Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/E_wqherNtOhSdbk-wa-mMiYoXyU.roa
File: E_wqherNtOhSdbk-wa-mMiYoXyU.roa (raw, json)
Hash identifier: u8bSO2/tEnBJop59cnnEd60vaSkoCuxrs7roPjewfh8=
Subject key identifier: 13:FC:2A:85:EA:CD:B4:E8:52:75:B9:3E:C1:AF:A6:32:26:28:5F:25
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 17DFCA58
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/E_wqherNtOhSdbk-wa-mMiYoXyU.roa
Signing time: Sat 01 Jan 2022 03:59:51 +0000
ROA not before: Sat 01 Jan 2022 03:59:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8866
IP address blocks: 90.154.128.0/17 maxlen: 24
62.73.64.0/18 maxlen: 24
89.25.124.0/22 maxlen: 22
85.187.46.0/23 maxlen: 24
212.72.199.0/24 maxlen: 24
212.72.198.0/24 maxlen: 24
212.72.202.0/23 maxlen: 24
212.72.212.0/24 maxlen: 24
89.25.72.0/22 maxlen: 22
85.187.22.0/23 maxlen: 24
85.187.24.0/21 maxlen: 24
89.25.100.0/22 maxlen: 22
85.187.32.0/21 maxlen: 24
83.228.0.0/17 maxlen: 24
79.100.0.0/16 maxlen: 24
78.154.0.0/19 maxlen: 24
185.167.144.0/22 maxlen: 24
212.72.214.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
212.5.128.0/19 maxlen: 24
212.39.64.0/19 maxlen: 24
82.146.0.0/22 maxlen: 22
82.146.6.0/23 maxlen: 24
82.146.11.0/24 maxlen: 24
82.146.24.0/23 maxlen: 24
89.25.40.0/21 maxlen: 21
89.25.52.0/22 maxlen: 22
89.25.56.0/21 maxlen: 21
89.25.64.0/21 maxlen: 21
82.146.28.0/23 maxlen: 24
82.146.31.0/24 maxlen: 24
87.126.0.0/16 maxlen: 24
95.43.206.0/24 maxlen: 24
95.43.220.0/22 maxlen: 22
87.118.144.0/22 maxlen: 22
87.118.144.0/23 maxlen: 23
213.91.154.0/24 maxlen: 24
87.118.164.0/22 maxlen: 22
77.85.0.0/16 maxlen: 24
213.91.128.0/17 maxlen: 24
46.10.166.0/23 maxlen: 23
84.238.136.0/22 maxlen: 22
84.238.134.0/23 maxlen: 24
84.238.140.0/23 maxlen: 23
84.238.142.0/23 maxlen: 23
84.238.144.0/21 maxlen: 21
84.238.152.0/22 maxlen: 24
84.238.156.0/22 maxlen: 22
84.238.165.0/24 maxlen: 24
84.238.168.0/21 maxlen: 21
84.238.167.0/24 maxlen: 24
84.238.178.0/23 maxlen: 24
84.238.180.0/22 maxlen: 22
82.137.64.0/18 maxlen: 24
95.43.0.0/17 maxlen: 24
213.16.32.0/19 maxlen: 24
84.238.128.0/22 maxlen: 22
46.10.0.0/16 maxlen: 24
84.238.192.0/22 maxlen: 24
84.238.204.0/22 maxlen: 22
87.116.64.0/22 maxlen: 22
87.116.68.0/22 maxlen: 22
87.116.72.0/21 maxlen: 21
151.237.140.0/23 maxlen: 24
87.116.82.0/24 maxlen: 24
87.116.84.0/22 maxlen: 22
213.130.92.0/23 maxlen: 24
213.130.95.0/24 maxlen: 24
213.130.64.0/22 maxlen: 22
213.130.78.0/23 maxlen: 23
213.130.76.0/23 maxlen: 24
