Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/n7td1etQ9M6W4s9z2-J0nw2DrAY.roa
File: n7td1etQ9M6W4s9z2-J0nw2DrAY.roa (raw, json)
Hash identifier: UWsh7xmulEfRSB5sTeUTi/5KDJwbBy76IVQhU4DbyL8=
Subject key identifier: 9F:BB:5D:D5:EB:50:F4:CE:96:E2:CF:73:DB:E2:74:9F:0D:83:AC:06
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0349A01D
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/n7td1etQ9M6W4s9z2-J0nw2DrAY.roa
Signing time: Thu 10 Mar 2022 19:19:48 +0000
ROA not before: Thu 10 Mar 2022 19:19:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.124.20.0/23 maxlen: 24
85.204.160.0/22 maxlen: 24
93.113.184.0/21 maxlen: 24
89.39.172.0/23 maxlen: 24
89.36.231.0/24 maxlen: 24
89.36.236.0/22 maxlen: 24
86.107.108.0/23 maxlen: 24
89.40.43.0/24 maxlen: 24
93.114.69.0/24 maxlen: 24
188.211.249.0/24 maxlen: 24
188.211.250.0/23 maxlen: 24
188.211.252.0/22 maxlen: 24
94.177.27.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
212.237.224.0/22 maxlen: 24
89.42.29.0/24 maxlen: 24
94.190.248.0/22 maxlen: 24
89.42.215.0/24 maxlen: 24
195.133.202.0/23 maxlen: 24
89.36.32.0/22 maxlen: 24
195.133.208.0/23 maxlen: 24
85.204.148.0/22 maxlen: 24
94.177.65.0/24 maxlen: 24
217.19.1.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
93.115.155.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
62.112.0.0/21 maxlen: 24
89.37.228.0/22 maxlen: 24
194.88.112.0/20 maxlen: 24
89.37.236.0/22 maxlen: 24
93.115.111.0/24 maxlen: 24
62.112.12.0/23 maxlen: 24
62.112.30.0/24 maxlen: 24
86.105.104.0/22 maxlen: 24
194.58.64.0/23 maxlen: 24
89.34.171.0/24 maxlen: 24
188.240.40.0/23 maxlen: 24
89.44.210.0/24 maxlen: 24
84.234.16.0/20 maxlen: 24
46.102.174.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
89.40.166.0/24 maxlen: 24
89.40.176.0/22 maxlen: 24
185.172.20.0/22 maxlen: 24
89.37.106.0/24 maxlen: 24
194.135.26.0/23 maxlen: 24
185.64.100.0/22 maxlen: 24
86.104.209.0/24 maxlen: 24
91.232.136.0/22 maxlen: 24
77.81.1.0/24 maxlen: 24
188.212.104.0/22 maxlen: 24
77.81.124.0/22 maxlen: 24
89.37.188.0/22 maxlen: 24
213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
64.239.236.0/22 maxlen: 24
194.135.132.0/23 maxlen: 24
89.37.216.0/23 maxlen: 24
89.34.124.0/23 maxlen: 24
194.88.96.0/21 maxlen: 24
77.81.160.0/22 maxlen: 24
185.77.250.0/23 maxlen: 24
185.77.249.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55156765 (0x349a01d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Mar 10 19:19:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fbb5dd5eb50f4ce96e2cf73dbe2749f0d83ac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:1b:34:b3:95:29:da:46:18:9e:62:66:6f:
99:04:6d:86:40:82:16:71:4e:aa:6a:70:86:2e:2a:
87:10:32:a6:12:5d:1c:46:90:45:ec:f5:a7:dc:d7:
