Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/JxXQiyZCUN59L-eoe22Qg0PHsyE.roa
File: JxXQiyZCUN59L-eoe22Qg0PHsyE.roa (raw, json)
Hash identifier: ISPhMTru/Aqr5Vw+KDd4ozjlwqa0BXVJrkALNDGMNTc=
Subject key identifier: 27:15:D0:8B:26:42:50:DE:7D:2F:E7:A8:7B:6D:90:83:43:C7:B3:21
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01878E1CBF6B78227DDA94101EB3FDB3E041
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/JxXQiyZCUN59L-eoe22Qg0PHsyE.roa
Signing time: Mon 17 Apr 2023 07:27:41 +0000
ROA not before: Mon 17 Apr 2023 07:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.12.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.24.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.9.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.0.0/23 maxlen: 23
46.161.26.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
46.161.30.0/24 maxlen: 24
46.161.28.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
46.161.29.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.42.0/24 maxlen: 24
46.161.41.0/24 maxlen: 24
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 24
46.161.11.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
37.139.51.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.244.0/23 maxlen: 23
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
185.238.152.0/22 maxlen: 22
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.232.0/22 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
5.8.52.0/23 maxlen: 23
5.8.54.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.56.0/24 maxlen: 24
5.8.57.0/24 maxlen: 24
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.66.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.189.248.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/22 maxlen: 22
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.220.0/23 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.222.0/24 maxlen: 24
5.101.80.0/22 maxlen: 22
5.188.233.0/24 maxlen: 24
5.101.84.0/22 maxlen: 22
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.101.92.0/22 maxlen: 22
5.188.166.0/24 maxlen: 24
5.188.164.0/24 maxlen: 24
5.188.165.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.44.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.56.0/22 maxlen: 22
91.243.52.0/22 maxlen: 22
91.243.62.0/23 maxlen: 23
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:1c:bf:6b:78:22:7d:da:94:10:1e:b3:fd:b3:e0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 17 07:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2715d08b264250de7d2fe7a87b6d908343c7b321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:1d:8a:85:75:c1:48:07:47:9e:e5:96:cb:
35:00:a6:69:d7:e5:2a:f1:12:fd:90:87:52:37:95:
96:a9:39:11:29:c5:8e:10:73:e5:97:48:43:12:5d:
ea:91:26:8b:91:1b:5b:a3:c1:4e:7b:06:d9:0a:b4:
b4:4a:fb:55:18:7a:64:2b:38:57:f6:56:e1:17:a3:
d4:2d:7d:f6:9e:28:f6:7a:db:57:9b:b7:8e:87:50:
0a:51:79:7b:cb:56:f0:58:cb:3a:af:4d:e2:4e:22:
96:52:ae:ed:52:0a:13:80:2a:e5:23:a4:8a:6f:52:
fb:5b:e5:fe:06:6d:08:31:a4:90:a4:f2:a3:37:7f:
c3:6c:18:5e:62:d8:80:9e:bc:16:ca:ac:75:00:2b:
af:77:99:c7:20:0d:7f:16:50:4a:6b:94:2f:ed:ed:
e5:5b:d7:84:d8:8b:da:6d:dc:2a:3f:f9:78:cb:03:
8d:00:06:13:10:2d:78:a1:f6:66:e7:ee:13:a2:00:
9c:55:3d:33:cb:f7:9f:cd:f0:e5:cf:d8:01:38:0c:
33:3a:74:39:52:4f:c4:93:0e:a1:6c:84:9a:ed:d0:
8a:1b:c8:30:a9:5b:60:03:b1:0a:11:c1:04:09:54:
a2:fa:28:b9:33:7d:d7:20:1a:61:f4:97:55:2a:12:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:15:D0:8B:26:42:50:DE:7D:2F:E7:A8:7B:6D:90:83:43:C7:B3:21
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/JxXQiyZCUN59L-eoe22Qg0PHsyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0-5.8.57.255
