Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/aekzBLYkdhiQKZ1x4_HRM7p5qwY.roa
File: aekzBLYkdhiQKZ1x4_HRM7p5qwY.roa (raw, json)
Hash identifier: 05aZ/L9CHezaOPPzF+EIoRSM7gOVIDSp5ennY+z8+6Y=
Subject key identifier: 69:E9:33:04:B6:24:76:18:90:29:9D:71:E3:F1:D1:33:BA:79:AB:06
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0184391863F6B5C5B172996AD61DC601697B
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/aekzBLYkdhiQKZ1x4_HRM7p5qwY.roa
Signing time: Wed 02 Nov 2022 16:06:50 +0000
ROA not before: Wed 02 Nov 2022 16:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 88.148.27.0/24 maxlen: 24
89.40.80.0/24 maxlen: 24
5.154.234.0/23 maxlen: 23
88.148.51.0/24 maxlen: 24
5.154.172.0/23 maxlen: 23
176.227.150.0/24 maxlen: 24
109.167.0.0/17 maxlen: 17
93.113.48.0/22 maxlen: 22
109.167.20.0/23 maxlen: 23
109.167.18.0/23 maxlen: 23
89.32.160.0/21 maxlen: 21
5.154.0.0/17 maxlen: 17
89.45.240.0/21 maxlen: 21
185.99.248.0/22 maxlen: 22
185.226.231.0/24 maxlen: 24
188.240.43.0/24 maxlen: 24
37.72.0.0/19 maxlen: 19
37.72.28.0/22 maxlen: 22
84.232.112.0/20 maxlen: 20
84.232.112.0/21 maxlen: 21
84.232.120.0/21 maxlen: 21
89.44.64.0/21 maxlen: 21
89.43.74.0/23 maxlen: 23
89.43.76.0/23 maxlen: 23
89.43.84.0/22 maxlen: 22
94.76.170.0/24 maxlen: 24
185.150.204.0/22 maxlen: 22
94.76.185.0/24 maxlen: 24
185.218.188.0/22 maxlen: 22
84.232.72.0/22 maxlen: 22
185.225.149.0/24 maxlen: 24
185.225.151.0/24 maxlen: 24
84.232.84.0/22 maxlen: 22
185.225.150.0/24 maxlen: 24
95.178.112.0/21 maxlen: 21
84.232.104.0/22 maxlen: 22
84.232.0.0/17 maxlen: 21
95.178.32.0/23 maxlen: 23
84.232.8.0/22 maxlen: 22
84.232.8.0/21 maxlen: 21
95.178.32.0/22 maxlen: 22
84.232.14.0/23 maxlen: 23
86.104.24.0/24 maxlen: 24
86.104.27.0/24 maxlen: 24
84.232.30.0/23 maxlen: 23
84.232.48.0/21 maxlen: 21
151.237.206.0/24 maxlen: 24
78.136.108.0/22 maxlen: 22
78.136.112.0/21 maxlen: 21
78.136.114.0/23 maxlen: 23
78.136.120.0/21 maxlen: 21
94.177.152.0/21 maxlen: 21
94.76.138.0/24 maxlen: 24
85.204.140.0/22 maxlen: 22
176.56.96.0/19 maxlen: 19
84.236.222.0/24 maxlen: 24
84.236.220.0/24 maxlen: 24
93.115.158.0/24 maxlen: 24
93.115.156.0/24 maxlen: 24
93.115.159.0/24 maxlen: 24
84.236.236.0/24 maxlen: 24
178.156.29.0/24 maxlen: 24
178.156.28.0/24 maxlen: 24
178.156.33.0/24 maxlen: 24
37.230.64.0/19 maxlen: 19
178.156.39.0/24 maxlen: 24
178.156.44.0/24 maxlen: 24
178.156.45.0/24 maxlen: 24
178.156.46.0/24 maxlen: 24
84.236.170.0/24 maxlen: 24
