Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/tmK4CASJH_P_BqD3170T10aiQv0.roa
File: tmK4CASJH_P_BqD3170T10aiQv0.roa (raw, json)
Hash identifier: QAv+CqKO+fwW192ONxJFCV1EJrnA2ajtm+fUSWR6rQo=
Subject key identifier: B6:62:B8:08:04:89:1F:F3:FF:06:A0:F7:D7:BD:13:D7:46:A2:42:FD
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 018CC6B8142BDF176821C04F329C0572753D
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/tmK4CASJH_P_BqD3170T10aiQv0.roa
Signing time: Mon 01 Jan 2024 20:30:01 +0000
ROA not before: Mon 01 Jan 2024 20:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3292
IP address blocks: 195.215.0.0/16 maxlen: 16
87.60.0.0/14 maxlen: 14
62.242.0.0/15 maxlen: 15
87.56.128.0/17 maxlen: 17
192.66.175.0/24 maxlen: 24
192.66.180.0/24 maxlen: 24
192.66.181.0/24 maxlen: 24
176.20.0.0/17 maxlen: 17
195.97.128.0/18 maxlen: 18
2.111.0.0/16 maxlen: 16
194.239.0.0/16 maxlen: 16
93.178.128.0/18 maxlen: 18
2.104.0.0/14 maxlen: 14
87.57.0.0/16 maxlen: 16
195.249.0.0/16 maxlen: 16
80.160.0.0/13 maxlen: 13
93.160.0.0/13 maxlen: 13
193.163.158.0/23 maxlen: 23
128.76.0.0/16 maxlen: 16
193.163.160.0/21 maxlen: 21
212.130.0.0/16 maxlen: 16
87.59.0.0/16 maxlen: 16
176.22.0.0/15 maxlen: 15
194.247.188.0/23 maxlen: 23
131.164.0.0/16 maxlen: 16
193.39.139.0/24 maxlen: 24
192.66.25.0/24 maxlen: 24
87.56.0.0/18 maxlen: 18
192.66.33.0/24 maxlen: 24
192.66.38.0/24 maxlen: 24
192.66.36.0/24 maxlen: 24
2.110.0.0/20 maxlen: 20
195.184.32.0/19 maxlen: 19
2.110.0.0/16 maxlen: 16
2.110.16.0/22 maxlen: 22
194.182.240.0/20 maxlen: 20
87.48.0.0/13 maxlen: 13
188.176.0.0/13 maxlen: 13
95.166.64.0/18 maxlen: 18
87.58.128.0/17 maxlen: 17
193.162.145.0/24 maxlen: 24
193.162.152.0/21 maxlen: 21
193.162.146.0/24 maxlen: 24
85.129.0.0/17 maxlen: 17
194.182.232.0/21 maxlen: 21
81.31.80.0/20 maxlen: 20
91.199.190.0/24 maxlen: 24
193.163.10.0/24 maxlen: 24
195.95.181.0/24 maxlen: 24
193.163.24.0/22 maxlen: 22
80.62.0.0/15 maxlen: 15
95.166.128.0/17 maxlen: 17
2.108.0.0/15 maxlen: 15
94.189.0.0/17 maxlen: 17
128.77.128.0/17 maxlen: 17
194.192.0.0/16 maxlen: 16
193.3.130.0/23 maxlen: 23
193.3.140.0/24 maxlen: 24
193.3.141.0/24 maxlen: 24
193.3.142.0/24 maxlen: 24
83.88.0.0/13 maxlen: 13
194.182.144.0/21 maxlen: 21
193.162.98.0/23 maxlen: 23
87.58.0.0/18 maxlen: 18
80.196.0.0/14 maxlen: 14
62.135.128.0/17 maxlen: 17
176.21.0.0/16 maxlen: 16
193.162.32.0/23 maxlen: 23
193.88.0.0/15 maxlen: 15
193.3.224.0/22 maxlen: 22
176.20.192.0/18 maxlen: 18
194.182.128.0/20 maxlen: 20
195.41.0.0/16 maxlen: 16
2001:6c8::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:14:2b:df:17:68:21:c0:4f:32:9c:05:72:75:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jan 1 20:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b662b80804891ff3ff06a0f7d7bd13d746a242fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:b3:f5:72:58:a1:ad:83:ae:b7:d5:6f:29:
