Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/sFvF5a75AAISddhiP01fDTAauLw.roa
File: sFvF5a75AAISddhiP01fDTAauLw.roa (raw, json)
Hash identifier: F4rXwvasoEvlPp8q6gLElKJhChe9/pg0CTC7dbxf4Rs=
Subject key identifier: B0:5B:C5:E5:AE:F9:00:02:12:75:D8:62:3F:4D:5F:0D:30:1A:B8:BC
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 0188FC55BDA0E58F0A30AE0DE580BE251D35
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/sFvF5a75AAISddhiP01fDTAauLw.roa
Signing time: Tue 27 Jun 2023 10:10:57 +0000
ROA not before: Tue 27 Jun 2023 10:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3292
IP address blocks: 195.215.0.0/16 maxlen: 16
87.60.0.0/14 maxlen: 14
62.242.0.0/15 maxlen: 15
87.56.128.0/17 maxlen: 17
192.66.175.0/24 maxlen: 24
192.66.180.0/24 maxlen: 24
192.66.181.0/24 maxlen: 24
2.104.0.0/13 maxlen: 13
176.20.0.0/17 maxlen: 17
195.97.128.0/18 maxlen: 18
194.239.0.0/16 maxlen: 16
176.20.0.0/14 maxlen: 14
93.178.128.0/18 maxlen: 18
87.57.0.0/16 maxlen: 16
195.249.0.0/16 maxlen: 16
80.160.0.0/13 maxlen: 13
93.160.0.0/13 maxlen: 13
193.163.158.0/23 maxlen: 23
128.76.0.0/16 maxlen: 16
193.163.160.0/21 maxlen: 21
212.130.0.0/16 maxlen: 16
87.59.0.0/16 maxlen: 16
176.22.0.0/15 maxlen: 15
194.247.188.0/23 maxlen: 23
131.164.0.0/16 maxlen: 16
193.39.139.0/24 maxlen: 24
192.66.25.0/24 maxlen: 24
87.56.0.0/18 maxlen: 18
192.66.33.0/24 maxlen: 24
192.66.38.0/24 maxlen: 24
192.66.36.0/24 maxlen: 24
195.184.32.0/19 maxlen: 19
194.182.240.0/20 maxlen: 20
87.48.0.0/13 maxlen: 13
188.176.0.0/13 maxlen: 13
95.166.64.0/18 maxlen: 18
87.58.128.0/17 maxlen: 17
193.162.145.0/24 maxlen: 24
193.162.152.0/21 maxlen: 21
193.162.146.0/24 maxlen: 24
85.129.0.0/17 maxlen: 17
194.182.232.0/21 maxlen: 21
81.31.80.0/20 maxlen: 20
91.199.190.0/24 maxlen: 24
87.48.0.0/12 maxlen: 12
193.163.10.0/24 maxlen: 24
195.95.181.0/24 maxlen: 24
193.163.24.0/22 maxlen: 22
80.62.0.0/15 maxlen: 15
95.166.128.0/17 maxlen: 17
94.189.0.0/17 maxlen: 17
128.77.128.0/17 maxlen: 17
194.192.0.0/16 maxlen: 16
193.3.130.0/23 maxlen: 23
193.3.140.0/24 maxlen: 24
193.3.141.0/24 maxlen: 24
193.3.142.0/24 maxlen: 24
83.88.0.0/13 maxlen: 13
194.182.144.0/21 maxlen: 21
193.162.98.0/23 maxlen: 23
87.58.0.0/18 maxlen: 18
80.196.0.0/14 maxlen: 14
62.135.128.0/17 maxlen: 17
176.21.0.0/16 maxlen: 16
193.162.32.0/23 maxlen: 23
193.88.0.0/15 maxlen: 15
193.3.224.0/22 maxlen: 22
176.20.192.0/18 maxlen: 18
194.182.128.0/20 maxlen: 20
195.41.0.0/16 maxlen: 16
2001:6c8::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:55:bd:a0:e5:8f:0a:30:ae:0d:e5:80:be:25:1d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jun 27 10:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b05bc5e5aef900021275d8623f4d5f0d301ab8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d8:9d:ce:ee:bb:80:6b:30:0f:43:5a:a1:c6:
