Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/EPGxv7fDRkMhKx7ovoFcSf5Rk9M.roa
File: EPGxv7fDRkMhKx7ovoFcSf5Rk9M.roa (raw, json)
Hash identifier: f7hk3txbXrWTTbK3mnhC4KBDwH6+zy/FbYx/mQvH8JY=
Subject key identifier: 10:F1:B1:BF:B7:C3:46:43:21:2B:1E:E8:BE:81:5C:49:FE:51:93:D3
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01876FD87340BEF776514C0435C7F9436B00
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/EPGxv7fDRkMhKx7ovoFcSf5Rk9M.roa
Signing time: Tue 11 Apr 2023 10:24:28 +0000
ROA not before: Tue 11 Apr 2023 10:24:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.12.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.24.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.9.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.0.0/23 maxlen: 23
46.161.26.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
46.161.30.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
46.161.28.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
46.161.29.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.42.0/24 maxlen: 24
46.161.41.0/24 maxlen: 24
46.161.48.0/23 maxlen: 23
46.161.48.0/22 maxlen: 22
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
37.139.51.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.244.0/23 maxlen: 23
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
185.238.152.0/22 maxlen: 22
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.232.0/22 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
5.8.52.0/23 maxlen: 23
5.8.54.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.56.0/24 maxlen: 24
5.8.57.0/24 maxlen: 24
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.66.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.189.248.0/22 maxlen: 22
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.220.0/23 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.222.0/24 maxlen: 24
5.101.80.0/22 maxlen: 22
5.188.233.0/24 maxlen: 24
5.101.84.0/22 maxlen: 22
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.188.164.0/24 maxlen: 24
5.188.165.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.44.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/22 maxlen: 22
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.56.0/22 maxlen: 22
91.243.52.0/22 maxlen: 22
91.243.62.0/23 maxlen: 23
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:d8:73:40:be:f7:76:51:4c:04:35:c7:f9:43:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 11 10:24:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10f1b1bfb7c34643212b1ee8be815c49fe5193d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:18:16:29:b8:b3:b0:22:01:5a:56:72:9f:
91:ab:6b:4c:90:ab:2b:80:21:b9:92:7b:b3:75:58:
c4:ad:1b:70:97:df:8d:19:1c:11:73:9c:f4:25:70:
48:8c:44:68:48:8b:9a:fc:88:eb:d8:4d:a5:21:5a:
96:22:87:15:3d:fb:24:b9:26:05:19:16:dd:fa:48:
7d:de:4f:a8:45:f0:c0:ea:14:a3:7e:cc:41:d8:2a:
38:aa:47:c0:15:74:96:dd:46:28:a1:92:eb:12:aa:
ec:cd:83:25:fb:8a:05:50:09:45:63:a9:fc:eb:72:
f5:ff:48:a3:b5:72:6b:95:e8:d2:7e:8e:30:48:aa:
58:86:46:d2:c4:a0:df:5e:fe:1c:03:7d:7e:bf:d8:
85:b8:ab:22:ee:c3:9a:97:c3:c7:e6:1f:56:48:1f:
81:57:7b:22:b9:f7:42:d0:30:01:a7:1f:bd:19:e5:
28:06:40:43:4b:0e:0b:7a:31:15:08:f8:45:a7:0f:
c7:66:d1:36:2b:8c:25:c6:be:6e:00:94:a2:a9:3e:
13:1d:59:a3:4c:d4:40:53:01:aa:17:24:ca:ac:af:
b6:78:99:90:e3:ee:8a:4b:20:eb:96:bc:f2:66:a5:
b3:80:39:5c:4d:5f:48:a0:01:48:65:72:22:31:88:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:B1:BF:B7:C3:46:43:21:2B:1E:E8:BE:81:5C:49:FE:51:93:D3
