Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/G7uOxOX1kdln6GkSwutsJxq58ec.roa
File: G7uOxOX1kdln6GkSwutsJxq58ec.roa (raw, json)
Hash identifier: wLMK5NwSwK4m4P92a6k+RYaMH4NicWtpkKUrmcSjQjc=
Subject key identifier: 1B:BB:8E:C4:E5:F5:91:D9:67:E8:69:12:C2:EB:6C:27:1A:B9:F1:E7
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 04442E2B
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/G7uOxOX1kdln6GkSwutsJxq58ec.roa
Signing time: Wed 15 Jun 2022 09:50:44 +0000
ROA not before: Wed 15 Jun 2022 09:50:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 93.115.155.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
212.237.224.0/22 maxlen: 24
86.104.209.0/24 maxlen: 24
62.112.0.0/21 maxlen: 24
93.113.184.0/21 maxlen: 24
93.115.111.0/24 maxlen: 24
86.105.104.0/22 maxlen: 24
85.204.148.0/22 maxlen: 24
94.177.65.0/24 maxlen: 24
86.107.108.0/23 maxlen: 24
217.19.1.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71577131 (0x4442e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jun 15 09:50:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bbb8ec4e5f591d967e86912c2eb6c271ab9f1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:43:0a:0d:c7:e5:75:88:b9:9c:23:90:7a:
d9:2c:84:eb:e3:37:3d:87:a2:23:88:6b:12:df:7e:
ed:0d:17:c5:08:5b:d0:eb:d7:18:55:53:0d:eb:fd:
de:6f:ab:11:b8:93:2a:4a:f5:01:c0:c3:e5:eb:e7:
37:13:99:3d:2a:b6:45:3b:90:b1:63:57:71:89:45:
98:ce:1d:a0:ae:27:1d:ff:90:3a:70:64:9d:02:45:
35:fe:cb:41:5b:7e:62:2f:77:cb:40:51:7f:a6:b8:
e0:fc:c1:6c:a1:75:92:e7:ce:55:a2:00:83:56:67:
20:d8:31:92:b9:b4:b2:98:52:80:6f:62:9f:33:18:
23:a7:4b:75:e0:a9:5d:99:68:6d:cd:f3:91:17:19:
62:cc:96:a4:56:4c:66:ad:63:a3:ad:4e:00:92:fa:
40:d1:76:2a:95:76:29:f3:fa:0d:a8:50:7c:73:21:
cf:26:26:54:eb:be:a4:fd:8b:cb:89:03:5b:51:6a:
a0:69:1c:63:86:37:5c:d7:74:f3:2d:33:b3:95:39:
aa:dc:69:23:d6:0b:b2:3a:f3:27:9f:18:04:ee:4b:
3e:c3:9b:5e:43:63:3a:9a:d7:d2:8d:8f:43:06:3d:
ff:a7:61:4d:91:17:e0:72:14:07:b3:92:38:a8:f5:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BB:8E:C4:E5:F5:91:D9:67:E8:69:12:C2:EB:6C:27:1A:B9:F1:E7
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/G7uOxOX1kdln6GkSwutsJxq58ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
84.247.59.0/24
85.204.148.0/22
86.104.209.0/24
86.105.104.0/22
86.107.108.0/23
93.113.184.0/21
93.115.111.0/24
93.115.155.0/24
94.177.65.0/24
185.77.249.0/24
212.237.224.0/22
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
68:69:9a:4d:e2:12:c1:cf:1d:3f:f4:2f:2b:93:d9:a3:ce:ee:
c3:9a:1f:ec:09:b1:3c:36:bc:0b:5e:3a:62:e5:a3:02:38:d1:
54:65:69:29:1d:7f:40:b9:9a:fa:a0:95:55:bf:8d:3c:6d:93:
16:7b:23:cf:8f:21:a4:19:0c:cb:76:ba:d6:6b:97:35:3b:30:
03:e3:7f:66:d4:02:7c:30:e1:d5:40:98:c6:6c:53:c8:0b:d5:
2e:0b:dc:f7:b5:ce:a0:95:08:65:5a:1f:03:3d:bb:2c:4a:97:
d4:91:77:3c:6f:7e:3e:79:24:2b:b6:85:01:18:3d:7c:6a:d5:
c0:61:fb:cb:a5:1a:64:7d:b4:7d:d5:20:af:f6:9b:5a:f0:b1:
5b:66:57:c4:4b:56:92:56:4e:ac:af:59:5d:04:5d:a3:6a:5d:
5c:4f:51:23:ff:07:5c:a3:d5:fe:4a:9a:65:d0:a4:8f:5a:8d:
6f:c8:fe:81:4d:5b:41:6b:1f:cd:23:f2:30:80:ed:1d:64:ef:
17:f3:64:91:2f:84:18:13:22:1e:8d:7f:30:19:5f:3a:12:0f:
6e:b9:f3:5e:c8:b7:7f:77:23:84:08:b3:1b:21:eb:fe:7c:23:
a7:18:d7:b3:64:02:c0:94:62:38:31:74:c8:0e:93:cc:41:d4:
6f:83:e6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org