Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/y0osXTircV99z_u4HqrNO_KYTjY.roa
File: y0osXTircV99z_u4HqrNO_KYTjY.roa (raw, json)
Hash identifier: jvAfnSfEqSiQ9R79a6Lvs1452m8XJhIFl6axhFSHTMU=
Subject key identifier: CB:4A:2C:5D:38:AB:71:5F:7D:CF:FB:B8:1E:AA:CD:3B:F2:98:4E:36
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 07EF5AA1
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/y0osXTircV99z_u4HqrNO_KYTjY.roa
Signing time: Mon 17 Jan 2022 13:25:43 +0000
ROA not before: Mon 17 Jan 2022 13:25:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198417
IP address blocks: 89.43.39.0/24 maxlen: 24
92.114.1.0/24 maxlen: 24
89.39.151.0/24 maxlen: 24
188.208.18.0/24 maxlen: 24
93.117.64.0/24 maxlen: 24
89.40.68.0/24 maxlen: 24
92.114.99.0/24 maxlen: 24
86.107.188.0/24 maxlen: 24
89.47.35.0/24 maxlen: 24
92.114.34.0/24 maxlen: 24
86.106.82.0/24 maxlen: 24
89.35.152.0/24 maxlen: 24
37.153.137.0/24 maxlen: 24
94.177.64.0/24 maxlen: 24
89.42.34.0/24 maxlen: 24
94.177.119.0/24 maxlen: 24
89.32.201.0/24 maxlen: 24
89.32.205.0/24 maxlen: 24
188.241.70.0/24 maxlen: 24
89.32.124.0/24 maxlen: 24
89.32.128.0/24 maxlen: 24
93.113.88.0/24 maxlen: 24
86.106.178.0/24 maxlen: 24
93.113.108.0/24 maxlen: 24
89.38.56.0/24 maxlen: 24
89.34.218.0/24 maxlen: 24
89.38.71.0/24 maxlen: 24
89.45.9.0/24 maxlen: 24
188.240.16.0/24 maxlen: 24
89.34.175.0/24 maxlen: 24
188.240.46.0/24 maxlen: 24
31.14.253.0/24 maxlen: 24
86.106.21.0/24 maxlen: 24
176.223.162.0/24 maxlen: 24
84.247.57.0/24 maxlen: 24
86.105.194.0/24 maxlen: 24
86.105.197.0/24 maxlen: 24
31.14.218.0/24 maxlen: 24
176.223.180.0/24 maxlen: 24
31.14.232.0/24 maxlen: 24
159.20.112.0/24 maxlen: 24
159.20.114.0/24 maxlen: 24
159.20.115.0/24 maxlen: 24
159.20.116.0/24 maxlen: 24
93.118.44.0/24 maxlen: 24
93.114.141.0/24 maxlen: 24
89.40.131.0/24 maxlen: 24
89.44.106.0/24 maxlen: 24
89.41.30.0/24 maxlen: 24
31.14.64.0/24 maxlen: 24
93.114.250.0/24 maxlen: 24
2a10:3ec0::/29 maxlen: 29
2a10:3ec0:32::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133126817 (0x7ef5aa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Jan 17 13:25:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb4a2c5d38ab715f7dcffbb81eaacd3bf2984e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:92:bf:ce:48:9b:9e:c7:e1:e3:65:a2:91:
5c:db:ed:9b:19:b5:ce:ab:d9:61:ce:68:ee:62:a0:
