Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/y9hACRJ2d2JYQoeQv8eUDD53dY4.roa
File: y9hACRJ2d2JYQoeQv8eUDD53dY4.roa (raw, json)
Hash identifier: /6g0SpSqGArkUd2rNMeLYjAYMXUzgECJshxZ8xxcaws=
Subject key identifier: CB:D8:40:09:12:76:77:62:58:42:87:90:BF:C7:94:0C:3E:77:75:8E
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 03E2BCD3
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/y9hACRJ2d2JYQoeQv8eUDD53dY4.roa
Signing time: Wed 04 May 2022 00:29:32 +0000
ROA not before: Wed 04 May 2022 00:29:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 93.115.155.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
212.237.224.0/22 maxlen: 24
86.104.209.0/24 maxlen: 24
62.112.0.0/21 maxlen: 24
93.113.184.0/21 maxlen: 24
93.115.111.0/24 maxlen: 24
86.105.104.0/22 maxlen: 24
195.133.202.0/23 maxlen: 24
85.204.148.0/22 maxlen: 24
94.177.65.0/24 maxlen: 24
86.107.108.0/23 maxlen: 24
217.19.1.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65191123 (0x3e2bcd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 4 00:29:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbd840091276776258428790bfc7940c3e77758e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:29:fa:b4:32:69:0c:7f:7a:50:b3:87:b3:
de:14:5c:8e:5d:d0:f7:8c:41:3c:b2:5e:74:af:19:
55:10:92:5f:8a:f5:8c:b5:d9:17:b3:fe:cd:2f:dc:
98:43:b2:fe:20:96:bd:80:91:f9:9b:fb:55:27:70:
bc:55:6b:16:78:aa:7c:fd:31:44:dd:cd:ef:04:87:
09:d0:73:7f:cc:2f:af:b2:18:bb:05:64:63:9e:bb:
b5:a9:e0:79:c1:14:1d:a1:7e:9f:d3:f0:88:6e:25:
90:3f:7e:82:50:cf:a8:03:10:7c:65:af:8d:d0:e1:
8a:75:25:e7:cc:93:72:3b:fd:ce:e6:7a:4a:43:47:
4f:b6:47:15:d0:1e:60:23:82:5d:e3:94:05:3c:32:
cd:6e:f1:45:89:12:94:34:32:16:d9:97:9d:a5:63:
c2:8b:56:16:c2:5e:b8:83:d3:59:c2:c2:5a:8c:16:
25:eb:e9:c4:c2:7e:7f:42:7d:a7:d2:76:a4:0f:ee:
9a:c3:62:89:e0:c8:5b:c7:ae:cc:8d:13:b0:73:db:
cd:bd:c6:d4:05:78:32:b7:34:e0:8d:b5:6f:c7:57:
ee:2a:37:4f:62:0a:b8:61:6e:94:22:0b:28:a4:07:
f1:06:19:f2:11:12:18:b6:5e:35:61:58:1d:ff:8f:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D8:40:09:12:76:77:62:58:42:87:90:BF:C7:94:0C:3E:77:75:8E
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/y9hACRJ2d2JYQoeQv8eUDD53dY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
84.247.59.0/24
85.204.148.0/22
86.104.209.0/24
86.105.104.0/22
86.107.108.0/23
93.113.184.0/21
93.115.111.0/24
93.115.155.0/24
94.177.65.0/24
94.177.118.0/24
185.77.249.0/24
195.133.202.0/23
212.237.224.0/22
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
61:23:d7:1b:a5:a2:11:1b:0a:58:b1:35:e1:b3:ac:d2:7a:b8:
a6:6e:b6:c4:2a:ee:38:8e:66:9b:a4:a9:c0:a5:32:52:5c:3d:
c2:5a:aa:f2:48:d2:97:24:1b:15:9b:26:20:a4:14:b5:8c:7f:
6f:2b:ed:4f:19:ee:ba:77:1d:e8:bd:b8:8d:91:6e:1d:8b:ea:
06:29:14:d3:78:0b:c5:ba:a2:77:0c:d4:fc:92:1d:15:d1:9c:
fa:09:90:62:47:10:de:93:da:49:f8:de:ba:87:35:89:08:86:
f0:e0:87:5b:b6:00:2e:65:4e:f7:da:ca:3f:e2:b0:62:83:90:
93:7b:fc:da:3c:26:35:64:f3:74:82:cf:7b:90:e9:2a:01:ef:
d1:b4:f0:81:89:1d:20:d0:1a:bd:8d:81:da:90:3e:ca:a1:ab:
1e:66:98:dc:83:66:03:02:31:41:ae:ec:61:06:71:b6:9f:21:
d2:db:b6:bb:fe:85:ed:91:7e:f2:30:6a:5c:7c:48:b6:70:0d:
f7:34:80:d0:88:4c:6a:bd:1e:75:00:2f:ea:0e:de:4f:31:c0:
35:02:8f:be:f1:80:3a:93:a0:9b:5c:ca:ee:fb:12:5a:d9:eb:
9a:4a:37:a3:f5:a1:de:32:90:f2:43:9a:bd:de:23:ca:62:0b:
3f:35:16:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org