Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/c8R3_3GGdHeBbw3M9WYvZ86YBoo.roa
File: c8R3_3GGdHeBbw3M9WYvZ86YBoo.roa (raw, json)
Hash identifier: UdJeGPlIXc5eHltYc9E52VIRGgaeDIBqxa+I3PWZxkc=
Subject key identifier: 73:C4:77:FF:71:86:74:77:81:6F:0D:CC:F5:66:2F:67:CE:98:06:8A
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0186C9F9239DB012F88CD69AA9C4479675E4
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/c8R3_3GGdHeBbw3M9WYvZ86YBoo.roa
Signing time: Fri 10 Mar 2023 05:23:13 +0000
ROA not before: Fri 10 Mar 2023 05:23:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.12.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.24.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.9.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.0.0/23 maxlen: 23
46.161.26.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
46.161.30.0/24 maxlen: 24
46.161.28.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
46.161.29.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.42.0/24 maxlen: 24
46.161.41.0/24 maxlen: 24
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 24
46.161.11.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
37.139.51.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.244.0/23 maxlen: 23
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
185.238.152.0/22 maxlen: 22
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.232.0/22 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
5.8.52.0/23 maxlen: 23
5.8.54.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.56.0/24 maxlen: 24
5.8.57.0/24 maxlen: 24
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.66.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.189.248.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/22 maxlen: 22
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.220.0/23 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.222.0/24 maxlen: 24
5.101.80.0/22 maxlen: 22
5.188.233.0/24 maxlen: 24
5.101.84.0/22 maxlen: 22
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.188.164.0/24 maxlen: 24
5.188.165.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.44.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.56.0/22 maxlen: 22
91.243.52.0/22 maxlen: 22
91.243.62.0/23 maxlen: 23
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c9:f9:23:9d:b0:12:f8:8c:d6:9a:a9:c4:47:96:75:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Mar 10 05:23:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73c477ff71867477816f0dccf5662f67ce98068a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c4:9a:78:86:24:67:c8:d6:c6:79:78:b9:2f:
f6:0b:3b:66:39:d0:d1:a8:b4:32:7f:ce:30:8a:53:
95:ab:e9:7e:52:cf:d0:2f:84:b3:90:92:c0:fd:78:
cd:b7:e1:2e:e9:ef:45:5d:c3:01:e6:f1:08:db:99:
01:2b:d2:45:82:ec:bb:ec:70:f2:31:40:6a:77:b1:
98:ea:18:71:b2:61:4c:ff:bb:8f:c2:59:f2:69:6e:
1d:16:cf:b3:f8:74:e9:37:5c:08:8f:4e:69:2d:61:
16:28:48:c1:59:88:c0:bf:0f:6e:be:c6:3a:7f:90:
5c:40:55:d1:f4:51:27:a2:cc:97:5d:52:ae:6b:ef:
5d:57:8e:40:8e:ff:eb:55:27:6f:dc:9d:87:9b:6d:
ae:a1:00:17:ec:c1:0b:24:77:b0:08:fa:90:7e:73:
b1:2f:ce:79:70:f8:1d:be:51:96:eb:65:9b:da:2f:
e5:99:05:e0:6d:5f:8d:8e:a1:63:87:c4:af:e5:85:
00:19:05:e2:cc:17:9f:e0:f7:30:9f:34:b1:f8:d1:
b5:a8:70:f1:f5:13:d9:97:80:bc:66:82:7c:7d:bd:
38:60:31:87:0b:c0:d3:62:df:af:36:82:b3:fd:10:
a4:13:4b:0b:ff:bb:b7:6d:0e:e7:4e:0b:d3:27:7c:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C4:77:FF:71:86:74:77:81:6F:0D:CC:F5:66:2F:67:CE:98:06:8A
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/c8R3_3GGdHeBbw3M9WYvZ86YBoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0-5.8.57.255
5.8.59.0-5.8.61.255
5.8.65.0-5.8.67.255
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.9.0-5.188.11.255
5.188.44.0-5.188.49.255
5.188.60.0-5.188.62.255
5.188.164.0-5.188.166.255
5.188.194.0/23
5.188.204.0/23
5.188.207.0-5.188.211.255
5.188.220.0/22
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0-31.184.235.255
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.49.0/24
37.139.51.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0-46.161.15.255
46.161.20.0-46.161.26.255
46.161.28.0-46.161.30.255
46.161.32.0/22
46.161.41.0-46.161.42.255
46.161.48.0/22
91.243.32.0/22
91.243.44.0-91.243.63.255
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
146.185.244.0/23
185.238.152.0/22
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
56:79:a8:54:26:8a:d6:74:1f:77:f7:e2:48:66:f3:cb:07:56:
4c:b1:94:96:b3:da:bc:9f:6e:89:80:be:08:46:21:b7:12:1e:
25:8a:58:0b:73:df:3c:d3:de:8c:b3:94:4d:d7:81:d8:92:51:
30:67:16:72:8c:ef:fc:85:bf:83:f6:7d:ac:5a:30:f9:17:60:
b7:db:1e:41:13:1c:ff:63:52:af:0e:8a:c9:db:ea:08:ab:67:
c3:1c:10:55:9a:39:99:76:fc:b8:64:13:cd:8d:df:2a:a0:01:
19:a0:2d:cd:3d:d2:f7:fb:6d:ec:6c:7b:7f:a8:10:1b:57:be:
03:5e:48:6a:3d:67:87:a9:de:9c:56:8b:de:b7:d8:02:ae:e8:
0c:f2:61:4b:1a:58:62:27:89:f6:99:29:96:82:80:50:34:dd:
05:cd:96:ad:e0:cb:20:9c:1f:6f:04:8c:66:9f:19:f2:be:ee:
a4:74:85:ab:2b:68:5f:21:bc:20:4d:2b:62:83:a0:74:62:47:
16:cf:50:7d:8f:45:7a:20:18:35:9a:90:f3:8d:27:f3:f9:c6:
c1:09:f9:50:d8:1c:2e:36:6a:02:16:92:90:d3:21:93:02:a5:
6b:9f:93:45:3d:eb:07:0e:6f:5c:9d:4e:e8:b5:63:49:71:b7:
35:7a:42:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org