Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1-8HWGrpVu5zgjNgq9qt3KTY41bY.roa
File: 1-8HWGrpVu5zgjNgq9qt3KTY41bY.roa (raw, json)
Hash identifier: +Ye+BxONQ4rKuO5Sdb74FBIv8sHWNKWUig0+ZY9MPJY=
Subject key identifier: FB:C1:D6:1A:BA:55:BB:9C:E0:8C:D8:2A:F6:AB:77:29:36:38:D5:B6
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0A53EA6A
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1-8HWGrpVu5zgjNgq9qt3KTY41bY.roa
Signing time: Fri 18 Mar 2022 07:31:02 +0000
ROA not before: Fri 18 Mar 2022 07:31:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 88.148.27.0/24 maxlen: 24
89.40.80.0/24 maxlen: 24
89.33.160.0/23 maxlen: 23
5.154.234.0/23 maxlen: 23
88.148.51.0/24 maxlen: 24
5.154.172.0/23 maxlen: 23
176.227.150.0/24 maxlen: 24
86.106.88.0/24 maxlen: 24
109.167.0.0/17 maxlen: 17
188.214.56.0/24 maxlen: 24
93.113.48.0/22 maxlen: 22
109.167.20.0/23 maxlen: 23
109.167.18.0/23 maxlen: 23
89.32.160.0/21 maxlen: 21
5.154.0.0/17 maxlen: 17
89.45.240.0/21 maxlen: 21
185.99.248.0/22 maxlen: 22
188.240.43.0/24 maxlen: 24
37.72.0.0/19 maxlen: 19
37.72.28.0/22 maxlen: 22
84.232.112.0/21 maxlen: 21
84.232.112.0/20 maxlen: 20
84.232.120.0/21 maxlen: 21
89.44.64.0/21 maxlen: 21
89.43.74.0/23 maxlen: 23
89.43.76.0/23 maxlen: 23
89.43.84.0/22 maxlen: 22
94.76.170.0/24 maxlen: 24
185.150.204.0/22 maxlen: 22
94.76.185.0/24 maxlen: 24
84.232.72.0/22 maxlen: 22
84.232.84.0/22 maxlen: 22
95.178.112.0/21 maxlen: 21
84.232.104.0/22 maxlen: 22
84.232.0.0/17 maxlen: 21
95.178.32.0/23 maxlen: 23
84.232.8.0/21 maxlen: 21
84.232.8.0/22 maxlen: 22
95.178.32.0/22 maxlen: 22
84.232.14.0/23 maxlen: 23
84.232.30.0/23 maxlen: 23
84.232.48.0/21 maxlen: 21
151.237.206.0/24 maxlen: 24
78.136.108.0/22 maxlen: 22
78.136.112.0/21 maxlen: 21
78.136.114.0/23 maxlen: 23
78.136.120.0/21 maxlen: 21
89.35.134.0/24 maxlen: 24
94.76.138.0/24 maxlen: 24
94.177.152.0/21 maxlen: 21
85.204.140.0/22 maxlen: 22
176.56.96.0/19 maxlen: 19
89.35.205.0/24 maxlen: 24
84.236.222.0/24 maxlen: 24
84.236.220.0/24 maxlen: 24
93.115.158.0/24 maxlen: 24
93.115.156.0/24 maxlen: 24
93.115.159.0/24 maxlen: 24
84.236.236.0/24 maxlen: 24
178.156.29.0/24 maxlen: 24
178.156.28.0/24 maxlen: 24
178.156.33.0/24 maxlen: 24
37.230.64.0/19 maxlen: 19
178.156.39.0/24 maxlen: 24
178.156.44.0/24 maxlen: 24
178.156.45.0/24 maxlen: 24
178.156.46.0/24 maxlen: 24
84.236.170.0/24 maxlen: 24
84.236.168.0/24 maxlen: 24
84.236.178.0/24 maxlen: 24
84.236.192.0/24 maxlen: 24
84.236.187.0/24 maxlen: 24
78.136.64.0/20 maxlen: 20
78.136.64.0/18 maxlen: 18
