Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/BwUjKqQGV6DmHcMd7KHFGXwRFhQ.roa
File: BwUjKqQGV6DmHcMd7KHFGXwRFhQ.roa (raw, json)
Hash identifier: zAkcxlQOkDzCz9U1EwXWZb7cRTLlSLK6UH8jOGFV47w=
Subject key identifier: 07:05:23:2A:A4:06:57:A0:E6:1D:C3:1D:EC:A1:C5:19:7C:11:16:14
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0193CB2F6AF47D1918BB856B79EE8FA06D07
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/BwUjKqQGV6DmHcMd7KHFGXwRFhQ.roa
Signing time: Sun 15 Dec 2024 16:38:22 +0000
ROA not before: Sun 15 Dec 2024 16:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
5.182.48.0/24 maxlen: 24
45.81.20.0/22 maxlen: 24
45.90.144.0/22 maxlen: 24
45.140.220.0/22 maxlen: 24
45.154.196.0/22 maxlen: 24
77.83.240.0/22 maxlen: 24
77.83.243.0/24 maxlen: 24
78.108.216.0/22 maxlen: 24
78.108.217.0/24 maxlen: 24
83.143.116.0/22 maxlen: 24
83.143.116.0/24 maxlen: 24
85.202.160.0/22 maxlen: 24
89.190.156.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
185.185.40.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
185.227.68.0/22 maxlen: 24
185.227.71.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.242.225.0/24 maxlen: 24
193.31.28.0/22 maxlen: 24
193.31.30.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
212.107.12.0/22 maxlen: 24
212.107.14.0/24 maxlen: 24
2a0b:b82::/44 maxlen: 44
2a0b:b84::/32 maxlen: 32
2a0b:b85::/32 maxlen: 32
2a0b:b86::/40 maxlen: 48
2a0b:b87:ff12::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b87:ffd2::/48 maxlen: 48
2a0b:b87:ffda::/48 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:7080:10::/48 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:7080:20::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0d:77c0::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cb:2f:6a:f4:7d:19:18:bb:85:6b:79:ee:8f:a0:6d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Dec 15 16:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0705232aa40657a0e61dc31deca1c5197c111614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:23:fe:a8:31:e1:0a:a5:60:7e:31:0c:f4:26:
4f:5d:50:e5:b3:ee:06:10:65:83:5e:b7:1c:e5:83:
50:e9:92:d6:52:55:7f:e1:77:73:bc:02:a3:d3:b8:
e6:df:3f:0d:16:ab:da:7f:68:af:10:db:7d:87:76:
42:26:3f:2e:7b:b7:cf:47:63:46:8a:e7:7f:6c:f3:
8e:39:3f:28:8e:58:6c:d9:e8:4c:42:c3:9f:a8:0f:
9f:09:03:65:a3:b2:5c:5f:62:a0:1b:90:f3:09:ec:
bc:3e:e3:2e:a7:c1:11:21:46:ec:60:88:4a:a3:29:
00:d0:b2:02:61:94:f7:84:3b:5f:25:7e:34:ae:4d:
6e:cb:a4:67:25:7e:ff:e9:30:a2:69:2f:c0:1e:2e:
0e:d3:5f:b1:70:e9:87:79:56:a6:b3:20:7d:df:2d:
2f:ba:0c:49:95:97:7d:e8:8e:1b:f5:f5:53:f2:3c:
a7:a0:af:51:dd:5b:41:b8:97:f3:17:29:01:e3:34:
17:93:f0:dc:a4:03:cc:96:e1:0a:94:0f:6e:24:ba:
be:2b:dd:60:1a:54:f6:e0:31:98:a6:7d:19:d5:50:
7c:e9:60:b2:6e:b4:32:61:c7:18:4a:01:9a:cb:57:
17:e0:f1:85:26:80:c7:b8:8d:ed:19:a4:b7:b8:0a:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:05:23:2A:A4:06:57:A0:E6:1D:C3:1D:EC:A1:C5:19:7C:11:16:14
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/BwUjKqQGV6DmHcMd7KHFGXwRFhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/24
