Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/o1hkvDv_ixKl_HZB0eeikBGRuA8.roa
File: o1hkvDv_ixKl_HZB0eeikBGRuA8.roa (raw, json)
Hash identifier: bRjG9ASdNJVmVm1uJT2OmZk9NxudCwDALuTxo64znBA=
Subject key identifier: A3:58:64:BC:3B:FF:8B:12:A5:FC:76:41:D1:E7:A2:90:11:91:B8:0F
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0AD5519F
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/o1hkvDv_ixKl_HZB0eeikBGRuA8.roa
Signing time: Tue 10 May 2022 08:08:06 +0000
ROA not before: Tue 10 May 2022 08:08:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 88.148.27.0/24 maxlen: 24
89.40.80.0/24 maxlen: 24
5.154.234.0/23 maxlen: 23
88.148.51.0/24 maxlen: 24
5.154.172.0/23 maxlen: 23
176.227.150.0/24 maxlen: 24
109.167.0.0/17 maxlen: 17
93.113.48.0/22 maxlen: 22
109.167.20.0/23 maxlen: 23
109.167.18.0/23 maxlen: 23
89.32.160.0/21 maxlen: 21
5.154.0.0/17 maxlen: 17
89.45.240.0/21 maxlen: 21
185.99.248.0/22 maxlen: 22
185.226.231.0/24 maxlen: 24
188.240.43.0/24 maxlen: 24
37.72.0.0/19 maxlen: 19
37.72.28.0/22 maxlen: 22
84.232.112.0/20 maxlen: 20
84.232.112.0/21 maxlen: 21
84.232.120.0/21 maxlen: 21
89.44.64.0/21 maxlen: 21
89.43.74.0/23 maxlen: 23
89.43.76.0/23 maxlen: 23
89.43.84.0/22 maxlen: 22
94.76.170.0/24 maxlen: 24
185.150.204.0/22 maxlen: 22
94.76.185.0/24 maxlen: 24
185.218.188.0/22 maxlen: 22
84.232.72.0/22 maxlen: 22
185.225.149.0/24 maxlen: 24
185.225.151.0/24 maxlen: 24
84.232.84.0/22 maxlen: 22
185.225.150.0/24 maxlen: 24
95.178.112.0/21 maxlen: 21
84.232.104.0/22 maxlen: 22
84.232.0.0/17 maxlen: 21
95.178.32.0/23 maxlen: 23
84.232.8.0/22 maxlen: 22
84.232.8.0/21 maxlen: 21
95.178.32.0/22 maxlen: 22
84.232.14.0/23 maxlen: 23
84.232.30.0/23 maxlen: 23
84.232.48.0/21 maxlen: 21
151.237.206.0/24 maxlen: 24
78.136.108.0/22 maxlen: 22
78.136.112.0/21 maxlen: 21
78.136.114.0/23 maxlen: 23
78.136.120.0/21 maxlen: 21
94.177.152.0/21 maxlen: 21
94.76.138.0/24 maxlen: 24
85.204.140.0/22 maxlen: 22
176.56.96.0/19 maxlen: 19
84.236.222.0/24 maxlen: 24
84.236.220.0/24 maxlen: 24
93.115.158.0/24 maxlen: 24
93.115.156.0/24 maxlen: 24
93.115.159.0/24 maxlen: 24
84.236.236.0/24 maxlen: 24
178.156.29.0/24 maxlen: 24
178.156.28.0/24 maxlen: 24
178.156.33.0/24 maxlen: 24
37.230.64.0/19 maxlen: 19
178.156.39.0/24 maxlen: 24
178.156.44.0/24 maxlen: 24
178.156.45.0/24 maxlen: 24
178.156.46.0/24 maxlen: 24
84.236.170.0/24 maxlen: 24
84.236.168.0/24 maxlen: 24
84.236.178.0/24 maxlen: 24
84.236.192.0/24 maxlen: 24
84.236.187.0/24 maxlen: 24
78.136.64.0/20 maxlen: 20
78.136.64.0/18 maxlen: 18
78.136.80.0/22 maxlen: 22
78.136.84.0/22 maxlen: 22
78.136.92.0/22 maxlen: 22
