Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/SbKzTGzZSGg0uuJSiFmJlm5Ouv0.roa
File: SbKzTGzZSGg0uuJSiFmJlm5Ouv0.roa (raw, json)
Hash identifier: tjUyNQVo7rH0+C4LoivNpTqMfq51VDzIuZnVVshq4PU=
Subject key identifier: 49:B2:B3:4C:6C:D9:48:68:34:BA:E2:52:88:59:89:96:6E:4E:BA:FD
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 018BFF0BBE3D925A9A2FA333AEA0C9E97676
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/SbKzTGzZSGg0uuJSiFmJlm5Ouv0.roa
Signing time: Fri 24 Nov 2023 01:57:21 +0000
ROA not before: Fri 24 Nov 2023 01:57:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 78.144.0.0/13 maxlen: 24
213.208.64.0/18 maxlen: 24
193.218.99.0/24 maxlen: 24
217.68.128.0/20 maxlen: 24
212.159.128.0/18 maxlen: 24
81.178.0.0/15 maxlen: 24
92.0.0.0/11 maxlen: 24
195.112.0.0/18 maxlen: 24
84.43.0.0/17 maxlen: 24
62.24.128.0/17 maxlen: 24
212.139.0.0/16 maxlen: 24
89.240.0.0/14 maxlen: 24
80.40.0.0/13 maxlen: 24
212.1.128.0/19 maxlen: 24
81.170.0.0/17 maxlen: 24
91.146.112.0/21 maxlen: 24
82.133.0.0/17 maxlen: 24
145.255.240.0/21 maxlen: 24
87.242.128.0/17 maxlen: 24
185.173.116.0/22 maxlen: 24
185.112.212.0/22 maxlen: 24
217.8.0.0/19 maxlen: 24
81.1.64.0/18 maxlen: 24
83.67.0.0/16 maxlen: 24
2.96.0.0/13 maxlen: 24
84.12.0.0/16 maxlen: 24
212.74.96.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
79.76.0.0/14 maxlen: 24
185.175.144.0/22 maxlen: 24
62.3.192.0/18 maxlen: 24
212.67.96.0/19 maxlen: 24
185.173.120.0/22 maxlen: 24
185.175.48.0/22 maxlen: 24
81.6.192.0/18 maxlen: 24
194.106.32.0/19 maxlen: 24
89.168.128.0/17 maxlen: 24
81.86.0.0/16 maxlen: 24
62.241.160.0/19 maxlen: 24
195.149.0.0/18 maxlen: 24
185.24.12.0/22 maxlen: 24
213.78.0.0/16 maxlen: 24
195.137.0.0/17 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ff:0b:be:3d:92:5a:9a:2f:a3:33:ae:a0:c9:e9:76:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Nov 24 01:57:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49b2b34c6cd9486834bae252885989966e4ebafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:58:a7:fc:b4:e2:e1:a8:04:49:a3:7a:2b:
bb:c6:d2:33:33:69:75:91:b2:e1:85:bc:42:24:a0:
5f:e8:e6:88:06:af:b1:52:8d:55:bf:66:f4:89:3a:
4a:0d:c6:1e:97:13:07:0d:ad:4d:dc:0b:d5:01:60:
4e:4a:c5:de:11:fe:05:c4:57:c5:d1:b9:0d:2b:d1:
e0:74:44:e2:6b:6f:10:64:54:e8:a2:8f:b6:4e:ae:
ca:4e:42:5f:ff:36:98:13:15:21:76:45:d4:a6:90:
7c:b9:1a:a8:4f:d3:12:cf:f9:5d:5c:4f:4f:9b:7f:
88:0f:64:b8:42:d2:68:f0:7d:8e:70:9a:c3:a0:e1:
48:ab:42:c6:4d:fc:88:07:29:d6:6e:ac:b2:2d:1e:
e1:69:36:f4:38:b8:fb:ed:ff:c0:56:d2:3a:47:7e:
3c:00:e1:24:7f:ba:4e:ba:2b:d6:19:e0:f3:cf:8a:
10:7a:26:80:1d:8c:bc:7a:69:87:85:a3:7c:56:9b:
bb:2e:d8:56:97:10:16:4a:f6:0e:b7:48:7d:b5:4f:
cd:b6:2d:88:b2:25:89:71:32:46:8c:77:eb:78:52:
d8:fa:a1:23:6f:75:d4:2e:6e:48:23:95:9f:99:0d:
40:7c:46:11:09:18:cc:4f:01:1a:97:fd:58:19:da:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B2:B3:4C:6C:D9:48:68:34:BA:E2:52:88:59:89:96:6E:4E:BA:FD
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/SbKzTGzZSGg0uuJSiFmJlm5Ouv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.3.192.0/18
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
