Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/hUD_mzcJ3N6Z5ciKwVTLGYw3zy4.roa
File: hUD_mzcJ3N6Z5ciKwVTLGYw3zy4.roa (raw, json)
Hash identifier: Ae4/cxI6BFAHN+11C3gG0vFjDvwqXfo995Y/+X/tOSk=
Subject key identifier: 85:40:FF:9B:37:09:DC:DE:99:E5:C8:8A:C1:54:CB:19:8C:37:CF:2E
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 018D620F25BFB60711FD1C5F124420C5DF71
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/hUD_mzcJ3N6Z5ciKwVTLGYw3zy4.roa
Signing time: Thu 01 Feb 2024 00:26:16 +0000
ROA not before: Thu 01 Feb 2024 00:26:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20676
IP address blocks: 62.8.128.0/17 maxlen: 17
62.8.168.0/21 maxlen: 21
62.8.176.0/20 maxlen: 20
62.145.0.0/19 maxlen: 19
62.206.0.0/16 maxlen: 16
62.206.164.0/24 maxlen: 24
62.206.165.0/24 maxlen: 24
62.206.166.0/24 maxlen: 24
83.236.0.0/16 maxlen: 16
83.236.0.0/20 maxlen: 20
83.236.16.0/20 maxlen: 20
83.236.32.0/21 maxlen: 21
84.245.128.0/18 maxlen: 18
85.8.132.0/22 maxlen: 22
87.193.0.0/16 maxlen: 16
87.234.0.0/16 maxlen: 16
92.192.0.0/13 maxlen: 13
92.192.0.0/17 maxlen: 17
92.192.128.0/17 maxlen: 17
92.193.0.0/17 maxlen: 17
92.193.128.0/17 maxlen: 17
92.194.0.0/17 maxlen: 17
92.194.128.0/17 maxlen: 17
92.195.0.0/17 maxlen: 17
92.195.128.0/17 maxlen: 17
92.196.0.0/17 maxlen: 17
92.196.128.0/17 maxlen: 17
92.197.130.0/24 maxlen: 24
92.198.192.0/18 maxlen: 18
92.200.0.0/15 maxlen: 15
92.200.0.0/16 maxlen: 16
92.200.0.0/17 maxlen: 17
92.200.128.0/17 maxlen: 17
185.144.188.0/22 maxlen: 22
194.9.127.0/24 maxlen: 24
194.140.96.0/20 maxlen: 20
195.32.128.0/17 maxlen: 17
195.80.192.0/19 maxlen: 19
195.90.0.0/19 maxlen: 19
195.90.8.0/21 maxlen: 21
195.158.160.0/19 maxlen: 19
212.4.160.0/19 maxlen: 19
212.4.176.0/20 maxlen: 20
212.5.0.0/19 maxlen: 19
212.5.8.0/21 maxlen: 21
212.5.16.0/20 maxlen: 20
212.60.192.0/18 maxlen: 18
212.63.32.0/19 maxlen: 19
212.84.208.0/20 maxlen: 20
212.84.224.0/19 maxlen: 19
212.105.192.0/19 maxlen: 19
212.110.192.0/19 maxlen: 19
212.202.0.0/16 maxlen: 16
212.202.0.0/19 maxlen: 19
212.202.40.0/21 maxlen: 21
212.202.48.0/20 maxlen: 20
212.202.168.0/21 maxlen: 21
212.202.176.0/20 maxlen: 20
213.148.128.0/19 maxlen: 19
213.148.128.0/24 maxlen: 24
213.148.129.0/24 maxlen: 24
213.148.130.0/24 maxlen: 24
213.148.133.0/24 maxlen: 24
213.160.0.0/19 maxlen: 19
213.217.64.0/18 maxlen: 18
217.146.128.0/19 maxlen: 19
2001:658::/29 maxlen: 29
2001:1a80::/29 maxlen: 29
2001:1a80:800::/48 maxlen: 48
2001:1a80:801::/48 maxlen: 48
2001:1a80:802::/48 maxlen: 48
2001:1a81:1000::/36 maxlen: 40
2001:1a81:1000::/40 maxlen: 48
2001:1a81:2000::/36 maxlen: 40
2001:1a81:2000::/40 maxlen: 48
2001:1a81:3000::/36 maxlen: 40
2001:1a81:3000::/40 maxlen: 48
2001:1a81:4000::/36 maxlen: 40
2001:1a81:4000::/40 maxlen: 48
2001:1a81:5000::/36 maxlen: 40
2001:1a81:5000::/40 maxlen: 48
2001:1a81:6000::/36 maxlen: 40
