Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/wvKeAggR-NCY3niWLYuoZTz9DII.roa
File: wvKeAggR-NCY3niWLYuoZTz9DII.roa (raw, json)
Hash identifier: hqIdVT9tFrM6OAJnSxHAe6eTga5kWW2qrvs8nDgi8Xc=
Subject key identifier: C2:F2:9E:02:08:11:F8:D0:98:DE:78:96:2D:8B:A8:65:3C:FD:0C:82
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 018B94B9F348FFFF7085492775B5E436B69A
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/wvKeAggR-NCY3niWLYuoZTz9DII.roa
Signing time: Fri 03 Nov 2023 10:28:16 +0000
ROA not before: Fri 03 Nov 2023 10:28:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15695
IP address blocks: 195.238.244.0/24 maxlen: 24
37.26.224.0/24 maxlen: 24
37.26.226.0/24 maxlen: 24
37.26.225.0/24 maxlen: 24
37.26.231.0/24 maxlen: 24
37.26.230.0/24 maxlen: 24
37.26.229.0/24 maxlen: 24
37.26.228.0/24 maxlen: 24
37.26.227.0/24 maxlen: 24
63.247.206.0/24 maxlen: 24
63.247.205.0/24 maxlen: 24
63.247.204.0/24 maxlen: 24
63.247.203.0/24 maxlen: 24
63.247.202.0/24 maxlen: 24
63.247.201.0/24 maxlen: 24
63.247.200.0/24 maxlen: 24
63.247.207.0/24 maxlen: 24
91.103.17.0/24 maxlen: 24
91.103.16.0/24 maxlen: 24
91.103.19.0/24 maxlen: 24
91.103.18.0/24 maxlen: 24
91.103.23.0/24 maxlen: 24
91.103.21.0/24 maxlen: 24
86.48.217.0/24 maxlen: 24
86.48.216.0/24 maxlen: 24
86.48.223.0/24 maxlen: 24
86.48.222.0/24 maxlen: 24
86.48.221.0/24 maxlen: 24
86.48.220.0/24 maxlen: 24
86.48.240.0/24 maxlen: 24
185.62.118.0/24 maxlen: 24
185.62.117.0/24 maxlen: 24
185.62.116.0/24 maxlen: 24
63.247.192.0/24 maxlen: 24
185.62.119.0/24 maxlen: 24
63.247.199.0/24 maxlen: 24
63.247.198.0/24 maxlen: 24
63.247.197.0/24 maxlen: 24
63.247.196.0/24 maxlen: 24
63.247.195.0/24 maxlen: 24
63.247.194.0/24 maxlen: 24
63.247.193.0/24 maxlen: 24
45.93.85.0/24 maxlen: 24
45.93.84.0/24 maxlen: 24
45.93.87.0/24 maxlen: 24
193.160.135.0/24 maxlen: 24
193.160.134.0/24 maxlen: 24
45.81.223.0/24 maxlen: 24
45.81.222.0/24 maxlen: 24
45.81.221.0/24 maxlen: 24
45.81.220.0/24 maxlen: 24
45.95.219.0/24 maxlen: 24
45.95.218.0/24 maxlen: 24
45.95.217.0/24 maxlen: 24
45.95.216.0/24 maxlen: 24
5.253.89.0/24 maxlen: 24
5.253.88.0/24 maxlen: 24
5.253.91.0/24 maxlen: 24
5.253.90.0/24 maxlen: 24
45.94.190.0/24 maxlen: 24
216.172.64.0/24 maxlen: 24
216.172.67.0/24 maxlen: 24
216.172.66.0/24 maxlen: 24
216.172.65.0/24 maxlen: 24
216.172.71.0/24 maxlen: 24
216.172.70.0/24 maxlen: 24
216.172.69.0/24 maxlen: 24
216.172.68.0/24 maxlen: 24
216.172.74.0/24 maxlen: 24
216.172.73.0/24 maxlen: 24
216.172.72.0/24 maxlen: 24
216.172.78.0/24 maxlen: 24
216.172.77.0/24 maxlen: 24
216.172.76.0/24 maxlen: 24
216.172.75.0/24 maxlen: 24
216.172.79.0/24 maxlen: 24
2a00:cb8:31::/48 maxlen: 48
2a00:cb8:971::/48 maxlen: 48
2a00:cb8:34::/48 maxlen: 48
2a00:cb8:48::/48 maxlen: 48
2a00:cb8:41::/48 maxlen: 48
2a00:cb8:144::/48 maxlen: 48
