Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/DIfbBn82F6W8cwUj_IlgJPNf7Bs.roa
File: DIfbBn82F6W8cwUj_IlgJPNf7Bs.roa (raw, json)
Hash identifier: HyK7ezWdoUZlUTryGwYkRGIWJC4FA20h6eZCPJVrcC8=
Subject key identifier: 0C:87:DB:06:7F:36:17:A5:BC:73:05:23:FC:89:60:24:F3:5F:EC:1B
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 01882893D6F1C9FCCB5B9FC228A7BE2B7A73
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/DIfbBn82F6W8cwUj_IlgJPNf7Bs.roa
Signing time: Wed 17 May 2023 07:19:17 +0000
ROA not before: Wed 17 May 2023 07:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3292
IP address blocks: 195.215.0.0/16 maxlen: 16
87.60.0.0/14 maxlen: 14
62.242.0.0/15 maxlen: 15
87.56.128.0/17 maxlen: 17
192.66.175.0/24 maxlen: 24
192.66.180.0/24 maxlen: 24
192.66.181.0/24 maxlen: 24
2.104.0.0/13 maxlen: 13
176.20.0.0/17 maxlen: 17
195.97.128.0/18 maxlen: 18
194.239.0.0/16 maxlen: 16
176.20.0.0/14 maxlen: 14
93.178.128.0/18 maxlen: 18
195.249.0.0/16 maxlen: 16
87.57.0.0/16 maxlen: 16
93.160.0.0/13 maxlen: 13
80.160.0.0/13 maxlen: 13
193.163.158.0/23 maxlen: 23
128.76.0.0/16 maxlen: 16
193.163.160.0/21 maxlen: 21
212.130.0.0/16 maxlen: 16
87.59.0.0/16 maxlen: 16
176.22.0.0/15 maxlen: 15
194.247.188.0/23 maxlen: 23
131.164.0.0/16 maxlen: 16
193.39.139.0/24 maxlen: 24
192.66.25.0/24 maxlen: 24
87.56.0.0/18 maxlen: 18
192.66.33.0/24 maxlen: 24
192.66.38.0/24 maxlen: 24
192.66.36.0/24 maxlen: 24
195.184.32.0/19 maxlen: 19
194.182.240.0/20 maxlen: 20
188.176.0.0/13 maxlen: 13
87.48.0.0/13 maxlen: 13
95.166.64.0/18 maxlen: 18
87.58.128.0/17 maxlen: 17
193.162.145.0/24 maxlen: 24
193.162.152.0/21 maxlen: 21
193.162.146.0/24 maxlen: 24
95.166.0.0/16 maxlen: 16
85.129.0.0/17 maxlen: 17
194.182.232.0/21 maxlen: 21
81.31.80.0/20 maxlen: 20
91.199.190.0/24 maxlen: 24
87.48.0.0/12 maxlen: 12
193.163.10.0/24 maxlen: 24
195.95.181.0/24 maxlen: 24
193.163.24.0/22 maxlen: 22
80.62.0.0/15 maxlen: 15
95.166.128.0/17 maxlen: 17
94.189.0.0/17 maxlen: 17
128.77.128.0/17 maxlen: 17
194.192.0.0/16 maxlen: 16
193.3.130.0/23 maxlen: 23
193.3.140.0/24 maxlen: 24
193.3.141.0/24 maxlen: 24
193.3.142.0/24 maxlen: 24
83.88.0.0/13 maxlen: 13
194.182.144.0/21 maxlen: 21
193.162.98.0/23 maxlen: 23
87.58.0.0/18 maxlen: 18
80.196.0.0/14 maxlen: 14
62.135.128.0/17 maxlen: 17
176.21.0.0/16 maxlen: 16
193.162.32.0/23 maxlen: 23
193.88.0.0/15 maxlen: 15
193.3.224.0/22 maxlen: 22
176.20.192.0/18 maxlen: 18
194.182.128.0/20 maxlen: 20
195.41.0.0/16 maxlen: 16