78.136.80.0/22 maxlen: 22
78.136.84.0/22 maxlen: 22
78.136.92.0/22 maxlen: 22
78.136.96.0/20 maxlen: 20
78.136.96.0/21 maxlen: 21
178.156.55.0/24 maxlen: 24
178.156.53.0/24 maxlen: 24
178.156.52.0/24 maxlen: 24
178.156.60.0/24 maxlen: 24
31.14.200.0/21 maxlen: 21
178.156.73.0/24 maxlen: 24
178.156.72.0/24 maxlen: 24
178.156.74.0/24 maxlen: 24
178.156.78.0/24 maxlen: 24
94.176.136.0/21 maxlen: 21
89.35.24.0/24 maxlen: 24
178.156.104.0/24 maxlen: 24
88.148.114.0/23 maxlen: 23
88.148.120.0/21 maxlen: 21
185.40.180.0/22 maxlen: 22
5.154.241.0/24 maxlen: 24
88.148.64.0/19 maxlen: 19
88.148.96.0/21 maxlen: 21
88.148.104.0/21 maxlen: 21
217.61.71.0/24 maxlen: 24
217.61.68.0/24 maxlen: 24
84.236.152.0/24 maxlen: 24
84.236.154.0/24 maxlen: 24
84.236.153.0/24 maxlen: 24
93.114.254.0/24 maxlen: 24
185.27.124.0/22 maxlen: 22
5.154.91.0/24 maxlen: 24
5.154.89.0/24 maxlen: 24
5.154.88.0/24 maxlen: 24
5.154.90.0/24 maxlen: 24
5.154.108.0/24 maxlen: 24
5.154.110.0/24 maxlen: 24
5.154.111.0/24 maxlen: 24
5.154.109.0/24 maxlen: 24
5.154.37.0/24 maxlen: 24
5.154.35.0/24 maxlen: 24
5.154.38.0/24 maxlen: 24
5.154.39.0/24 maxlen: 24
5.154.41.0/24 maxlen: 24
5.154.63.0/24 maxlen: 24
5.154.62.0/24 maxlen: 24
88.148.0.0/17 maxlen: 17
88.148.0.0/19 maxlen: 19
88.148.32.0/19 maxlen: 19
5.154.185.0/24 maxlen: 24
109.167.3.0/24 maxlen: 24
109.167.4.0/24 maxlen: 24
109.167.2.0/24 maxlen: 24
109.167.5.0/24 maxlen: 24
109.167.20.0/24 maxlen: 24
109.167.27.0/24 maxlen: 24
109.167.29.0/24 maxlen: 24
109.167.28.0/24 maxlen: 24
109.167.33.0/24 maxlen: 24
93.119.156.0/22 maxlen: 22
176.227.144.0/20 maxlen: 20
109.167.102.0/24 maxlen: 24
5.154.9.0/24 maxlen: 24
5.154.16.0/24 maxlen: 24
109.167.49.0/24 maxlen: 24
109.167.48.0/24 maxlen: 24
109.167.50.0/24 maxlen: 24
89.45.244.0/24 maxlen: 24
109.167.53.0/24 maxlen: 24
109.167.52.0/24 maxlen: 24
89.45.245.0/24 maxlen: 24
185.25.196.0/22 maxlen: 22
109.167.69.0/24 maxlen: 24
109.167.87.0/24 maxlen: 24
109.167.90.0/24 maxlen: 24
86.105.156.0/22 maxlen: 22
93.119.28.0/22 maxlen: 22
188.240.36.0/22 maxlen: 22
37.72.10.0/24 maxlen: 24
37.72.26.0/24 maxlen: 24
37.72.25.0/24 maxlen: 24
84.232.127.0/24 maxlen: 24
89.43.87.0/24 maxlen: 24
94.76.160.0/21 maxlen: 21
176.56.114.0/24 maxlen: 24
94.76.168.0/21 maxlen: 21
176.56.124.0/24 maxlen: 24
94.76.184.0/21 maxlen: 21
84.232.58.0/24 maxlen: 24
84.232.70.0/24 maxlen: 24
84.232.87.0/24 maxlen: 24
95.178.34.0/24 maxlen: 24
95.178.38.0/24 maxlen: 24
95.178.33.0/24 maxlen: 24
84.232.13.0/24 maxlen: 24