78.136.96.0/20 maxlen: 20
78.136.96.0/21 maxlen: 21
178.156.55.0/24 maxlen: 24
178.156.53.0/24 maxlen: 24
178.156.52.0/24 maxlen: 24
178.156.60.0/24 maxlen: 24
31.14.200.0/21 maxlen: 21
178.156.73.0/24 maxlen: 24
178.156.72.0/24 maxlen: 24
178.156.74.0/24 maxlen: 24
178.156.78.0/24 maxlen: 24
94.176.136.0/21 maxlen: 21
178.156.104.0/24 maxlen: 24
88.148.114.0/23 maxlen: 23
88.148.120.0/21 maxlen: 21
185.40.180.0/22 maxlen: 22
5.154.241.0/24 maxlen: 24
88.148.64.0/19 maxlen: 19
88.148.96.0/21 maxlen: 21
88.148.104.0/21 maxlen: 21
217.61.71.0/24 maxlen: 24
217.61.68.0/24 maxlen: 24
84.236.152.0/24 maxlen: 24
84.236.154.0/24 maxlen: 24
84.236.153.0/24 maxlen: 24
93.114.254.0/24 maxlen: 24
185.27.124.0/22 maxlen: 22
5.154.91.0/24 maxlen: 24
5.154.89.0/24 maxlen: 24
5.154.88.0/24 maxlen: 24
5.154.90.0/24 maxlen: 24
185.228.116.0/22 maxlen: 22
5.154.108.0/24 maxlen: 24
5.154.110.0/24 maxlen: 24
5.154.111.0/24 maxlen: 24
5.154.109.0/24 maxlen: 24
5.154.37.0/24 maxlen: 24
5.154.35.0/24 maxlen: 24
5.154.38.0/24 maxlen: 24
5.154.39.0/24 maxlen: 24
5.154.41.0/24 maxlen: 24
5.154.63.0/24 maxlen: 24
5.154.62.0/24 maxlen: 24
88.148.0.0/17 maxlen: 17
88.148.0.0/19 maxlen: 19
88.148.32.0/19 maxlen: 19
5.154.185.0/24 maxlen: 24
109.167.3.0/24 maxlen: 24
109.167.4.0/24 maxlen: 24
109.167.2.0/24 maxlen: 24
109.167.5.0/24 maxlen: 24
109.167.20.0/24 maxlen: 24
109.167.27.0/24 maxlen: 24
109.167.29.0/24 maxlen: 24
109.167.28.0/24 maxlen: 24
109.167.33.0/24 maxlen: 24
93.119.156.0/22 maxlen: 22
176.227.144.0/20 maxlen: 20
109.167.102.0/24 maxlen: 24
5.154.9.0/24 maxlen: 24
5.154.16.0/24 maxlen: 24
109.167.49.0/24 maxlen: 24
109.167.48.0/24 maxlen: 24
109.167.50.0/24 maxlen: 24
89.45.244.0/24 maxlen: 24
109.167.53.0/24 maxlen: 24
109.167.52.0/24 maxlen: 24
89.45.245.0/24 maxlen: 24
185.25.196.0/22 maxlen: 22
109.167.69.0/24 maxlen: 24
109.167.87.0/24 maxlen: 24
109.167.90.0/24 maxlen: 24
86.105.156.0/22 maxlen: 22
93.119.28.0/22 maxlen: 22
188.240.36.0/22 maxlen: 22
37.72.10.0/24 maxlen: 24
37.72.26.0/24 maxlen: 24
37.72.25.0/24 maxlen: 24
84.232.127.0/24 maxlen: 24
89.43.87.0/24 maxlen: 24
94.76.160.0/21 maxlen: 21
176.56.114.0/24 maxlen: 24
94.76.168.0/21 maxlen: 21
176.56.124.0/24 maxlen: 24
94.76.184.0/21 maxlen: 21
84.232.58.0/24 maxlen: 24
84.232.70.0/24 maxlen: 24
84.232.87.0/24 maxlen: 24
95.178.34.0/24 maxlen: 24
95.178.38.0/24 maxlen: 24
95.178.33.0/24 maxlen: 24
84.232.13.0/24 maxlen: 24
84.232.12.0/24 maxlen: 24
84.232.21.0/24 maxlen: 24
86.104.24.0/22 maxlen: 22
84.232.22.0/24 maxlen: 24
84.232.20.0/24 maxlen: 24
84.232.24.0/24 maxlen: 24
84.232.25.0/24 maxlen: 24
