Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/S_m7SpcWblcJRjXbj9ARkYy1EzA.roa
File: S_m7SpcWblcJRjXbj9ARkYy1EzA.roa (raw, json)
Hash identifier: PwxBhTCHHF9xXRIfNdM96GuW1VsrucPYP+bLI5d6krk=
Subject key identifier: 4B:F9:BB:4A:97:16:6E:57:09:46:35:DB:8F:D0:11:91:8C:B5:13:30
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0187700BB5DAD48473E90523B13FACDF332E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/S_m7SpcWblcJRjXbj9ARkYy1EzA.roa
Signing time: Tue 11 Apr 2023 11:20:28 +0000
ROA not before: Tue 11 Apr 2023 11:20:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.12.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.24.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.9.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.0.0/23 maxlen: 23
46.161.26.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
46.161.30.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
46.161.28.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
46.161.29.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.42.0/24 maxlen: 24
46.161.41.0/24 maxlen: 24
46.161.48.0/23 maxlen: 23
46.161.48.0/22 maxlen: 22
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 24
46.161.11.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
37.139.51.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.244.0/23 maxlen: 23
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
185.238.152.0/22 maxlen: 22
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.232.0/22 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
5.8.52.0/23 maxlen: 23
5.8.54.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.56.0/24 maxlen: 24
5.8.57.0/24 maxlen: 24
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.66.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.189.248.0/22 maxlen: 22
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.220.0/23 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.222.0/24 maxlen: 24
5.101.80.0/22 maxlen: 22
5.188.233.0/24 maxlen: 24
5.101.84.0/22 maxlen: 22
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.188.164.0/24 maxlen: 24
5.188.165.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.44.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/22 maxlen: 22
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.56.0/22 maxlen: 22
91.243.52.0/22 maxlen: 22
91.243.62.0/23 maxlen: 23
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:0b:b5:da:d4:84:73:e9:05:23:b1:3f:ac:df:33:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 11 11:20:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bf9bb4a97166e57094635db8fd011918cb51330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:5d:28:0c:20:d6:0f:99:8c:cb:fe:87:b5:
7c:85:2c:54:3e:8e:6e:9c:9e:63:3f:74:80:62:c1:
b9:4f:af:41:ae:ee:e0:00:6c:0f:ce:2f:df:31:b7:
7c:d2:e2:93:3e:cc:ce:e3:f1:e8:e3:03:7a:6e:df:
ed:11:b7:cf:06:07:ee:b6:79:a5:7b:35:9d:cf:99:
88:82:74:81:77:28:26:c5:57:3d:eb:4b:56:de:13:
ab:4e:ee:b6:3c:d9:40:96:68:38:f8:16:2e:89:ce:
5d:f0:1b:f4:47:50:ff:71:20:ca:95:81:00:c8:4c:
80:74:01:b9:67:35:d9:b2:36:35:05:5b:40:50:5d:
9e:c0:0b:00:f9:97:df:73:29:38:a2:e5:19:f3:5c:
d3:24:5d:5a:9f:8c:5f:9c:60:3a:4d:56:9b:49:52:
f5:a0:21:f5:8f:5a:a8:1c:91:59:7b:05:1e:3f:2a:
2a:8c:87:77:bb:2b:99:a0:f3:d5:44:60:03:9b:f1:
2c:0e:bb:c9:f9:bd:d5:c1:72:15:09:69:c0:d0:13:
1e:7c:41:d1:a5:19:ea:27:1b:76:fb:45:29:54:c8:
72:be:6a:b0:5f:62:4d:e6:21:77:b1:71:1c:eb:98:
25:d4:4c:a9:86:fb:0e:85:32:33:02:51:32:ff:af:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F9:BB:4A:97:16:6E:57:09:46:35:DB:8F:D0:11:91:8C:B5:13:30
