Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/yruiEhFLUiK1w5N5anWCX9a67Tw.roa
File: yruiEhFLUiK1w5N5anWCX9a67Tw.roa (raw, json)
Hash identifier: JLCgtxxGT1iZSp16fBVVBiyozmLyY8Ft0oJO/jwFqFc=
Subject key identifier: CA:BB:A2:12:11:4B:52:22:B5:C3:93:79:6A:75:82:5F:D6:BA:ED:3C
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 03D4A7AB
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/yruiEhFLUiK1w5N5anWCX9a67Tw.roa
Signing time: Thu 28 Apr 2022 23:41:17 +0000
ROA not before: Thu 28 Apr 2022 23:41:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 93.115.155.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
212.237.224.0/22 maxlen: 24
86.104.209.0/24 maxlen: 24
62.112.0.0/21 maxlen: 24
93.113.184.0/21 maxlen: 24
93.115.111.0/24 maxlen: 24
86.105.104.0/22 maxlen: 24
188.212.104.0/22 maxlen: 24
77.81.124.0/22 maxlen: 24
195.133.202.0/23 maxlen: 24
85.204.148.0/22 maxlen: 24
94.177.65.0/24 maxlen: 24
86.107.108.0/23 maxlen: 24
217.19.1.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64268203 (0x3d4a7ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 28 23:41:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cabba212114b5222b5c393796a75825fd6baed3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:52:6a:81:f0:de:e5:cb:d8:2f:80:69:2c:
32:b3:9d:3a:34:55:38:b4:8d:cf:0f:35:73:a4:07:
de:fe:58:c9:ba:b2:b3:ca:20:00:a6:23:e3:03:ca:
58:98:f9:94:e9:d2:dd:79:39:4e:4b:7b:57:46:f5:
0f:c3:0c:d5:06:65:ef:50:5d:29:eb:51:e0:9a:26:
c2:7d:cb:16:ba:76:b2:12:9a:25:89:7a:aa:29:52:
e0:f3:cc:e8:77:8d:39:b9:d8:6a:36:f2:c5:7e:7d:
8f:28:8f:32:42:5d:64:b6:d8:55:72:13:ce:e8:57:
5a:d0:7d:3c:33:ac:22:f8:e3:17:11:2a:58:c6:21:
36:08:42:11:44:da:1f:a1:3b:a2:bd:35:b6:c6:01:
38:e1:80:ec:cd:b9:29:7f:c0:a4:cb:80:0d:d7:30:
87:27:19:ff:a1:0b:93:95:5b:26:ac:8d:c2:c6:b0:
fb:37:57:68:25:57:eb:60:b2:11:e9:6b:70:3b:3d:
d5:0c:c3:65:b5:6a:66:91:1e:a3:28:7f:69:ea:17:
8c:30:2d:1c:f6:83:2e:fe:2b:f5:92:8d:3d:1a:3d:
b4:71:ef:60:a0:8c:08:18:63:c0:fb:49:11:46:8d:
ea:9c:b6:79:72:76:2e:88:a8:89:ca:cf:b8:19:6c:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BB:A2:12:11:4B:52:22:B5:C3:93:79:6A:75:82:5F:D6:BA:ED:3C
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/yruiEhFLUiK1w5N5anWCX9a67Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
77.81.124.0/22
84.247.59.0/24
85.204.148.0/22
86.104.209.0/24
86.105.104.0/22
86.107.108.0/23
93.113.184.0/21
93.115.111.0/24
93.115.155.0/24
94.177.65.0/24
94.177.118.0/24
176.223.181.0/24
185.77.249.0/24
188.212.104.0/22
195.133.202.0/23
212.237.224.0/22
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
37:56:a5:9a:21:60:ed:81:1b:0b:08:49:83:e3:6e:f7:a6:59:
85:77:26:1b:49:e9:00:39:62:6e:29:3a:51:03:3d:c1:a8:73:
8c:88:57:9f:cc:6a:a9:14:22:c1:3a:40:6a:06:e5:ef:f2:a1:
61:66:69:8e:4a:46:54:74:b7:58:07:55:d6:af:29:3e:fa:a8:
8a:5c:75:da:77:e6:ac:51:56:86:08:30:0f:5f:c8:c7:a6:71:
19:f1:08:75:b7:04:a4:de:3a:00:86:b0:22:a3:79:ad:34:00:
31:f4:f1:e6:6e:fc:dd:84:68:cb:f6:84:40:0a:99:91:f8:05:
18:c4:c1:09:ed:84:97:f1:53:93:d4:ba:44:f2:4f:85:ff:f5:
0d:60:1b:fe:f9:d8:1a:1b:08:73:5f:af:7b:5b:51:8b:fc:2a:
d3:1b:22:a5:55:a7:c3:5a:8e:81:f3:2d:ed:6f:c7:7f:54:26:
6f:b8:26:37:71:8d:40:dc:6d:cd:22:c0:38:1e:57:57:88:9e:
fe:23:6b:00:5d:16:07:9b:08:50:0c:5c:42:f7:b2:24:29:b0:
28:7a:07:6e:1f:9d:c5:a2:55:72:e2:bf:59:98:91:9c:59:e1:
61:48:eb:1d:40:f5:16:a2:ab:53:7f:94:ed:cf:17:1b:90:7d:
9d:c2:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org