Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/WG0pG1VSQzR-T57_UANsroANIik.roa
File: WG0pG1VSQzR-T57_UANsroANIik.roa (raw, json)
Hash identifier: Ro7c+sF+s85KLe81hin7YNYgVQkTm+Z8u77IeuLCP/0=
Subject key identifier: 58:6D:29:1B:55:52:43:34:7E:4F:9E:FF:50:03:6C:AE:80:0D:22:29
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 03B9924B
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/WG0pG1VSQzR-T57_UANsroANIik.roa
Signing time: Tue 19 Apr 2022 03:19:09 +0000
ROA not before: Tue 19 Apr 2022 03:19:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 93.115.155.0/24 maxlen: 24
193.124.20.0/23 maxlen: 24
5.35.192.0/21 maxlen: 24
86.104.209.0/24 maxlen: 24
212.237.224.0/22 maxlen: 24
62.112.0.0/21 maxlen: 24
93.113.184.0/21 maxlen: 24
93.115.111.0/24 maxlen: 24
89.39.172.0/23 maxlen: 24
86.105.104.0/22 maxlen: 24
188.240.40.0/23 maxlen: 24
188.212.104.0/22 maxlen: 24
77.81.124.0/22 maxlen: 24
195.133.202.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
85.204.148.0/22 maxlen: 24
94.177.65.0/24 maxlen: 24
86.107.108.0/23 maxlen: 24
217.19.1.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
188.211.250.0/23 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62493259 (0x3b9924b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 19 03:19:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=586d291b555243347e4f9eff50036cae800d2229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:30:5e:7d:09:47:62:17:7f:b6:2d:c3:62:b8:
bb:99:0c:38:90:76:de:06:50:3b:e7:d3:43:61:5d:
0e:97:13:a5:67:d4:e7:5f:cb:5c:1e:92:28:f3:f1:
90:d2:91:82:59:da:b3:27:e8:0a:6e:3c:5b:94:53:
c9:e1:9e:51:07:0f:e1:14:24:0d:a4:f0:4b:3b:bf:
6c:2f:1d:13:9b:cb:d0:e4:a5:4d:26:23:aa:e2:00:
da:49:59:d7:63:dc:26:6a:3c:9e:e8:73:ab:bc:30:
2a:85:73:66:59:79:80:81:ca:3a:d0:9d:01:d4:dd:
a6:4c:9c:2c:64:b5:e9:a0:79:97:2c:45:34:45:f4:
a2:88:dd:06:d6:6c:d0:6a:fc:47:06:05:ce:18:eb:
e8:af:a6:f4:e8:bb:ab:ea:a5:92:70:1b:93:ba:54:
45:3d:16:fe:9d:12:86:8f:03:2a:9b:fe:49:fd:63:
90:3e:be:63:af:c2:38:ab:de:33:10:37:17:67:f7:
b5:75:a7:15:ef:d7:4c:f4:70:69:ae:27:8a:74:42:
2a:cb:44:9f:7b:e3:c9:7b:42:a8:c3:9a:6c:03:47:
1b:ae:8e:2b:1f:1f:c9:79:36:66:9d:14:54:eb:77:
1e:cf:09:22:23:7b:1d:8c:e8:1d:fd:9a:f3:66:47:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6D:29:1B:55:52:43:34:7E:4F:9E:FF:50:03:6C:AE:80:0D:22:29
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/WG0pG1VSQzR-T57_UANsroANIik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
77.81.124.0/22
84.247.59.0/24
85.204.148.0/22
86.104.209.0/24
86.105.104.0/22
86.107.108.0/23
89.39.172.0/23
93.113.184.0/21
93.115.111.0/24
93.115.155.0/24
94.177.65.0/24
94.177.118.0/24
176.223.181.0/24
185.77.249.0/24
188.211.250.0/23
188.212.104.0/22
188.240.40.0/23
193.124.20.0/23
195.133.202.0/23
195.133.208.0/23
212.237.224.0/22
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ff:40:64:05:14:0f:fb:a3:64:d1:8a:6f:1c:30:32:bc:41:
2c:19:b3:45:fe:ca:2a:d4:98:84:9a:79:e8:d0:d7:a7:26:63:
73:03:d8:bb:b3:c7:97:dd:29:80:41:dc:41:2d:46:3f:b7:9d:
ab:bc:d8:26:9b:7b:80:0a:7b:51:c4:49:97:c5:1a:84:1d:4d:
c2:8f:e0:2e:79:e3:da:55:b0:42:e6:35:d9:5e:35:f0:6d:6a:
5f:8d:03:67:81:52:e0:7e:ea:c4:9c:2f:b6:5f:2f:08:56:73:
5f:00:76:2e:d6:a4:cd:c7:41:c0:95:e2:df:ac:23:c2:e3:02:
3a:eb:1b:eb:27:d5:cf:23:9c:7f:f5:94:9b:20:dd:dc:cb:e5:
8d:51:8e:1a:3e:b6:4f:5d:bf:d9:85:67:cb:18:ad:7a:6d:35:
44:ce:2b:5a:3a:73:6c:cd:52:2d:64:2c:0a:ef:5b:b8:a3:67:
a3:b9:31:08:1d:7a:57:45:98:f7:27:65:ff:8f:fc:86:fc:47:
dc:9f:06:ec:2f:a5:ed:90:8d:e3:63:dc:4e:85:65:41:2f:d1:
8a:cd:13:82:28:97:8e:b1:59:fb:fe:17:1c:4a:6a:41:bf:1a:
cb:27:26:2a:bf:6c:06:b5:36:48:c1:84:a7:27:d6:77:85:ff:
a7:c1:88:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org