84.236.168.0/24 maxlen: 24
84.236.178.0/24 maxlen: 24
84.236.192.0/24 maxlen: 24
84.236.187.0/24 maxlen: 24
78.136.64.0/20 maxlen: 20
78.136.64.0/18 maxlen: 18
78.136.80.0/22 maxlen: 22
78.136.84.0/22 maxlen: 22
78.136.92.0/22 maxlen: 22
78.136.96.0/20 maxlen: 20
78.136.96.0/21 maxlen: 21
178.156.55.0/24 maxlen: 24
178.156.53.0/24 maxlen: 24
178.156.52.0/24 maxlen: 24
178.156.60.0/24 maxlen: 24
31.14.200.0/21 maxlen: 21
178.156.73.0/24 maxlen: 24
178.156.72.0/24 maxlen: 24
178.156.74.0/24 maxlen: 24
178.156.78.0/24 maxlen: 24
94.176.136.0/21 maxlen: 21
178.156.104.0/24 maxlen: 24
88.148.114.0/23 maxlen: 23
88.148.120.0/21 maxlen: 21
185.40.180.0/22 maxlen: 22
5.154.241.0/24 maxlen: 24
88.148.64.0/19 maxlen: 19
88.148.96.0/21 maxlen: 21
88.148.104.0/21 maxlen: 21
217.61.71.0/24 maxlen: 24
217.61.68.0/24 maxlen: 24
84.236.152.0/24 maxlen: 24
84.236.154.0/24 maxlen: 24
84.236.153.0/24 maxlen: 24
93.114.254.0/24 maxlen: 24
185.27.124.0/22 maxlen: 22
5.154.91.0/24 maxlen: 24
5.154.89.0/24 maxlen: 24
5.154.88.0/24 maxlen: 24
5.154.90.0/24 maxlen: 24
185.228.116.0/22 maxlen: 22
5.154.108.0/24 maxlen: 24
5.154.110.0/24 maxlen: 24
5.154.111.0/24 maxlen: 24
5.154.109.0/24 maxlen: 24
5.154.37.0/24 maxlen: 24
5.154.35.0/24 maxlen: 24
5.154.38.0/24 maxlen: 24
5.154.39.0/24 maxlen: 24
5.154.41.0/24 maxlen: 24
5.154.63.0/24 maxlen: 24
5.154.62.0/24 maxlen: 24
88.148.0.0/17 maxlen: 17
88.148.0.0/19 maxlen: 19
88.148.32.0/19 maxlen: 19
5.154.185.0/24 maxlen: 24
109.167.3.0/24 maxlen: 24
109.167.4.0/24 maxlen: 24
109.167.2.0/24 maxlen: 24
109.167.5.0/24 maxlen: 24
109.167.20.0/24 maxlen: 24
109.167.27.0/24 maxlen: 24
109.167.29.0/24 maxlen: 24
109.167.28.0/24 maxlen: 24
109.167.33.0/24 maxlen: 24
93.119.156.0/22 maxlen: 22
176.227.144.0/20 maxlen: 20
109.167.102.0/24 maxlen: 24
5.154.9.0/24 maxlen: 24
5.154.16.0/24 maxlen: 24
109.167.49.0/24 maxlen: 24
109.167.48.0/24 maxlen: 24
109.167.50.0/24 maxlen: 24
89.45.244.0/24 maxlen: 24
109.167.53.0/24 maxlen: 24
109.167.52.0/24 maxlen: 24
89.45.245.0/24 maxlen: 24
185.25.196.0/22 maxlen: 22
109.167.69.0/24 maxlen: 24
109.167.87.0/24 maxlen: 24
109.167.90.0/24 maxlen: 24
86.105.156.0/22 maxlen: 22
93.119.28.0/22 maxlen: 22
188.240.36.0/22 maxlen: 22
37.72.10.0/24 maxlen: 24
37.72.26.0/24 maxlen: 24
37.72.25.0/24 maxlen: 24
84.232.127.0/24 maxlen: 24
89.43.87.0/24 maxlen: 24
94.76.160.0/21 maxlen: 21
176.56.114.0/24 maxlen: 24
94.76.168.0/21 maxlen: 21