2a00:cb8:44::/48 maxlen: 48
2a00:cb8:33::/48 maxlen: 48
2a00:cb8:39::/48 maxlen: 48
2a00:cb8:49::/48 maxlen: 48
2a00:cb8:353::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:b9:f3:48:ff:ff:70:85:49:27:75:b5:e4:36:b6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Nov 3 10:28:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2f29e020811f8d098de78962d8ba8653cfd0c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:82:2f:99:d9:43:10:bc:83:13:3e:21:42:
42:d0:69:8f:69:3e:eb:e1:74:06:65:d2:c5:ac:b1:
44:6e:37:49:61:5f:eb:89:42:66:68:ef:5b:08:6f:
fe:33:9b:5d:8b:d3:f5:87:a5:6e:7e:12:9e:ee:5a:
df:f5:7e:0c:4c:94:d3:86:6c:fc:4c:ca:86:9c:03:
a2:ca:92:f5:57:30:47:40:8b:ca:13:7c:d3:e4:78:
2d:99:4b:7b:80:96:6c:5c:a1:cd:cd:7e:36:03:63:
b5:bc:fd:7d:86:bb:d7:1e:9e:fc:81:e8:52:0e:ad:
90:48:4c:b2:3e:71:23:cd:12:f6:8e:1c:80:cd:e3:
16:4e:a3:33:96:8a:96:09:5b:ee:bc:a7:8a:1c:2d:
1b:40:75:9c:58:87:79:e9:d7:81:87:76:18:b2:a2:
be:8a:ec:94:4e:5c:e5:56:d3:c8:60:0a:f5:c5:98:
86:dc:4e:a6:6a:b8:a3:65:23:e3:a4:70:12:5f:40:
73:71:aa:52:30:be:6d:8b:11:29:e9:c4:52:21:ad:
24:b4:c0:b2:04:62:5b:b7:39:d0:1d:1f:eb:7d:4b:
fd:3d:ae:c9:45:a0:09:78:34:9e:73:b8:22:1d:2e:
37:c2:ed:86:82:71:fc:2e:24:96:04:7d:50:c6:82:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F2:9E:02:08:11:F8:D0:98:DE:78:96:2D:8B:A8:65:3C:FD:0C:82
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/wvKeAggR-NCY3niWLYuoZTz9DII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.88.0/22
37.26.224.0/21
45.81.220.0/22
45.93.84.0/23
45.93.87.0/24
45.94.190.0/24
45.95.216.0/22
63.247.192.0/20
86.48.216.0/23
86.48.220.0/22
86.48.240.0/24
91.103.16.0/22
91.103.21.0/24
91.103.23.0/24
185.62.116.0/22
193.160.134.0/23
195.238.244.0/24
216.172.64.0/20
IPv6:
2a00:cb8:31::/48
2a00:cb8:33::-2a00:cb8:34:ffff:ffff:ffff:ffff:ffff
2a00:cb8:39::/48
2a00:cb8:41::/48
2a00:cb8:44::/48
2a00:cb8:48::/47
2a00:cb8:144::/48
2a00:cb8:353::/48
2a00:cb8:971::/48
Signature Algorithm: sha256WithRSAEncryption
81:95:1d:bc:12:05:9b:88:0a:97:a6:d2:35:28:e8:38:ab:6a:
b4:c0:0e:f1:8a:0e:af:b2:a4:ff:48:59:f4:16:7c:15:bb:81:
40:ea:ec:96:0c:6a:04:f6:46:89:12:40:ce:57:f2:69:b0:70:
1f:6d:64:a2:4e:6d:a2:90:96:48:f1:26:41:09:8c:fc:55:e2:
5b:07:98:61:e6:28:d8:72:7c:bc:73:c0:3e:dd:da:64:d3:b4:
b3:30:ae:36:ac:08:7d:a0:49:93:3c:ef:cc:13:3a:7a:f3:fe:
a4:06:d9:ce:99:80:fd:0d:e2:be:81:34:08:b9:8a:5a:90:0a:
df:cd:c0:df:a5:af:4f:a4:65:cb:1b:1c:e7:67:4a:b8:16:06:
22:92:ce:df:23:3a:e9:43:60:d7:1a:ed:b3:0f:9f:e9:97:02:
f1:09:7f:c9:bd:1f:d0:7e:08:69:f4:2f:22:ac:1a:3c:a6:fa:
78:f3:3f:dd:fb:11:62:f5:ac:93:07:ee:57:09:cc:a3:c5:cc:
cc:b0:74:83:16:d3:fe:6d:a7:cd:9e:30:da:13:18:64:ca:27:
ed:7c:f9:76:0f:24:0b:8c:0b:d4:3f:e9:43:e8:bd:5b:d9:f1:
c8:47:5b:14:89:78:ec:d7:2f:29:82:61:1c:2f:85:04:ef:bf:
c1:e3:fa:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:19 2025 by rpki-client