Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/tOvffZQcY-5zd3QHxKrebukQWNs.roa
File: tOvffZQcY-5zd3QHxKrebukQWNs.roa (raw, json)
Hash identifier: ek+Fzd1RvJ57Sn91fdlzUwej263UOk+2lgtcwfjbNUs=
Subject key identifier: B4:EB:DF:7D:94:1C:63:EE:73:77:74:07:C4:AA:DE:6E:E9:10:58:DB
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 0187C6A0D3A5198F88B5D7B67FD31DB9CE67
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/tOvffZQcY-5zd3QHxKrebukQWNs.roa
Signing time: Fri 28 Apr 2023 06:50:41 +0000
ROA not before: Fri 28 Apr 2023 06:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9119
IP address blocks: 85.208.172.0/24 maxlen: 24
185.175.0.0/22 maxlen: 22
80.65.174.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
194.39.85.0/24 maxlen: 24
213.253.120.0/22 maxlen: 22
213.253.124.0/22 maxlen: 22
91.132.74.0/23 maxlen: 23
2.58.48.0/22 maxlen: 22
80.65.166.0/24 maxlen: 24
80.65.165.0/24 maxlen: 24
80.65.160.0/24 maxlen: 24
80.65.160.0/20 maxlen: 20
80.65.164.0/24 maxlen: 24
80.65.163.0/24 maxlen: 24
80.65.162.0/24 maxlen: 24
80.65.161.0/24 maxlen: 24
80.65.172.0/24 maxlen: 24
80.65.167.0/24 maxlen: 24
80.65.171.0/24 maxlen: 24
80.65.170.0/24 maxlen: 24
80.65.169.0/24 maxlen: 24
80.65.168.0/24 maxlen: 24
147.78.219.0/24 maxlen: 24
147.78.216.0/24 maxlen: 24
147.78.216.0/22 maxlen: 22
213.253.96.0/20 maxlen: 20
213.253.96.0/21 maxlen: 21
217.199.132.0/24 maxlen: 24
217.199.131.0/24 maxlen: 24
213.253.104.0/22 maxlen: 22
217.199.130.0/24 maxlen: 24
217.199.129.0/24 maxlen: 24
217.199.128.0/20 maxlen: 24
217.199.128.0/24 maxlen: 24
217.199.133.0/24 maxlen: 24
217.199.139.0/24 maxlen: 24
213.253.112.0/22 maxlen: 22
213.253.111.0/24 maxlen: 24
217.199.138.0/24 maxlen: 24
217.199.134.0/24 maxlen: 24
217.199.137.0/24 maxlen: 24
217.199.136.0/24 maxlen: 24
213.253.110.0/24 maxlen: 24
213.253.108.0/22 maxlen: 22
217.199.135.0/24 maxlen: 24
213.253.108.0/24 maxlen: 24
213.253.109.0/24 maxlen: 24
217.199.140.0/24 maxlen: 24
213.253.116.0/22 maxlen: 22
217.199.143.0/24 maxlen: 24
217.199.142.0/24 maxlen: 24
217.199.141.0/24 maxlen: 24
213.253.64.0/19 maxlen: 19
45.15.44.0/22 maxlen: 22
212.103.128.0/19 maxlen: 19
84.41.122.0/23 maxlen: 23
84.41.120.0/23 maxlen: 23
84.41.124.0/22 maxlen: 22
84.41.96.0/21 maxlen: 21
84.41.104.0/22 maxlen: 22
84.41.108.0/23 maxlen: 23
84.41.112.0/23 maxlen: 23
84.41.111.0/24 maxlen: 24
84.41.110.0/24 maxlen: 24
84.41.115.0/24 maxlen: 24
84.41.114.0/24 maxlen: 24
84.41.116.0/22 maxlen: 22
