Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/sjDGmPAmK2aQA4I8kdpZ7kiEsn4.roa
File: sjDGmPAmK2aQA4I8kdpZ7kiEsn4.roa (raw, json)
Hash identifier: 5NHKjJGUc7NuZ8np4A+3ntMb4cQly+C73GfZLN0c6i4=
Subject key identifier: B2:30:C6:98:F0:26:2B:66:90:03:82:3C:91:DA:59:EE:48:84:B2:7E
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 034CA9D7
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/sjDGmPAmK2aQA4I8kdpZ7kiEsn4.roa
Signing time: Fri 11 Mar 2022 20:32:13 +0000
ROA not before: Fri 11 Mar 2022 20:32:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.124.20.0/23 maxlen: 24
85.204.160.0/22 maxlen: 24
93.113.184.0/21 maxlen: 24
89.39.172.0/23 maxlen: 24
89.36.231.0/24 maxlen: 24
89.36.236.0/22 maxlen: 24
86.107.108.0/23 maxlen: 24
89.40.43.0/24 maxlen: 24
188.211.249.0/24 maxlen: 24
188.211.250.0/23 maxlen: 24
188.211.252.0/22 maxlen: 24
94.177.27.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
212.237.224.0/22 maxlen: 24
89.42.29.0/24 maxlen: 24
94.190.248.0/22 maxlen: 24
89.42.215.0/24 maxlen: 24
195.133.202.0/23 maxlen: 24
89.36.32.0/22 maxlen: 24
195.133.208.0/23 maxlen: 24
85.204.148.0/22 maxlen: 24
94.177.65.0/24 maxlen: 24
217.19.1.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
93.115.155.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
62.112.0.0/21 maxlen: 24
89.37.228.0/22 maxlen: 24
194.88.112.0/20 maxlen: 24
89.37.236.0/22 maxlen: 24
93.115.111.0/24 maxlen: 24
62.112.12.0/23 maxlen: 24
62.112.30.0/24 maxlen: 24
86.105.104.0/22 maxlen: 24
194.58.64.0/23 maxlen: 24
89.34.171.0/24 maxlen: 24
188.240.40.0/23 maxlen: 24
89.44.210.0/24 maxlen: 24
84.234.16.0/20 maxlen: 24
46.102.174.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
89.40.166.0/24 maxlen: 24
89.40.176.0/22 maxlen: 24
185.172.20.0/22 maxlen: 24
89.37.106.0/24 maxlen: 24
194.135.26.0/23 maxlen: 24
185.64.100.0/22 maxlen: 24
86.104.209.0/24 maxlen: 24
91.232.136.0/22 maxlen: 24
77.81.1.0/24 maxlen: 24
188.212.104.0/22 maxlen: 24
77.81.124.0/22 maxlen: 24
89.37.188.0/22 maxlen: 24
213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
64.239.236.0/22 maxlen: 24
194.135.132.0/23 maxlen: 24
89.37.216.0/23 maxlen: 24
89.34.124.0/23 maxlen: 24
194.88.96.0/21 maxlen: 24
77.81.160.0/22 maxlen: 24
185.77.250.0/23 maxlen: 24
185.77.249.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55355863 (0x34ca9d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Mar 11 20:32:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b230c698f0262b669003823c91da59ee4884b27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:15:75:8d:08:a0:80:15:8c:2e:39:1d:bf:
c7:36:07:1e:72:7c:e0:4e:80:bd:a3:ad:f0:52:b9:
93:c5:d2:2e:b9:d5:3c:6c:b3:46:cc:c3:97:39:d7:
37:a7:b6:f9:00:e9:55:96:f7:58:ff:bc:c2:25:9e:
7a:00:9d:86:85:a4:15:ef:1e:bc:79:20:f6:d4:2c:
04:65:9e:df:8c:76:9c:0d:d4:37:ad:14:39:ee:aa:
bf:2a:13:36:ab:1d:85:7a:0b:ae:2f:82:73:77:a1:
7b:28:05:59:82:e9:b5:0b:14:ba:f6:71:4b:10:50:
9d:92:33:09:d2:c6:e7:79:50:25:31:ad:da:80:ac:
44:35:40:00:a3:0b:bf:b0:07:8a:5e:39:d5:23:87:
49:56:97:c5:ce:2e:16:ff:fb:5b:f5:0c:25:90:fa:
fd:70:bc:2b:3f:4e:2c:0a:f1:bc:d8:5f:0c:82:c4:
50:38:c2:c3:ea:53:7d:41:2d:92:81:c3:4a:ae:55:
cf:9f:85:2e:94:ae:de:30:ef:d2:d7:ab:ff:87:f6:
37:cb:ce:fc:32:92:7a:2b:64:25:ec:7e:07:13:9e:
6c:1f:78:cb:2d:f9:79:07:a5:f5:f8:98:9b:a3:41:
84:ff:03:39:20:1a:c5:97:da:e2:c9:45:4a:e6:92:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:30:C6:98:F0:26:2B:66:90:03:82:3C:91:DA:59:EE:48:84:B2:7E
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/sjDGmPAmK2aQA4I8kdpZ7kiEsn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
46.102.174.0/24
62.112.0.0/21
62.112.12.0/23
62.112.30.0/24
64.239.236.0/22
77.81.1.0/24
77.81.124.0/22
77.81.160.0/22
84.234.16.0/20
84.247.20.0/24
84.247.59.0/24
85.204.148.0/22
85.204.160.0/22
86.104.209.0/24
86.105.104.0/22
86.107.108.0/23
89.34.124.0/23
89.34.171.0/24
89.36.32.0/22
89.36.231.0/24
89.36.236.0/22
89.37.106.0/24
89.37.188.0/22
89.37.216.0/23
89.37.228.0/22
89.37.236.0/22
89.39.172.0/23
89.40.43.0/24
89.40.166.0/24
89.40.176.0/22
89.42.29.0/24
89.42.215.0/24
89.44.210.0/24
91.232.136.0/22
93.113.184.0/21
93.115.111.0/24
93.115.155.0/24
94.177.27.0/24
94.177.65.0/24
94.177.118.0/24
94.190.248.0/22
176.223.181.0/24
185.64.100.0/22
185.77.249.0-185.77.251.255
185.172.20.0/22
188.211.249.0-188.211.255.255
188.212.104.0/22
188.240.40.0/23
193.124.20.0/23
194.58.64.0/23
194.88.96.0/21
194.88.112.0/20
194.135.26.0/23
194.135.132.0/23
195.133.202.0/23
195.133.208.0/23
212.237.224.0/22
213.159.10.0-213.159.13.255
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
59:42:92:ea:d1:47:3e:e8:d5:45:00:5e:9e:78:61:31:ac:2d:
d3:20:43:bd:d3:79:47:8c:31:e7:92:15:80:97:64:bf:56:5d:
e6:3f:68:a0:e8:dd:d6:72:9f:a5:b2:db:78:be:f4:ca:97:ec:
cd:9b:26:cf:04:af:b5:d5:bd:8b:9c:91:8d:0c:dd:bc:55:7f:
aa:9d:96:fd:e5:e8:fc:33:5e:28:f0:bb:10:1b:e3:76:c8:16:
1f:96:8a:3e:67:c3:fa:f2:4a:9b:d6:34:e7:57:42:69:d5:ca:
97:54:6d:22:79:e2:61:68:ab:e5:5f:88:39:23:45:45:c9:fa:
8d:50:d9:f2:50:86:4e:76:74:42:2c:90:95:11:db:6f:bb:d3:
b1:49:0b:a9:c3:0c:ba:8f:12:41:37:5c:34:dd:a1:d2:fd:fa:
9b:22:44:48:97:b5:86:b5:c9:8d:8e:00:91:f4:c9:ae:e2:6e:
a2:ed:6a:0b:ce:14:4f:e4:2a:6d:0e:88:c0:9c:87:82:8a:b3:
61:86:d1:80:13:9f:f6:54:15:5f:5c:78:30:fe:94:ea:de:8a:
44:54:12:e5:a4:2c:8e:5c:16:11:e7:7e:c1:9f:3b:b2:e6:40:
23:a1:49:28:94:1d:ce:a4:c6:57:39:d8:97:85:47:86:d3:36:
93:9d:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org