Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/UaUIAKgKHHMhQVzTADgG4LNxuYc.roa
File: UaUIAKgKHHMhQVzTADgG4LNxuYc.roa (raw, json)
Hash identifier: 8UsBkQuqKR7/PCMSjFUzmnseTUJMekt0dzeVbPv1sUs=
Subject key identifier: 51:A5:08:00:A8:0A:1C:73:21:41:5C:D3:00:38:06:E0:B3:71:B9:87
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0193A15D8BC61EC51FF4AF18B4ECCE80F64E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/UaUIAKgKHHMhQVzTADgG4LNxuYc.roa
Signing time: Sat 07 Dec 2024 13:44:42 +0000
ROA not before: Sat 07 Dec 2024 13:44:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
5.182.48.0/24 maxlen: 24
45.81.20.0/22 maxlen: 24
45.90.144.0/22 maxlen: 24
45.140.220.0/22 maxlen: 24
45.154.196.0/22 maxlen: 24
77.83.240.0/22 maxlen: 24
77.83.243.0/24 maxlen: 24
78.108.216.0/22 maxlen: 24
78.108.217.0/24 maxlen: 24
83.143.116.0/22 maxlen: 24
83.143.116.0/24 maxlen: 24
85.202.160.0/22 maxlen: 24
89.190.156.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
185.185.40.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
185.227.68.0/22 maxlen: 24
185.227.70.0/24 maxlen: 24
185.227.71.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.242.225.0/24 maxlen: 24
193.31.28.0/22 maxlen: 24
193.31.30.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
212.107.12.0/22 maxlen: 24
212.107.14.0/24 maxlen: 24
2a0b:b82::/44 maxlen: 44
2a0b:b84::/32 maxlen: 32
2a0b:b85::/32 maxlen: 32
2a0b:b86::/40 maxlen: 48
2a0b:b87:ff12::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b87:ffd2::/48 maxlen: 48
2a0b:b87:ffda::/48 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:7080:10::/48 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:7080:20::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0d:77c0::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a1:5d:8b:c6:1e:c5:1f:f4:af:18:b4:ec:ce:80:f6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Dec 7 13:44:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51a50800a80a1c7321415cd3003806e0b371b987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:8b:58:ba:cc:a4:ae:96:f4:54:8f:7c:93:
f4:22:4d:f0:25:61:ab:08:e9:47:7a:81:1c:98:5c:
8e:dc:0e:aa:8f:b3:e4:a4:a1:37:1d:de:d6:bc:d6:
26:c5:91:03:00:ca:a3:9d:a8:b5:55:8d:2e:1f:9e:
bf:b8:74:91:d5:95:e0:18:a3:b5:2b:f1:36:bb:7c:
8e:59:ea:d1:4e:b9:ac:8d:97:67:de:a6:4f:b4:3a:
e4:7f:ab:25:0a:91:f0:e5:ce:16:8a:2d:6b:31:13:
d4:23:68:8e:dd:1e:e8:cc:71:a6:d1:06:8a:b3:7c:
fa:e2:92:6b:c8:67:87:05:f3:45:08:31:4d:26:e9:
3c:32:33:7e:ef:41:a0:6a:36:c3:dc:33:c8:8f:04:
60:72:ae:c6:5c:88:1f:ac:9f:dc:f2:bb:cc:9f:f6:
6e:8d:4f:74:32:d7:8c:57:23:e3:64:7e:48:ef:c6:
8b:e3:24:9f:6e:3e:aa:14:89:98:50:47:dc:82:aa:
3c:1b:3a:f8:81:b6:62:c5:6b:18:4f:21:68:3d:40:
4b:43:96:cf:e9:0b:68:df:eb:1f:b2:df:7c:ba:19:
9d:0e:4a:f2:e0:3d:93:5a:a7:0b:01:d9:0f:49:07:
96:4c:28:e4:bf:87:49:66:74:76:69:ac:99:ed:a0:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:08:00:A8:0A:1C:73:21:41:5C:D3:00:38:06:E0:B3:71:B9:87
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/UaUIAKgKHHMhQVzTADgG4LNxuYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/24
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
45.154.196.0/22
77.83.240.0/22
78.108.216.0/22
83.143.116.0/22
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/22
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.28.0/22
193.34.76.0/22
193.221.192.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::-2a0b:b86:ff:ffff:ffff:ffff:ffff:ffff
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffd2::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
a4:ba:4a:f9:34:14:0e:e1:7a:2c:1f:93:33:54:89:79:01:c0:
3e:5b:14:63:c5:25:d2:54:a9:48:c6:6a:8a:4f:7c:84:93:6a:
8f:f6:63:f8:10:8d:c5:01:20:21:04:74:64:13:80:c4:00:ee:
16:14:4e:85:9f:05:10:ae:40:a1:03:ab:1d:dc:bc:b7:29:d7:
ff:a6:68:7a:49:a2:ed:e4:1f:3e:e3:33:54:f4:89:a0:40:43:
74:4d:cd:42:b6:e8:6a:28:55:33:ca:92:e4:d4:73:2b:0e:c9:
46:71:85:0e:1a:75:66:e6:6a:22:f3:26:59:42:d9:cf:32:84:
5f:24:0d:10:af:d4:0f:3a:4c:a2:bb:a0:e5:01:00:33:61:fb:
4a:a4:0c:3c:d6:d2:08:6f:fa:49:4c:04:7a:91:14:25:63:1f:
56:4e:cb:db:d8:d0:4a:48:ec:8a:3a:ae:1e:71:97:66:6a:62:
e9:57:e7:a0:92:3a:b0:d0:27:95:c5:7b:b0:ed:85:50:53:f1:
37:e7:ea:42:89:76:f4:fd:21:87:f8:fc:0b:a8:8a:38:4e:75:
3d:e4:dd:b6:a9:6c:c4:78:bd:ba:37:42:74:fc:57:24:66:6f:
38:e4:c8:65:27:87:d1:65:25:63:91:9a:2f:3c:78:53:f0:d7:
80:1c:29:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:34:24 2025 by rpki-client