Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/F4ugS3cHFx0-g-viKeTV__580i4.roa
File: F4ugS3cHFx0-g-viKeTV__580i4.roa (raw, json)
Hash identifier: 76Or+qBtTWwftvXxgUeS4B2ZvEXMoq4TQTdF6Q3UpSY=
Subject key identifier: 17:8B:A0:4B:77:07:17:1D:3E:83:EB:E2:29:E4:D5:FF:FE:7C:D2:2E
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 018334443C51824D7CA77134ED9467959DA3
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/F4ugS3cHFx0-g-viKeTV__580i4.roa
Signing time: Tue 13 Sep 2022 00:33:50 +0000
ROA not before: Tue 13 Sep 2022 00:33:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 78.144.0.0/13 maxlen: 24
213.208.64.0/18 maxlen: 24
193.218.99.0/24 maxlen: 24
217.68.128.0/20 maxlen: 24
212.159.128.0/18 maxlen: 24
81.178.0.0/15 maxlen: 24
85.210.0.0/15 maxlen: 24
84.13.0.0/16 maxlen: 24
92.0.0.0/11 maxlen: 24
195.112.0.0/18 maxlen: 24
84.43.0.0/17 maxlen: 24
62.24.128.0/17 maxlen: 24
212.139.0.0/16 maxlen: 24
89.240.0.0/14 maxlen: 24
80.225.0.0/16 maxlen: 24
80.40.0.0/13 maxlen: 24
79.72.0.0/13 maxlen: 24
88.104.0.0/13 maxlen: 24
212.1.128.0/19 maxlen: 24
81.170.0.0/17 maxlen: 24
82.133.0.0/17 maxlen: 24
87.242.128.0/17 maxlen: 24
185.173.116.0/22 maxlen: 24
217.8.0.0/19 maxlen: 24
81.1.64.0/18 maxlen: 24
89.168.0.0/16 maxlen: 24
83.67.0.0/16 maxlen: 24
2.96.0.0/13 maxlen: 24
84.12.0.0/16 maxlen: 24
212.74.96.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
79.66.0.0/15 maxlen: 24
185.175.144.0/22 maxlen: 24
62.3.192.0/18 maxlen: 24
212.67.96.0/19 maxlen: 24
185.173.120.0/22 maxlen: 24
185.175.48.0/22 maxlen: 24
81.6.192.0/18 maxlen: 24
194.106.32.0/19 maxlen: 24
81.86.0.0/16 maxlen: 24
79.68.0.0/14 maxlen: 24
62.241.160.0/19 maxlen: 24
195.149.0.0/18 maxlen: 24
62.64.128.0/17 maxlen: 24
213.78.0.0/16 maxlen: 24
195.137.0.0/17 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:34:44:3c:51:82:4d:7c:a7:71:34:ed:94:67:95:9d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Sep 13 00:33:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=178ba04b7707171d3e83ebe229e4d5fffe7cd22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:54:e0:2c:df:82:ea:fe:5b:97:c3:4a:32:
6b:56:c1:a8:2c:fa:a0:d4:fb:e9:0c:24:c3:b2:0b:
50:83:b9:04:a9:f4:ea:5d:f1:d3:09:82:85:83:78:
bf:14:e9:96:f6:f2:bf:42:08:a7:1c:ef:52:08:65:
b4:a0:b2:ef:e6:e7:7d:d9:22:c1:61:65:cf:6a:c6:
74:fc:0f:6e:d1:34:40:5f:70:fd:d4:ed:c6:4e:cd:
4a:47:eb:7a:fe:ea:bc:ae:59:5a:81:ee:68:03:96:
ec:79:ef:17:8c:6b:ee:4b:d5:4b:bc:13:52:10:4d:
8c:d4:3a:e1:be:90:10:fc:56:3a:01:f9:6c:f5:bf:
d6:90:ae:ae:09:45:7d:70:be:3f:3e:46:36:7d:97:
bb:c4:81:90:ca:8c:29:20:eb:0c:ad:b3:4e:db:33:
19:3b:d4:ed:dc:57:eb:03:53:19:5b:49:2c:08:a4:
f9:43:2b:5e:69:d6:dd:5d:d3:fe:5c:17:f4:c2:99:
71:3e:4e:23:8b:be:c2:45:eb:f1:5b:f3:95:63:69:
fc:1b:0e:37:70:a6:82:61:2f:24:c2:77:d1:5a:02:
13:80:b0:ac:ee:ff:a3:7b:28:3b:4c:11:32:a7:34:
bd:f6:24:e7:cb:d2:2e:94:7e:3d:af:70:b8:94:59:
a6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:A0:4B:77:07:17:1D:3E:83:EB:E2:29:E4:D5:FF:FE:7C:D2:2E
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/F4ugS3cHFx0-g-viKeTV__580i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.3.192.0/18
62.24.128.0/17