2001:6c8::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:93:d6:f1:c9:fc:cb:5b:9f:c2:28:a7:be:2b:7a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: May 17 07:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c87db067f3617a5bc730523fc896024f35fec1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:66:09:b8:9a:b0:a3:d1:22:08:b8:5d:66:
53:40:69:90:dc:f9:98:65:e5:6e:2b:dd:fc:ae:36:
54:49:6e:20:0a:1d:a9:5f:51:15:8a:b9:85:0a:c4:
55:b2:a1:ee:f2:36:d1:33:74:7c:01:b2:ed:8c:b2:
90:ab:82:93:cd:9d:95:33:91:f6:89:59:8d:b9:cc:
6d:b3:fb:c1:4c:0f:52:c5:e6:16:b9:99:85:d5:20:
8b:d4:22:cf:07:e9:74:c7:75:83:bc:c7:81:78:09:
b0:e0:65:2c:9b:db:45:0a:22:25:46:1d:af:38:9a:
36:78:3f:86:58:38:39:f7:18:17:b9:bc:54:0a:d7:
ce:a3:26:35:08:bf:0e:9b:d0:6c:c5:37:f6:53:8a:
cf:8a:d0:cb:5f:ab:32:93:eb:67:08:bf:35:a6:48:
a6:f7:47:81:f6:98:62:fa:00:6e:c5:36:0f:60:ff:
d9:d1:68:09:d4:50:66:86:b4:f8:2c:18:bc:38:16:
e3:ef:2a:2f:96:f0:12:ad:0c:af:f2:14:a2:89:04:
19:ca:ef:eb:66:7c:fe:56:4f:24:04:61:a9:b9:8c:
d7:56:09:05:8f:40:79:c8:a9:c5:46:df:82:a0:3d:
3d:16:6d:aa:6c:bb:8d:c2:a6:39:ba:5a:85:cb:27:
81:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:87:DB:06:7F:36:17:A5:BC:73:05:23:FC:89:60:24:F3:5F:EC:1B
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/DIfbBn82F6W8cwUj_IlgJPNf7Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.104.0.0/13
62.135.128.0/17
62.242.0.0/15
80.62.0.0/15
80.160.0.0/13
80.196.0.0/14
81.31.80.0/20
83.88.0.0/13
85.129.0.0/17
87.48.0.0/12
91.199.190.0/24
93.160.0.0/13
93.178.128.0/18
94.189.0.0/17
95.166.0.0/16
128.76.0.0/16
128.77.128.0/17
131.164.0.0/16
176.20.0.0/14
188.176.0.0/13
192.66.25.0/24
192.66.33.0/24
192.66.36.0/24
192.66.38.0/24
192.66.175.0/24
192.66.180.0/23
193.3.130.0/23
193.3.140.0-193.3.142.255
193.3.224.0/22
193.39.139.0/24
193.88.0.0/15
193.162.32.0/23
193.162.98.0/23
193.162.145.0-193.162.146.255
193.162.152.0/21
193.163.10.0/24
193.163.24.0/22
193.163.158.0-193.163.167.255
194.182.128.0-194.182.151.255
194.182.232.0-194.182.255.255
194.192.0.0/16
194.239.0.0/16
194.247.188.0/23
195.41.0.0/16
195.95.181.0/24
195.97.128.0/18
195.184.32.0/19
195.215.0.0/16
195.249.0.0/16
212.130.0.0/16
IPv6:
2001:6c8::/29
Signature Algorithm: sha256WithRSAEncryption
1b:bf:bc:e3:f4:49:1e:5b:cb:66:16:4b:28:cb:b0:33:10:1c:
40:4c:4b:8f:6e:97:42:c1:4d:aa:3b:ef:0a:fa:11:71:df:56:
fe:0b:5a:ed:11:cf:67:0f:34:c9:64:ab:b3:57:d2:1c:02:30:
5c:2d:b7:a7:7e:cf:87:d7:58:ac:20:05:cd:aa:b0:cd:c6:13:
95:12:05:50:f2:d1:d7:92:8d:fd:87:5b:4e:da:00:81:95:ab:
69:05:86:7c:2c:0e:75:f2:1b:83:1e:8a:73:95:a2:c2:80:fc:
2d:a1:af:9f:e3:6d:b6:a3:58:66:cb:88:ac:50:7c:d1:96:e7:
d6:56:78:a9:99:0a:01:56:a4:34:b9:ee:57:9a:7b:84:67:5f:
37:88:c7:56:7f:9f:db:6a:3c:f9:6c:a5:5d:03:27:2e:22:40:
76:94:63:9e:e0:45:8c:39:6c:c9:c0:7d:dc:66:e9:0d:6c:59:
52:28:14:7c:28:1d:1c:97:52:f4:92:c4:27:a0:70:cb:94:24:
87:d0:a0:92:aa:79:7a:bc:05:01:a9:0f:04:cd:8d:33:b9:ee:
1c:fe:98:63:ed:8b:e5:10:36:7a:1e:25:8d:3c:0b:50:c9:e6:
03:27:6b:83:11:e0:02:8a:5c:60:3b:3b:52:97:f7:bb:89:8d:
c7:7c:f3:20
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgISAYgok9bxyfzLW5/CKKe+K3pzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOGIyNGM3NmFkODdhNmMxZmVkZmZhZjA4ZDliMTdiNDUy
NDk5OTEwHhcNMjMwNTE3MDcxOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzg3ZGIwNjdmMzYxN2E1YmM3MzA1MjNmYzg5NjAyNGYzNWZlYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDFmCbiasKPRIgi4XWZTQGmQ3PmY
ZeVuK938rjZUSW4gCh2pX1EVirmFCsRVsqHu8jbRM3R8AbLtjLKQq4KTzZ2VM5H2
iVmNucxts/vBTA9SxeYWuZmF1SCL1CLPB+l0x3WDvMeBeAmw4GUsm9tFCiIlRh2v
OJo2eD+GWDg59xgXubxUCtfOoyY1CL8Om9BsxTf2U4rPitDLX6syk+tnCL81pkim
90eB9phi+gBuxTYPYP/Z0WgJ1FBmhrT4LBi8OBbj7yovlvASrQyv8hSiiQQZyu/r
Znz+Vk8kBGGpuYzXVgkFj0B5yKnFRt+CoD09Fm2qbLuNwqY5ulqFyyeBVQIDAQAB
o4IDWzCCA1cwHQYDVR0OBBYEFAyH2wZ/NhelvHMFI/yJYCTzX+wbMB8GA1UdIwQY
MBaAFC6LJMdq2HpsH+3/rwjZsXtFJJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAt
OTExOTBhMDJkYjcwLzEvRElmYkJuODJGNlc4Y3dVal9JbGdKUE5mN0JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAtOTExOTBhMDJkYjcw
LzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBbwYIKwYBBQUHAQcBAf8EggFeMIIBWjCCAUcEAgABMIIB
PwMDAwJoAwQHPoeAAwMBPvIDAwFQPgMDA1CgAwMCUMQDBARRH1ADAwNTWAMEB1WB
AAMDBFcwAwQAW8e+AwMDXaADBAZdsoADBAdevQADAwBfpgMDAIBMAwQHgE2AAwMA
g6QDAwKwFAMDA7ywAwQAwEIZAwQAwEIhAwQAwEIkAwQAwEImAwQAwEKvAwQBwEK0
AwQBwQOCMAwDBALBA4wDBADBA44DBALBA+ADBADBJ4sDAwHBWAMEAcGiIAMEAcGi
YjAMAwQAwaKRAwQAwaKSAwQDwaKYAwQAwaMKAwQCwaMYMAwDBAHBo54DBAPBo6Aw
DAMEB8K2gAMEA8K2kDALAwQDwrboAwMAwrYDAwDCwAMDAMLvAwQBwve8AwMAwykD
BADDX7UDBAbDYYADBAXDuCADAwDD1wMDAMP5AwMA1IIwDQQCAAIwBwMFAyABBsgw
DQYJKoZIhvcNAQELBQADggEBABu/vOP0SR5by2YWSyjLsDMQHEBMS49ul0LBTao7
7wr6EXHfVv4LWu0Rz2cPNMlkq7NX0hwCMFwtt6d+z4fXWKwgBc2qsM3GE5USBVDy
0deSjf2HW07aAIGVq2kFhnwsDnXyG4MeinOVosKA/C2hr5/jbbajWGbLiKxQfNGW
59ZWeKmZCgFWpDS57leae4RnXzeIx1Z/n9tqPPlspV0DJy4iQHaUY57gRYw5bMnA
fdxm6Q1sWVIoFHwoHRyXUvSSxCegcMuUJIfQoJKqeXq8BQGpDwTNjTO57hz+mGPt
i+UQNnoeJY08C1DJ5gMna4MR4AKKXGA7O1KX97uJjcd88yA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:52 2024 by rpki-client on console-ams.rpki-client.org