Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/f56abAc5LmLynBHXe3SblczI7_c.roa
File: f56abAc5LmLynBHXe3SblczI7_c.roa (raw, json)
Hash identifier: 0qaUGohJs8l9Xn6lzA66bDpekYY08eUN7ejkEbZVUIw=
Subject key identifier: 7F:9E:9A:6C:07:39:2E:62:F2:9C:11:D7:7B:74:9B:95:CC:C8:EF:F7
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 4957966C
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/f56abAc5LmLynBHXe3SblczI7_c.roa
Signing time: Mon 28 Mar 2022 05:23:31 +0000
ROA not before: Mon 28 Mar 2022 05:23:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.24.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.9.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.0.0/23 maxlen: 23
95.215.3.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
46.161.28.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
46.161.29.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.42.0/24 maxlen: 24
46.161.48.0/23 maxlen: 23
46.161.48.0/22 maxlen: 22
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 24
46.161.11.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
37.139.51.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.244.0/23 maxlen: 23
146.185.253.0/24 maxlen: 24
146.185.196.0/22 maxlen: 22
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.232.0/22 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.36.0/22 maxlen: 22
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.50.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
37.9.52.0/22 maxlen: 22
91.243.93.0/24 maxlen: 24
5.8.52.0/23 maxlen: 23
5.8.54.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.56.0/24 maxlen: 24
5.8.57.0/24 maxlen: 24
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.62.0/24 maxlen: 24
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.20.0/22 maxlen: 22
5.189.248.0/22 maxlen: 22
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.68.0/22 maxlen: 22
5.188.220.0/23 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.222.0/24 maxlen: 24
5.101.80.0/22 maxlen: 22
5.188.233.0/24 maxlen: 24
5.101.84.0/22 maxlen: 22
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.188.165.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.188.204.0/23 maxlen: 23
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.48.0/23 maxlen: 23
91.243.48.0/22 maxlen: 22
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.62.0/23 maxlen: 23
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230476908 (0x4957966c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Mar 28 05:23:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f9e9a6c07392e62f29c11d77b749b95ccc8eff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:1f:dd:7c:a7:c4:50:ad:83:98:72:a3:6b:
83:d0:5d:17:d0:9e:ec:27:fd:90:f4:f3:ce:67:97:
b8:c1:d5:cb:cf:d8:82:d1:04:0e:4a:41:6d:8b:c2:
48:f9:e8:2a:0d:5e:01:71:84:54:e9:12:45:10:ae:
44:d7:f6:31:38:27:cb:41:4b:bd:e8:e6:37:36:3b:
ea:54:89:aa:77:70:80:9b:53:40:15:d1:d8:00:ab:
80:97:44:f2:b9:c8:c6:22:05:c6:84:d6:d6:d9:79:
c2:cb:63:6c:cf:2c:ba:e6:fa:fd:38:bb:cf:23:95:
70:e4:d3:86:dd:3b:00:2b:99:48:dd:14:ad:1e:3a:
c5:6d:c5:cb:e6:2d:44:5f:09:9a:87:ce:44:c6:7f:
82:b7:6f:a2:9a:77:43:f3:12:ec:4f:9a:44:e1:c9:
25:d5:45:57:8a:81:2c:3f:17:40:66:00:4c:4f:21:
6f:c7:bd:71:af:6c:55:c3:c1:c3:1b:87:49:16:14:
b9:cd:c3:05:fb:36:a2:6b:31:2d:07:31:73:a0:03:
54:46:cb:97:fc:bd:d1:3f:6f:a7:45:29:b4:dc:40:
4d:34:28:60:79:bc:6a:89:3d:e0:01:61:9c:7f:7f:
d4:03:81:89:da:44:16:c4:35:0b:e3:4a:3d:0c:0a:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9E:9A:6C:07:39:2E:62:F2:9C:11:D7:7B:74:9B:95:CC:C8:EF:F7
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/f56abAc5LmLynBHXe3SblczI7_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.20.0/22
5.8.48.0-5.8.57.255
5.8.59.0-5.8.62.255
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/21
5.101.80.0/21
5.101.90.0/23
5.188.9.0-5.188.11.255
5.188.44.0-5.188.49.255
5.188.60.0-5.188.62.255
5.188.165.0-5.188.166.255
5.188.204.0/23
5.188.207.0-5.188.211.255
5.188.220.0/22
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0-31.184.235.255
31.184.238.0/23
31.184.243.0/24
37.9.36.0/22
37.9.48.0/24
37.9.50.0/24
37.9.52.0/22
37.139.49.0/24
37.139.51.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/23
46.161.14.0/23
46.161.20.0-46.161.25.255
46.161.28.0/23
46.161.32.0/22
46.161.42.0/24
46.161.48.0/22
91.243.48.0/21
91.243.60.0/22
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.196.0/22
146.185.223.0-146.185.231.255
146.185.244.0/23
146.185.253.0/24
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
5c:ce:1e:7a:7d:3d:98:fb:35:b8:6b:56:8c:a0:cc:1d:30:18:
98:08:d1:16:32:5c:16:98:69:0e:89:c7:2b:b6:6e:f6:c1:a2:
77:d0:52:72:32:19:65:6a:5f:fa:5c:7c:d0:7b:b2:d3:de:fe:
fa:89:8b:8c:8e:ad:a0:67:72:82:11:b4:e5:4c:bd:b4:aa:54:
f1:09:97:03:be:e3:83:7f:32:9e:bf:7d:04:e6:a9:cd:4f:6c:
21:91:8c:46:bc:de:8f:96:f7:47:17:46:3d:6c:c7:7c:b4:5a:
51:df:02:fd:90:14:f5:3e:e0:9e:80:be:4b:40:6a:32:97:71:
da:42:6e:c7:37:ef:f4:0b:80:a3:35:27:fd:b8:47:81:c7:90:
67:8b:a1:c5:96:4d:e4:b8:4f:49:e9:06:48:c7:fc:36:5b:da:
44:24:98:c5:0d:47:f2:f5:2e:14:cb:4e:fd:e7:76:25:80:d2:
b1:42:55:b1:a7:f0:19:21:cf:83:43:0c:12:07:91:d8:02:ed:
c8:86:1c:b5:90:6a:9a:09:2a:1f:e5:ed:be:2c:86:d5:61:0d:
78:21:60:3c:79:9e:41:71:27:11:d4:ba:a9:95:85:e2:f4:ca:
6e:ba:98:7a:ac:06:05:19:f7:ef:cc:7d:ec:f4:af:09:3e:0f:
6e:7c:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org