84.232.12.0/24 maxlen: 24
84.232.21.0/24 maxlen: 24
86.104.24.0/22 maxlen: 22
84.232.22.0/24 maxlen: 24
84.232.20.0/24 maxlen: 24
84.232.24.0/24 maxlen: 24
84.232.25.0/24 maxlen: 24
84.232.27.0/24 maxlen: 24
84.232.49.0/24 maxlen: 24
89.35.148.0/22 maxlen: 22
151.237.192.0/19 maxlen: 19
151.237.194.0/23 maxlen: 23
78.136.107.0/24 maxlen: 24
78.136.121.0/24 maxlen: 24
78.136.126.0/24 maxlen: 24
94.76.128.0/18 maxlen: 18
94.76.138.0/23 maxlen: 23
94.177.159.0/24 maxlen: 24
94.76.144.0/20 maxlen: 20
94.76.144.0/21 maxlen: 21
85.204.146.0/24 maxlen: 24
212.237.236.0/22 maxlen: 22
178.156.0.0/17 maxlen: 17
84.236.216.0/22 maxlen: 22
84.236.220.0/23 maxlen: 23
93.115.156.0/22 maxlen: 22
178.156.8.0/21 maxlen: 21
178.156.16.0/22 maxlen: 22
178.156.20.0/23 maxlen: 23
178.156.24.0/23 maxlen: 23
84.236.240.0/22 maxlen: 22
178.156.24.0/21 maxlen: 21
84.236.244.0/22 maxlen: 22
178.156.26.0/23 maxlen: 23
84.236.244.0/23 maxlen: 23
84.236.248.0/22 maxlen: 22
178.156.36.0/22 maxlen: 22
84.236.252.0/22 maxlen: 22
178.156.32.0/23 maxlen: 23
178.156.44.0/22 maxlen: 22
178.156.42.0/23 maxlen: 23
178.156.48.0/22 maxlen: 22
84.236.160.0/20 maxlen: 20
84.236.180.0/22 maxlen: 22
84.236.184.0/22 maxlen: 22
84.236.188.0/22 maxlen: 22
84.236.192.0/21 maxlen: 21
84.236.194.0/23 maxlen: 23
84.236.200.0/21 maxlen: 21
84.236.208.0/21 maxlen: 21
178.156.112.0/22 maxlen: 22
178.156.108.0/22 maxlen: 22
178.156.106.0/23 maxlen: 23
178.156.116.0/22 maxlen: 22
78.136.64.0/24 maxlen: 24
178.156.120.0/22 maxlen: 22
78.136.71.0/24 maxlen: 24
78.136.73.0/24 maxlen: 24
78.136.84.0/24 maxlen: 24
93.115.204.0/22 maxlen: 22
178.156.56.0/22 maxlen: 22
178.156.64.0/21 maxlen: 21
37.230.92.0/24 maxlen: 24
178.156.72.0/22 maxlen: 22
178.156.76.0/22 maxlen: 22
178.156.84.0/23 maxlen: 23
94.176.141.0/24 maxlen: 24
178.156.98.0/23 maxlen: 23
178.156.104.0/23 maxlen: 23
88.148.122.0/24 maxlen: 24
88.148.127.0/24 maxlen: 24
88.148.126.0/24 maxlen: 24
88.148.62.0/24 maxlen: 24
88.148.68.0/24 maxlen: 24
88.148.81.0/24 maxlen: 24
217.61.80.0/21 maxlen: 21
84.236.130.0/23 maxlen: 23
84.236.128.0/20 maxlen: 20
84.236.128.0/17 maxlen: 17
84.236.144.0/21 maxlen: 21
89.34.120.0/22 maxlen: 22
84.236.152.0/22 maxlen: 22
84.236.156.0/22 maxlen: 22
93.114.252.0/22 maxlen: 22
217.61.64.0/20 maxlen: 20
2a07:6840::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173271658 (0xa53ea6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Mar 18 07:31:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbc1d61aba55bb9ce08cd82af6ab77293638d5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:5a:8e:aa:e1:ae:9c:f1:6f:19:d6:61:b2:
83:1d:56:e1:6f:5c:0e:18:37:33:57:f9:d4:f8:0a:
89:e7:41:ea:35:09:dc:86:6b:26:4a:33:c1:cf:87:
c0:89:3d:3c:60:6d:12:9e:ba:b8:aa:c0:ab:73:13:
e7:f6:3b:a0:cf:07:99:11:80:81:96:7b:24:8c:1c:
9a:49:08:2a:bc:67:6f:d4:21:eb:ee:f6:25:76:28:
6e:c8:bc:49:06:76:a0:e6:7c:9a:ee:6e:05:d7:b3:
90:fd:99:06:4b:82:6d:79:b4:32:98:ef:15:a1:64:
59:0e:ab:77:25:6b:dd:5a:41:3c:77:cf:93:8e:95:
d0:cc:e1:b5:30:03:7b:6b:fb:9e:bb:5b:40:29:39:
b2:7e:4d:1a:a0:33:7d:bf:fa:fd:29:29:1b:a9:2b:
7c:5a:07:a5:2d:d2:f2:cc:14:cb:59:02:9d:aa:77:
9d:5d:43:b0:71:46:2a:f5:87:d3:aa:23:2f:d8:e7:
5c:4a:e7:21:bb:88:0e:c7:0b:de:c6:2c:07:7c:1e:
24:2e:e8:4f:a9:cf:34:81:1c:be:de:51:93:3d:36:
20:3a:a5:03:45:5b:36:8b:c8:c4:4b:74:b3:58:0e:
e9:69:6c:c5:7f:9f:44:b1:64:41:0f:1e:56:20:71:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C1:D6:1A:BA:55:BB:9C:E0:8C:D8:2A:F6:AB:77:29:36:38:D5:B6
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1-8HWGrpVu5zgjNgq9qt3KTY41bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.0.0/17
5.154.172.0/23
5.154.185.0/24
5.154.234.0/23
5.154.241.0/24
31.14.200.0/21
37.72.0.0/19
37.230.64.0/19
78.136.64.0/18
84.232.0.0/17
84.236.128.0/17
85.204.140.0/22
85.204.146.0/24
86.104.24.0/22
86.105.156.0/22
86.106.88.0/24
88.148.0.0/17
89.32.160.0/21
89.33.160.0/23
89.34.120.0/22
89.35.24.0/24
89.35.134.0/24
89.35.148.0/22
89.35.205.0/24
89.40.80.0/24
89.43.74.0-89.43.77.255
89.43.84.0/22
89.44.64.0/21
89.45.240.0/21
93.113.48.0/22
93.114.252.0/22
93.115.156.0/22
93.115.204.0/22
93.119.28.0/22
93.119.156.0/22
94.76.128.0/18
94.176.136.0/21
94.177.152.0/21
95.178.32.0/22
95.178.38.0/24
95.178.112.0/21
109.167.0.0/17
151.237.192.0/19
176.56.96.0/19
176.227.144.0/20
178.156.0.0/17
185.25.196.0/22
185.27.124.0/22
185.40.180.0/22
185.99.248.0/22
185.150.204.0/22
188.214.56.0/24
188.240.36.0/22
188.240.43.0/24
212.237.236.0/22
217.61.64.0-217.61.87.255
IPv6:
2a07:6840::/29
Signature Algorithm: sha256WithRSAEncryption
3b:5e:50:5c:68:78:e4:e1:04:e3:45:5a:8b:28:b3:13:67:dd:
92:37:2e:cb:e6:c7:be:6f:b9:21:21:dc:bd:4d:a1:86:b2:3a:
16:8b:99:30:51:71:8b:3e:45:94:1a:c3:b3:56:5e:22:1e:dc:
fb:dd:83:c9:0e:42:77:c7:9e:58:c0:03:ef:5a:79:11:14:f7:
b0:b2:6e:c4:cb:2e:67:9c:b5:bb:88:0e:f3:0b:b0:4f:75:8e:
c0:a3:ee:2e:94:f6:02:40:65:b2:c8:24:8c:fd:8a:97:79:d4:
38:a5:09:c9:74:8a:4a:a7:cd:9a:cd:8e:5d:e6:3b:22:a9:53:
0c:cc:29:0c:0f:80:65:35:2c:52:28:f2:c8:9a:ad:45:32:5d:
ee:4b:e0:b5:1e:c8:21:16:93:57:3d:bd:0c:31:da:b0:12:c9:
02:a5:09:1a:d6:2d:cd:39:2f:58:b2:c2:aa:12:28:aa:1f:3e:
d2:e0:0a:8a:9e:8b:4f:2c:b9:1c:53:62:b9:26:ec:19:69:b3:
73:ea:2f:01:2e:5d:3f:db:27:95:c1:64:3f:da:2a:ef:ad:cd:
1e:31:7c:dd:aa:04:81:80:5d:4c:c5:ab:06:df:d9:de:9a:54:
e4:a6:ea:04:ea:5d:82:47:c5:22:da:5a:5b:ca:54:98:ba:64:
0c:96:34:80
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIEClPqajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YWFmMTdiMDAxNWRiYjdjZDk5MmYyNmNkZmYwMWM0ZTI2MjBiNzNlMB4XDTIyMDMx
ODA3MzEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmJjMWQ2MWFiYTU1
YmI5Y2UwOGNkODJhZjZhYjc3MjkzNjM4ZDViNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdKWo6q4a6c8W8Z1mGygx1W4W9cDhg3M1f51PgKiedB6jUJ
3IZrJkozwc+HwIk9PGBtEp66uKrAq3MT5/Y7oM8HmRGAgZZ7JIwcmkkIKrxnb9Qh
6+72JXYobsi8SQZ2oOZ8mu5uBdezkP2ZBkuCbXm0MpjvFaFkWQ6rdyVr3VpBPHfP
k46V0MzhtTADe2v7nrtbQCk5sn5NGqAzfb/6/SkpG6krfFoHpS3S8swUy1kCnap3
nV1DsHFGKvWH06ojL9jnXErnIbuIDscL3sYsB3weJC7oT6nPNIEcvt5Rkz02IDql
A0VbNovIxEt0s1gO6WlsxX+fRLFkQQ8eViBxwf8CAwEAAaOCA30wggN5MB0GA1Ud
DgQWBBT7wdYaulW7nOCM2Cr2q3cpNjjVtjAfBgNVHSMEGDAWgBTarxewAV27fNmS
8mzf8BxOJiC3PjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJxOFhzQUZkdTN6Wmt2SnMzX0FjVGlZZ3R6NC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDUvYzg5NzNjLTNjZmEtNDYwNC04MTEwLWNmMDZkMTk4M2JhMS8x
LzEtOEhXR3JwVnU1emdqTmdxOXF0M0tUWTQxYlkucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1
L2M4OTczYy0zY2ZhLTQ2MDQtODExMC1jZjA2ZDE5ODNiYTEvMS8ycThYc0FGZHUz
elprdkpzM19BY1RpWWd0ejQuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
ggGQBggrBgEFBQcBBwEB/wSCAX8wggF7MIIBaAQCAAEwggFgAwQHBZoAAwQBBZqs
AwQABZq5AwQBBZrqAwQABZrxAwQDHw7IAwQFJUgAAwQFJeZAAwQGTohAAwQHVOgA
AwQHVOyAAwQCVcyMAwQAVcySAwQCVmgYAwQCVmmcAwQAVmpYAwQHWJQAAwQDWSCg
AwQBWSGgAwQCWSJ4AwQAWSMYAwQAWSOGAwQCWSOUAwQAWSPNAwQAWShQMAwDBAFZ
K0oDBAFZK0wDBAJZK1QDBANZLEADBANZLfADBAJdcTADBAJdcvwDBAJdc5wDBAJd
c8wDBAJddxwDBAJdd5wDBAZeTIADBANesIgDBANesZgDBAJfsiADBABfsiYDBANf
snADBAdtpwADBAWX7cADBAWwOGADBASw45ADBAeynAADBAK5GcQDBAK5G3wDBAK5
KLQDBAK5Y/gDBAK5lswDBAC81jgDBAK88CQDBAC88CsDBALU7ewwDAMEBtk9QAME
A9k9UDANBAIAAjAHAwUDKgdoQDANBgkqhkiG9w0BAQsFAAOCAQEAO15QXGh45OEE
40VaiyizE2fdkjcuy+bHvm+5ISHcvU2hhrI6FouZMFFxiz5FlBrDs1ZeIh7c+92D
yQ5Cd8eeWMAD71p5ERT3sLJuxMsuZ5y1u4gO8wuwT3WOwKPuLpT2AkBlssgkjP2K
l3nUOKUJyXSKSqfNms2OXeY7IqlTDMwpDA+AZTUsUijyyJqtRTJd7kvgtR7IIRaT
Vz29DDHasBLJAqUJGtYtzTkvWLLCqhIoqh8+0uAKip6LTyy5HFNiuSbsGWmzc+ov
AS5dP9snlcFkP9oq763NHjF83aoEgYBdTMWrBt/Z3ppU5KbqBOpdgkfFItpaW8pU
mLpkDJY0gA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-fra.rpki-client.org