fa:08:9b:41:a2:01:e4:22:47:39:ca:8c:14:0e:31:
24:97:7f:41:ad:69:08:8d:81:d4:8b:8c:d4:ed:39:
c1:e6:22:21:f6:a3:13:0c:6c:2a:a7:7d:ca:ae:59:
93:a9:3e:f3:56:4d:f0:71:ae:73:e4:20:68:02:4c:
79:d3:a6:86:d0:4d:79:f0:1e:a1:3b:6a:63:bf:75:
5b:a8:f6:6b:5d:56:a0:a9:50:71:38:7d:43:cb:35:
61:76:0c:7e:ec:6b:c1:79:5b:3d:05:25:99:15:0c:
42:95:f6:06:a4:b5:6b:d1:ac:01:fc:3b:f5:de:4b:
30:81:21:df:28:7d:ae:50:9f:a2:80:35:e3:2d:e2:
31:28:67:bd:e5:70:7e:30:a4:1a:bf:0f:7e:c7:c0:
d2:ee:e8:ca:e3:39:b9:d0:b9:5e:39:8f:ba:34:5b:
64:49:f8:3d:bc:1b:a2:3b:e6:5e:88:b2:a6:ea:3c:
84:b6:97:1d:df:26:e4:96:ff:0a:58:f6:9c:26:98:
eb:4e:d2:ae:5d:d9:04:cd:e7:35:e4:4e:84:11:ff:
25:ef:2e:b7:be:cb:e3:b1:d9:6a:99:73:6d:09:14:
db:12:ce:ff:0c:33:08:63:78:06:e6:31:86:92:2e:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5B:C5:E5:AE:F9:00:02:12:75:D8:62:3F:4D:5F:0D:30:1A:B8:BC
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/sFvF5a75AAISddhiP01fDTAauLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.104.0.0/13
62.135.128.0/17
62.242.0.0/15
80.62.0.0/15
80.160.0.0/13
80.196.0.0/14
81.31.80.0/20
83.88.0.0/13
85.129.0.0/17
87.48.0.0/12
91.199.190.0/24
93.160.0.0/13
93.178.128.0/18
94.189.0.0/17
95.166.64.0-95.166.255.255
128.76.0.0/16
128.77.128.0/17
131.164.0.0/16
176.20.0.0/14
188.176.0.0/13
192.66.25.0/24
192.66.33.0/24
192.66.36.0/24
192.66.38.0/24
192.66.175.0/24
192.66.180.0/23
193.3.130.0/23
193.3.140.0-193.3.142.255
193.3.224.0/22
193.39.139.0/24
193.88.0.0/15
193.162.32.0/23
193.162.98.0/23
193.162.145.0-193.162.146.255
193.162.152.0/21
193.163.10.0/24
193.163.24.0/22
193.163.158.0-193.163.167.255
194.182.128.0-194.182.151.255
194.182.232.0-194.182.255.255
194.192.0.0/16
194.239.0.0/16
194.247.188.0/23
195.41.0.0/16
195.95.181.0/24
195.97.128.0/18
195.184.32.0/19
195.215.0.0/16
195.249.0.0/16
212.130.0.0/16
IPv6:
2001:6c8::/29
Signature Algorithm: sha256WithRSAEncryption
36:c0:3e:77:86:ab:73:a4:f4:d7:3e:e0:0b:4a:c8:d5:2a:55:
99:6d:87:ee:dc:89:55:81:b2:84:a8:fc:61:57:ac:9e:99:6e:
82:d7:2d:fc:89:1b:c4:d4:6e:5b:ff:94:0c:b1:a7:64:68:21:
52:14:15:19:19:64:2a:18:30:2c:98:a4:c8:ca:ef:aa:60:f6:
e9:c5:eb:08:4e:b0:11:cb:e3:20:69:b2:e2:54:ae:20:3c:c8:
81:dc:7d:7b:24:b6:e5:04:65:36:2c:ba:ab:e0:a3:07:1f:18:
a0:48:ba:9a:8b:e9:b3:c2:82:63:4f:4c:a2:6f:04:ab:d8:36:
f6:6a:99:86:71:bc:46:2c:55:ad:d1:3c:9b:23:3e:fa:50:f6:
ff:4f:38:19:ec:a9:64:ac:39:c8:35:d9:e7:69:60:bc:a7:05:
b3:40:f5:01:70:0f:43:04:10:17:f0:c1:c8:d0:ae:75:9b:9a:
ee:5d:32:65:4e:1b:f2:1b:1c:33:f7:c0:8f:da:9a:37:54:96:
4a:98:e5:42:d2:8b:4b:71:ba:b8:c6:e8:08:e5:e6:73:6f:b9:
2c:ea:e9:32:2a:16:79:ba:2b:b3:17:4e:93:6f:44:cd:d2:bc:
2e:02:78:4b:a6:ad:52:78:7d:4c:99:9a:3f:83:e3:83:43:28:
e2:53:c0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:52 2024 by rpki-client on console-ams.rpki-client.org