9a:ab:66:d1:56:97:68:72:68:e5:91:b4:21:d0:df:
4e:97:67:4e:79:be:95:18:15:17:aa:07:f2:0c:24:
9c:c8:da:4e:0b:30:6e:14:6f:5a:d4:d1:af:2c:b1:
55:63:10:1d:a9:81:41:6e:90:be:e5:21:d2:64:41:
1d:7a:8e:6e:d7:76:46:d2:70:8e:fe:e1:97:d3:31:
58:d3:03:2f:4c:b7:a7:93:9b:fa:a7:f9:f6:70:0f:
2d:b1:e9:01:db:7e:9e:a8:e5:37:86:05:dd:7d:d6:
53:ae:19:f1:2b:7d:73:19:1d:a9:7e:d5:4f:94:b0:
73:ce:69:0b:63:89:11:57:33:04:6a:70:52:e0:68:
a0:23:a4:1b:d6:cb:04:7f:b7:7d:f7:24:97:3b:55:
81:55:7e:47:f9:aa:03:23:87:9b:2d:84:87:e0:86:
1f:e6:6d:06:e5:09:aa:35:65:0d:1e:c4:7f:92:b3:
f8:87:e3:d0:8d:32:bd:60:68:ab:48:0a:f7:af:d7:
90:5c:c4:98:08:81:52:59:7b:7f:e7:3d:d1:d7:b8:
43:9f:93:cf:9e:6a:7b:d6:46:94:9e:cb:2c:56:c6:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4A:2C:5D:38:AB:71:5F:7D:CF:FB:B8:1E:AA:CD:3B:F2:98:4E:36
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/y0osXTircV99z_u4HqrNO_KYTjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.64.0/24
31.14.218.0/24
31.14.232.0/24
31.14.253.0/24
37.153.137.0/24
84.247.57.0/24
86.105.194.0/24
86.105.197.0/24
86.106.21.0/24
86.106.82.0/24
86.106.178.0/24
86.107.188.0/24
89.32.124.0/24
89.32.128.0/24
89.32.201.0/24
89.32.205.0/24
89.34.175.0/24
89.34.218.0/24
89.35.152.0/24
89.38.56.0/24
89.38.71.0/24
89.39.151.0/24
89.40.68.0/24
89.40.131.0/24
89.41.30.0/24
89.42.34.0/24
89.43.39.0/24
89.44.106.0/24
89.45.9.0/24
89.47.35.0/24
92.114.1.0/24
92.114.34.0/24
92.114.99.0/24
93.113.88.0/24
93.113.108.0/24
93.114.141.0/24
93.114.250.0/24
93.117.64.0/24
93.118.44.0/24
94.177.64.0/24
94.177.119.0/24
159.20.112.0/24
159.20.114.0-159.20.116.255
176.223.162.0/24
176.223.180.0/24
188.208.18.0/24
188.240.16.0/24
188.240.46.0/24
188.241.70.0/24
IPv6:
2a10:3ec0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:ad:3d:f1:be:bc:69:ee:56:e9:d1:04:39:f4:42:fe:20:84:
29:51:9e:e6:ca:6f:8c:c6:38:2a:94:9e:47:d9:e5:b3:f2:60:
ff:d0:a1:c1:6d:54:72:4a:dd:50:79:d4:02:47:c8:8b:b7:d7:
f0:fc:5a:bd:c6:d6:af:1a:84:94:53:3b:b0:c7:3f:18:71:86:
de:5b:05:ae:5c:02:54:ca:e9:70:05:4b:c1:a5:cc:a1:05:6c:
31:5d:f5:f8:ff:5e:fe:ea:96:8f:77:94:66:b5:c4:5c:6f:4e:
26:87:cb:00:9a:04:11:8a:01:d3:fa:66:45:18:d4:dd:c2:9b:
43:8c:90:34:57:e6:24:27:67:91:4c:40:d3:5a:7a:de:ac:d7:
37:56:ed:18:19:8a:08:b4:d9:f0:18:c3:0e:95:13:2b:5d:ee:
e0:44:5a:f4:58:1d:33:43:68:8e:7c:de:f8:2a:a9:3a:58:cf:
0d:f7:de:88:0f:20:fe:f6:ae:4a:fb:54:ae:f6:e2:97:55:d1:
bd:2a:65:79:4e:e7:b0:1d:dd:b2:33:2d:75:29:62:46:f9:d9:
f4:f1:b6:90:a3:2a:c1:c9:64:27:34:43:2b:e5:e4:46:c8:10:
eb:4e:d9:0b:39:fb:0b:ef:93:ee:ee:de:60:cf:28:40:51:ac:
37:34:b0:62
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIEB+9aoTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
Zjk2Njc2Y2YzOThkMzk5NGM0ZGQ0YTI5NjU5NDYxNGRmZjU4NmM3MB4XDTIyMDEx
NzEzMjU0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2I0YTJjNWQzOGFi
NzE1ZjdkY2ZmYmI4MWVhYWNkM2JmMjk4NGUzNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALNdkr/OSJuex+HjZaKRXNvtmxm1zqvZYc5o7mKgmqtm0VaX
aHJo5ZG0IdDfTpdnTnm+lRgVF6oH8gwknMjaTgswbhRvWtTRryyxVWMQHamBQW6Q
vuUh0mRBHXqObtd2RtJwjv7hl9MxWNMDL0y3p5Ob+qf59nAPLbHpAdt+nqjlN4YF
3X3WU64Z8St9cxkdqX7VT5Swc85pC2OJEVczBGpwUuBooCOkG9bLBH+3ffcklztV
gVV+R/mqAyOHmy2Eh+CGH+ZtBuUJqjVlDR7Ef5Kz+Ifj0I0yvWBoq0gK96/XkFzE
mAiBUll7f+c90de4Q5+Tz55qe9ZGlJ7LLFbGDOsCAwEAAaOCA0owggNGMB0GA1Ud
DgQWBBTLSixdOKtxX33P+7geqs078phONjAfBgNVHSMEGDAWgBRflmds85jTmUxN
1KKWWUYU3/WGxzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1g1Wm5iUE9ZMDVsTVRkU2lsbGxHRk5fMWhzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjgvNmE2ODA1LTVjZTAtNDEyOC1hMDRjLWY2MmYzNWFmNDM3MS8x
L3kwb3NYVGlyY1Y5OXpfdTRIcXJOT19LWVRqWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgv
NmE2ODA1LTVjZTAtNDEyOC1hMDRjLWY2MmYzNWFmNDM3MS8xL1g1Wm5iUE9ZMDVs
TVRkU2lsbGxHRk5fMWhzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AV4GCCsGAQUFBwEHAQH/BIIBTTCCAUkwggE2BAIAATCCAS4DBAAfDkADBAAfDtoD
BAAfDugDBAAfDv0DBAAlmYkDBABU9zkDBABWacIDBABWacUDBABWahUDBABWalID
BABWarIDBABWa7wDBABZIHwDBABZIIADBABZIMkDBABZIM0DBABZIq8DBABZItoD
BABZI5gDBABZJjgDBABZJkcDBABZJ5cDBABZKEQDBABZKIMDBABZKR4DBABZKiID
BABZKycDBABZLGoDBABZLQkDBABZLyMDBABccgEDBABcciIDBABccmMDBABdcVgD
BABdcWwDBABdco0DBABdcvoDBABddUADBABddiwDBABesUADBABesXcDBACfFHAw
DAMEAZ8UcgMEAJ8UdAMEALDfogMEALDftAMEALzQEgMEALzwEAMEALzwLgMEALzx
RjANBAIAAjAHAwUDKhA+wDANBgkqhkiG9w0BAQsFAAOCAQEASq098b68ae5W6dEE
OfRC/iCEKVGe5spvjMY4KpSeR9nls/Jg/9ChwW1UckrdUHnUAkfIi7fX8PxavcbW
rxqElFM7sMc/GHGG3lsFrlwCVMrpcAVLwaXMoQVsMV31+P9e/uqWj3eUZrXEXG9O
JofLAJoEEYoB0/pmRRjU3cKbQ4yQNFfmJCdnkUxA01p63qzXN1btGBmKCLTZ8BjD
DpUTK13u4ERa9FgdM0Nojnze+CqpOljPDffeiA8g/vauSvtUrvbil1XRvSpleU7n
sB3dsjMtdSliRvnZ9PG2kKMqwclkJzRDK+XkRsgQ607ZCzn7C++T7u7eYM8oQFGs
NzSwYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:28 2024 by rpki-client on console-ams.rpki-client.org