Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/YDDAhDCKNqQUTidH8uJ9KqDWv_U.roa
File: YDDAhDCKNqQUTidH8uJ9KqDWv_U.roa (raw, json)
Hash identifier: 6Pi1Zd9RpVjO/2J7gI+PbhCKISVgc4gwax8LJ9fjKrM=
Subject key identifier: 60:30:C0:84:30:8A:36:A4:14:4E:27:47:F2:E2:7D:2A:A0:D6:BF:F5
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01857246FCB05C48968EC2A3247585083E21
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/YDDAhDCKNqQUTidH8uJ9KqDWv_U.roa
Signing time: Mon 02 Jan 2023 11:38:52 +0000
ROA not before: Mon 02 Jan 2023 11:38:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.24.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.9.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.0.0/23 maxlen: 23
46.161.26.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
46.161.30.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
46.161.28.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
46.161.29.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.42.0/24 maxlen: 24
46.161.48.0/23 maxlen: 23
46.161.48.0/22 maxlen: 22
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 24
46.161.11.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
37.139.51.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.244.0/23 maxlen: 23
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
185.238.152.0/22 maxlen: 22
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
31.184.200.0/22 maxlen: 22
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.232.0/22 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
37.9.52.0/22 maxlen: 22
91.243.93.0/24 maxlen: 24
5.8.52.0/23 maxlen: 23
5.8.54.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.56.0/24 maxlen: 24
5.8.57.0/24 maxlen: 24
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.189.248.0/22 maxlen: 22
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.220.0/23 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.222.0/24 maxlen: 24
5.101.80.0/22 maxlen: 22
5.188.233.0/24 maxlen: 24
5.101.84.0/22 maxlen: 22
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.188.165.0/24 maxlen: 24
5.101.36.0/22 maxlen: 22
5.101.32.0/22 maxlen: 24
5.188.204.0/23 maxlen: 23
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.44.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/22 maxlen: 22
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.56.0/22 maxlen: 22
91.243.52.0/22 maxlen: 22
91.243.62.0/23 maxlen: 23
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:fc:b0:5c:48:96:8e:c2:a3:24:75:85:08:3e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6030c084308a36a4144e2747f2e27d2aa0d6bff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:dd:17:53:29:14:8c:f7:02:90:4d:ef:4d:
f0:89:c2:2d:cc:62:9f:e0:c8:1a:6b:d6:17:94:af:
78:cc:2e:c1:3d:8c:05:76:78:a4:94:4c:5d:d4:b1:
78:76:df:2f:35:a7:e0:5f:73:c0:cf:42:d3:fc:93:
a3:03:09:9a:e9:d3:6c:4c:58:7e:6d:b9:c3:d0:ae:
3b:a9:ea:35:e3:a5:38:db:dc:f6:fb:5d:54:83:38:
c9:bd:b4:64:4c:73:43:23:7c:45:0e:1d:e8:30:b4:
a3:32:03:55:89:d4:b6:67:32:09:db:8a:30:cd:d6:
e3:a8:d4:4c:10:be:82:74:2a:15:4a:46:c0:0e:63:
8b:94:34:3d:c6:e3:19:8e:21:ec:17:12:60:24:d5:
f3:05:91:bf:eb:99:8f:73:a8:0e:b8:b9:34:63:61:
e7:94:58:71:96:09:90:14:25:9e:ce:1b:47:17:8e:
34:da:b8:36:cc:91:e0:5c:2b:40:0b:d4:80:f5:11:
8c:79:02:42:26:fa:9c:26:bb:8f:67:9c:92:f9:df:
4a:41:3c:72:4d:76:29:ae:e6:b0:0a:b2:db:73:80:
26:60:57:48:49:9b:38:52:9b:af:81:a4:70:d0:5e:
d6:77:cc:90:6f:d0:5e:b9:05:91:5b:cd:ef:6a:14:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:30:C0:84:30:8A:36:A4:14:4E:27:47:F2:E2:7D:2A:A0:D6:BF:F5
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/YDDAhDCKNqQUTidH8uJ9KqDWv_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0-5.8.57.255
5.8.59.0-5.8.61.255
5.8.65.0/24
5.101.0.0/21
5.101.32.0/21
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.9.0-5.188.11.255
5.188.44.0-5.188.49.255
5.188.60.0-5.188.62.255
5.188.165.0-5.188.166.255
5.188.204.0/23
5.188.207.0-5.188.211.255
5.188.220.0/22
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.184.0/24
31.44.188.0/22
31.184.192.0-31.184.203.255
31.184.228.0/23
31.184.231.0-31.184.235.255
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.9.52.0/22
37.139.49.0/24
37.139.51.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/23
46.161.14.0/23
46.161.20.0-46.161.26.255
46.161.28.0-46.161.30.255
46.161.32.0/22
46.161.42.0/24
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.44.0-91.243.63.255
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
146.185.244.0/23
185.238.152.0/22
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
6d:75:6f:30:da:93:a4:1f:42:fe:eb:c9:20:07:8e:e9:19:7d:
d9:6c:e3:53:43:d7:8c:67:ec:ed:84:3d:f3:f4:fe:f5:bc:79:
bb:65:07:93:61:7e:f9:78:a3:47:ca:85:08:53:58:43:35:69:
e2:d1:a7:3c:20:44:39:8c:4e:1f:67:7c:0b:f7:8f:38:a2:e9:
ad:e5:c9:c0:92:48:d4:69:05:bd:62:56:77:4a:ef:7c:b2:10:
17:ca:89:1f:f3:7b:75:cd:73:19:19:e4:f3:23:09:1d:9b:df:
c2:f9:bf:af:41:ca:b3:f8:60:a0:f6:1e:32:c3:0c:5d:9f:ee:
80:69:c6:b2:29:48:cf:71:df:45:e0:1f:5d:4c:a2:80:30:86:
54:83:42:49:65:09:ad:3d:bb:25:4b:a1:61:ab:c7:46:c4:8b:
3c:69:c2:1c:23:cc:70:86:d0:ca:53:1b:af:cf:a2:73:29:6e:
f1:8d:39:81:43:ba:93:0c:59:2c:92:cd:3d:af:66:e5:e3:f7:
e4:8b:cb:38:e3:62:7b:04:54:f2:9f:b2:36:6c:6b:e8:4d:61:
cb:3a:33:27:62:24:c3:8c:14:8f:b8:c7:f0:7f:4f:f2:23:87:
9a:be:5a:95:12:14:5a:78:bb:b4:bd:15:f3:98:15:86:02:f1:
e3:77:5b:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org