Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/HEYvNhNcFoupaNCfzdAJAtcg-gU.roa
File: HEYvNhNcFoupaNCfzdAJAtcg-gU.roa (raw, json)
Hash identifier: iVbZJ8GYGBG8f6Xriv8ODmfnYSeISyDziUFpBHsGJvk=
Subject key identifier: 1C:46:2F:36:13:5C:16:8B:A9:68:D0:9F:CD:D0:09:02:D7:20:FA:05
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018E77F84DFA00720BC5F085F52D17635810
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/HEYvNhNcFoupaNCfzdAJAtcg-gU.roa
Signing time: Mon 25 Mar 2024 23:35:45 +0000
ROA not before: Mon 25 Mar 2024 23:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
94.131.124.0/24 maxlen: 24
94.131.127.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/22 maxlen: 22
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.92.0/22 maxlen: 22
95.164.120.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
95.164.248.0/23 maxlen: 23
95.164.251.0/24 maxlen: 24
195.214.208.0/21 maxlen: 21
195.214.208.0/22 maxlen: 22
195.214.210.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
2a01:d0::/32 maxlen: 32
2a01:d0:4::/48 maxlen: 48
2a01:d0:a::/48 maxlen: 48
2a01:d0:28::/48 maxlen: 48
2a01:d0:3b::/48 maxlen: 48
2a01:d0:43::/48 maxlen: 48
2a01:d0:105::/48 maxlen: 48
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:77:f8:4d:fa:00:72:0b:c5:f0:85:f5:2d:17:63:58:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Mar 25 23:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c462f36135c168ba968d09fcdd00902d720fa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:7a:12:26:68:9f:e7:54:26:80:a5:ea:23:
01:6a:f4:92:9b:05:1b:c9:4c:57:94:45:cd:93:5e:
9e:6b:d4:b4:09:94:98:db:be:b4:aa:43:21:5e:8b:
00:5a:61:ed:74:a5:1d:77:5d:c8:15:84:f7:7d:f5:
ad:f1:6d:1a:f5:ef:d1:13:f2:97:71:5c:74:26:fb:
4a:54:7e:3b:2e:30:e8:a8:19:f2:c9:4d:07:87:4f:
47:f7:cc:ef:64:5b:7f:5c:ad:b2:51:94:07:6c:8a:
23:70:7c:12:b8:69:ac:ab:2f:f9:98:01:ef:dc:85:
f3:7e:f5:99:58:cf:61:e4:39:78:f9:db:d8:53:2a:
fa:fa:b6:26:07:2d:d7:3b:05:56:3b:70:37:4e:5f:
01:1a:ed:65:2b:d6:54:5f:15:81:1d:74:cc:82:dc:
13:49:62:79:e8:e2:1e:8a:c5:b6:68:09:77:6d:dc:
ed:3c:f3:f7:a9:68:89:c3:b9:32:4d:a6:c4:93:12:
3d:4a:14:d2:4d:35:fb:9e:26:a2:f9:17:11:7a:bf:
76:48:33:ee:5e:8e:6a:2d:1b:34:85:60:8e:0b:c6:
1a:48:8e:ee:57:e6:bf:6e:38:31:2e:fd:af:49:ca:
4b:2e:d8:17:e8:60:41:51:62:1a:0c:e7:dc:b7:5e:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:46:2F:36:13:5C:16:8B:A9:68:D0:9F:CD:D0:09:02:D7:20:FA:05
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/HEYvNhNcFoupaNCfzdAJAtcg-gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
94.131.124.0/24
94.131.127.0/24