176.56.124.0/24 maxlen: 24
94.76.184.0/21 maxlen: 21
84.232.58.0/24 maxlen: 24
84.232.70.0/24 maxlen: 24
84.232.87.0/24 maxlen: 24
95.178.34.0/24 maxlen: 24
95.178.38.0/24 maxlen: 24
95.178.33.0/24 maxlen: 24
84.232.13.0/24 maxlen: 24
84.232.12.0/24 maxlen: 24
84.232.21.0/24 maxlen: 24
86.104.24.0/22 maxlen: 22
84.232.22.0/24 maxlen: 24
84.232.20.0/24 maxlen: 24
84.232.24.0/24 maxlen: 24
84.232.25.0/24 maxlen: 24
84.232.27.0/24 maxlen: 24
84.232.49.0/24 maxlen: 24
89.35.148.0/22 maxlen: 22
151.237.192.0/19 maxlen: 19
151.237.194.0/23 maxlen: 23
78.136.107.0/24 maxlen: 24
78.136.121.0/24 maxlen: 24
78.136.126.0/24 maxlen: 24
94.76.128.0/18 maxlen: 18
94.76.138.0/23 maxlen: 23
94.177.159.0/24 maxlen: 24
94.76.144.0/21 maxlen: 21
94.76.144.0/20 maxlen: 20
212.237.236.0/22 maxlen: 22
178.156.0.0/17 maxlen: 17
84.236.216.0/22 maxlen: 22
84.236.220.0/23 maxlen: 23
93.115.156.0/22 maxlen: 22
178.156.8.0/21 maxlen: 21
178.156.16.0/22 maxlen: 22
178.156.20.0/23 maxlen: 23
178.156.24.0/23 maxlen: 23
84.236.240.0/22 maxlen: 22
178.156.24.0/21 maxlen: 21
84.236.244.0/22 maxlen: 22
178.156.26.0/23 maxlen: 23
84.236.244.0/23 maxlen: 23
84.236.248.0/22 maxlen: 22
178.156.36.0/22 maxlen: 22
84.236.252.0/22 maxlen: 22
178.156.32.0/23 maxlen: 23
178.156.44.0/22 maxlen: 22
178.156.42.0/23 maxlen: 23
178.156.48.0/22 maxlen: 22
84.236.160.0/20 maxlen: 20
84.236.180.0/22 maxlen: 22
84.236.184.0/22 maxlen: 22
84.236.188.0/22 maxlen: 22
84.236.192.0/21 maxlen: 21
84.236.194.0/23 maxlen: 23
84.236.200.0/21 maxlen: 21
84.236.208.0/21 maxlen: 21
178.156.112.0/22 maxlen: 22
178.156.108.0/22 maxlen: 22
178.156.106.0/23 maxlen: 23
178.156.116.0/22 maxlen: 22
78.136.64.0/24 maxlen: 24
178.156.120.0/22 maxlen: 22
78.136.71.0/24 maxlen: 24
78.136.73.0/24 maxlen: 24
78.136.84.0/24 maxlen: 24
93.115.204.0/22 maxlen: 22
178.156.56.0/22 maxlen: 22
178.156.64.0/21 maxlen: 21
37.230.92.0/24 maxlen: 24
178.156.72.0/22 maxlen: 22
178.156.76.0/22 maxlen: 22
178.156.84.0/23 maxlen: 23
94.176.141.0/24 maxlen: 24
178.156.98.0/23 maxlen: 23
178.156.104.0/23 maxlen: 23
88.148.122.0/24 maxlen: 24
88.148.127.0/24 maxlen: 24
88.148.126.0/24 maxlen: 24
88.148.62.0/24 maxlen: 24
88.148.68.0/24 maxlen: 24
88.148.81.0/24 maxlen: 24
217.61.80.0/21 maxlen: 21
84.236.130.0/23 maxlen: 23
84.236.128.0/20 maxlen: 20
84.236.128.0/17 maxlen: 17
84.236.144.0/21 maxlen: 21
89.34.120.0/22 maxlen: 22
84.236.152.0/22 maxlen: 22
84.236.156.0/22 maxlen: 22
93.114.252.0/22 maxlen: 22