98:cb:76:ec:83:d9:1e:d4:23:c9:07:f5:fb:bb:a3:
89:ca:8e:68:a2:99:0b:3d:9e:71:08:46:1a:ae:bc:
79:52:f7:58:a2:91:84:82:7c:9e:fa:ce:26:dc:9a:
cc:24:a2:88:00:ae:81:f8:f5:1d:d2:3b:32:7f:b6:
7b:ed:49:aa:ee:02:c0:39:61:6e:98:da:16:1e:97:
ee:cd:21:e6:20:3b:5d:0c:95:d2:2e:86:91:5f:b6:
76:2b:26:7b:36:58:07:87:f9:22:5c:f5:fe:93:10:
c0:90:02:f7:00:ba:b1:68:22:b8:6f:14:12:2a:23:
72:ed:28:9e:68:52:3e:fa:bf:d2:7f:40:0c:eb:8b:
bf:a3:46:cc:0d:62:86:0c:5b:d1:9b:a1:ca:d6:73:
21:ab:de:b8:f0:16:c1:67:31:89:8f:59:40:18:87:
f1:89:57:f6:e1:13:63:01:54:87:aa:bf:6e:d7:4d:
97:34:eb:88:cf:8e:42:0c:28:96:97:8e:29:ac:33:
ea:46:05:5c:60:b9:6a:0f:36:73:49:46:34:35:39:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BB:5D:D5:EB:50:F4:CE:96:E2:CF:73:DB:E2:74:9F:0D:83:AC:06
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/n7td1etQ9M6W4s9z2-J0nw2DrAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
46.102.174.0/24
62.112.0.0/21
62.112.12.0/23
62.112.30.0/24
64.239.236.0/22
77.81.1.0/24
77.81.124.0/22
77.81.160.0/22
84.234.16.0/20
84.247.20.0/24
84.247.59.0/24
85.204.148.0/22
85.204.160.0/22
86.104.209.0/24
86.105.104.0/22
86.107.108.0/23
89.34.124.0/23
89.34.171.0/24
89.36.32.0/22
89.36.231.0/24
89.36.236.0/22
89.37.106.0/24
89.37.188.0/22
89.37.216.0/23
89.37.228.0/22
89.37.236.0/22
89.39.172.0/23
89.40.43.0/24
89.40.166.0/24
89.40.176.0/22
89.42.29.0/24
89.42.215.0/24
89.44.210.0/24
91.232.136.0/22
93.113.184.0/21
93.114.69.0/24
93.115.111.0/24
93.115.155.0/24
94.177.27.0/24
94.177.65.0/24
94.177.118.0/24
94.190.248.0/22
176.223.181.0/24
185.64.100.0/22
185.77.249.0-185.77.251.255
185.172.20.0/22
188.211.249.0-188.211.255.255
188.212.104.0/22
188.240.40.0/23
193.124.20.0/23
194.58.64.0/23
194.88.96.0/21
194.88.112.0/20
194.135.26.0/23
194.135.132.0/23
195.133.202.0/23
195.133.208.0/23
212.237.224.0/22
213.159.10.0-213.159.13.255
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e9:29:66:fc:be:ab:97:27:ff:54:e2:a1:78:2a:40:76:9a:
d3:08:6a:f3:10:ef:3f:2a:e6:57:de:56:f8:42:94:91:5e:d8:
9f:c4:ee:e9:15:4e:9c:23:a8:f2:39:7d:ca:1e:ac:c8:c2:97:
66:ad:15:a0:98:67:6b:8f:d2:ed:ad:c0:f4:c9:33:41:26:39:
4b:24:0d:da:23:24:b3:e2:1f:74:52:d2:ca:a8:6b:84:16:31:
cd:88:1e:35:01:7c:97:b8:6c:cc:f5:c4:f4:05:e5:0b:1c:ba:
43:3e:06:da:15:61:50:49:d8:ee:5a:b0:b3:e2:d5:1e:8f:81:
03:44:cb:83:45:29:73:b1:a8:9b:16:f7:df:cf:94:25:2c:6e:
9d:74:b1:14:06:84:df:cc:85:10:21:58:6c:c2:71:19:5d:ae:
83:8a:be:c5:e1:aa:ae:e2:70:1d:29:35:a7:18:7d:5a:cf:11:
8e:52:36:e7:3f:ea:90:79:20:b6:7d:e5:7b:ec:fc:e5:99:54:
21:c8:4c:a8:a5:5a:7c:71:d5:52:71:4e:df:f4:8c:ce:bb:da:
f0:f2:54:48:e7:3c:0a:96:e5:ac:df:b7:ca:7c:86:30:00:c9:
e7:9d:8d:3a:a2:99:bc:d8:3a:95:b4:ff:89:8f:b5:d8:09:03:
21:fb:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org