Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/3cUkT9PJJf2pBVRe7K8ECeMzMzQ.roa
File: 3cUkT9PJJf2pBVRe7K8ECeMzMzQ.roa (raw, json)
Hash identifier: QoeoLNKm1eR6ENp+WPPqRnPOxQdZBEvJULJ4+gCVRx8=
Subject key identifier: DD:C5:24:4F:D3:C9:25:FD:A9:05:54:5E:EC:AF:04:09:E3:33:33:34
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 03E9CC4D
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/3cUkT9PJJf2pBVRe7K8ECeMzMzQ.roa
Signing time: Fri 06 May 2022 17:18:03 +0000
ROA not before: Fri 06 May 2022 17:18:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 93.115.155.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
212.237.224.0/22 maxlen: 24
86.104.209.0/24 maxlen: 24
62.112.0.0/21 maxlen: 24
93.113.184.0/21 maxlen: 24
93.115.111.0/24 maxlen: 24
86.105.104.0/22 maxlen: 24
85.204.148.0/22 maxlen: 24
94.177.65.0/24 maxlen: 24
86.107.108.0/23 maxlen: 24
217.19.1.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65653837 (0x3e9cc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 6 17:18:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddc5244fd3c925fda905545eecaf0409e3333334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:af:1e:10:4c:72:1d:2f:0b:21:52:96:58:
b8:ce:0c:b2:d9:51:46:19:13:cf:bc:0c:d8:f5:59:
51:10:1a:c1:61:a3:c9:35:ba:6a:da:a7:6d:58:78:
0e:a9:cd:3e:ba:ac:05:c7:d3:15:11:ef:6d:3d:f6:
ab:79:ea:6c:31:69:ef:e6:99:eb:a9:a4:9b:9a:8f:
6c:cc:5a:e3:61:81:0f:aa:4a:b0:2d:59:68:6d:9e:
2c:9e:c3:a3:b4:8a:94:f2:ec:73:fa:bf:93:58:f1:
31:db:05:7f:4b:4a:79:22:43:50:0a:b5:85:77:0c:
8a:7d:1b:dd:35:27:54:9c:47:ae:59:97:40:f3:8f:
4d:d7:32:d8:2e:9d:b9:42:d7:91:38:7c:39:56:00:
2e:a1:44:a9:a4:7d:45:e1:5a:44:92:fb:5c:eb:2c:
28:52:12:f6:76:78:c8:dd:e8:5b:2f:09:a0:d3:25:
0e:cc:69:d5:73:25:8f:31:af:55:d2:bc:ef:b8:da:
d7:65:f7:b5:6f:ca:97:f5:68:ea:bd:37:d8:7b:7c:
8c:30:92:dd:4d:df:83:9e:6a:24:04:86:7f:cc:f2:
d1:0f:9e:76:e6:32:6f:71:ab:79:83:54:5d:ae:d6:
f5:a4:fe:4a:7a:45:63:78:ce:19:58:c9:d1:9f:39:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C5:24:4F:D3:C9:25:FD:A9:05:54:5E:EC:AF:04:09:E3:33:33:34
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/3cUkT9PJJf2pBVRe7K8ECeMzMzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
84.247.59.0/24
85.204.148.0/22
86.104.209.0/24
86.105.104.0/22
86.107.108.0/23
93.113.184.0/21
93.115.111.0/24
93.115.155.0/24
94.177.65.0/24
94.177.118.0/24
185.77.249.0/24
212.237.224.0/22
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d5:20:01:1d:bd:67:bc:6c:a5:91:1e:f4:d8:de:4d:de:93:
73:82:d8:54:f3:1b:0d:3a:24:4a:42:e9:3b:cd:49:34:ae:35:
2d:b1:93:c0:c8:4d:02:c6:36:31:71:02:da:04:1c:56:71:13:
c2:f5:d2:2d:05:32:84:11:7d:c9:f7:b6:75:e1:df:da:24:4e:
2e:80:ee:15:a8:52:e2:26:33:40:bf:e0:e3:6e:81:e7:93:9a:
bb:8a:c5:ce:ca:b2:ec:e8:cf:44:e9:87:06:2e:a9:fa:56:ed:
cb:58:0d:86:81:82:46:3b:f1:a6:fd:cc:8d:e1:52:d9:55:f6:
6b:5a:ab:3e:ed:8d:dd:f6:ab:c5:6e:d1:6b:1b:37:0f:86:2b:
eb:18:11:23:ad:79:c1:fb:5e:a5:0c:74:a2:80:26:a9:c2:a6:
3c:52:9d:de:a0:89:1c:f1:6a:d5:95:98:8e:01:6d:7a:3c:de:
f3:8a:28:89:4c:3e:8d:59:61:e2:00:2a:63:3c:17:f2:9c:1a:
31:e8:0b:ec:de:3d:29:e7:f0:06:0f:ce:f3:00:6c:55:ca:5c:
29:f3:6b:2f:4f:33:c3:39:3b:68:74:80:73:18:c0:15:f2:6e:
e3:28:0b:5b:94:29:4d:f4:18:0d:b2:2b:b2:50:69:f6:d4:10:
b5:1e:70:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org