46.163.48.0/21 maxlen: 21
46.163.58.0/24 maxlen: 24
46.163.58.0/23 maxlen: 23
46.163.56.0/23 maxlen: 23
46.163.56.0/24 maxlen: 24
46.163.59.0/24 maxlen: 24
46.163.60.0/22 maxlen: 22
45.156.140.0/23 maxlen: 23
45.156.140.0/24 maxlen: 24
45.8.0.0/22 maxlen: 22
46.163.0.0/19 maxlen: 19
46.163.32.0/20 maxlen: 20
212.13.224.0/19 maxlen: 19
84.41.32.0/19 maxlen: 19
84.41.64.0/19 maxlen: 19
84.41.0.0/18 maxlen: 18
84.41.0.0/19 maxlen: 19
84.41.0.0/21 maxlen: 21
185.54.131.0/24 maxlen: 24
185.54.130.0/24 maxlen: 24
185.54.128.0/24 maxlen: 24
185.54.128.0/23 maxlen: 23
2a0b:c300::/29 maxlen: 29
2a02:805::/33 maxlen: 33
2a0b:c306::/32 maxlen: 32
2a02:801::/33 maxlen: 33
2a02:800::/32 maxlen: 32
2a0e:2e00::/29 maxlen: 29
2a0e:1e80::/29 maxlen: 29
2a09:e140::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:a0:d3:a5:19:8f:88:b5:d7:b6:7f:d3:1d:b9:ce:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Apr 28 06:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4ebdf7d941c63ee73777407c4aade6ee91058db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:21:6c:ad:f5:cf:5b:12:29:d3:b8:b6:48:05:
9c:dc:30:9b:ef:a9:bc:fc:64:17:f3:98:83:26:bd:
5c:42:de:75:a1:c5:f3:b2:a7:c7:65:c6:1d:f9:b2:
21:c0:ec:97:c9:5d:f8:57:66:9f:5c:e5:00:f9:3e:
ec:be:e6:b3:c2:08:96:61:8a:1e:cb:64:90:f4:53:
38:d7:6b:53:bd:74:42:d3:64:ba:55:eb:9c:62:8c:
fb:36:7a:a3:8f:5b:71:79:51:e6:26:52:88:eb:37:
43:d3:b7:e2:4a:d2:5c:d0:b5:95:08:ae:b0:af:ab:
77:5b:10:41:dc:c8:8d:0f:15:84:8d:ac:74:1e:bd:
05:df:be:6a:cd:13:77:6a:a1:83:65:59:d1:86:a7:
1f:12:02:3e:d7:a7:80:e2:5d:dd:a2:ae:9c:16:9e:
3e:5b:08:a8:ec:ec:2d:4c:d7:c9:9c:51:8b:8e:a6:
f3:fe:f5:d4:33:1a:b6:2b:29:21:6f:3f:cf:a4:51:
3b:73:59:15:3b:4b:37:4c:19:cf:8f:8e:39:a7:05:
84:42:50:7e:93:4f:d4:20:20:50:2b:53:18:17:3d:
e2:78:d4:8c:16:e2:c4:aa:26:cf:b3:1d:c8:44:1c:
4f:08:8f:a2:54:28:b7:f1:2b:a8:2f:8b:aa:fc:5c:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EB:DF:7D:94:1C:63:EE:73:77:74:07:C4:AA:DE:6E:E9:10:58:DB
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/tOvffZQcY-5zd3QHxKrebukQWNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.48.0/22
45.8.0.0/22
45.15.44.0/22
45.156.140.0/23
46.163.0.0/18
80.65.160.0/20
84.41.0.0/17
85.208.172.0/24
91.132.74.0/23
147.78.216.0/22
185.54.128.0/22
185.175.0.0/22
194.39.85.0/24
212.13.224.0/19
212.103.128.0/19
213.253.64.0/18
217.199.128.0/20
IPv6:
2a02:800::-2a02:801:7fff:ffff:ffff:ffff:ffff:ffff
2a02:805::/33
2a09:e140::/29
2a0b:c300::/29
2a0e:1e80::/29
2a0e:2e00::/29