73:61:d1:8d:e0:6c:49:51:ba:bc:46:10:42:f4:cb:
ee:48:2d:5b:5e:2b:e7:bd:a6:b1:4c:74:21:6e:8c:
7c:32:a4:f9:da:a6:7f:15:27:0b:29:29:68:41:37:
f3:e0:36:74:25:6e:7c:87:e3:cd:fa:7b:7c:84:d1:
1c:c4:a8:fe:68:ed:5f:86:43:cc:0c:31:a1:4f:a1:
39:b4:58:90:7f:ea:46:e9:ea:0e:2f:5e:50:32:27:
3d:b6:de:39:ba:b6:64:3f:57:d6:f4:e3:57:c7:b6:
f4:bd:55:98:60:1b:c5:38:6f:62:36:2e:38:2c:85:
ea:93:fb:a1:51:5b:05:d8:85:e8:8c:ef:cf:51:af:
a5:03:69:c5:19:27:8a:ff:9b:94:00:54:a0:46:fe:
49:51:b3:30:8f:f0:ef:b6:ae:da:00:22:b8:6b:f2:
53:b4:82:e4:08:c0:20:b2:45:a2:9d:c1:e8:b5:39:
44:f5:d3:b6:57:11:b7:19:18:a3:ec:64:46:c5:4d:
44:79:d7:5c:50:39:9a:3b:5b:26:e7:2c:53:7a:83:
0e:fb:16:a8:77:3c:34:51:f6:79:05:50:6c:0b:ac:
d9:7b:83:fb:28:bc:1e:4d:53:78:dd:8f:64:31:7c:
da:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:B8:08:04:89:1F:F3:FF:06:A0:F7:D7:BD:13:D7:46:A2:42:FD
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/tmK4CASJH_P_BqD3170T10aiQv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.104.0.0/13
62.135.128.0/17
62.242.0.0/15
80.62.0.0/15
80.160.0.0/13
80.196.0.0/14
81.31.80.0/20
83.88.0.0/13
85.129.0.0/17
87.48.0.0-87.56.63.255
87.56.128.0-87.58.63.255
87.58.128.0-87.63.255.255
91.199.190.0/24
93.160.0.0/13
93.178.128.0/18
94.189.0.0/17
95.166.64.0-95.166.255.255
128.76.0.0/16
128.77.128.0/17
131.164.0.0/16
176.20.0.0/17
176.20.192.0-176.23.255.255
188.176.0.0/13
192.66.25.0/24
192.66.33.0/24
192.66.36.0/24
192.66.38.0/24
192.66.175.0/24
192.66.180.0/23
193.3.130.0/23
193.3.140.0-193.3.142.255
193.3.224.0/22
193.39.139.0/24
193.88.0.0/15
193.162.32.0/23
193.162.98.0/23
193.162.145.0-193.162.146.255
193.162.152.0/21
193.163.10.0/24
193.163.24.0/22
193.163.158.0-193.163.167.255
194.182.128.0-194.182.151.255
194.182.232.0-194.182.255.255
194.192.0.0/16
194.239.0.0/16
194.247.188.0/23
195.41.0.0/16
195.95.181.0/24
195.97.128.0/18
195.184.32.0/19
195.215.0.0/16
195.249.0.0/16
212.130.0.0/16
IPv6:
2001:6c8::/29
Signature Algorithm: sha256WithRSAEncryption
69:78:ff:19:db:96:5c:fd:f3:eb:46:27:f9:51:e8:7f:9d:8d:
3a:f7:a6:61:c9:52:16:b2:b2:1d:e8:c1:ef:e5:27:7f:d5:a3:
35:bc:85:a4:55:64:03:d7:7e:f7:a1:32:10:9a:02:f0:6e:c4:
d5:6c:54:4a:bb:ed:14:04:5f:35:5a:f3:8e:3c:60:da:92:4f:
bc:90:ea:dc:41:6a:c3:53:f1:91:71:0b:62:af:32:de:c5:df:
8f:3a:6e:f2:e2:c9:9b:c0:98:c8:7d:5a:aa:4c:b7:90:69:24:
5a:85:6f:d5:54:e2:fb:35:0b:e8:af:53:d1:bb:9d:91:16:39:
ce:8f:1c:87:58:77:81:17:e2:b4:c0:a9:ac:d9:8b:26:9b:03:
da:d3:47:f3:4c:cd:bf:97:d3:bc:97:25:9d:c0:28:e8:36:ee:
ae:34:6a:7d:ee:64:0b:70:f2:cd:d0:81:4b:a6:21:d9:f4:a0:
94:96:b0:1b:73:b4:21:bf:8c:c0:42:80:10:34:5d:32:76:75:
65:8d:a9:37:6e:66:8a:d8:e1:85:ad:1a:6f:99:1e:9e:2e:dd:
08:fc:96:88:dc:72:0d:e1:d4:38:97:82:af:aa:22:31:1a:5c:
29:34:7d:e6:28:2e:4c:5f:36:7f:2c:61:8f:36:2e:ff:0f:6c:
5f:7f:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:18 2025 by rpki-client