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
45.154.196.0/22
77.83.240.0/22
78.108.216.0/22
83.143.116.0/22
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/22
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.28.0/22
193.34.76.0/22
193.221.192.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::-2a0b:b86:ff:ffff:ffff:ffff:ffff:ffff
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffd2::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
cf:5c:b9:d3:19:a9:0f:fa:bd:93:b2:af:cd:3c:85:5d:3b:10:
c7:d2:1d:8b:2d:d1:bc:10:17:60:3d:08:90:c2:88:df:0f:0c:
fc:4a:71:71:9c:77:95:6b:34:79:0d:2a:9a:1e:3a:39:69:7b:
96:36:8e:c1:f1:75:0f:b9:b2:d9:7c:1b:f9:c0:af:b0:ca:a6:
31:5b:e6:f6:33:d7:c5:72:0b:be:50:56:16:e6:d8:a8:43:96:
cf:c9:81:8c:b1:04:a9:c8:26:6a:24:b1:66:07:75:80:1f:71:
60:c4:46:4c:9d:6e:19:c0:77:88:d2:ea:85:b8:37:8a:e7:ac:
b0:bc:83:46:53:1c:8a:a4:98:a1:33:a9:f5:a7:ab:db:43:ff:
76:05:4f:36:c9:fc:70:28:56:43:f2:9c:0f:f3:ae:18:60:af:
b3:5b:ab:e9:7b:2c:81:3d:a2:45:b7:1c:30:83:77:da:0b:66:
ea:d5:f7:f8:82:89:86:e8:c5:fa:ad:30:f3:69:f7:68:c8:b2:
4e:43:4b:53:11:bc:80:b3:c7:98:a2:b0:13:67:92:de:b8:42:
a5:68:61:ed:24:f3:d8:d0:7c:59:ef:82:d4:f4:ee:d5:4b:78:
06:e1:96:3a:96:06:c1:7d:ad:8c:39:0f:8f:c8:43:ae:f8:49:
95:c6:a1:67
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgISAZPLL2r0fRkYu4Vree6PoG0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQxMjE1MTYzODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzA1MjMyYWE0MDY1N2EwZTYxZGMzMWRlY2ExYzUxOTdjMTExNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CP+qDHhCqVgfjEM9CZPXVDls+4G
EGWDXrcc5YNQ6ZLWUlV/4XdzvAKj07jm3z8NFqvaf2ivENt9h3ZCJj8ue7fPR2NG
iud/bPOOOT8ojlhs2ehMQsOfqA+fCQNlo7JcX2KgG5DzCey8PuMup8ERIUbsYIhK
oykA0LICYZT3hDtfJX40rk1uy6RnJX7/6TCiaS/AHi4O01+xcOmHeVamsyB93y0v
ugxJlZd96I4b9fVT8jynoK9R3VtBuJfzFykB4zQXk/DcpAPMluEKlA9uJLq+K91g
GlT24DGYpn0Z1VB86WCybrQyYccYSgGay1cX4PGFJoDHuI3tGaS3uAofpwIDAQAB
o4IDCDCCAwQwHQYDVR0OBBYEFAcFIyqkBleg5h3DHeyhxRl8ERYUMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvQndVaktxUUdWNkRtSGNNZDdLSEZHWHdSRmhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCBkQQCAAEwgYoD
BAICOKQDBAAFtjADBAItURQDBAItWpADBAItjNwDBAItmsQDBAJNU/ADBAJObNgD
BAJTj3QDBAJVyqADBAJZvpwDBAKy2pADBAK5uSgDBAK5ukADBAK540QDBAK56kgD
BAK58uADBALBHxwDBALBIkwDBALB3cADBALCMhADBALCOOADBALUawwwcQQCAAIw
awMHBCoLC4IAADAPAwUCKgsLhAMGACoLC4YAAwcAKgsLh/8SAwcAKgsLh/+0AwcA
KgsLh//SAwcAKgsLh//aAwcAKgsLh//sAwcEKgsLh//wMBIDBwQqC3CAABADBwYq
C3CAAAADBQMqDXfAMA0GCSqGSIb3DQEBCwUAA4IBAQDPXLnTGakP+r2Tsq/NPIVd
OxDH0h2LLdG8EBdgPQiQwojfDwz8SnFxnHeVazR5DSqaHjo5aXuWNo7B8XUPubLZ
fBv5wK+wyqYxW+b2M9fFcgu+UFYW5tioQ5bPyYGMsQSpyCZqJLFmB3WAH3FgxEZM
nW4ZwHeI0uqFuDeK56ywvINGUxyKpJihM6n1p6vbQ/92BU82yfxwKFZD8pwP864Y
YK+zW6vpeyyBPaJFtxwwg3faC2bq1ff4gomG6MX6rTDzafdoyLJOQ0tTEbyAs8eY
orATZ5LeuEKlaGHtJPPY0HxZ74LU9O7VS3gG4ZY6lgbBfa2MOQ+PyEOu+EmVxqFn
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:13:26 2025 by rpki-client