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/EPGxv7fDRkMhKx7ovoFcSf5Rk9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0-5.8.57.255
5.8.59.0-5.8.61.255
5.8.65.0-5.8.67.255
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.9.0-5.188.11.255
5.188.44.0-5.188.49.255
5.188.60.0-5.188.62.255
5.188.164.0-5.188.166.255
5.188.194.0/23
5.188.204.0/23
5.188.207.0-5.188.211.255
5.188.220.0/22
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0-31.184.235.255
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.49.0/24
37.139.51.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.12.0/22
46.161.20.0-46.161.26.255
46.161.28.0-46.161.30.255
46.161.32.0/22
46.161.41.0-46.161.42.255
46.161.48.0/22
91.243.32.0/22
91.243.44.0-91.243.63.255
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
146.185.244.0/23
185.238.152.0/22
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
4c:bd:fd:60:e9:aa:dd:b5:ac:64:c1:ef:67:f2:de:67:5c:30:
fe:43:fd:43:f5:3c:d0:49:21:d3:a9:9d:c9:fa:78:ae:61:e6:
2d:2e:36:6e:47:c8:43:b6:06:4d:9b:b3:23:a4:f9:53:4e:c7:
bf:cf:64:50:7a:15:38:61:e9:47:4c:e2:f7:7b:f9:27:2c:bc:
10:8a:4f:e9:c2:9f:10:e9:59:e5:6a:f2:ab:d9:0b:f4:f9:2e:
68:eb:76:1c:d2:7f:bd:37:30:79:d4:fb:43:c5:fa:b0:fa:ab:
3e:af:43:c8:a6:15:14:4d:6e:3b:8d:aa:6e:6e:f7:3b:d6:3f:
26:73:10:61:b2:91:1d:d7:91:80:b5:7b:78:bc:f8:1b:60:0b:
78:40:ce:33:dd:d7:0b:7b:41:31:76:3e:e9:ae:75:d0:94:16:
4f:3d:5e:a6:e5:bf:b9:cc:34:de:a9:ed:d9:16:64:b1:5f:ae:
18:90:b2:b1:e7:99:c3:ee:ba:51:1d:ba:ae:73:44:3c:74:af:
ae:26:20:f3:f2:3c:85:bf:34:05:b9:5c:de:73:92:15:37:63:
26:ac:68:2e:8d:15:a1:0a:d7:a8:81:69:da:d2:03:fa:6d:6b:
65:b9:5e:18:2c:5a:83:fb:1a:a7:9f:6f:12:8d:2f:09:23:0c:
6a:88:29:0c
-----BEGIN CERTIFICATE-----
MIIGujCCBaKgAwIBAgISAYdv2HNAvvd2UUwENcf5Q2sAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMwNDExMTAyNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGYxYjFiZmI3YzM0NjQzMjEyYjFlZThiZTgxNWM0OWZlNTE5M2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjygYFim4s7AiAVpWcp+Rq2tMkKsr
gCG5knuzdVjErRtwl9+NGRwRc5z0JXBIjERoSIua/Ijr2E2lIVqWIocVPfskuSYF
GRbd+kh93k+oRfDA6hSjfsxB2Co4qkfAFXSW3UYooZLrEqrszYMl+4oFUAlFY6n8
63L1/0ijtXJrlejSfo4wSKpYhkbSxKDfXv4cA31+v9iFuKsi7sOal8PH5h9WSB+B
V3siufdC0DABpx+9GeUoBkBDSw4LejEVCPhFpw/HZtE2K4wlxr5uAJSiqT4THVmj
TNRAUwGqFyTKrK+2eJmQ4+6KSyDrlrzyZqWzgDlcTV9IoAFIZXIiMYgJYQIDAQAB
o4IDxjCCA8IwHQYDVR0OBBYEFBDxsb+3w0ZDISse6L6BXEn+UZPTMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvRVBHeHY3ZkRSa01oS3g3b3ZvRmNTZjVSazlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB2gYIKwYBBQUHAQcBAf8EggHJMIIBxTCCAa4EAgABMIIB
pgMEAwUICDAMAwQEBQgwAwQBBQg4MAwDBAAFCDsDBAEFCDwwDAMEAAUIQQMEAgUI
QAMEAwVlAAMEAgVlIAMEAgVlQAMEAwVlUAMEAQVlWjAMAwQABbwJAwQCBbwIMAwD
BAIFvCwDBAEFvDAwDAMEAgW8PAMEAAW8PjAMAwQCBbykAwQABbymAwQBBbzCAwQB
BbzMMAwDBAAFvM8DBAIFvNADBAIFvNwwDAMEAAW86QMEAgW86AMEAgW9+AMEAB8s
uAMEAh8svAMEAx+4wAMEAR+45DAMAwQAH7jnAwQCH7joAwQBH7juAwQAH7jzAwQA
JQkwAwQAJYsxAwQAJYszMAwDBAAlizUDBAIlizgDBAEuoQIDBAAuoQgDBAAuoQoD
BAIuoQwwDAMEAi6hFAMEAC6hGjAMAwQCLqEcAwQALqEeAwQCLqEgMAwDBAAuoSkD
BAAuoSoDBAIuoTADBAJb8yAwDAMEAlvzLAMEBlvzAAMEAVvzWgMEAFvzXQMEAl/X
ADAMAwQAkrnfAwQDkrngAwQBkrn0AwQCue6YAwQCvI/oAwQBwwLwMBEEAgACMAsD
CQYqAB14AQABwDANBgkqhkiG9w0BAQsFAAOCAQEATL39YOmq3bWsZMHvZ/LeZ1ww
/kP9Q/U80Ekh06mdyfp4rmHmLS42bkfIQ7YGTZuzI6T5U07Hv89kUHoVOGHpR0zi
93v5Jyy8EIpP6cKfEOlZ5Wryq9kL9PkuaOt2HNJ/vTcwedT7Q8X6sPqrPq9DyKYV
FE1uO42qbm73O9Y/JnMQYbKRHdeRgLV7eLz4G2ALeEDOM93XC3tBMXY+6a510JQW
Tz1epuW/ucw03qnt2RZksV+uGJCyseeZw+66UR26rnNEPHSvriYg8/I8hb80Bblc
3nOSFTdjJqxoLo0VoQrXqIFp2tID+m1rZbleGCxag/sap59vEo0vCSMMaogpDA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org