Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eQQzJPCFDSammdiOjGqVrRJaiMI.roa
File: eQQzJPCFDSammdiOjGqVrRJaiMI.roa (raw, json)
Hash identifier: Nnk8Q6Q1BYUu+G2Rtq5S/EZ5r4w07Rr3f+PcydTGLCM=
Subject key identifier: 79:04:33:24:F0:85:0D:26:A6:99:D8:8E:8C:6A:95:AD:12:5A:88:C2
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 03CD91CD
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eQQzJPCFDSammdiOjGqVrRJaiMI.roa
Signing time: Tue 26 Apr 2022 18:59:41 +0000
ROA not before: Tue 26 Apr 2022 18:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 93.115.155.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
212.237.224.0/22 maxlen: 24
86.104.209.0/24 maxlen: 24
62.112.0.0/21 maxlen: 24
93.113.184.0/21 maxlen: 24
93.115.111.0/24 maxlen: 24
86.105.104.0/22 maxlen: 24
188.240.40.0/23 maxlen: 24
188.212.104.0/22 maxlen: 24
77.81.124.0/22 maxlen: 24
195.133.202.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
85.204.148.0/22 maxlen: 24
94.177.65.0/24 maxlen: 24
86.107.108.0/23 maxlen: 24
217.19.1.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63803853 (0x3cd91cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 26 18:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79043324f0850d26a699d88e8c6a95ad125a88c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:22:8f:9a:10:19:b6:9d:5a:6f:71:bc:a7:
8f:c7:be:6f:fa:e0:aa:62:47:ea:61:63:1f:a1:17:
47:19:54:b8:c1:18:cf:c3:24:c0:cd:cb:93:e2:c8:
3b:c0:1d:40:3d:ef:29:d5:95:45:79:e2:50:6d:58:
79:1e:73:53:f8:ae:fa:9b:02:93:6c:b6:a5:21:51:
1c:d8:fc:f2:45:98:49:2a:4e:29:8f:f7:25:1b:e9:
6b:25:60:db:1c:88:66:78:77:1d:f4:c9:33:69:b6:
8a:f4:48:1a:15:b5:50:8e:ff:21:07:03:27:82:4f:
71:aa:8f:98:99:43:87:89:19:9c:88:2d:59:70:11:
9e:e0:58:b8:42:0b:8f:de:39:ee:c0:3e:52:1a:51:
e0:48:77:e7:62:2f:e8:a0:e8:1b:a4:90:73:94:93:
3e:09:b1:15:fb:83:65:01:6f:36:fd:bd:82:57:96:
09:e6:bb:14:7d:92:a9:4d:db:cd:aa:6b:92:85:a6:
48:7c:e6:96:90:20:54:65:5a:ab:e0:bb:ba:c5:50:
ce:e8:43:d7:06:40:2a:9f:e7:4d:07:0e:af:86:8d:
e6:6a:26:cc:72:68:4f:db:52:83:5a:fe:b9:e4:87:
48:19:9f:f3:ff:18:c5:e0:c5:99:55:9e:01:2d:89:
fc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:33:24:F0:85:0D:26:A6:99:D8:8E:8C:6A:95:AD:12:5A:88:C2
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eQQzJPCFDSammdiOjGqVrRJaiMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
77.81.124.0/22
84.247.59.0/24
85.204.148.0/22
86.104.209.0/24
86.105.104.0/22
86.107.108.0/23
93.113.184.0/21
93.115.111.0/24
93.115.155.0/24
94.177.65.0/24
94.177.118.0/24
176.223.181.0/24
185.77.249.0/24
188.212.104.0/22
188.240.40.0/23
195.133.202.0/23
195.133.208.0/23
212.237.224.0/22
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
17:1b:d5:a6:9c:17:1c:d4:82:f6:2b:a6:c0:91:be:e1:29:7a:
9f:82:7a:78:96:80:cf:63:37:e2:9d:d9:82:ec:b5:5e:66:a3:
29:cb:fb:aa:1b:bf:4f:89:4b:41:14:e1:32:c9:09:6b:4d:f8:
12:8c:da:2a:67:63:41:d3:34:76:2a:fb:82:43:85:1b:1b:9a:
ae:25:ce:d5:2b:96:5c:51:e3:c5:e5:b7:ed:bf:82:f9:2d:9d:
64:7d:90:19:fe:16:6c:7f:78:35:5e:92:e1:81:de:36:a5:60:
0e:34:2e:3b:ac:71:93:2b:b8:43:34:e4:24:78:45:77:49:04:
a0:ec:ba:50:2a:37:e6:88:54:66:14:91:7e:55:65:3b:5c:f1:
5b:1d:a1:23:29:15:94:aa:ef:72:06:8f:3f:53:16:17:8b:24:
9f:af:3a:74:44:b2:b2:55:fb:b3:03:58:83:ea:68:f2:0d:3e:
c6:20:e9:d9:eb:bc:0d:64:2d:7a:f2:97:2b:59:1b:a5:98:ce:
34:c6:54:89:3e:00:d6:35:3c:04:7a:c1:67:f7:b8:08:0b:23:
6d:eb:ee:d1:a7:06:43:53:59:aa:53:19:f8:99:99:68:48:95:
c4:4a:dd:e8:49:fd:b7:4f:39:14:68:72:82:61:dc:aa:62:ca:
13:c8:f5:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org