Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/LEIvnar2RNg8zTR56Rs0QDnXN88.roa
File: LEIvnar2RNg8zTR56Rs0QDnXN88.roa (raw, json)
Hash identifier: 1JR9QvqjeVi+vP4W6m2t6gQlOrOLeoMJMJaoOXApq6Y=
Subject key identifier: 2C:42:2F:9D:AA:F6:44:D8:3C:CD:34:79:E9:1B:34:40:39:D7:37:CF
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018595A38C8E287EF9AAF09074345452A53D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/LEIvnar2RNg8zTR56Rs0QDnXN88.roa
Signing time: Mon 09 Jan 2023 08:26:41 +0000
ROA not before: Mon 09 Jan 2023 08:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.12.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.24.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.9.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.0.0/23 maxlen: 23
46.161.26.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
46.161.30.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
46.161.28.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
46.161.29.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.42.0/24 maxlen: 24
46.161.41.0/24 maxlen: 24
46.161.48.0/23 maxlen: 23
46.161.48.0/22 maxlen: 22
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.1.0/24 maxlen: 24
46.161.2.0/23 maxlen: 24
46.161.11.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
37.139.51.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.244.0/23 maxlen: 23
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
185.238.152.0/22 maxlen: 22
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
31.184.200.0/22 maxlen: 22
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.232.0/22 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
37.9.52.0/22 maxlen: 22
91.243.93.0/24 maxlen: 24
5.8.52.0/23 maxlen: 23
5.8.54.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.56.0/24 maxlen: 24
5.8.57.0/24 maxlen: 24
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.189.248.0/22 maxlen: 22
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.220.0/23 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.222.0/24 maxlen: 24
5.101.80.0/22 maxlen: 22
5.188.233.0/24 maxlen: 24
5.101.84.0/22 maxlen: 22
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.188.164.0/24 maxlen: 24
5.188.165.0/24 maxlen: 24
5.101.36.0/22 maxlen: 22
5.101.32.0/22 maxlen: 24
5.188.204.0/23 maxlen: 23
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.44.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/22 maxlen: 22
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.56.0/22 maxlen: 22
91.243.52.0/22 maxlen: 22
91.243.62.0/23 maxlen: 23
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:a3:8c:8e:28:7e:f9:aa:f0:90:74:34:54:52:a5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 9 08:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c422f9daaf644d83ccd3479e91b344039d737cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:61:48:fd:9f:e3:26:33:d2:5a:21:ac:e6:f1:
ca:0d:87:b2:50:42:aa:8a:d0:d1:c5:df:9f:79:36:
d2:83:84:00:02:65:a4:84:1a:fd:16:a6:95:d9:a6:
7d:6d:f2:6f:c6:ec:0e:10:ad:d9:f1:ee:9c:1d:63:
04:94:ab:d3:dc:56:e8:f9:98:43:ab:bc:63:a0:61:
0b:74:fb:0d:aa:d1:28:a5:3d:53:d8:f7:b0:e3:af:
e5:4e:89:1c:26:38:fa:38:51:66:fa:98:4e:2d:aa:
dd:a9:30:54:9a:fd:a8:ac:a2:fb:99:0b:13:6f:90:
e7:d1:3b:af:b5:92:cc:f6:5d:e6:fb:8b:39:fe:50:
f3:74:f2:e9:0c:f3:7a:0e:fe:c9:cb:f9:56:5a:34:
64:e5:15:29:6c:b7:32:b4:d9:d8:a3:8b:73:42:1c:
d5:c2:1c:fb:aa:23:34:02:a7:2a:3f:58:67:c1:b3:
84:cb:8b:b0:1e:ff:f9:49:e2:7a:3e:f5:0b:69:40:
20:04:fe:a0:0c:82:4f:71:2e:5b:d4:55:05:9a:25:
eb:f0:e2:91:ae:1b:96:f5:83:7b:39:75:6b:05:ce:
fa:53:f6:e1:80:c5:ce:83:f8:dc:34:b3:28:c3:36:
c3:01:24:75:c6:c9:47:a7:12:c9:2d:59:1d:a3:19:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:42:2F:9D:AA:F6:44:D8:3C:CD:34:79:E9:1B:34:40:39:D7:37:CF
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/LEIvnar2RNg8zTR56Rs0QDnXN88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0-5.8.57.255
5.8.59.0-5.8.61.255
5.8.65.0/24
5.101.0.0/21
5.101.32.0/21
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.9.0-5.188.11.255
5.188.44.0-5.188.49.255
5.188.60.0-5.188.62.255
5.188.164.0-5.188.166.255
5.188.204.0/23
5.188.207.0-5.188.211.255
5.188.220.0/22
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.184.0/24
31.44.188.0/22
31.184.192.0-31.184.203.255
31.184.228.0/23
31.184.231.0-31.184.235.255
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.9.52.0/22
37.139.49.0/24
37.139.51.0/24
37.139.53.0-37.139.59.255
46.161.1.0-46.161.3.255
46.161.8.0/24
46.161.10.0-46.161.15.255
46.161.20.0-46.161.26.255
46.161.28.0-46.161.30.255
46.161.32.0/22
46.161.41.0-46.161.42.255
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.44.0-91.243.63.255
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
146.185.244.0/23
185.238.152.0/22
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
26:00:c8:d5:72:d3:b4:68:8a:87:a7:06:ae:c3:3a:fd:d2:a2:
a6:15:42:e1:40:d9:8a:a2:b6:cb:28:6d:5b:51:5c:12:cd:73:
2a:76:c8:54:a5:73:3b:b5:5d:72:45:3e:0b:7b:16:e0:8e:32:
a2:25:84:40:10:2a:60:6f:1e:33:d3:46:03:ec:f5:1e:84:14:
f9:28:e3:bf:5c:f1:53:7a:13:2e:ee:4f:ba:de:6f:02:6a:8b:
07:a6:c6:0a:15:9f:4f:ee:34:f9:a3:ff:f1:b0:95:3b:7f:99:
d5:48:d6:b8:4f:b1:6a:5c:13:1b:42:3f:e8:46:3d:2e:fb:b9:
c8:8d:db:8a:08:30:f4:c4:22:02:54:0f:94:3a:77:c9:49:dc:
04:8a:24:12:08:34:36:21:51:6e:28:bd:de:de:68:7c:c3:c1:
7e:04:59:fb:68:84:8b:b1:54:85:18:0a:d6:38:77:96:d9:23:
ca:80:66:8d:4c:44:27:ad:bd:a5:ee:f2:e2:f0:ce:5f:09:81:
66:2b:a7:24:86:9d:23:9e:33:c7:2f:6a:a5:f9:23:b6:28:75:
09:a5:7a:b2:2d:10:50:3b:72:17:69:d5:a8:85:83:25:3f:7d:
d2:9d:c3:c0:f6:8b:80:ae:1b:ae:06:d1:56:50:c2:fa:52:88:
a4:8c:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org