Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3hcEpmsKP8wF5DchRBi7TEctolc.roa
File: 3hcEpmsKP8wF5DchRBi7TEctolc.roa (raw, json)
Hash identifier: erHUmIfI0r8bVvlARsY9wxKrJYGaF7hYDYgv5gVeGGs=
Subject key identifier: DE:17:04:A6:6B:0A:3F:CC:05:E4:37:21:44:18:BB:4C:47:2D:A2:57
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 48D9DA88
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3hcEpmsKP8wF5DchRBi7TEctolc.roa
Signing time: Mon 07 Feb 2022 08:20:09 +0000
ROA not before: Mon 07 Feb 2022 08:20:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.24.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.9.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.0.0/23 maxlen: 23
95.215.3.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
46.161.28.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
46.161.29.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.42.0/24 maxlen: 24
46.161.48.0/23 maxlen: 23
46.161.48.0/22 maxlen: 22
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 24
46.161.11.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
37.139.51.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.244.0/23 maxlen: 23
146.185.196.0/22 maxlen: 22
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.232.0/22 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.36.0/22 maxlen: 22
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.50.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
37.9.52.0/22 maxlen: 22
91.243.93.0/24 maxlen: 24
5.8.52.0/23 maxlen: 23
5.8.54.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.56.0/24 maxlen: 24
5.8.57.0/24 maxlen: 24
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.62.0/24 maxlen: 24
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.20.0/22 maxlen: 22
5.189.248.0/22 maxlen: 22
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.68.0/22 maxlen: 22
5.188.220.0/23 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.222.0/24 maxlen: 24
5.101.80.0/22 maxlen: 22
5.188.233.0/24 maxlen: 24
5.101.84.0/22 maxlen: 22
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.188.165.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.188.204.0/23 maxlen: 23
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.48.0/23 maxlen: 23
91.243.48.0/22 maxlen: 22
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.62.0/23 maxlen: 23
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222236808 (0x48d9da88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Feb 7 08:20:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de1704a66b0a3fcc05e437214418bb4c472da257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:88:15:13:5f:25:08:d3:cf:7f:8d:55:43:
b5:67:25:66:20:4f:65:e7:d6:c0:25:ba:b0:b0:f1:
4d:9e:1d:3f:5b:90:02:9d:fb:71:3b:58:9b:4c:80:
58:70:90:89:ff:e0:42:a0:41:3d:6f:da:9b:6c:6a:
26:cd:7d:5c:35:01:46:16:03:8b:2c:cf:72:15:7c:
98:c4:92:58:99:d9:f0:27:6b:96:22:c9:e5:b7:77:
d4:35:9f:4c:c3:a7:ca:db:1f:22:b5:99:7c:f7:c0:
b4:a4:b9:af:17:de:f0:e7:86:e5:4d:ba:01:81:6a:
20:1d:6e:64:43:3e:dd:27:cf:17:2c:79:a4:f0:5c:
64:22:71:5d:2f:a8:2e:09:30:50:ee:b7:9c:cf:a5:
1c:6f:96:c5:cb:9e:e9:91:00:5b:e2:67:41:68:9e:
c9:11:5a:e7:40:cf:25:d9:bf:78:de:83:cd:3f:50:
88:6d:61:95:4d:88:d4:80:21:23:f9:61:22:a2:2c:
22:63:a4:52:1f:0d:d0:d5:66:34:b5:2c:85:63:a6:
0b:1d:fc:47:67:1f:5c:1d:7a:0a:25:7a:a9:a1:76:
c5:ba:90:13:83:19:07:92:e2:a4:c3:4f:e5:23:64:
a8:9d:1d:79:5e:8b:9c:f5:92:d3:22:8d:73:27:11:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:17:04:A6:6B:0A:3F:CC:05:E4:37:21:44:18:BB:4C:47:2D:A2:57
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3hcEpmsKP8wF5DchRBi7TEctolc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.20.0/22
5.8.48.0-5.8.57.255
5.8.59.0-5.8.62.255
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/21
5.101.80.0/21
5.101.90.0/23
5.188.9.0-5.188.11.255
5.188.44.0-5.188.49.255
5.188.60.0-5.188.62.255
5.188.165.0-5.188.166.255
5.188.204.0/23
5.188.207.0-5.188.211.255
5.188.220.0/22
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0-31.184.235.255
31.184.238.0/23
31.184.243.0/24
37.9.36.0/22
37.9.48.0/24
37.9.50.0/24
37.9.52.0/22
37.139.49.0/24
37.139.51.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/23
46.161.14.0/23
46.161.20.0-46.161.25.255
46.161.28.0/23
46.161.32.0/22
46.161.42.0/24
46.161.48.0/22
91.243.48.0/21
91.243.60.0/22
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.196.0/22
146.185.223.0-146.185.231.255
146.185.244.0/23
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
7e:3d:a7:7f:63:ca:53:45:04:fc:19:b3:58:93:88:28:aa:f5:
16:7b:1e:ef:c6:28:f6:bb:77:c9:fb:ef:70:aa:f9:5a:2b:37:
ae:93:67:71:cb:2a:fb:ab:0e:10:68:22:9a:0c:30:da:13:b7:
9d:3d:dc:32:6d:8f:aa:f2:bc:ba:9a:2c:5f:9c:87:92:3c:a5:
d3:a3:59:7f:53:cb:00:5b:93:52:e2:f9:aa:5b:9d:ba:41:d8:
54:6e:46:7c:10:cb:1a:79:a8:23:da:0d:4d:7c:b6:1c:de:92:
4e:63:b5:0e:4b:7f:23:05:79:7f:51:fa:66:d5:de:90:eb:0c:
34:3c:c6:82:e0:01:0b:89:b2:bb:fc:11:aa:16:36:55:ab:64:
b3:95:85:80:54:51:65:71:86:d8:69:ae:2d:a4:38:50:47:1d:
2d:93:b0:2e:a8:39:26:88:1d:ef:4e:8e:dd:d3:62:65:d9:ca:
9c:e0:59:7d:7a:e0:3b:4a:14:74:3c:ca:de:cb:ca:63:54:85:
98:92:52:e5:39:b6:1d:65:c5:87:3f:0c:c0:4f:fd:9e:35:9d:
25:7a:83:c2:a9:9a:10:29:2f:7f:a3:f6:33:f5:56:d1:9a:da:
b1:2c:c7:fd:52:72:0d:1c:ba:e2:3e:56:44:29:a0:64:20:17:
c7:5c:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org