2001:1a81:6000::/40 maxlen: 48
2001:1a81:7000::/36 maxlen: 40
2001:1a81:7000::/40 maxlen: 48
2a09:7100::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:62:0f:25:bf:b6:07:11:fd:1c:5f:12:44:20:c5:df:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Feb 1 00:26:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8540ff9b3709dcde99e5c88ac154cb198c37cf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a9:6c:ee:71:0f:49:95:62:fa:38:f6:e2:14:
4c:1a:d1:fe:bb:69:8e:63:02:05:bd:54:76:66:33:
bf:58:be:34:5a:e9:5f:1e:fb:bd:e6:0c:80:3d:b2:
51:ee:4c:33:d3:80:18:b7:96:d6:af:b0:5e:07:5d:
9a:e9:52:17:11:0c:5a:41:72:13:1d:fa:c6:ea:1b:
54:bb:2b:80:94:64:14:49:78:18:e9:10:f9:be:33:
65:75:6f:25:64:6f:43:48:a9:0a:44:b3:25:a7:81:
b3:ce:67:3e:ce:dd:32:5d:c4:7e:5a:24:34:15:00:
d4:fa:3f:87:74:cc:d9:6e:05:26:64:8f:ba:fa:18:
6a:2c:2b:c9:9f:a2:ea:90:1f:8e:3d:ef:0d:15:58:
78:70:32:5f:a3:c7:5f:54:57:ab:12:cb:51:43:15:
13:84:59:f4:ba:14:cc:07:9c:0f:bd:9b:1e:44:9c:
7e:11:af:91:de:77:53:69:73:bb:27:16:76:84:f0:
32:a7:fe:9b:17:07:98:00:fb:83:a8:04:7d:17:dd:
17:e3:e3:25:8d:90:5e:ac:20:bf:1b:fa:69:fd:1f:
cc:1e:02:19:e9:4d:01:67:23:74:31:0b:04:d5:9c:
8e:0a:b2:c8:27:9a:51:ac:36:79:34:57:17:a9:7e:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:40:FF:9B:37:09:DC:DE:99:E5:C8:8A:C1:54:CB:19:8C:37:CF:2E
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/hUD_mzcJ3N6Z5ciKwVTLGYw3zy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.8.128.0/17
62.145.0.0/19
62.206.0.0/16
83.236.0.0/16
84.245.128.0/18
85.8.132.0/22
87.193.0.0/16
87.234.0.0/16
92.192.0.0-92.201.255.255
185.144.188.0/22
194.9.127.0/24
194.140.96.0/20
195.32.128.0/17
195.80.192.0/19
195.90.0.0/19
195.158.160.0/19
212.4.160.0/19
212.5.0.0/19
212.60.192.0/18
212.63.32.0/19
212.84.208.0-212.84.255.255
212.105.192.0/19
212.110.192.0/19
212.202.0.0/16
213.148.128.0/19
213.160.0.0/19
213.217.64.0/18
217.146.128.0/19
IPv6:
2001:658::/29
2001:1a80::/29
2a09:7100::/29
Signature Algorithm: sha256WithRSAEncryption
14:03:2c:f9:4f:1b:95:de:c0:4a:7d:5b:5c:1a:d9:85:58:3a:
75:9e:48:29:9f:83:07:25:a3:7d:2d:8b:43:db:0b:86:63:5e:
bd:90:cd:cc:d0:47:e0:8b:9c:fd:4b:06:16:ad:d4:b8:e3:1b:
cd:38:04:a1:b6:0d:17:3e:98:4d:6e:91:65:ec:9d:c5:43:a6:
74:c8:56:54:a2:fc:7b:4c:0b:32:c6:fc:ea:cd:c9:79:22:4f:
c5:62:c2:7e:99:ec:cd:02:46:16:22:b0:4f:6f:53:07:a3:c0:
c3:10:a4:ef:02:6e:6a:da:34:74:37:69:68:48:0c:66:5f:a1:
a5:61:04:00:b4:29:f8:75:86:b7:ed:9f:63:b1:60:bf:7e:ed:
af:07:61:4d:fc:a5:f9:e9:3c:08:3a:bf:d6:0b:73:27:87:fe:
48:58:41:d4:20:eb:5d:95:81:05:f1:8d:6f:78:c6:67:94:dd:
73:23:65:3d:01:50:ad:da:ff:78:66:b0:e1:05:3f:f6:a4:89:
11:09:f7:fb:78:bd:0a:5c:38:44:db:43:ee:20:86:b6:b0:8b:
dc:f1:5b:95:21:79:10:0d:5f:23:2e:7a:55:81:52:6f:a3:9b:
4f:22:5a:90:f7:60:37:20:a9:c2:ca:1d:f3:15:07:92:ce:31:
c5:aa:df:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:18 2025 by rpki-client