84.232.27.0/24 maxlen: 24
84.232.49.0/24 maxlen: 24
89.35.148.0/22 maxlen: 22
151.237.192.0/19 maxlen: 19
151.237.194.0/23 maxlen: 23
78.136.107.0/24 maxlen: 24
78.136.121.0/24 maxlen: 24
78.136.126.0/24 maxlen: 24
94.76.128.0/18 maxlen: 18
94.76.138.0/23 maxlen: 23
94.177.159.0/24 maxlen: 24
94.76.144.0/21 maxlen: 21
94.76.144.0/20 maxlen: 20
212.237.236.0/22 maxlen: 22
178.156.0.0/17 maxlen: 17
84.236.216.0/22 maxlen: 22
84.236.220.0/23 maxlen: 23
93.115.156.0/22 maxlen: 22
178.156.8.0/21 maxlen: 21
178.156.16.0/22 maxlen: 22
178.156.20.0/23 maxlen: 23
178.156.24.0/23 maxlen: 23
84.236.240.0/22 maxlen: 22
178.156.24.0/21 maxlen: 21
84.236.244.0/22 maxlen: 22
178.156.26.0/23 maxlen: 23
84.236.244.0/23 maxlen: 23
84.236.248.0/22 maxlen: 22
178.156.36.0/22 maxlen: 22
84.236.252.0/22 maxlen: 22
178.156.32.0/23 maxlen: 23
178.156.44.0/22 maxlen: 22
178.156.42.0/23 maxlen: 23
178.156.48.0/22 maxlen: 22
84.236.160.0/20 maxlen: 20
84.236.180.0/22 maxlen: 22
84.236.184.0/22 maxlen: 22
84.236.188.0/22 maxlen: 22
84.236.192.0/21 maxlen: 21
84.236.194.0/23 maxlen: 23
84.236.200.0/21 maxlen: 21
84.236.208.0/21 maxlen: 21
178.156.112.0/22 maxlen: 22
178.156.108.0/22 maxlen: 22
178.156.106.0/23 maxlen: 23
178.156.116.0/22 maxlen: 22
78.136.64.0/24 maxlen: 24
178.156.120.0/22 maxlen: 22
78.136.71.0/24 maxlen: 24
78.136.73.0/24 maxlen: 24
78.136.84.0/24 maxlen: 24
93.115.204.0/22 maxlen: 22
178.156.56.0/22 maxlen: 22
178.156.64.0/21 maxlen: 21
37.230.92.0/24 maxlen: 24
178.156.72.0/22 maxlen: 22
178.156.76.0/22 maxlen: 22
178.156.84.0/23 maxlen: 23
94.176.141.0/24 maxlen: 24
178.156.98.0/23 maxlen: 23
178.156.104.0/23 maxlen: 23
88.148.122.0/24 maxlen: 24
88.148.127.0/24 maxlen: 24
88.148.126.0/24 maxlen: 24
88.148.62.0/24 maxlen: 24
88.148.68.0/24 maxlen: 24
88.148.81.0/24 maxlen: 24
217.61.80.0/21 maxlen: 21
84.236.130.0/23 maxlen: 23
84.236.128.0/20 maxlen: 20
84.236.128.0/17 maxlen: 17
84.236.144.0/21 maxlen: 21
89.34.120.0/22 maxlen: 22
84.236.152.0/22 maxlen: 22
84.236.156.0/22 maxlen: 22
93.114.252.0/22 maxlen: 22
217.61.64.0/20 maxlen: 20
2a07:6840::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181752223 (0xad5519f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: May 10 08:08:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a35864bc3bff8b12a5fc7641d1e7a2901191b80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:e1:be:cf:55:87:a8:9b:3c:a9:64:13:96:
ff:cb:0c:77:a3:f7:44:85:33:97:53:1b:d5:25:d2:
85:6a:bb:13:e3:bc:3d:8c:86:fc:d2:c6:3b:79:f2:
9b:8e:7b:6d:e3:79:6b:ea:87:4f:6e:f0:82:ec:d6:
61:97:09:8f:e5:26:bf:2a:a0:5f:59:5a:45:46:96:
c5:71:d1:ea:44:29:bd:3b:55:58:d7:13:ff:8d:96:
51:83:3e:7c:6b:85:c8:18:c7:b4:d2:37:66:24:1d:
58:98:c8:78:25:ff:e0:93:14:cc:96:e1:d2:56:05:
b3:41:88:e1:ef:ae:f8:81:b9:b5:23:1f:42:c4:05:
09:ad:0f:dc:62:da:20:6d:9d:db:1b:77:91:63:63:
36:51:f1:5d:f1:e3:44:e9:5c:71:a4:55:04:78:1c:
9c:d0:54:3e:1d:4c:4d:b3:38:90:62:0f:4b:e0:00:
1b:83:bf:be:f2:53:c4:02:3f:d9:f0:1e:42:d5:f7:
24:c0:bb:4e:29:f9:6b:0b:ce:0b:29:68:88:4c:15:
92:b1:87:c4:a7:9e:e1:fb:af:d3:f9:53:c3:ba:cc:
9f:8e:a6:00:1b:8d:ca:80:f2:57:e5:08:c4:25:1e:
ee:62:97:fa:c3:ff:de:20:74:52:67:8d:16:0f:2d:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:58:64:BC:3B:FF:8B:12:A5:FC:76:41:D1:E7:A2:90:11:91:B8:0F
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/o1hkvDv_ixKl_HZB0eeikBGRuA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.0.0/17
5.154.172.0/23
5.154.185.0/24
5.154.234.0/23
5.154.241.0/24
31.14.200.0/21
37.72.0.0/19
37.230.64.0/19
78.136.64.0/18
84.232.0.0/17
84.236.128.0/17
85.204.140.0/22
86.104.24.0/22
86.105.156.0/22
88.148.0.0/17
89.32.160.0/21
89.34.120.0/22
89.35.148.0/22
89.40.80.0/24
89.43.74.0-89.43.77.255
89.43.84.0/22
89.44.64.0/21
89.45.240.0/21
93.113.48.0/22
93.114.252.0/22
93.115.156.0/22
93.115.204.0/22
93.119.28.0/22
93.119.156.0/22
94.76.128.0/18
94.176.136.0/21
94.177.152.0/21
95.178.32.0/22
95.178.38.0/24
95.178.112.0/21
109.167.0.0/17
151.237.192.0/19
176.56.96.0/19
176.227.144.0/20
178.156.0.0/17
185.25.196.0/22
185.27.124.0/22
185.40.180.0/22
185.99.248.0/22
185.150.204.0/22
185.218.188.0/22
185.225.149.0-185.225.151.255
185.226.231.0/24
185.228.116.0/22
188.240.36.0/22
188.240.43.0/24
212.237.236.0/22
217.61.64.0-217.61.87.255
IPv6:
2a07:6840::/29
Signature Algorithm: sha256WithRSAEncryption
7f:8d:f2:3d:6c:ce:90:95:97:c1:5f:7d:7c:e4:eb:6e:ca:41:
10:d3:3d:80:12:bc:f6:e3:ad:47:ea:d2:3f:9f:9b:75:dd:1c:
27:51:39:5c:47:67:ef:c7:c2:80:d0:42:5a:26:fa:cd:98:39:
4c:bd:bc:cf:95:c8:95:d8:4e:2d:1d:25:50:2a:0f:f7:93:5c:
47:13:15:58:d1:7d:bd:4b:1f:db:ad:a3:71:ff:f0:86:38:91:
df:6a:ca:db:6f:5e:12:be:fe:a2:ca:b0:03:ec:4a:77:65:ee:
34:76:f3:be:59:dc:6f:9f:24:73:af:60:5b:54:83:e7:ed:f5:
cb:a3:4d:a3:e0:ee:33:a3:90:29:1b:4d:11:f3:92:f3:3f:0f:
91:19:7a:ee:c5:82:28:0f:0b:e2:aa:ba:cf:a7:27:b7:32:f2:
32:4e:6a:cd:0a:6b:ee:fd:51:9c:88:6f:26:8a:45:2f:d0:5c:
f8:48:47:ca:c6:32:c0:4e:96:36:00:90:b0:67:95:0a:13:63:
8c:94:5f:ae:0c:01:de:3e:c7:71:57:81:9f:a9:6c:39:c9:c5:
d6:5d:f5:fd:8a:c1:3f:c1:85:55:d8:ca:ed:b8:92:fe:c1:96:
ab:74:e1:29:29:53:ba:28:19:e6:96:51:4c:5a:b0:d8:c2:e7:
de:15:17:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:02 2023 by rpki-client on console-ams.rpki-client.org