79:7A:C4:4E:EE:CC:0D:26
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018B3138022641D12B553827E31BE0C9C075
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2QuJQJ1mnUPiyrsHeXrETu7MDSY.roa
Signing time: Sun 15 Oct 2023 02:43:56 +0000
ROA not before: Sun 15 Oct 2023 02:43:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209706
IP address blocks: 89.40.176.0/22 maxlen: 24
89.37.188.0/22 maxlen: 24
89.36.236.0/22 maxlen: 24
185.172.20.0/22 maxlen: 22
185.64.100.0/22 maxlen: 22
89.37.228.0/22 maxlen: 24
89.37.236.0/22 maxlen: 24
62.112.12.0/23 maxlen: 24
86.105.104.0/22 maxlen: 24
188.212.104.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:31:38:02:26:41:d1:2b:55:38:27:e3:1b:e0:c9:c0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Oct 15 02:43:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d90b89409d669d43e2cabb07797ac44eeecc0d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:5c:c7:f4:d8:df:2b:e4:3c:24:ae:b6:92:
8c:34:31:dc:81:e1:62:36:9b:f7:b4:59:7c:b7:08:
e6:c5:e5:90:6b:9c:b7:3c:3c:aa:04:71:3a:13:81:
f8:c4:82:bd:f4:a5:bd:0c:40:bc:8e:a7:45:d1:32:
69:55:90:e9:c9:47:38:af:e6:6e:b9:c6:cc:5f:ac:
36:d2:03:04:98:0d:0a:f4:d1:e9:dd:46:5a:de:e8:
40:de:6f:89:52:5d:d7:ae:cb:4f:3b:29:d6:f4:2b:
53:9d:7b:cb:10:e6:65:48:4b:bd:be:4f:2c:34:da:
3a:32:db:f1:13:7c:08:25:16:5b:a0:37:9c:27:b7:
b9:4d:e8:94:dc:85:e1:be:7f:b3:60:e1:76:c1:bb:
bd:13:ca:d9:7e:a6:ae:8d:35:dc:a9:de:1a:90:1a:
28:06:6d:83:c5:89:c9:5f:b7:df:a2:d3:d3:83:4b:
42:30:e4:a3:b2:cc:2d:2b:87:9b:ed:2b:6e:38:6f:
de:89:40:45:02:45:8d:cc:2f:38:fb:20:15:2e:44:
72:d8:e1:ac:a5:e0:ef:2c:01:bf:ef:a5:88:f2:b9:
ed:11:1e:2e:36:d8:ac:3e:43:c1:bb:83:3c:77:26:
22:80:65:e9:c1:bc:55:ba:94:e6:64:84:ed:c6:9c:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0B:89:40:9D:66:9D:43:E2:CA:BB:07:79:7A:C4:4E:EE:CC:0D:26
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2QuJQJ1mnUPiyrsHeXrETu7MDSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.12.0/23
86.105.104.0/22
89.36.236.0/22
89.37.188.0/22
89.37.228.0/22
89.37.236.0/22
89.40.176.0/22
185.64.100.0/22
185.172.20.0/22
188.212.104.0/22
Signature Algorithm: sha256WithRSAEncryption
63:f3:c9:1a:a7:cd:4b:fa:6c:05:77:4e:4d:16:cb:19:cd:6a:
ef:06:97:09:7b:2c:6e:2c:2c:a9:00:6d:20:2b:d3:0a:59:de:
af:3e:92:18:67:1f:0c:bd:8b:0f:8b:ac:48:80:c6:a2:21:93:
f1:ec:bd:5d:8d:b8:6a:f1:52:b0:53:9e:08:57:fe:bc:85:f4:
42:40:39:c8:fc:4d:c7:11:18:bf:38:78:ba:66:d8:32:83:9c:
be:49:4c:b9:10:3d:b8:b6:26:54:4b:33:fa:c9:18:5a:65:8b:
bb:0d:eb:8c:f4:c1:6c:4e:f0:68:b5:96:54:ee:79:be:7b:4e:
cf:52:94:d4:fb:ca:9c:cf:7f:8b:38:04:7d:6a:d8:5a:1a:6c:
11:29:24:fb:fa:c4:71:88:c5:e9:69:6b:d9:77:20:c1:53:02:
ba:2a:81:71:94:2c:92:53:d1:25:c4:0c:7e:2d:27:15:ee:6f:
0a:54:5a:0c:96:41:a1:41:6b:98:f2:b5:cd:8e:11:cb:0b:58:
99:42:ba:8d:f8:4c:cc:d8:c8:28:e9:cc:e7:01:ce:bf:4e:9b:
37:78:43:b1:fa:6d:87:67:ec:5c:51:83:d9:3d:89:90:e7:5a:
0c:da:24:84:e5:8e:ef:40:bb:6e:71:3c:f1:70:6d:42:1c:1e:
a0:09:93:09
-----BEGIN CERTIFICATE-----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Generated at Tue Nov 14 14:06:25 2023 by rpki-client on console-ams.rpki-client.org