217.61.64.0/20 maxlen: 20
2a07:6840::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:18:63:f6:b5:c5:b1:72:99:6a:d6:1d:c6:01:69:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Nov 2 16:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69e93304b624761890299d71e3f1d133ba79ab06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2a:fd:5a:1f:1c:6b:9f:41:3b:38:f4:2f:c3:
8e:8b:39:1f:3c:4b:0b:e9:df:1e:31:8e:04:a4:a7:
ee:5f:74:d4:a8:51:a2:52:23:a6:78:94:ef:79:40:
74:5a:75:1b:5d:fd:af:6b:9b:85:79:bd:ac:17:bc:
5c:c2:7c:28:31:4d:cc:d3:3c:1c:7f:b9:62:a9:6b:
d4:24:8a:95:eb:5d:16:c4:38:aa:e8:13:8e:a6:fb:
38:1b:b6:62:20:d4:d6:70:7d:d4:05:38:37:ba:16:
1c:32:07:a6:9f:0c:79:14:6b:aa:19:16:aa:91:26:
42:e1:5a:76:62:7b:98:ef:7f:07:73:c9:c7:18:d1:
e2:94:bd:ec:46:17:21:36:86:a5:4e:51:4c:c0:c7:
29:2f:a2:2c:b8:6e:d5:c4:67:43:43:69:54:ec:42:
ac:08:8e:b9:f8:a9:7e:b1:49:76:7c:7b:7d:d4:7e:
6a:c6:76:9b:cb:73:b4:a3:32:bf:4a:b5:cc:04:d0:
78:46:91:3f:63:8b:7c:5c:43:5b:95:db:03:27:ba:
8b:ca:c4:5f:cc:94:37:4a:8e:09:1b:30:21:6a:85:
83:23:8f:c3:e5:36:72:9b:04:13:08:48:32:be:67:
ed:06:eb:ff:ec:49:c0:30:e9:6b:5d:a8:55:1e:e1:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E9:33:04:B6:24:76:18:90:29:9D:71:E3:F1:D1:33:BA:79:AB:06
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/aekzBLYkdhiQKZ1x4_HRM7p5qwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.0.0/17
5.154.172.0/23
5.154.185.0/24
5.154.234.0/23
5.154.241.0/24
31.14.200.0/21
37.72.0.0/19
37.230.64.0/19
78.136.64.0/18
84.232.0.0/17
84.236.128.0/17
85.204.140.0/22
86.104.24.0/22
86.105.156.0/22
88.148.0.0/17
89.32.160.0/21
89.34.120.0/22
89.35.148.0/22
89.40.80.0/24
89.43.74.0-89.43.77.255
89.43.84.0/22
89.44.64.0/21
89.45.240.0/21
93.113.48.0/22
93.114.252.0/22
93.115.156.0/22
93.115.204.0/22
93.119.28.0/22
93.119.156.0/22
94.76.128.0/18
94.176.136.0/21
94.177.152.0/21
95.178.32.0/22
95.178.38.0/24
95.178.112.0/21
109.167.0.0/17
151.237.192.0/19
176.56.96.0/19
176.227.144.0/20
178.156.0.0/17
185.25.196.0/22
185.27.124.0/22
185.40.180.0/22
185.99.248.0/22
185.150.204.0/22
185.218.188.0/22
185.225.149.0-185.225.151.255
185.226.231.0/24
185.228.116.0/22
188.240.36.0/22
188.240.43.0/24
212.237.236.0/22
217.61.64.0-217.61.87.255
IPv6:
2a07:6840::/29
Signature Algorithm: sha256WithRSAEncryption
00:b9:fb:e8:b9:c8:5c:9e:07:51:7b:aa:ee:f2:1d:b4:f7:82:
74:81:ac:ca:4b:22:f2:ff:d3:33:ea:2d:ee:18:5b:98:7e:ef:
9d:25:be:6c:57:a0:00:49:76:be:1e:7c:bb:20:26:b9:9d:0e:
d3:05:c0:13:c8:0f:9b:e6:68:95:95:97:54:36:2f:5d:c7:83:
bd:d5:75:25:0a:67:ba:a3:b5:32:dd:68:da:57:7a:b7:ff:8e:
1d:29:6a:a3:18:a0:17:d0:7e:b1:e4:72:fb:ad:be:56:d4:a6:
88:3a:c9:33:9c:cc:14:bc:e3:47:59:97:21:6b:36:51:a7:e9:
31:1f:7c:9c:aa:82:8f:6f:42:7a:a4:6c:ea:b5:c5:18:2e:5f:
13:04:99:f6:ec:f1:7b:ea:26:54:5f:72:ff:fb:5f:31:28:05:
6c:d3:5b:96:46:6a:02:d1:5a:5d:e1:86:cc:75:61:30:63:1b:
17:cf:fc:13:51:14:12:4c:31:58:90:76:6a:c4:5e:49:8d:a6:
d5:58:36:1b:42:41:c5:18:86:d2:ea:05:ad:26:01:35:ea:86:
22:b2:30:32:7c:a8:f0:e3:ee:32:2e:b5:6a:03:2c:20:75:5b:
09:a5:38:19:52:86:78:89:d4:04:fc:75:1d:ae:6a:42:b1:b5:
fe:65:a1:38
-----BEGIN CERTIFICATE-----
MIIGZjCCBU6gAwIBAgISAYQ5GGP2tcWxcplq1h3GAWl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjIxMTAyMTYwNjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWU5MzMwNGI2MjQ3NjE4OTAyOTlkNzFlM2YxZDEzM2JhNzlhYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCr9Wh8ca59BOzj0L8OOizkfPEsL
6d8eMY4EpKfuX3TUqFGiUiOmeJTveUB0WnUbXf2va5uFeb2sF7xcwnwoMU3M0zwc
f7liqWvUJIqV610WxDiq6BOOpvs4G7ZiINTWcH3UBTg3uhYcMgemnwx5FGuqGRaq
kSZC4Vp2YnuY738Hc8nHGNHilL3sRhchNoalTlFMwMcpL6IsuG7VxGdDQ2lU7EKs
CI65+Kl+sUl2fHt91H5qxnaby3O0ozK/SrXMBNB4RpE/Y4t8XENbldsDJ7qLysRf
zJQ3So4JGzAhaoWDI4/D5TZymwQTCEgyvmftBuv/7EnAMOlrXahVHuGRvwIDAQAB
o4IDcjCCA24wHQYDVR0OBBYEFGnpMwS2JHYYkCmdcePx0TO6easGMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvYWVrekJMWWtkaGlRS1oxeDRfSFJNN3A1cXdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBhgYIKwYBBQUHAQcBAf8EggF1MIIBcTCCAV4EAgABMIIB
VgMEBwWaAAMEAQWarAMEAAWauQMEAQWa6gMEAAWa8QMEAx8OyAMEBSVIAAMEBSXm
QAMEBk6IQAMEB1ToAAMEB1TsgAMEAlXMjAMEAlZoGAMEAlZpnAMEB1iUAAMEA1kg
oAMEAlkieAMEAlkjlAMEAFkoUDAMAwQBWStKAwQBWStMAwQCWStUAwQDWSxAAwQD
WS3wAwQCXXEwAwQCXXL8AwQCXXOcAwQCXXPMAwQCXXccAwQCXXecAwQGXkyAAwQD
XrCIAwQDXrGYAwQCX7IgAwQAX7ImAwQDX7JwAwQHbacAAwQFl+3AAwQFsDhgAwQE
sOOQAwQHspwAAwQCuRnEAwQCuRt8AwQCuSi0AwQCuWP4AwQCuZbMAwQCudq8MAwD
BAC54ZUDBAO54ZADBAC54ucDBAK55HQDBAK88CQDBAC88CsDBALU7ewwDAMEBtk9
QAMEA9k9UDANBAIAAjAHAwUDKgdoQDANBgkqhkiG9w0BAQsFAAOCAQEAALn76LnI
XJ4HUXuq7vIdtPeCdIGsyksi8v/TM+ot7hhbmH7vnSW+bFegAEl2vh58uyAmuZ0O
0wXAE8gPm+ZolZWXVDYvXceDvdV1JQpnuqO1Mt1o2ld6t/+OHSlqoxigF9B+seRy
+62+VtSmiDrJM5zMFLzjR1mXIWs2UafpMR98nKqCj29CeqRs6rXFGC5fEwSZ9uzx
e+omVF9y//tfMSgFbNNblkZqAtFaXeGGzHVhMGMbF8/8E1EUEkwxWJB2asReSY2m
1Vg2G0JBxRiG0uoFrSYBNeqGIrIwMnyo8OPuMi61agMsIHVbCaU4GVKGeInUBPx1
Ha5qQrG1/mWhOA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-fra.rpki-client.org