Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/hhD6HAlanlGjNGbXcfcAsYbiNyY.roa
File: hhD6HAlanlGjNGbXcfcAsYbiNyY.roa (raw, json)
Hash identifier: Qq4/8apBLxBZXEhNPBMhSiZKt4+Z5IKcjuBLT23lSr4=
Subject key identifier: 86:10:FA:1C:09:5A:9E:51:A3:34:66:D7:71:F7:00:B1:86:E2:37:26
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 4A0D0055
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/hhD6HAlanlGjNGbXcfcAsYbiNyY.roa
Signing time: Thu 09 Jun 2022 10:17:03 +0000
ROA not before: Thu 09 Jun 2022 10:17:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.24.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.9.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
46.161.30.0/24 maxlen: 24
46.161.28.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
46.161.29.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.42.0/24 maxlen: 24
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 24
46.161.11.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
37.139.51.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.244.0/23 maxlen: 23
146.185.196.0/22 maxlen: 22
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.232.0/22 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.36.0/22 maxlen: 22
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.50.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
37.9.52.0/22 maxlen: 22
91.243.93.0/24 maxlen: 24
5.8.52.0/23 maxlen: 23
5.8.54.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.56.0/24 maxlen: 24
5.8.57.0/24 maxlen: 24
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.62.0/24 maxlen: 24
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.20.0/22 maxlen: 22
5.189.248.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/22 maxlen: 22
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.68.0/22 maxlen: 22
5.188.220.0/23 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.222.0/24 maxlen: 24
5.101.80.0/22 maxlen: 22
5.188.233.0/24 maxlen: 24
5.101.84.0/22 maxlen: 22
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.188.165.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.188.204.0/23 maxlen: 23
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.62.0/23 maxlen: 23
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1242366037 (0x4a0d0055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jun 9 10:17:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8610fa1c095a9e51a33466d771f700b186e23726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:c0:9f:40:93:3d:30:ac:48:ba:b5:65:b2:
97:1e:f5:20:b5:96:97:c5:f2:0d:62:e2:09:bc:ee:
48:1a:70:cb:d2:3f:18:7e:2b:fe:44:e0:ab:bb:fa:
af:fc:99:3e:2d:f7:07:f3:94:46:1b:25:c6:80:a7:
d4:16:89:b3:8d:54:cd:0c:eb:3b:97:3a:94:65:03:
cb:a5:fd:ad:8c:50:13:43:fb:6e:74:30:c9:03:62:
a1:0b:60:2c:39:3a:b7:76:7b:04:3d:16:69:f1:3f:
b3:bc:0f:3a:88:94:4e:7a:e9:78:8c:c3:34:38:60:
2c:dc:5c:28:17:1f:d7:3e:a2:5a:54:1a:70:17:59:
5d:2f:c2:c9:97:81:61:bd:4a:69:38:38:29:c2:7c:
9e:4b:b8:32:75:81:ac:e3:be:ca:85:1e:7f:58:ef:
ad:07:51:04:5e:89:9f:2a:8a:6c:66:0f:5d:d3:41:
18:1b:bd:79:3f:85:01:93:64:29:98:60:33:30:00:
43:6c:a1:6e:83:c4:be:82:3c:f7:ba:1c:0a:f9:94:
f5:7d:5b:d7:1d:7c:1c:64:4e:05:a2:90:6c:7e:e1:
42:6f:b9:4e:c6:e7:aa:3c:d7:aa:41:bd:dd:79:1f:
a2:d3:85:13:07:13:4b:d6:8d:8e:97:cd:ba:54:31:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:10:FA:1C:09:5A:9E:51:A3:34:66:D7:71:F7:00:B1:86:E2:37:26
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/hhD6HAlanlGjNGbXcfcAsYbiNyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.20.0/22
5.8.48.0-5.8.57.255
5.8.59.0-5.8.62.255
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/21
5.101.80.0/21
5.101.90.0/23
5.188.9.0-5.188.11.255
5.188.44.0-5.188.49.255
5.188.60.0-5.188.62.255
5.188.165.0-5.188.166.255
5.188.204.0/23
5.188.208.0/22
5.188.220.0/22
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0-31.184.235.255
31.184.238.0/23
31.184.243.0/24
37.9.36.0/22
37.9.48.0/24
37.9.50.0/24
37.9.52.0/22
37.139.49.0/24
37.139.51.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/23
46.161.14.0/23
46.161.20.0-46.161.25.255
46.161.28.0-46.161.30.255
46.161.32.0/22
46.161.42.0/24
46.161.44.0-46.161.51.255
91.243.48.0/21
91.243.60.0/22
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.196.0/22
146.185.223.0-146.185.231.255
146.185.244.0/23
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
6b:98:91:b1:57:28:d0:f9:7c:0b:07:63:39:90:c0:7a:f3:86:
32:b4:23:c0:0e:06:18:fe:61:52:84:25:e3:a5:53:76:bc:09:
4a:42:0f:2d:53:c2:ff:57:40:56:b2:64:4c:e4:67:73:58:82:
3d:b6:d3:91:61:43:2a:62:d1:34:18:75:6b:47:5e:66:79:64:
f8:f1:c6:76:ea:f5:17:30:7f:d8:b4:30:af:fb:80:b6:02:89:
f6:ac:43:d8:ad:96:71:82:50:e7:24:05:f5:31:e9:d0:1f:3e:
58:1a:f0:df:57:b8:3f:a2:27:07:fb:f2:05:03:a9:02:ff:06:
13:ed:7d:af:13:b8:a8:8d:21:15:f2:bd:b1:f1:63:ee:14:d0:
04:e9:fc:92:40:79:72:5e:0d:6a:0d:0a:9c:02:69:e9:20:3e:
f0:35:50:98:2e:ac:2d:7b:2c:c6:00:d0:e5:55:07:55:85:ed:
db:8b:b9:36:c2:a9:97:4f:82:78:25:bf:09:a0:58:76:3f:a7:
45:ce:d3:39:58:6b:8f:f5:f0:65:ef:1d:a2:1d:77:0f:2c:01:
eb:22:aa:0d:fd:d3:ec:8f:b0:00:cf:3d:11:2f:a7:bc:a6:e0:
a5:b7:ea:8c:ae:8b:b1:b4:d8:e2:fe:b0:39:b1:5e:7d:62:a6:
e7:24:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:29 2024 by rpki-client on console-fra.rpki-client.org