Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/QG3qcWidijQboDK6eRzhdS6y-RY.roa
File: QG3qcWidijQboDK6eRzhdS6y-RY.roa (raw, json)
Hash identifier: OhQb1oxUAZ/QnKfwKV760FjGTOVC5jdCp0SqR3I4zLI=
Subject key identifier: 40:6D:EA:71:68:9D:8A:34:1B:A0:32:BA:79:1C:E1:75:2E:B2:F9:16
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01904ADED049EBA483074101C0E6F50B0865
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/QG3qcWidijQboDK6eRzhdS6y-RY.roa
Signing time: Mon 24 Jun 2024 15:30:34 +0000
ROA not before: Mon 24 Jun 2024 15:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 2.56.0.0/22 maxlen: 22
5.180.4.0/22 maxlen: 22
5.182.28.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
45.86.16.0/21 maxlen: 21
85.159.117.0/24 maxlen: 24
91.239.59.0/24 maxlen: 24
91.242.70.0/24 maxlen: 24
91.242.72.0/23 maxlen: 23
91.242.73.0/24 maxlen: 24
91.242.74.0/23 maxlen: 23
91.242.94.0/24 maxlen: 24
91.242.95.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
91.242.105.0/24 maxlen: 24
91.242.123.0/24 maxlen: 24
91.242.124.0/24 maxlen: 24
91.242.125.0/24 maxlen: 24
91.242.126.0/24 maxlen: 24
91.242.127.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
178.175.176.0/22 maxlen: 22
185.40.105.0/24 maxlen: 24
185.173.244.0/24 maxlen: 24
185.173.247.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
193.46.204.0/24 maxlen: 24
194.50.200.0/23 maxlen: 24
194.50.201.0/24 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/22 maxlen: 22
195.138.104.0/24 maxlen: 24
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.107.0/24 maxlen: 24
195.138.108.0/24 maxlen: 24
195.138.111.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.114.0/24 maxlen: 24
195.138.116.0/24 maxlen: 24
195.138.118.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
195.138.124.0/22 maxlen: 22
195.138.124.0/24 maxlen: 24
195.216.156.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:de:d0:49:eb:a4:83:07:41:01:c0:e6:f5:0b:08:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 24 15:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=406dea71689d8a341ba032ba791ce1752eb2f916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:f4:17:ce:ff:89:f4:3e:6a:26:63:ec:64:
b6:1e:5e:f3:26:03:6c:f2:27:81:0a:b8:d4:c2:c3:
85:61:7d:fd:27:24:ef:f7:46:6b:82:80:1e:89:00:
fd:36:0d:25:c9:88:f7:12:15:e4:59:95:64:20:aa:
4d:35:1e:7c:eb:bf:49:74:11:5a:1c:9c:d0:a7:d1:
c4:b7:70:20:c9:fd:6b:76:ac:1e:f8:a0:47:cb:28:
24:7b:2e:56:6c:43:cd:51:26:c3:71:fc:59:e7:fc:
f6:fd:f0:54:ff:e7:c2:32:87:99:2a:53:26:d1:f7:
df:1e:3a:70:b0:d5:5d:5c:2a:fe:de:2e:bd:54:63:
c2:bd:47:4a:ef:4f:6b:ba:d4:e1:b9:59:ed:c8:b6:
de:c4:81:fc:62:5c:bb:17:65:ff:c9:8f:d0:8a:c5:
de:2f:f2:b5:4b:fd:ee:00:b1:5a:a2:c9:1a:ec:c9:
af:09:f7:a7:3f:0d:91:3a:90:ba:e5:d2:c4:4a:fa:
e3:ea:39:28:9b:49:b7:e4:1f:88:3d:8f:14:82:ac:
5e:bd:2b:45:45:50:55:cb:27:48:31:96:08:f6:80:
86:ad:0b:20:39:d6:8a:c2:d5:ee:04:18:88:20:3c:
7b:ff:5e:c6:9e:34:68:14:4b:31:4b:ce:f6:bb:33:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6D:EA:71:68:9D:8A:34:1B:A0:32:BA:79:1C:E1:75:2E:B2:F9:16
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/QG3qcWidijQboDK6eRzhdS6y-RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
5.180.4.0/22
5.182.28.0/22
45.67.117.0/24
45.86.16.0/21
85.159.117.0/24
91.239.59.0/24
91.242.70.0/24
91.242.72.0/22
91.242.94.0/23
91.242.103.0/24
91.242.105.0/24
91.242.123.0-91.242.127.255
94.231.198.0/24
176.126.223.0/24
178.175.176.0/22
185.40.105.0/24
185.173.244.0/24
185.173.247.0/24
185.180.145.0/24
185.212.11.0/24
193.46.204.0/24
194.50.200.0/23
194.50.206.0/23
195.138.103.0-195.138.108.255
195.138.111.0-195.138.112.255
195.138.114.0/24
195.138.116.0/24
195.138.118.0/24
195.138.120.0/24
195.138.122.0-195.138.127.255
195.216.156.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:27:d0:73:23:53:92:7c:fb:7e:84:9e:41:fc:9e:1c:d5:24:
a9:d9:46:4e:b7:a5:0a:49:9d:9e:8b:5f:0b:f3:31:d3:67:ad:
9a:fc:86:7e:63:6c:21:1d:55:17:49:11:5d:7b:60:98:ed:10:
46:5e:df:a5:09:77:2d:b8:8a:f9:4a:e6:d1:08:c1:19:83:ec:
cc:21:31:a5:4f:26:40:c1:75:ae:02:4e:c1:3e:2b:96:b9:84:
05:0b:48:cf:e3:34:20:ee:6c:6a:e2:94:47:04:f6:09:ed:23:
fc:e7:7c:b7:88:fd:64:01:e2:8c:95:61:1b:33:b8:a4:94:4b:
9e:07:93:24:38:04:33:56:34:08:93:93:a3:c9:8f:30:8e:d8:
8e:34:50:bd:84:75:15:2a:fb:e9:d6:88:9c:ed:10:9d:4b:7b:
a2:13:b8:8b:f0:6f:04:1e:19:0d:fe:41:27:09:2b:61:82:66:
7d:ec:d0:f2:da:2b:5a:2c:8b:74:93:04:7c:55:4a:5d:fb:5b:
e7:e1:99:37:22:69:e3:f1:8f:e7:2a:30:ac:cb:52:1a:47:0a:
ad:84:13:97:30:dd:a1:6d:da:88:be:1d:66:6c:09:c4:b5:1e:
85:6a:5f:b5:32:0a:c7:13:0b:7f:b8:41:35:95:e9:68:91:37:
ef:3e:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:36:29 2025 by rpki-client