Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/BE6BSmqRdLeO4TWvhPxzo0-Sz8o.roa
File: BE6BSmqRdLeO4TWvhPxzo0-Sz8o.roa (raw, json)
Hash identifier: svdg+AwK7iIrmymUVlRXq3mSmBUObdpTYxA38Mc+1+k=
Subject key identifier: 04:4E:81:4A:6A:91:74:B7:8E:E1:35:AF:84:FC:73:A3:4F:92:CF:CA
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 1622D356
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/BE6BSmqRdLeO4TWvhPxzo0-Sz8o.roa
Signing time: Thu 12 May 2022 13:58:11 +0000
ROA not before: Thu 12 May 2022 13:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8641
IP address blocks: 213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/22 maxlen: 22
213.208.176.0/21 maxlen: 21
213.208.186.0/23 maxlen: 23
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
185.106.107.0/24 maxlen: 24
77.94.160.0/19 maxlen: 19
84.47.128.0/22 maxlen: 22
77.94.175.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.144.0/23 maxlen: 23
84.47.152.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
84.47.147.0/24 maxlen: 24
77.94.189.0/24 maxlen: 24
84.47.148.0/22 maxlen: 22
84.47.156.0/22 maxlen: 22
84.47.160.0/22 maxlen: 22
85.91.112.0/22 maxlen: 22
84.47.164.0/23 maxlen: 23
84.47.168.0/21 maxlen: 21
85.91.118.0/23 maxlen: 23
213.135.64.0/22 maxlen: 22
213.135.70.0/23 maxlen: 23
85.91.122.0/24 maxlen: 24
84.47.176.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.176.0/23 maxlen: 23
85.91.120.0/23 maxlen: 23
84.47.181.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.80.0/24 maxlen: 24
84.47.190.0/23 maxlen: 23
213.135.79.0/24 maxlen: 24
213.135.80.0/21 maxlen: 21
213.135.88.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371381078 (0x1622d356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: May 12 13:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=044e814a6a9174b78ee135af84fc73a34f92cfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:84:3b:63:b4:9e:56:8a:30:64:1a:86:15:
dc:fc:00:5f:db:a4:fd:4c:d2:67:1f:a5:52:a9:21:
0d:0e:fc:3a:6f:28:3c:18:f4:d1:fe:ac:ed:9c:39:
31:df:f5:5d:34:a8:e8:78:0b:d6:3b:ed:1b:8a:c1:
40:87:3e:d1:29:8c:23:bb:1b:9c:18:e1:a3:1e:5a:
c6:e9:e2:15:47:42:1a:17:b8:23:68:10:22:0c:83:
9c:e5:3a:27:73:c5:4a:3f:b3:08:48:f4:1a:89:78:
9c:3e:8b:c2:87:81:78:68:d9:5d:72:be:40:9b:cf:
64:9c:c9:f5:99:44:6e:2b:d0:23:e9:91:29:fe:7c:
6e:33:a2:ba:b0:5b:c6:95:94:38:85:d6:c0:ef:e8:
f2:4d:59:0b:4c:e2:68:1e:8a:1f:5a:cd:e3:c7:89:
d4:5b:29:fa:bc:d3:3e:a4:6e:10:55:e1:17:c5:c9:
0a:6a:96:6b:a8:da:b1:96:0d:63:ef:b5:7f:9c:23:
4c:47:e2:46:27:5e:57:da:6c:48:94:03:24:f5:b0:
b7:ff:d4:f3:08:72:d8:d7:f3:d7:18:fc:a1:b0:39:
ec:81:96:f5:f9:aa:cc:2b:9f:57:ce:b0:13:dd:fd:
b6:f7:7d:58:49:01:f3:11:d8:c9:c6:f3:44:c2:97:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4E:81:4A:6A:91:74:B7:8E:E1:35:AF:84:FC:73:A3:4F:92:CF:CA
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/BE6BSmqRdLeO4TWvhPxzo0-Sz8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/22
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.177.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
185.106.107.0/24
213.135.64.0/22
213.135.69.0-213.135.73.255
213.135.77.0/24
213.135.79.0-213.135.91.255
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.186.0-213.208.191.255
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
39:8b:7c:7f:ca:1a:d8:60:d3:82:f1:e4:d1:1b:ef:08:24:8a:
c4:e3:7d:17:c5:1d:db:90:5b:73:24:31:c9:eb:8b:d6:39:f3:
58:20:44:4e:b4:f3:55:f1:a4:f1:5f:8f:5a:05:90:84:6c:a6:
31:07:5d:3d:20:88:20:33:1d:c1:c1:3d:bd:61:37:b7:dc:c4:
f0:51:03:9d:1d:d5:8f:11:be:17:3b:72:77:05:5a:a5:2e:08:
07:f7:c6:5b:00:be:ca:a3:76:60:76:3e:75:40:3b:15:4f:56:
4b:92:e1:1d:31:f0:26:c9:f6:91:eb:1b:c7:ec:ce:24:27:6a:
a0:fa:a8:49:25:8e:17:02:11:b8:59:26:67:b9:50:32:b8:8d:
b1:8b:94:81:f0:c1:85:b8:7b:c4:5b:be:21:3c:e7:88:51:ab:
20:d0:e1:f4:d0:04:36:81:03:d4:9e:8f:66:fd:68:a8:14:46:
13:59:ec:c5:95:d7:43:bf:32:0b:b2:db:1d:0f:0b:60:37:2c:
60:d4:e7:e2:7e:67:c2:d0:9d:30:fb:56:d3:ce:79:1e:3c:49:
d6:8c:9d:e5:39:84:6f:b9:a2:6b:fa:fd:c1:91:e5:d5:8c:e3:
f7:ef:54:d3:bb:d2:83:dc:e8:74:ac:de:99:13:40:d3:6f:bc:
41:b8:0e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:45 2025 by rpki-client