213.130.77.0/24 maxlen: 24
62.176.64.0/19 maxlen: 24
94.236.229.0/24 maxlen: 24
94.236.231.0/24 maxlen: 24
94.236.228.0/24 maxlen: 24
94.236.234.0/24 maxlen: 24
94.236.235.0/24 maxlen: 24
94.236.238.0/24 maxlen: 24
94.236.240.0/20 maxlen: 20
62.176.96.0/19 maxlen: 24
94.236.163.0/24 maxlen: 24
94.236.164.0/24 maxlen: 24
94.236.160.0/24 maxlen: 24
87.243.96.0/21 maxlen: 21
94.236.161.0/24 maxlen: 24
94.155.204.0/22 maxlen: 24
94.236.160.0/19 maxlen: 24
94.236.172.0/24 maxlen: 24
87.243.104.0/21 maxlen: 21
94.236.170.0/23 maxlen: 23
94.236.179.0/24 maxlen: 24
87.243.112.0/22 maxlen: 22
94.236.173.0/24 maxlen: 24
94.236.174.0/24 maxlen: 24
94.236.175.0/24 maxlen: 24
94.236.176.0/23 maxlen: 23
87.243.116.0/22 maxlen: 22
94.236.180.0/22 maxlen: 22
94.236.184.0/21 maxlen: 21
87.243.120.0/21 maxlen: 21
94.236.204.0/24 maxlen: 24
94.236.205.0/24 maxlen: 24
217.75.152.0/21 maxlen: 21
84.21.192.0/22 maxlen: 22
95.42.0.0/15 maxlen: 24
84.21.216.0/21 maxlen: 21
62.176.117.0/24 maxlen: 24
217.75.139.0/24 maxlen: 24
217.75.143.0/24 maxlen: 24
94.155.64.0/20 maxlen: 24
94.155.80.0/22 maxlen: 24
185.20.156.0/22 maxlen: 22
83.148.64.0/18 maxlen: 24
94.236.144.0/24 maxlen: 24
94.236.144.0/21 maxlen: 24
87.243.80.0/20 maxlen: 20
94.236.149.0/24 maxlen: 24
94.236.151.0/24 maxlen: 24
94.236.146.0/24 maxlen: 24
94.236.152.0/24 maxlen: 24
94.236.152.0/21 maxlen: 24
94.236.153.0/24 maxlen: 24
94.236.154.0/24 maxlen: 24
94.155.104.0/21 maxlen: 24
94.155.112.0/21 maxlen: 24
94.155.120.0/22 maxlen: 24
2a01:5a8:2:5::/64 maxlen: 64
2a01:5a8:1:ffff::/64 maxlen: 64
2a01:5a8:2:4::/64 maxlen: 64
2a01:5a8::/32 maxlen: 128
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400542296 (0x17dfca58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 03:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13fc2a85eacdb4e85275b93ec1afa63226285f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:83:82:23:37:27:8f:63:95:a0:dc:2e:6b:
fb:01:63:25:50:63:25:40:36:f5:5e:6a:27:65:81:
cf:da:3d:42:43:b1:75:03:8e:8a:ce:c2:22:57:d2:
84:d5:df:c0:ba:6e:a7:d0:26:5d:16:7f:62:33:e5:
24:c5:6a:3f:5d:38:08:a5:2f:a4:b4:2d:8c:a5:67:
aa:13:d8:cf:33:9e:2b:8c:be:30:1d:e7:59:a4:3d:
54:ae:14:4d:d9:42:fd:42:2b:86:22:a3:3a:e3:29:
94:b8:90:90:9d:f2:03:55:83:12:95:7c:9e:25:b0:
b1:6a:ee:d7:8b:04:c5:cc:ed:37:00:e9:da:7c:03:
7d:32:b2:7c:07:35:87:4e:f2:67:90:92:13:b4:87:
2f:9e:0e:65:ab:f2:e8:69:fc:53:d0:47:c1:f2:f0:
43:cf:8d:e0:3c:cd:78:b0:0b:61:08:3f:3c:77:92:
53:bb:ef:65:11:63:da:49:18:2d:65:98:ff:fb:a7:
19:1a:43:b7:29:18:94:fb:1e:d4:1a:bf:b2:9d:c5:
91:f0:9d:bc:cb:24:31:6f:93:5d:cd:21:8f:a9:ae:
8b:d6:1f:70:35:48:9f:7d:a5:f7:35:23:37:d4:ac:
c0:98:6a:ca:21:63:a4:1a:34:d1:d8:65:86:56:07:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FC:2A:85:EA:CD:B4:E8:52:75:B9:3E:C1:AF:A6:32:26:28:5F:25
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/E_wqherNtOhSdbk-wa-mMiYoXyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.0.0/16
62.73.64.0/18
62.176.64.0/18
77.85.0.0/16
78.154.0.0/19
79.100.0.0/16
82.137.64.0/18
82.146.0.0/22
82.146.6.0/23
82.146.11.0/24
82.146.24.0/23
82.146.28.0/23
82.146.31.0/24
83.148.64.0/18
83.228.0.0/17
84.21.192.0/22
84.21.216.0/21
84.238.128.0/22
84.238.134.0-84.238.159.255
84.238.165.0/24
84.238.167.0-84.238.175.255
84.238.178.0-84.238.183.255
84.238.192.0/22
84.238.204.0/22
85.187.22.0-85.187.39.255
85.187.46.0/23
87.116.64.0/20
87.116.82.0/24
87.116.84.0/22
87.118.144.0/22
87.118.164.0/22
87.126.0.0/16
87.243.80.0-87.243.127.255
89.25.40.0/21
89.25.52.0-89.25.75.255
89.25.100.0/22
89.25.124.0/22
90.154.128.0/17
94.155.64.0-94.155.83.255
94.155.104.0-94.155.123.255
94.155.204.0/22
94.236.144.0-94.236.191.255
94.236.204.0/23
94.236.228.0/23
94.236.231.0/24
94.236.234.0/23
94.236.238.0/24
94.236.240.0/20
95.42.0.0/15
151.237.140.0/23
185.20.156.0/22
185.167.144.0/22
212.5.128.0/19
212.39.64.0/19
212.72.198.0/23
212.72.202.0/23
212.72.212.0/24
212.72.214.0/24
212.72.221.0/24
213.16.32.0/19
213.91.128.0/17
213.130.64.0/22
213.130.76.0/22
213.130.92.0/23
213.130.95.0/24
217.75.139.0/24
217.75.143.0/24
217.75.152.0/21
IPv6:
2a01:5a8::/32
Signature Algorithm: sha256WithRSAEncryption
32:c0:dd:51:c0:b0:cc:c6:09:39:4a:fd:f3:0e:c8:75:53:83:
de:29:76:8d:fd:6f:2f:ee:2d:f8:06:43:16:ac:a7:1c:95:57:
0b:50:0d:3d:b5:5a:b0:c9:e1:4d:c2:e2:af:29:f2:d7:f9:b7:
92:6b:ce:bb:5b:b7:a6:51:fd:75:5c:0d:aa:a7:3e:07:63:c6:
05:f4:e2:e4:a8:59:76:65:ae:76:db:3f:8b:8f:b5:e4:36:a4:
cf:3b:b1:34:e1:15:31:38:c0:86:45:e4:39:0e:db:77:dc:ae:
9a:bb:8f:24:17:bf:55:8f:b3:3a:f0:3f:95:ce:a9:ae:a5:d9:
31:8c:5b:68:94:0a:d8:da:ea:27:ee:e3:a2:e4:06:17:90:3e:
08:db:b6:a2:5c:35:cc:a1:e1:75:7f:12:1c:91:24:75:91:c2:
48:d1:d8:cd:07:c5:98:c1:fc:6b:a0:34:70:86:1a:c1:dc:27:
24:92:ee:7a:a9:9a:ce:79:fd:36:72:98:55:b8:bb:14:75:30:
e3:cc:6d:2d:f5:ca:79:6d:a7:1e:d8:81:2a:19:3b:1c:67:27:
b4:c7:0f:f7:87:85:f4:8f:84:18:3d:4a:09:ff:cc:93:be:57:
0f:fa:7a:23:49:4f:04:11:88:23:83:62:37:1f:dd:f4:77:82:
6f:45:5b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org