79.76.0.0/14
80.40.0.0/13
81.1.64.0/18
81.6.192.0/18
81.86.0.0/16
81.170.0.0/17
81.178.0.0/15
82.133.0.0/17
83.67.0.0/16
84.12.0.0/16
84.43.0.0/17
87.242.128.0/17
89.168.128.0/17
89.240.0.0/14
91.146.112.0/21
92.0.0.0/11
145.255.240.0/21
185.24.12.0/22
185.112.212.0/22
185.173.116.0-185.173.123.255
185.175.48.0/22
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.67.96.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.78.0.0/16
213.208.64.0/18
217.8.0.0/19
217.68.128.0/20
Signature Algorithm: sha256WithRSAEncryption
25:19:93:86:b1:bf:82:47:c1:28:de:a8:bd:63:43:2e:05:ed:
9a:35:50:84:67:73:70:72:93:f5:bb:b0:02:2a:e0:c6:d5:9d:
44:45:1c:69:e6:a7:40:16:7e:14:39:00:7f:33:a1:ab:c4:df:
77:7e:73:04:a3:e3:be:79:f7:4d:ac:4b:15:5e:6a:63:46:eb:
ee:f5:71:19:a3:64:f5:6e:36:cb:0a:1b:fa:77:44:23:8b:9e:
3f:cb:1f:8e:07:d6:9a:00:c0:2c:28:c5:ff:86:9f:6f:5a:74:
26:77:0e:84:71:04:c7:6f:f1:08:e1:f3:57:10:4f:b5:ee:b1:
06:cd:79:1c:b7:1c:b9:27:18:c7:f5:e7:a4:d1:6b:33:4b:b3:
ca:a5:fb:cb:3d:fd:2b:04:92:37:6e:3d:05:ef:f0:d8:b6:7e:
9f:79:25:b3:21:b7:7b:94:e4:b5:7a:af:ea:ec:11:40:ae:50:
66:08:1b:6f:03:1e:11:61:61:fa:95:07:8e:ee:e6:c7:6b:02:
6d:19:78:2d:0b:39:ac:17:95:db:95:ac:d1:ac:06:61:c2:7a:
bf:0a:f0:9c:14:c3:6e:49:6c:a8:a5:83:00:0e:b6:c5:1c:33:
62:58:85:eb:6f:a8:9d:1a:96:0a:76:bf:40:c2:a5:4d:24:f7:
75:b7:77:9b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgISAYv/C749klqaL6MzrqDJ6XZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh
ZGIzZWMwHhcNMjMxMTI0MDE1NzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWIyYjM0YzZjZDk0ODY4MzRiYWUyNTI4ODU5ODk5NjZlNGViYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTBYp/y04uGoBEmjeiu7xtIzM2l1
kbLhhbxCJKBf6OaIBq+xUo1Vv2b0iTpKDcYelxMHDa1N3AvVAWBOSsXeEf4FxFfF
0bkNK9HgdETia28QZFTooo+2Tq7KTkJf/zaYExUhdkXUppB8uRqoT9MSz/ldXE9P
m3+ID2S4QtJo8H2OcJrDoOFIq0LGTfyIBynWbqyyLR7haTb0OLj77f/AVtI6R348
AOEkf7pOuivWGeDzz4oQeiaAHYy8emmHhaN8Vpu7LthWlxAWSvYOt0h9tU/Nti2I
siWJcTJGjHfreFLY+qEjb3XULm5II5WfmQ1AfEYRCRjMTwEal/1YGdpWOQIDAQAB
o4IDAzCCAv8wHQYDVR0OBBYEFEmys0xs2UhoNLriUohZiZZuTrr9MB8GA1UdIwQY
MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt
MGQ4ZjdkZDhjY2U2LzEvU2JLelRHelpTR2cwdXVKU2lGbUpsbTVPdXYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2
LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFwYIKwYBBQUHAQcBAf8EggEGMIIBAjCB/wQCAAEwgfgD
AwMCYAMEBj4DwAMEBz4YgAMEBT7xoAMDA06QAwMCT0wDAwNQKAMEBlEBQAMEBlEG
wAMDAFFWAwQHUaoAAwMBUbIDBAdShQADAwBTQwMDAFQMAwQHVCsAAwQHV/KAAwQH
WaiAAwMCWfADBANbknADAwVcAAMEA5H/8AMEArkYDAMEArlw1DAMAwQCua10AwQC
ua14AwQCua8wAwQCua+QAwQAwdpjAwQFwmogAwQFwvfgAwQGw3AAAwQHw4kAAwQG
w5UAAwQF1AGAAwQF1ENgAwQF1EpgAwMA1IsDBAbUn4ADAwDVTgMEBtXQQAMEBdkI
AAMEBNlEgDANBgkqhkiG9w0BAQsFAAOCAQEAJRmThrG/gkfBKN6ovWNDLgXtmjVQ
hGdzcHKT9buwAirgxtWdREUcaeanQBZ+FDkAfzOhq8Tfd35zBKPjvnn3TaxLFV5q
Y0br7vVxGaNk9W42ywob+ndEI4ueP8sfjgfWmgDALCjF/4afb1p0JncOhHEEx2/x
COHzVxBPte6xBs15HLccuScYx/XnpNFrM0uzyqX7yz39KwSSN249Be/w2LZ+n3kl
syG3e5TktXqv6uwRQK5QZggbbwMeEWFh+pUHju7mx2sCbRl4LQs5rBeV25Ws0awG
YcJ6vwrwnBTDbklsqKWDAA62xRwzYliF62+onRqWCna/QMKlTST3dbd3mw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:26 2025 by rpki-client