Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/J_qovXGeVcil_dUWSlTMc8jCaws.roa
File: J_qovXGeVcil_dUWSlTMc8jCaws.roa (raw, json)
Hash identifier: PhtTdDdX92qv+HCNsTot+9C8JbvkoKKGVuEz2PWUQp0=
Subject key identifier: 27:FA:A8:BD:71:9E:55:C8:A5:FD:D5:16:4A:54:CC:73:C8:C2:6B:0B
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 03BB621D
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/J_qovXGeVcil_dUWSlTMc8jCaws.roa
Signing time: Tue 19 Apr 2022 16:40:34 +0000
ROA not before: Tue 19 Apr 2022 16:40:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 93.115.155.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
86.104.209.0/24 maxlen: 24
212.237.224.0/22 maxlen: 24
62.112.0.0/21 maxlen: 24
93.113.184.0/21 maxlen: 24
93.115.111.0/24 maxlen: 24
86.105.104.0/22 maxlen: 24
188.240.40.0/23 maxlen: 24
188.212.104.0/22 maxlen: 24
77.81.124.0/22 maxlen: 24
195.133.202.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
85.204.148.0/22 maxlen: 24
94.177.65.0/24 maxlen: 24
86.107.108.0/23 maxlen: 24
217.19.1.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
188.211.250.0/23 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62611997 (0x3bb621d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 19 16:40:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27faa8bd719e55c8a5fdd5164a54cc73c8c26b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:02:a8:ae:06:2b:68:3b:d3:1e:ff:eb:17:
ae:d5:bd:df:4e:09:35:95:48:7b:2c:e7:d6:a9:0b:
c7:4a:81:de:9b:42:78:8b:ba:ee:17:64:2c:0d:5f:
b0:09:c1:6c:b3:a7:4d:b2:41:a7:4f:e0:5f:45:1e:
0b:01:b6:c4:ee:1d:1b:39:c0:ea:30:23:17:7a:74:
ac:10:d7:2a:6b:f9:6d:41:c7:c8:0f:5e:24:86:26:
3a:af:8b:b7:c2:e1:d7:0b:53:27:f7:6f:bf:6a:4f:
6a:e4:b9:a0:74:28:0a:bf:54:82:da:22:f2:9b:f5:
f3:c7:dd:2e:15:64:6e:e7:ac:d7:99:07:7d:c7:80:
66:24:b6:60:71:0b:5b:05:c0:d0:74:57:45:fc:fb:
6e:b5:b2:ef:c7:fc:03:00:f4:25:c6:79:bb:c2:d1:
e4:ac:f0:71:d8:7a:aa:c4:16:3e:d5:30:e7:c8:ba:
8f:ca:2d:d4:1e:b6:12:57:64:e0:7c:0f:4f:4e:10:
46:d7:ca:fd:c7:8d:27:5d:25:e0:37:ef:fa:59:03:
d5:8b:99:3a:5b:56:8f:e5:26:a4:77:42:62:b2:c4:
fb:47:5f:38:9a:8e:38:59:26:8c:e0:f1:7b:fe:e9:
e2:46:3b:48:a6:78:aa:32:45:6b:3c:d4:5b:b6:83:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FA:A8:BD:71:9E:55:C8:A5:FD:D5:16:4A:54:CC:73:C8:C2:6B:0B
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/J_qovXGeVcil_dUWSlTMc8jCaws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
77.81.124.0/22
84.247.59.0/24
85.204.148.0/22
86.104.209.0/24
86.105.104.0/22
86.107.108.0/23
93.113.184.0/21
93.115.111.0/24
93.115.155.0/24
94.177.65.0/24
94.177.118.0/24
176.223.181.0/24
185.77.249.0/24
188.211.250.0/23
188.212.104.0/22
188.240.40.0/23
195.133.202.0/23
195.133.208.0/23
212.237.224.0/22
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9f:f6:e1:9a:54:a3:fa:47:83:c7:78:82:b7:8a:6a:1d:dd:
b0:e2:1e:ef:60:bf:da:ef:f4:89:d5:26:eb:cc:ef:79:32:3a:
24:ac:16:1f:15:8f:5f:29:88:17:e0:bc:d9:41:3b:f2:ad:03:
4f:86:a6:db:33:59:5b:62:11:12:5f:8b:cd:e5:aa:f6:45:6d:
0e:c7:21:c6:2f:b6:24:fa:88:14:e5:5f:1c:c4:9f:35:c3:02:
07:b9:df:43:db:20:ec:35:d0:9d:2b:a5:2f:ab:3a:2c:e5:6e:
a1:fc:29:ca:01:f0:0f:77:8f:d3:5d:d6:b0:ba:c7:96:73:28:
6d:22:e9:83:e6:94:f9:5d:3d:e1:39:eb:e6:8c:6b:b0:8b:8e:
71:1a:96:dd:dc:8a:4d:d7:6d:1a:c0:c8:90:78:d4:8a:ff:31:
c3:a6:cb:bb:e5:4b:88:b0:66:6c:b4:08:03:02:5f:11:4c:0f:
b0:84:a2:54:db:c4:0a:99:87:83:93:90:67:e9:7d:d3:36:ef:
d7:5e:67:b4:21:07:02:76:b0:f2:f1:8b:41:66:8c:5c:fc:4b:
a6:3b:ef:1e:85:1b:e5:ca:e1:77:49:9f:6b:92:d1:10:f9:dd:
d5:5b:4c:9e:23:10:40:cd:56:36:14:b2:c1:58:ac:44:a7:aa:
55:65:5c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org