Signature Algorithm: sha256WithRSAEncryption
6a:9a:89:7b:4c:0c:38:06:5b:48:4b:ba:0a:f2:c2:cd:eb:f6:
35:b5:70:58:4f:35:e4:6f:c2:75:81:1e:77:aa:4f:d4:79:79:
f3:e6:39:d6:4c:98:ce:d1:cd:4c:33:6d:0d:f2:d9:f5:a8:96:
05:fb:80:5d:58:15:76:23:54:e3:25:8b:f9:bc:dd:8d:79:83:
23:d7:0a:72:6b:fe:92:4a:b6:32:a1:11:54:27:73:af:85:cf:
fd:80:66:d7:12:f2:97:43:81:6f:23:93:40:61:c2:f7:21:d8:
9d:54:68:1f:6a:d9:5c:6d:0e:f3:82:2e:24:7f:c0:3c:7f:37:
51:c1:fe:9e:6c:64:20:77:f2:e2:0f:57:a5:d5:18:6e:fb:b1:
7c:9b:c5:49:b8:0c:4b:00:2c:95:7e:d9:49:5b:45:08:43:c0:
3c:88:eb:a2:a2:9f:39:4c:e7:59:f6:57:4b:32:ae:14:3e:c2:
e3:a1:f7:5b:5e:19:2c:f3:17:ce:66:ec:7e:71:a6:67:f9:7a:
de:04:54:53:4b:14:6f:76:01:20:b5:85:f2:c2:03:c4:d4:72:
0c:32:5e:e7:40:7b:96:93:7f:2e:8c:27:39:b9:ed:65:31:a8:
e3:0c:35:87:41:71:69:ab:9b:10:d5:9c:0a:8f:a4:30:0f:0a:
e4:02:aa:05
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAYfGoNOlGY+Itde2f9Mduc5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi
Y2RkZmYwHhcNMjMwNDI4MDY1MDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGViZGY3ZDk0MWM2M2VlNzM3Nzc0MDdjNGFhZGU2ZWU5MTA1OGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiFsrfXPWxIp07i2SAWc3DCb76m8
/GQX85iDJr1cQt51ocXzsqfHZcYd+bIhwOyXyV34V2afXOUA+T7svuazwgiWYYoe
y2SQ9FM412tTvXRC02S6VeucYoz7Nnqjj1txeVHmJlKI6zdD07fiStJc0LWVCK6w
r6t3WxBB3MiNDxWEjax0Hr0F375qzRN3aqGDZVnRhqcfEgI+16eA4l3doq6cFp4+
Wwio7OwtTNfJnFGLjqbz/vXUMxq2Kykhbz/PpFE7c1kVO0s3TBnPj445pwWEQlB+
k0/UICBQK1MYFz3ieNSMFuLEqibPsx3IRBxPCI+iVCi38SuoL4uq/Fz+kQIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFLTr332UHGPuc3d0B8Sq3m7pEFjbMB8GA1UdIwQY
MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt
MjRmZGRjNmQxNDdiLzEvdE92ZmZaUWNZLTV6ZDNRSHhLcmVidWtRV05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi
LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjBsBAIAATBmAwQCAjow
AwQCLQgAAwQCLQ8sAwQBLZyMAwQGLqMAAwQEUEGgAwQHVCkAAwQAVdCsAwQBW4RK
AwQCk07YAwQCuTaAAwQCua8AAwQAwidVAwQF1A3gAwQF1GeAAwQG1f1AAwQE2ceA
MDoEAgACMDQwDgMEAyoCCAMGByoCCAEAAwYHKgIIBQADBQMqCeFAAwUDKgvDAAMF
AyoOHoADBQMqDi4AMA0GCSqGSIb3DQEBCwUAA4IBAQBqmol7TAw4BltIS7oK8sLN
6/Y1tXBYTzXkb8J1gR53qk/UeXnz5jnWTJjO0c1MM20N8tn1qJYF+4BdWBV2I1Tj
JYv5vN2NeYMj1wpya/6SSrYyoRFUJ3Ovhc/9gGbXEvKXQ4FvI5NAYcL3IdidVGgf
atlcbQ7zgi4kf8A8fzdRwf6ebGQgd/LiD1el1Rhu+7F8m8VJuAxLACyVftlJW0UI
Q8A8iOuiop85TOdZ9ldLMq4UPsLjofdbXhks8xfOZux+caZn+XreBFRTSxRvdgEg
tYXywgPE1HIMMl7nQHuWk38ujCc5ue1lMajjDDWHQXFpq5sQ1ZwKj6QwDwrkAqoF
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:35 2025 by rpki-client