Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/au6lqOsMs9y19jNwFGSqMXjMHjM.roa
File: au6lqOsMs9y19jNwFGSqMXjMHjM.roa (raw, json)
Hash identifier: L0pcBOvX9+CFm3JTr0OJb5WbaXjp53hLNYdMy/uMmLY=
Subject key identifier: 6A:EE:A5:A8:EB:0C:B3:DC:B5:F6:33:70:14:64:AA:31:78:CC:1E:33
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01939607C04DEF1BFD9781A1AA7AAA6B902D
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/au6lqOsMs9y19jNwFGSqMXjMHjM.roa
Signing time: Thu 05 Dec 2024 08:55:10 +0000
ROA not before: Thu 05 Dec 2024 08:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21501
IP address blocks: 5.35.224.0/19 maxlen: 24
5.175.0.0/19 maxlen: 24
37.122.208.0/21 maxlen: 24
37.148.200.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
46.163.64.0/20 maxlen: 24
46.163.84.0/22 maxlen: 24
46.163.96.0/22 maxlen: 24
46.163.104.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
46.252.16.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
62.75.142.0/23 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
62.75.168.0/22 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
62.75.208.0/22 maxlen: 24
62.138.128.0/18 maxlen: 24
77.91.232.0/21 maxlen: 24
79.170.40.0/21 maxlen: 24
80.67.16.0/20 maxlen: 24
80.90.192.0/20 maxlen: 24
80.237.128.0/23 maxlen: 24
80.237.130.0/24 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
80.237.248.0/23 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.252.0/22 maxlen: 24
80.246.48.0/20 maxlen: 24
81.21.64.0/20 maxlen: 24
83.169.0.0/19 maxlen: 24
83.169.32.0/20 maxlen: 24
83.169.52.0/22 maxlen: 24
85.25.16.0/23 maxlen: 24
85.25.168.0/22 maxlen: 24
85.119.152.0/21 maxlen: 24
87.230.0.0/19 maxlen: 24
87.230.32.0/22 maxlen: 24
87.230.40.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
87.230.60.0/22 maxlen: 24
87.230.64.0/24 maxlen: 24
87.230.66.0/23 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
87.230.126.0/24 maxlen: 24
88.80.192.0/19 maxlen: 24
91.109.0.0/20 maxlen: 24
91.250.64.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
91.250.88.0/22 maxlen: 24
91.250.96.0/21 maxlen: 24
91.250.108.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
92.43.16.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
92.51.144.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
92.60.112.0/20 maxlen: 24
93.92.144.0/21 maxlen: 24
93.180.152.0/21 maxlen: 24
93.187.232.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
94.199.240.0/21 maxlen: 24
109.68.32.0/21 maxlen: 24
109.104.64.0/19 maxlen: 24
109.239.48.0/20 maxlen: 24
141.0.16.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
176.28.16.0/21 maxlen: 24
176.28.32.0/20 maxlen: 24
176.28.48.0/21 maxlen: 24
176.28.56.0/22 maxlen: 24
176.28.62.0/24 maxlen: 24
176.32.224.0/21 maxlen: 24
176.221.40.0/21 maxlen: 24
178.77.64.0/20 maxlen: 24
178.77.80.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
178.77.124.0/24 maxlen: 24
185.2.128.0/22 maxlen: 24
185.7.248.0/22 maxlen: 24
185.21.100.0/22 maxlen: 24
185.34.212.0/22 maxlen: 24
185.85.48.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