5.8.59.0-5.8.61.255
5.8.65.0-5.8.67.255
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0-5.101.95.255
5.188.9.0-5.188.11.255
5.188.44.0-5.188.49.255
5.188.60.0-5.188.62.255
5.188.164.0-5.188.166.255
5.188.194.0/23
5.188.204.0/23
5.188.207.0-5.188.211.255
5.188.220.0/22
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0-31.184.235.255
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.49.0/24
37.139.51.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0-46.161.15.255
46.161.20.0-46.161.26.255
46.161.28.0-46.161.30.255
46.161.32.0/22
46.161.41.0-46.161.42.255
46.161.48.0/22
91.243.32.0/22
91.243.44.0-91.243.63.255
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
146.185.244.0/23
185.238.152.0/22
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
af:fe:ef:87:e1:9c:a7:75:0f:4b:a9:45:46:6a:45:f0:8b:c1:
bd:a8:13:3a:14:da:04:de:87:5a:65:61:5f:d8:e0:a7:e0:2a:
fd:4a:a6:0b:04:ca:6a:ea:56:cb:13:ce:9c:6e:ba:95:d3:af:
56:2f:55:28:4e:a1:31:8a:64:f3:17:45:ec:b6:89:fa:93:69:
70:51:c0:8c:8c:8c:b6:d6:30:38:7e:11:7b:72:ff:1b:6b:3c:
7c:a1:4f:88:4c:ad:9d:2c:1c:5b:75:b8:b9:3a:61:a9:d4:7d:
cb:e0:be:de:38:8b:df:fa:1c:4a:ae:c3:c7:f4:5e:08:0c:40:
6a:21:2c:50:52:48:c4:ca:7c:e1:f7:ff:99:cf:02:e3:6d:22:
90:4c:ae:b9:ba:73:6d:d3:d6:7b:31:9a:84:ad:e1:2f:dd:77:
b8:11:6f:d6:a6:df:2b:e0:eb:25:13:8f:c5:75:b5:d0:45:f5:
b3:93:ff:fb:60:d2:37:66:b9:5d:a4:c4:be:d4:9d:30:a7:39:
0d:24:74:a3:d5:8d:92:66:d1:a4:c3:c4:2f:f9:32:1e:f9:0e:
92:ce:67:d7:0e:4f:e5:a7:0c:68:66:d8:4e:5c:3c:aa:55:06:
7d:6c:01:78:15:cc:a6:c4:5a:73:e9:40:fb:e1:96:b3:3c:41:
ac:e8:d1:94
-----BEGIN CERTIFICATE-----
MIIGxDCCBaygAwIBAgISAYeOHL9reCJ92pQQHrP9s+BBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMwNDE3MDcyNzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzE1ZDA4YjI2NDI1MGRlN2QyZmU3YTg3YjZkOTA4MzQzYzdiMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSQdioV1wUgHR57llss1AKZp1+Uq
8RL9kIdSN5WWqTkRKcWOEHPll0hDEl3qkSaLkRtbo8FOewbZCrS0SvtVGHpkKzhX
9lbhF6PULX32nij2ettXm7eOh1AKUXl7y1bwWMs6r03iTiKWUq7tUgoTgCrlI6SK
b1L7W+X+Bm0IMaSQpPKjN3/DbBheYtiAnrwWyqx1ACuvd5nHIA1/FlBKa5Qv7e3l
W9eE2IvabdwqP/l4ywONAAYTEC14ofZm5+4TogCcVT0zy/efzfDlz9gBOAwzOnQ5
Uk/Ekw6hbISa7dCKG8gwqVtgA7EKEcEECVSi+ii5M33XIBph9JdVKhLBaQIDAQAB
o4ID0DCCA8wwHQYDVR0OBBYEFCcV0IsmQlDefS/nqHttkINDx7MhMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvSnhYUWl5WkNVTjU5TC1lb2UyMlFnMFBIc3lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB5AYIKwYBBQUHAQcBAf8EggHTMIIBzzCCAbgEAgABMIIB
sAMEAwUICDAMAwQEBQgwAwQBBQg4MAwDBAAFCDsDBAEFCDwwDAMEAAUIQQMEAgUI
QAMEAwVlAAMEAgVlIAMEAgVlQAMEAwVlUDAMAwQBBWVaAwQFBWVAMAwDBAAFvAkD
BAIFvAgwDAMEAgW8LAMEAQW8MDAMAwQCBbw8AwQABbw+MAwDBAIFvKQDBAAFvKYD
BAEFvMIDBAEFvMwwDAMEAAW8zwMEAgW80AMEAgW83DAMAwQABbzpAwQCBbzoAwQC
Bb34AwQAHyy4AwQCHyy8AwQDH7jAAwQBH7jkMAwDBAAfuOcDBAIfuOgDBAEfuO4D
BAAfuPMDBAAlCTADBAAlizEDBAAlizMwDAMEACWLNQMEAiWLOAMEAS6hAgMEAC6h
CDAMAwQBLqEKAwQELqEAMAwDBAIuoRQDBAAuoRowDAMEAi6hHAMEAC6hHgMEAi6h
IDAMAwQALqEpAwQALqEqAwQCLqEwAwQCW/MgMAwDBAJb8ywDBAZb8wADBAFb81oD
BABb810DBAJf1wAwDAMEAJK53wMEA5K54AMEAZK59AMEArnumAMEAryP6AMEAcMC
8DARBAIAAjALAwkGKgAdeAEAAcAwDQYJKoZIhvcNAQELBQADggEBAK/+74fhnKd1
D0upRUZqRfCLwb2oEzoU2gTeh1plYV/Y4KfgKv1KpgsEymrqVssTzpxuupXTr1Yv
VShOoTGKZPMXRey2ifqTaXBRwIyMjLbWMDh+EXty/xtrPHyhT4hMrZ0sHFt1uLk6
YanUfcvgvt44i9/6HEquw8f0XggMQGohLFBSSMTKfOH3/5nPAuNtIpBMrrm6c23T
1nsxmoSt4S/dd7gRb9am3yvg6yUTj8V1tdBF9bOT//tg0jdmuV2kxL7UnTCnOQ0k
dKPVjZJm0aTDxC/5Mh75DpLOZ9cOT+WnDGhm2E5cPKpVBn1sAXgVzKbEWnPpQPvh
lrM8Qazo0ZQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org