Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/5MCKI8pCaSE1RoxUDBYO3Al-dZo.roa
File: 5MCKI8pCaSE1RoxUDBYO3Al-dZo.roa (raw, json)
Hash identifier: iGqSFNeXkg0qaGgACa8Tu9TK4LN28IGFXWx+sXD1CcM=
Subject key identifier: E4:C0:8A:23:CA:42:69:21:35:46:8C:54:0C:16:0E:DC:09:7E:75:9A
Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial: 0760FFD6
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/5MCKI8pCaSE1RoxUDBYO3Al-dZo.roa
Signing time: Sat 01 Jan 2022 04:57:40 +0000
ROA not before: Sat 01 Jan 2022 04:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203877
IP address blocks: 178.22.219.0/24 maxlen: 24
178.22.218.0/24 maxlen: 24
178.22.216.0/24 maxlen: 24
178.22.217.0/24 maxlen: 24
178.22.223.0/24 maxlen: 24
178.22.222.0/24 maxlen: 24
178.22.221.0/24 maxlen: 24
178.22.220.0/24 maxlen: 24
185.102.236.0/22 maxlen: 22
91.226.240.0/24 maxlen: 24
62.240.3.0/24 maxlen: 24
62.240.2.0/24 maxlen: 24
62.240.4.0/24 maxlen: 24
62.240.1.0/24 maxlen: 24
62.240.0.0/24 maxlen: 24
62.240.6.0/24 maxlen: 24
62.240.5.0/24 maxlen: 24
62.240.8.0/22 maxlen: 22
62.240.7.0/24 maxlen: 24
62.240.17.0/24 maxlen: 24
62.240.16.0/24 maxlen: 24
62.240.13.0/24 maxlen: 24
62.240.12.0/24 maxlen: 24
62.240.15.0/24 maxlen: 24
62.240.14.0/24 maxlen: 24
62.240.20.0/24 maxlen: 24
62.240.18.0/24 maxlen: 24
91.226.242.0/24 maxlen: 24
91.226.241.0/24 maxlen: 24
91.226.243.0/24 maxlen: 24
85.202.112.0/24 maxlen: 24
85.202.117.0/24 maxlen: 24
85.202.116.0/24 maxlen: 24
85.202.118.0/24 maxlen: 24
85.202.113.0/24 maxlen: 24
85.202.115.0/24 maxlen: 24
85.202.114.0/24 maxlen: 24
85.202.120.0/24 maxlen: 24
85.202.121.0/24 maxlen: 24
85.202.127.0/24 maxlen: 24
109.94.112.0/21 maxlen: 21
109.94.124.0/23 maxlen: 23
109.94.119.0/24 maxlen: 24
109.94.120.0/22 maxlen: 22
185.118.169.0/24 maxlen: 24
185.118.168.0/24 maxlen: 24
185.118.170.0/24 maxlen: 24
185.118.171.0/24 maxlen: 24
109.94.224.0/22 maxlen: 22
2a01:6440::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123797462 (0x760ffd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Validity
Not Before: Jan 1 04:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4c08a23ca42692135468c540c160edc097e759a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:c6:18:d4:b5:a3:4e:3d:c9:9b:45:db:1c:
fe:f0:bf:58:da:d0:dd:12:82:6d:2d:7a:cd:5c:a5:
60:3b:49:d4:72:a3:c5:ee:a0:aa:84:ff:ff:38:49:
68:84:2f:c6:93:9f:12:71:f0:1a:05:45:32:d0:0d:
71:2e:dc:bc:2b:83:86:e5:49:35:69:05:ad:35:3f:
de:62:f1:13:97:eb:0c:7a:ee:39:c5:6a:3f:dc:bd:
0f:69:d7:d5:00:fd:56:47:bb:aa:fd:0f:38:c3:a9:
67:af:9b:92:73:0b:b9:03:94:0e:74:87:01:0c:8b:
78:18:59:f1:2a:d5:68:2a:05:8f:2a:f9:91:94:63:
f5:e3:8e:5f:06:86:6b:9b:93:6c:65:b7:d6:23:03:
b0:53:71:67:09:56:e3:33:9a:47:87:d5:26:63:46:
2b:fc:9c:12:fc:bb:84:a4:be:aa:0b:d8:fb:70:b1:
42:de:b4:e1:21:73:6e:95:c2:68:1b:19:a8:53:68:
b1:21:80:cb:c3:e4:01:cd:9f:87:46:20:b8:b7:82:
79:5c:54:60:76:4c:50:a6:b4:95:6b:d7:73:44:cd:
a2:f4:91:7b:1b:3a:c3:cc:14:d8:71:de:e6:ab:42:
36:78:2f:8e:e8:97:53:11:3b:0f:af:1a:6f:bd:b0:
e1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C0:8A:23:CA:42:69:21:35:46:8C:54:0C:16:0E:DC:09:7E:75:9A
X509v3 Authority Key Identifier:
keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/5MCKI8pCaSE1RoxUDBYO3Al-dZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.240.0.0-62.240.18.255
62.240.20.0/24
85.202.112.0-85.202.118.255
85.202.120.0/23
85.202.127.0/24
91.226.240.0/22
109.94.112.0-109.94.125.255
109.94.224.0/22
178.22.216.0/21
185.102.236.0/22
185.118.168.0/22
IPv6:
2a01:6440::/32
Signature Algorithm: sha256WithRSAEncryption
be:4a:4d:35:f0:1e:3a:6c:50:96:2b:57:2c:02:91:63:84:4f:
dc:05:3d:22:c1:2c:5c:78:49:a8:3a:6c:44:fd:fc:89:3a:de:
8d:25:44:69:21:3e:41:04:e0:23:bc:92:49:78:5c:ba:24:02:
40:42:43:69:40:13:62:fe:e1:6f:66:c3:8b:56:6c:ad:32:16:
4f:69:00:f9:2b:15:68:60:06:2f:0c:e6:56:2f:2b:2d:65:e0:
a9:9f:b2:4b:c3:08:85:47:e0:fa:ba:ca:0c:02:e6:b7:e3:66:
05:38:13:e1:63:c0:aa:7e:20:b6:0a:2b:a3:cd:48:99:e1:d3:
b8:fb:43:ad:fb:06:4a:11:b1:6f:3d:5d:b0:db:8d:df:00:2e:
6b:9a:93:b4:da:8a:ee:0b:54:3c:82:a4:a3:b7:39:74:c7:b5:
1a:5b:1d:8f:62:70:1e:2e:8f:f6:74:14:4d:c5:08:0f:cf:f8:
0d:b7:35:f4:42:e9:8a:04:df:8e:19:66:f4:6a:bc:3b:41:ca:
40:e6:a6:28:37:52:c8:cb:e9:de:9f:07:fa:09:96:09:20:0e:
4e:ef:0e:1a:d9:48:df:ea:7c:00:1e:e6:81:0d:35:05:30:0e:
c1:5c:f3:12:c3:34:a6:1c:e4:7d:0c:68:8e:6d:ac:27:07:c3:
92:8b:3f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net