Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/E1DVbMWFMNQ-BCF8sD6O0up9r4A.roa
File: E1DVbMWFMNQ-BCF8sD6O0up9r4A.roa (raw, json)
Hash identifier: z5nEvx7+yuP+TfyvCSQkg/fykHYDHI8S2ry7RMAzmhc=
Subject key identifier: 13:50:D5:6C:C5:85:30:D4:3E:04:21:7C:B0:3E:8E:D2:EA:7D:AF:80
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0182C3B33C183101B5BBB4B15C198EE8C1E0
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/E1DVbMWFMNQ-BCF8sD6O0up9r4A.roa
Signing time: Mon 22 Aug 2022 03:57:59 +0000
ROA not before: Mon 22 Aug 2022 03:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.24.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.9.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.0.0/23 maxlen: 23
46.161.26.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
46.161.30.0/24 maxlen: 24
46.161.28.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
46.161.29.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.42.0/24 maxlen: 24
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 24
46.161.11.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
37.139.51.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.185.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.244.0/23 maxlen: 23
146.185.196.0/22 maxlen: 22
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
185.238.152.0/22 maxlen: 22
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.232.0/22 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.36.0/22 maxlen: 22
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.50.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
37.9.52.0/22 maxlen: 22
91.243.93.0/24 maxlen: 24
5.8.52.0/23 maxlen: 23
5.8.54.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.56.0/24 maxlen: 24
5.8.57.0/24 maxlen: 24
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.62.0/24 maxlen: 24
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.20.0/22 maxlen: 22
5.189.248.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/22 maxlen: 22
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.68.0/22 maxlen: 22
5.188.220.0/23 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.222.0/24 maxlen: 24
5.101.80.0/22 maxlen: 22
5.188.233.0/24 maxlen: 24
5.101.84.0/22 maxlen: 22
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.188.165.0/24 maxlen: 24
5.101.36.0/22 maxlen: 22
5.101.32.0/22 maxlen: 24
5.188.204.0/23 maxlen: 23
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.44.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.56.0/22 maxlen: 22
91.243.52.0/22 maxlen: 22
91.243.62.0/23 maxlen: 23
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c3:b3:3c:18:31:01:b5:bb:b4:b1:5c:19:8e:e8:c1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 22 03:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1350d56cc58530d43e04217cb03e8ed2ea7daf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:76:10:e5:e7:a7:98:a6:07:5d:ff:9f:59:
06:d6:17:3f:9e:1e:1c:48:93:99:a6:81:62:2c:d7:
9e:4e:a4:4a:98:8a:e0:77:00:a9:64:64:2e:43:b6:
34:40:89:4e:b5:ba:53:bf:22:48:01:fd:0c:29:ad:
0d:72:e7:bd:09:33:06:df:84:a3:38:07:b2:07:cf:
30:de:d6:0c:dc:ef:9f:7b:c7:2c:a0:37:7c:18:5f:
72:ea:15:42:ec:6b:22:fc:a6:91:45:69:cb:8a:1f:
2e:59:31:95:23:92:4c:62:23:07:ba:c7:9f:9c:7f:
c3:b4:a5:1e:85:2f:5f:bb:9b:8f:b3:15:17:df:6d:
60:80:c8:8f:8a:d2:13:72:1c:9d:f4:1c:d3:f4:17:
0c:84:1d:ab:e8:ac:12:b5:30:35:87:db:10:70:b8:
a6:c4:05:57:e1:e7:c6:04:a7:01:62:44:0f:a3:56:
6a:0f:27:4c:94:8e:84:f5:97:9c:87:c0:99:da:9b:
c0:ee:41:d0:1f:db:22:82:9c:19:4a:0a:9a:48:54:
94:54:f6:7f:ae:b6:d3:18:b5:9d:6d:b9:46:b7:c8:
23:35:83:20:52:fd:a4:48:9c:02:a4:ed:7d:6e:a1:
e3:f2:3b:1d:1e:e0:b2:d8:1b:ad:18:86:2f:32:bf:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:50:D5:6C:C5:85:30:D4:3E:04:21:7C:B0:3E:8E:D2:EA:7D:AF:80
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/E1DVbMWFMNQ-BCF8sD6O0up9r4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.20.0/22
5.8.48.0-5.8.57.255
5.8.59.0-5.8.62.255
5.8.65.0/24
5.101.0.0/21
5.101.32.0/21
5.101.64.0/21
5.101.80.0/21
5.101.90.0/23
5.188.9.0-5.188.11.255
5.188.44.0-5.188.49.255
5.188.60.0-5.188.62.255
5.188.165.0-5.188.166.255
5.188.204.0/23
5.188.207.0-5.188.211.255
5.188.220.0/22
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.184.0/23
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0-31.184.235.255
31.184.238.0/23
31.184.243.0/24
37.9.36.0/22
37.9.48.0/24
37.9.50.0/24
37.9.52.0/22
37.139.49.0/24
37.139.51.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/23
46.161.14.0/23
46.161.20.0-46.161.26.255
46.161.28.0-46.161.30.255
46.161.32.0/22
46.161.42.0/24
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.44.0-91.243.63.255
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.196.0/22
146.185.223.0-146.185.231.255
146.185.244.0/23
185.238.152.0/22
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
35:dd:79:3d:85:bf:74:9e:c8:4a:cd:a3:49:50:66:28:49:23:
c5:13:7b:ae:95:d0:20:e4:8e:36:2d:e5:8e:17:5f:eb:b6:19:
51:7a:61:d7:82:e6:4c:af:03:1f:77:6d:66:ea:2e:d8:0e:b2:
e5:4a:17:50:ff:c5:8e:5d:34:3b:af:b5:63:66:7e:3d:d7:69:
cd:2f:09:0d:49:a3:b5:76:e7:6d:ec:2b:c6:0c:10:60:01:03:
3a:b0:08:64:f0:3b:48:c9:47:29:66:6c:31:62:0d:a6:b9:0d:
13:76:02:0f:fe:cc:e1:0e:4c:3f:52:0b:89:f1:f0:15:dd:7a:
65:45:93:40:c8:f4:b7:2b:4c:26:5d:1d:38:3d:5c:98:60:2b:
2b:6c:4b:7d:70:d5:b6:11:ab:fb:61:28:31:24:ef:e0:1a:0e:
61:4d:1d:71:35:71:b6:fc:e7:9d:4a:d7:01:7f:41:db:c3:29:
5d:a3:13:c4:81:a1:97:da:21:f6:a4:9c:e6:52:d0:bc:da:47:
aa:ee:e4:b3:db:e6:e3:6e:56:29:4b:67:a8:83:7a:63:ec:ed:
fe:43:c7:6f:e7:b1:7a:74:35:89:5d:d3:db:6d:74:c8:13:b4:
99:de:10:bc:32:8e:af:6f:9f:f2:37:36:4b:eb:d2:5f:d1:ac:
8e:e2:ec:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org