Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/SbGseLe8lO1WPM_EsUPTQN9HuL0.roa
File: SbGseLe8lO1WPM_EsUPTQN9HuL0.roa (raw, json)
Hash identifier: S3f9hist68a22woi8mlmYyl2ijBeaw15zc9vskgFL7I=
Subject key identifier: 49:B1:AC:78:B7:BC:94:ED:56:3C:CF:C4:B1:43:D3:40:DF:47:B8:BD
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 018346B0AC7A20B4B84FCA3FF90843DB8E58
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/SbGseLe8lO1WPM_EsUPTQN9HuL0.roa
Signing time: Fri 16 Sep 2022 14:25:27 +0000
ROA not before: Fri 16 Sep 2022 14:25:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3292
IP address blocks: 195.215.0.0/16 maxlen: 16
62.242.0.0/15 maxlen: 15
2.104.0.0/13 maxlen: 13
176.20.0.0/17 maxlen: 17
195.97.128.0/18 maxlen: 18
194.239.0.0/16 maxlen: 16
176.20.0.0/14 maxlen: 14
93.178.128.0/18 maxlen: 18
195.249.0.0/16 maxlen: 16
93.160.0.0/13 maxlen: 13
80.160.0.0/13 maxlen: 13
193.163.158.0/23 maxlen: 23
128.76.0.0/16 maxlen: 16
193.163.160.0/21 maxlen: 21
128.76.0.0/15 maxlen: 15
212.130.0.0/16 maxlen: 16
176.22.0.0/15 maxlen: 15
195.184.32.0/19 maxlen: 19
194.182.240.0/20 maxlen: 20
188.176.0.0/13 maxlen: 13
95.166.64.0/18 maxlen: 18
193.162.145.0/24 maxlen: 24
193.162.152.0/21 maxlen: 21
193.162.146.0/24 maxlen: 24
95.166.0.0/16 maxlen: 16
85.129.0.0/17 maxlen: 17
194.182.232.0/21 maxlen: 21
81.31.80.0/20 maxlen: 20
91.199.190.0/24 maxlen: 24
87.48.0.0/12 maxlen: 12
193.163.10.0/24 maxlen: 24
193.163.24.0/22 maxlen: 22
80.62.0.0/15 maxlen: 15
95.166.128.0/17 maxlen: 17
94.189.0.0/17 maxlen: 17
128.77.128.0/17 maxlen: 17
194.192.0.0/16 maxlen: 16
193.3.130.0/23 maxlen: 23
193.3.140.0/24 maxlen: 24
193.3.141.0/24 maxlen: 24
193.3.142.0/24 maxlen: 24
83.88.0.0/13 maxlen: 13
194.182.144.0/21 maxlen: 21
193.162.98.0/23 maxlen: 23
80.196.0.0/14 maxlen: 14
62.135.128.0/17 maxlen: 17
176.21.0.0/16 maxlen: 16
193.162.32.0/23 maxlen: 23
193.88.0.0/15 maxlen: 15
193.3.224.0/22 maxlen: 22
176.20.192.0/18 maxlen: 18
194.182.128.0/20 maxlen: 20
195.41.0.0/16 maxlen: 16
2001:6c8::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:46:b0:ac:7a:20:b4:b8:4f:ca:3f:f9:08:43:db:8e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Sep 16 14:25:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49b1ac78b7bc94ed563ccfc4b143d340df47b8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:0f:fa:bb:19:61:7e:8c:c6:d8:98:54:73:
1c:52:ad:44:ea:09:94:85:c5:98:dc:c8:0f:9d:73:
88:54:4e:ea:ed:37:f7:83:41:38:e9:12:4e:16:17:
a4:02:6c:87:94:2a:b9:12:0d:76:6f:84:0b:55:1e:
61:b2:86:d2:d2:9c:db:a1:a5:e8:c8:bb:22:14:2b:
ee:f9:91:d6:16:00:4f:f6:8a:56:6e:8b:89:88:c6:
48:65:2b:28:eb:ca:a8:16:6a:ad:8c:b4:d7:ea:fd:
e9:07:cd:a8:5d:e9:80:40:d6:52:d6:30:6a:b9:db:
20:bb:8b:4b:0e:93:bd:3b:fb:83:46:13:2b:5e:fe:
f8:16:fe:91:17:86:9e:5f:bd:c0:c7:42:70:f5:4b:
69:21:54:e3:e2:1a:a0:0c:4c:45:8d:aa:be:73:94:
fe:46:fa:61:96:0e:ff:f4:9c:63:7d:0d:2b:26:89:
ed:ff:96:c2:dd:1a:37:52:5f:74:99:e0:8d:1c:b9:
a7:a1:89:67:b2:96:61:86:1a:06:49:e0:68:ae:df:
4b:97:64:5f:75:14:91:70:9e:72:65:e4:b8:b9:76:
b0:c9:fa:fa:64:45:fd:72:99:12:6e:56:86:01:8a:
ea:72:e7:69:8f:07:8b:e5:26:e9:4f:65:80:24:c3:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B1:AC:78:B7:BC:94:ED:56:3C:CF:C4:B1:43:D3:40:DF:47:B8:BD
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/SbGseLe8lO1WPM_EsUPTQN9HuL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.104.0.0/13
62.135.128.0/17
62.242.0.0/15
80.62.0.0/15
80.160.0.0/13
80.196.0.0/14
81.31.80.0/20
83.88.0.0/13
85.129.0.0/17
87.48.0.0/12
91.199.190.0/24
93.160.0.0/13
93.178.128.0/18
94.189.0.0/17
95.166.0.0/16
128.76.0.0/15
176.20.0.0/14
188.176.0.0/13
193.3.130.0/23
193.3.140.0-193.3.142.255
193.3.224.0/22
193.88.0.0/15
193.162.32.0/23
193.162.98.0/23
193.162.145.0-193.162.146.255
193.162.152.0/21
193.163.10.0/24
193.163.24.0/22
193.163.158.0-193.163.167.255
194.182.128.0-194.182.151.255
194.182.232.0-194.182.255.255
194.192.0.0/16
194.239.0.0/16
195.41.0.0/16
195.97.128.0/18
195.184.32.0/19
195.215.0.0/16
195.249.0.0/16
212.130.0.0/16
IPv6:
2001:6c8::/29
Signature Algorithm: sha256WithRSAEncryption
9d:a0:27:18:ca:73:bf:df:1b:f2:de:b9:2c:45:10:df:e5:8a:
0e:ef:68:01:4f:d2:9a:7a:ec:96:af:a5:a1:77:af:48:62:08:
41:b3:ce:9f:ca:92:21:7d:c4:89:46:66:f6:f9:1c:72:0c:81:
e3:09:9f:0d:7b:3b:e4:b8:d7:ce:4c:52:87:4f:7e:aa:5d:bf:
1d:2b:08:1a:f7:7a:29:ec:77:0b:59:54:5e:c8:3a:4f:b2:f6:
29:2e:a4:81:b1:ba:95:7a:21:b3:27:3a:64:09:46:e5:bb:00:
fe:80:e2:64:4f:89:92:9a:a8:bd:48:d4:75:6d:cd:4e:50:a0:
a0:28:09:63:eb:b7:26:a5:97:3c:1d:f8:38:b2:63:95:fa:f1:
89:0c:40:3e:ea:a2:e5:39:35:1d:b8:0d:7f:7f:43:0c:fa:a3:
6c:06:a4:b7:24:28:a7:2b:c3:5a:89:ff:9d:f2:71:90:d5:11:
a8:bf:b6:bd:f8:ea:fd:11:95:43:5f:db:bf:09:70:f9:36:77:
5c:b5:73:27:93:f9:7d:11:c3:99:1d:3d:bc:a1:d8:43:5e:25:
d1:9d:83:68:b9:fe:5e:01:b4:53:9d:3c:91:6d:92:65:78:92:
1d:4d:aa:11:9f:0c:56:b8:3a:ed:3e:3f:6c:7d:80:1b:9b:17:
d6:50:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:33 2025 by rpki-client