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/S_m7SpcWblcJRjXbj9ARkYy1EzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0-5.8.57.255
5.8.59.0-5.8.61.255
5.8.65.0-5.8.67.255
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.9.0-5.188.11.255
5.188.44.0-5.188.49.255
5.188.60.0-5.188.62.255
5.188.164.0-5.188.166.255
5.188.194.0/23
5.188.204.0/23
5.188.207.0-5.188.211.255
5.188.220.0/22
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0-31.184.235.255
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.49.0/24
37.139.51.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0-46.161.15.255
46.161.20.0-46.161.26.255
46.161.28.0-46.161.30.255
46.161.32.0/22
46.161.41.0-46.161.42.255
46.161.48.0/22
91.243.32.0/22
91.243.44.0-91.243.63.255
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
146.185.244.0/23
185.238.152.0/22
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
9c:f3:6d:12:74:08:ab:f1:4b:e1:91:7e:f6:84:4d:42:4b:50:
dd:a7:7d:9f:ea:fe:51:4a:3c:a5:23:59:4d:03:c2:bd:53:f6:
57:e2:c9:e9:76:b9:22:19:63:f8:db:70:65:ca:94:75:c9:3d:
6e:4f:ea:c9:75:39:c6:34:b2:11:8c:c9:ab:d6:4e:8c:c4:63:
66:1c:97:1b:be:5d:a1:a8:04:0f:2c:bc:34:6a:5a:d6:cb:b4:
86:f1:f2:54:ba:78:1c:19:7c:a4:6b:15:3b:64:6d:d2:6d:e1:
70:5d:91:94:43:39:62:71:05:8e:57:98:b4:a0:80:e9:f0:7b:
85:93:47:3e:42:5c:26:36:5b:83:b0:5b:b4:18:61:8e:10:30:
a2:52:df:48:ff:05:81:35:df:e7:72:29:00:14:c0:b1:9e:81:
e3:e6:e4:e1:24:17:89:f9:ba:19:a0:d8:c4:68:89:24:16:08:
09:cb:79:45:6d:03:00:c2:69:7a:8e:90:62:20:18:0a:7d:8e:
68:6c:e0:3d:4e:fc:31:81:7a:53:db:0d:b9:1c:98:58:13:e0:
eb:ac:3e:16:9c:e8:39:f7:d6:dd:76:ec:32:9f:9d:ca:4b:94:
03:f3:c6:ee:06:8a:7e:a1:4b:40:30:10:a4:71:95:09:d3:df:
78:65:fb:26
-----BEGIN CERTIFICATE-----
MIIGvDCCBaSgAwIBAgISAYdwC7Xa1IRz6QUjsT+s3zMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMwNDExMTEyMDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmY5YmI0YTk3MTY2ZTU3MDk0NjM1ZGI4ZmQwMTE5MThjYjUxMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk71dKAwg1g+ZjMv+h7V8hSxUPo5u
nJ5jP3SAYsG5T69Bru7gAGwPzi/fMbd80uKTPszO4/Ho4wN6bt/tEbfPBgfutnml
ezWdz5mIgnSBdygmxVc960tW3hOrTu62PNlAlmg4+BYuic5d8Bv0R1D/cSDKlYEA
yEyAdAG5ZzXZsjY1BVtAUF2ewAsA+Zffcyk4ouUZ81zTJF1an4xfnGA6TVabSVL1
oCH1j1qoHJFZewUePyoqjId3uyuZoPPVRGADm/EsDrvJ+b3VwXIVCWnA0BMefEHR
pRnqJxt2+0UpVMhyvmqwX2JN5iF3sXEc65gl1EyphvsOhTIzAlEy/6+3YQIDAQAB
o4IDyDCCA8QwHQYDVR0OBBYEFEv5u0qXFm5XCUY124/QEZGMtRMwMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvU19tN1NwY1dibGNKUmpYYmo5QVJrWXkxRXpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB3AYIKwYBBQUHAQcBAf8EggHLMIIBxzCCAbAEAgABMIIB
qAMEAwUICDAMAwQEBQgwAwQBBQg4MAwDBAAFCDsDBAEFCDwwDAMEAAUIQQMEAgUI
QAMEAwVlAAMEAgVlIAMEAgVlQAMEAwVlUAMEAQVlWjAMAwQABbwJAwQCBbwIMAwD
BAIFvCwDBAEFvDAwDAMEAgW8PAMEAAW8PjAMAwQCBbykAwQABbymAwQBBbzCAwQB
BbzMMAwDBAAFvM8DBAIFvNADBAIFvNwwDAMEAAW86QMEAgW86AMEAgW9+AMEAB8s
uAMEAh8svAMEAx+4wAMEAR+45DAMAwQAH7jnAwQCH7joAwQBH7juAwQAH7jzAwQA
JQkwAwQAJYsxAwQAJYszMAwDBAAlizUDBAIlizgDBAEuoQIDBAAuoQgwDAMEAS6h
CgMEBC6hADAMAwQCLqEUAwQALqEaMAwDBAIuoRwDBAAuoR4DBAIuoSAwDAMEAC6h
KQMEAC6hKgMEAi6hMAMEAlvzIDAMAwQCW/MsAwQGW/MAAwQBW/NaAwQAW/NdAwQC
X9cAMAwDBACSud8DBAOSueADBAGSufQDBAK57pgDBAK8j+gDBAHDAvAwEQQCAAIw
CwMJBioAHXgBAAHAMA0GCSqGSIb3DQEBCwUAA4IBAQCc820SdAir8UvhkX72hE1C
S1Ddp32f6v5RSjylI1lNA8K9U/ZX4snpdrkiGWP423BlypR1yT1uT+rJdTnGNLIR
jMmr1k6MxGNmHJcbvl2hqAQPLLw0alrWy7SG8fJUungcGXykaxU7ZG3SbeFwXZGU
QzlicQWOV5i0oIDp8HuFk0c+QlwmNluDsFu0GGGOEDCiUt9I/wWBNd/ncikAFMCx
noHj5uThJBeJ+boZoNjEaIkkFggJy3lFbQMAwml6jpBiIBgKfY5obOA9TvwxgXpT
2w25HJhYE+DrrD4WnOg599bdduwyn53KS5QD88buBop+oUtAMBCkcZUJ0994Zfsm
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org