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.92.0/22
95.164.120.0/24
95.164.123.0/24
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
195.214.208.0/21
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
62:f9:c4:59:fe:df:37:8b:53:e6:e3:90:51:68:ff:4e:ab:2c:
fc:bc:00:82:cc:b2:67:69:0d:80:6f:30:4c:4f:e1:9a:b9:c6:
83:de:8b:3a:34:71:6c:60:ad:05:c7:cd:79:af:0c:7e:32:f9:
72:41:93:58:11:c1:e9:d3:02:1c:9f:00:d2:e2:ff:8d:bf:45:
34:86:c2:d2:34:1a:8b:be:04:0a:fd:ca:f3:c7:be:f5:71:a8:
68:45:31:99:e1:69:87:67:89:d3:c9:33:25:a0:4e:65:95:9e:
3c:fe:4e:4d:7f:12:8c:51:94:04:21:45:f4:72:ba:17:be:f9:
e8:bf:5c:9f:d2:bf:46:ee:cd:cf:07:e2:03:51:b3:76:87:a7:
68:21:b3:4d:e9:50:0f:5e:08:f9:8d:47:f0:e5:17:1a:72:49:
f7:b9:01:94:0c:c6:79:33:a6:52:46:e9:f7:c1:fc:8e:8d:9c:
fc:e2:9c:9e:6e:c2:40:aa:07:f6:ec:43:a2:8a:37:fa:fb:37:
1a:b7:2c:80:b4:a6:ca:b7:71:e1:9b:83:be:35:25:0e:5d:c3:
e7:fa:6e:01:09:5f:a1:c9:e9:41:ab:f3:9d:95:78:03:f7:da:
81:63:6c:9e:59:52:2d:b2:09:78:2f:30:d2:55:a4:2b:f5:fc:
06:50:37:a2
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgISAY53+E36AHILxfCF9S0XY1gQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjQwMzI1MjMzNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzQ2MmYzNjEzNWMxNjhiYTk2OGQwOWZjZGQwMDkwMmQ3MjBmYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7V6EiZon+dUJoCl6iMBavSSmwUb
yUxXlEXNk16ea9S0CZSY2760qkMhXosAWmHtdKUdd13IFYT3ffWt8W0a9e/RE/KX
cVx0JvtKVH47LjDoqBnyyU0Hh09H98zvZFt/XK2yUZQHbIojcHwSuGmsqy/5mAHv
3IXzfvWZWM9h5Dl4+dvYUyr6+rYmBy3XOwVWO3A3Tl8BGu1lK9ZUXxWBHXTMgtwT
SWJ56OIeisW2aAl3bdztPPP3qWiJw7kyTabEkxI9ShTSTTX7niai+RcRer92SDPu
Xo5qLRs0hWCOC8YaSI7uV+a/bjgxLv2vScpLLtgX6GBBUWIaDOfct15+4QIDAQAB
o4ICqTCCAqUwHQYDVR0OBBYEFBxGLzYTXBaLqWjQn83QCQLXIPoFMB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvSEVZdk5oTmNGb3VwYU5DZnpkQUpBdGNnLWdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG+BggrBgEFBQcBBwEB/wSBrjCBqzCBmQQCAAEwgZIDBAU+
zYADBAFegwADBABegwQDBAFegwYDBABeg3wDBABeg38DBABfpBQDBAJfpCgwDAME
AF+kMQMEAF+kMjAMAwQCX6Q0AwQCX6Q4MAwDBANfpEgDBABfpEwDBAJfpFADBAJf
pFwDBABfpHgDBABfpHswDAMEAV+kqgMEBF+koAMEAV+k+AMEAF+k+wMEA8PW0DAN
BAIAAjAHAwUAKgEA0DANBgkqhkiG9w0BAQsFAAOCAQEAYvnEWf7fN4tT5uOQUWj/
Tqss/LwAgsyyZ2kNgG8wTE/hmrnGg96LOjRxbGCtBcfNea8MfjL5ckGTWBHB6dMC
HJ8A0uL/jb9FNIbC0jQai74ECv3K88e+9XGoaEUxmeFph2eJ08kzJaBOZZWePP5O
TX8SjFGUBCFF9HK6F7756L9cn9K/Ru7NzwfiA1GzdoenaCGzTelQD14I+Y1H8OUX
GnJJ97kBlAzGeTOmUkbp98H8jo2c/OKcnm7CQKoH9uxDooo3+vs3GrcsgLSmyrdx
4ZuDvjUlDl3D5/puAQlfocnpQavznZV4A/fagWNsnllSLbIJeC8w0lWkK/X8BlA3
og==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:02 2025 by rpki-client