188.121.32.0/19 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.187.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
212.67.192.0/19 maxlen: 24
217.8.240.0/20 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.141.0/24 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.146.0/23 maxlen: 24
217.115.152.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.164.0/24 maxlen: 24
217.199.160.0/19 maxlen: 24
2001:67c:308::/48 maxlen: 48
2001:1520::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
2a04:4fc0::/30 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:07:c0:4d:ef:1b:fd:97:81:a1:aa:7a:aa:6b:90:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Dec 5 08:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6aeea5a8eb0cb3dcb5f633701464aa3178cc1e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:b2:f8:6c:5b:f6:b0:3a:e9:23:a1:e3:2a:
23:6a:04:ca:42:27:cd:b6:24:76:a0:b0:0f:c2:35:
b0:5d:6d:de:09:8f:60:5d:db:56:34:cd:5b:c5:0a:
55:08:74:30:be:4a:94:ed:97:4d:45:88:1b:9d:d6:
29:dc:8f:95:11:1e:a6:f8:f0:b2:43:b1:77:b3:6f:
a3:cd:a6:1b:78:5b:10:65:b3:41:5a:62:a7:3a:ca:
a9:d5:f2:da:f1:ea:f2:cd:4f:f9:d5:f3:a5:25:26:
df:c8:98:a9:09:73:e6:ce:b2:98:42:0b:be:5e:4b:
7a:89:86:26:ed:b7:0d:8d:35:d9:7e:26:5f:86:4e:
6f:c5:df:ba:a7:31:ca:b3:1e:94:5f:ef:ed:39:19:
ee:e4:76:23:b4:a2:fb:aa:57:b9:2f:74:ae:cc:7a:
42:1a:cc:d5:9c:86:a4:d7:e7:97:c4:4a:8d:b7:9b:
88:5d:13:b9:b5:1a:d5:22:9c:4f:55:80:a0:45:14:
e5:9a:f6:b6:e4:86:2a:e4:44:82:28:e6:5e:58:fa:
fd:dd:c4:c5:5a:57:30:cd:fc:1c:fd:84:54:3c:06:
c1:ae:c0:3c:76:6f:1d:32:06:67:c8:10:a2:d1:04:
f2:d5:ec:15:7a:0b:4b:e7:22:57:a1:23:4f:5e:6b:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:A5:A8:EB:0C:B3:DC:B5:F6:33:70:14:64:AA:31:78:CC:1E:33
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/au6lqOsMs9y19jNwFGSqMXjMHjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
77.91.232.0/21
79.170.40.0/21
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
80.246.48.0/20
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
85.119.152.0/21
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
93.92.144.0/21
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
94.199.240.0/21
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
3a:91:7c:6a:ea:25:c8:16:52:92:76:e2:71:60:ed:31:34:45:
56:4d:77:01:18:75:a4:ea:9a:62:8c:f2:1a:3b:89:1a:cb:1e:
67:4b:a6:8e:1b:51:4b:71:7c:5b:00:16:b5:ae:0c:1b:f7:14:
e5:c7:20:ba:26:b0:a3:be:6c:58:8b:b1:d4:27:c9:b2:cd:d4:
72:d5:56:d8:c7:61:9d:c7:2e:f0:de:e2:7d:30:83:44:a7:63:
e2:07:25:f1:bc:60:37:4c:71:71:fe:1e:bf:38:69:e7:75:19:
53:15:29:b4:99:00:bb:f1:b0:01:fc:c1:c4:f8:11:69:77:d8:
7c:5a:95:1c:a3:91:64:cd:07:e7:20:11:76:fe:70:00:89:a4:
67:e1:50:59:32:35:ee:a3:fe:8d:fd:4f:d3:69:94:7f:9e:f7:
da:74:89:88:22:5f:99:74:8a:d7:6e:96:c9:5d:72:e0:39:e5:
ed:13:13:39:ba:89:92:4e:7b:92:a1:90:7f:96:55:cb:64:14:
2d:2a:8e:40:ee:23:ad:43:1b:ca:e6:ec:c3:4a:2b:2f:aa:ab:
28:90:46:3c:00:4f:7c:a5:a2:e4:34:54:a1:39:ca:e8:36:95:
17:38:2e:a1:63:40:ae:b5:49:26:3c:68:a7:25:fb:25:59:12:
0a:d9:5d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:51 2025 by rpki-client