62.64.128.0/17
62.241.160.0/19
78.144.0.0/13
79.66.0.0-79.79.255.255
80.40.0.0/13
80.225.0.0/16
81.1.64.0/18
81.6.192.0/18
81.86.0.0/16
81.170.0.0/17
81.178.0.0/15
82.133.0.0/17
83.67.0.0/16
84.12.0.0/15
84.43.0.0/17
85.210.0.0/15
87.242.128.0/17
88.104.0.0/13
89.168.0.0/16
89.240.0.0/14
92.0.0.0/11
185.173.116.0-185.173.123.255
185.175.48.0/22
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.67.96.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.78.0.0/16
213.208.64.0/18
217.8.0.0/19
217.68.128.0/20
Signature Algorithm: sha256WithRSAEncryption
40:09:63:90:be:e0:dd:1c:9c:50:ff:5a:3c:06:cd:02:f2:62:
95:f9:29:89:e3:fa:1e:03:94:f8:24:89:54:d2:f5:2c:ef:43:
69:47:c9:87:fa:4a:9f:2e:d1:e8:b9:78:78:9f:b6:0b:05:e0:
36:5a:48:b4:1f:7e:b6:3f:57:4b:14:c4:99:4c:9f:ec:73:df:
24:55:5c:78:66:db:81:41:64:c0:82:87:de:bd:30:f6:d8:88:
3f:ca:83:16:b5:0a:1e:08:c6:61:fa:1d:ca:cd:8e:9c:6c:95:
91:a2:3d:10:08:fc:8c:c5:9b:a2:d3:e3:c1:79:f7:6a:55:8c:
7b:19:3d:c1:57:c2:02:a2:07:be:3f:cf:eb:ba:76:60:f9:a4:
08:21:e0:a1:ab:85:29:be:58:7a:05:a0:a2:44:cf:5d:0f:be:
d0:4a:15:03:7f:27:5b:a3:0e:4b:71:42:65:c2:d0:7d:1b:8b:
ac:fd:4b:fa:e5:32:ad:f1:f8:5f:47:e7:ae:e2:6a:97:d8:c6:
af:bc:90:b1:be:a8:a2:f1:8c:e5:17:7a:cf:9f:5c:f7:91:10:
40:50:44:67:8d:20:54:f6:c0:db:b1:f9:40:60:45:b9:fa:7e:
3a:c1:db:c7:65:a5:1c:b2:2e:12:13:4e:9e:64:92:5f:45:47:
7d:9f:14:b9
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgISAYM0RDxRgk18p3E07ZRnlZ2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh
ZGIzZWMwHhcNMjIwOTEzMDAzMzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzhiYTA0Yjc3MDcxNzFkM2U4M2ViZTIyOWU0ZDVmZmZlN2NkMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxBU4Czfgur+W5fDSjJrVsGoLPqg
1PvpDCTDsgtQg7kEqfTqXfHTCYKFg3i/FOmW9vK/QginHO9SCGW0oLLv5ud92SLB
YWXPasZ0/A9u0TRAX3D91O3GTs1KR+t6/uq8rllage5oA5bsee8XjGvuS9VLvBNS
EE2M1DrhvpAQ/FY6Afls9b/WkK6uCUV9cL4/PkY2fZe7xIGQyowpIOsMrbNO2zMZ
O9Tt3FfrA1MZW0ksCKT5QyteadbdXdP+XBf0wplxPk4ji77CRevxW/OVY2n8Gw43
cKaCYS8kwnfRWgITgLCs7v+jeyg7TBEypzS99iTny9IulH49r3C4lFmm7QIDAQAB
o4IDBzCCAwMwHQYDVR0OBBYEFBeLoEt3BxcdPoPr4ink1f/+fNIuMB8GA1UdIwQY
MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt
MGQ4ZjdkZDhjY2U2LzEvRjR1Z1MzY0hGeDAtZy12aUtlVFZfXzU4MGk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2
LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBGwYIKwYBBQUHAQcBAf8EggEKMIIBBjCCAQIEAgABMIH7
AwMDAmADBAY+A8ADBAc+GIADBAc+QIADBAU+8aADAwNOkDAKAwMBT0IDAwRPQAMD
A1AoAwMAUOEDBAZRAUADBAZRBsADAwBRVgMEB1GqAAMDAVGyAwQHUoUAAwMAU0MD
AwFUDAMEB1QrAAMDAVXSAwQHV/KAAwMDWGgDAwBZqAMDAlnwAwMFXAAwDAMEArmt
dAMEArmteAMEArmvMAMEArmvkAMEAMHaYwMEBcJqIAMEBcL34AMEBsNwAAMEB8OJ
AAMEBsOVAAMEBdQBgAMEBdRDYAMEBdRKYAMDANSLAwQG1J+AAwMA1U4DBAbV0EAD
BAXZCAADBATZRIAwDQYJKoZIhvcNAQELBQADggEBAEAJY5C+4N0cnFD/WjwGzQLy
YpX5KYnj+h4DlPgkiVTS9SzvQ2lHyYf6Sp8u0ei5eHiftgsF4DZaSLQffrY/V0sU
xJlMn+xz3yRVXHhm24FBZMCCh969MPbYiD/Kgxa1Ch4IxmH6HcrNjpxslZGiPRAI
/IzFm6LT48F592pVjHsZPcFXwgKiB74/z+u6dmD5pAgh4KGrhSm+WHoFoKJEz10P
vtBKFQN/J1ujDktxQmXC0H0bi6z9S/rlMq3x+F9H567iapfYxq+8kLG+qKLxjOUX
es+fXPeREEBQRGeNIFT2wNux+UBgRbn6fjrB28dlpRyyLhITTp5kkl9FR32fFLk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:53 2025 by rpki-client