Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/pSQm9QKCG-KRa_HyAbpQKX-UqNM.roa
File: pSQm9QKCG-KRa_HyAbpQKX-UqNM.roa (raw, json)
Hash identifier: IRi3yTOKyTAk78tUB0TUEaHPPUBvRQHpgS+lTXmJbKw=
Subject key identifier: A5:24:26:F5:02:82:1B:E2:91:6B:F1:F2:01:BA:50:29:7F:94:A8:D3
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 018C6DF4C25DCB62BD05C3416CAC20F41CF3
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/pSQm9QKCG-KRa_HyAbpQKX-UqNM.roa
Signing time: Fri 15 Dec 2023 14:50:06 +0000
ROA not before: Fri 15 Dec 2023 14:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204601
IP address blocks: 45.12.215.0/24 maxlen: 24
45.12.214.0/24 maxlen: 24
45.87.0.0/22 maxlen: 22
45.147.197.0/24 maxlen: 24
45.147.196.0/24 maxlen: 24
45.147.198.0/24 maxlen: 24
45.147.199.0/24 maxlen: 24
91.228.56.0/24 maxlen: 24
45.12.212.0/24 maxlen: 24
45.12.213.0/24 maxlen: 24
109.107.157.0/24 maxlen: 24
185.201.252.0/24 maxlen: 24
194.26.232.0/24 maxlen: 24
91.208.127.0/24 maxlen: 24
185.235.128.0/24 maxlen: 24
185.235.131.0/24 maxlen: 24
185.235.129.0/24 maxlen: 24
185.235.130.0/24 maxlen: 24
77.220.215.0/24 maxlen: 24
77.220.214.0/24 maxlen: 24
45.66.8.0/24 maxlen: 24
45.66.11.0/24 maxlen: 24
45.66.9.0/24 maxlen: 24
45.66.10.0/24 maxlen: 24
185.241.52.0/24 maxlen: 24
185.241.55.0/24 maxlen: 24
185.241.53.0/24 maxlen: 24
185.241.54.0/24 maxlen: 24
185.93.6.0/24 maxlen: 24
185.241.61.0/24 maxlen: 24
77.220.212.0/24 maxlen: 24
77.220.213.0/24 maxlen: 24
77.220.212.0/22 maxlen: 22
91.201.25.0/24 maxlen: 24
185.154.12.0/24 maxlen: 24
185.154.14.0/24 maxlen: 24
185.154.15.0/24 maxlen: 24
185.154.13.0/24 maxlen: 24
212.86.101.0/24 maxlen: 24
212.86.102.0/24 maxlen: 24
212.86.108.0/24 maxlen: 24
212.86.109.0/24 maxlen: 24
212.86.114.0/24 maxlen: 24
212.86.115.0/24 maxlen: 24
45.132.107.0/24 maxlen: 24
45.132.106.0/24 maxlen: 24
213.166.68.0/24 maxlen: 24
213.166.69.0/24 maxlen: 24
213.166.70.0/24 maxlen: 24
213.166.71.0/24 maxlen: 24
45.91.200.0/24 maxlen: 24
178.159.39.0/24 maxlen: 24
45.91.201.0/24 maxlen: 24
178.159.42.0/24 maxlen: 24
178.159.43.0/24 maxlen: 24
45.91.202.0/24 maxlen: 24
45.91.203.0/24 maxlen: 24
185.51.121.0/24 maxlen: 24
45.132.104.0/24 maxlen: 24
45.132.105.0/24 maxlen: 24
92.119.112.0/24 maxlen: 24
92.119.115.0/24 maxlen: 24
92.119.113.0/24 maxlen: 24
92.119.114.0/24 maxlen: 24
46.18.107.0/24 maxlen: 24
185.213.210.0/24 maxlen: 24
185.213.208.0/22 maxlen: 22
185.213.208.0/24 maxlen: 24
185.213.209.0/24 maxlen: 24
185.213.211.0/24 maxlen: 24
80.85.136.0/21 maxlen: 21
185.206.213.0/24 maxlen: 24
185.206.212.0/24 maxlen: 24
185.206.214.0/24 maxlen: 24
185.206.215.0/24 maxlen: 24
185.51.246.0/24 maxlen: 24
185.51.247.0/24 maxlen: 24
81.31.197.0/24 maxlen: 24
185.232.164.0/24 maxlen: 24
212.23.221.0/24 maxlen: 24
193.3.168.0/24 maxlen: 24
185.219.82.0/24 maxlen: 24
185.219.80.0/22 maxlen: 22
185.219.83.0/24 maxlen: 24
185.219.80.0/24 maxlen: 24
185.219.81.0/24 maxlen: 24
185.253.7.0/24 maxlen: 24
176.57.69.0/24 maxlen: 24
176.57.70.0/24 maxlen: 24
176.57.68.0/24 maxlen: 24
176.57.71.0/24 maxlen: 24
103.246.144.0/22 maxlen: 22
81.91.176.0/22 maxlen: 22
81.91.178.0/24 maxlen: 24
178.159.38.0/24 maxlen: 24
77.83.172.0/24 maxlen: 24
77.83.173.0/24 maxlen: 24
77.83.174.0/24 maxlen: 24
77.83.175.0/24 maxlen: 24
185.23.108.0/24 maxlen: 24
91.198.166.0/24 maxlen: 24
94.124.78.0/24 maxlen: 24
91.211.249.0/24 maxlen: 24
91.211.248.0/24 maxlen: 24
91.211.250.0/24 maxlen: 24
91.211.251.0/24 maxlen: 24
194.15.46.0/24 maxlen: 24
193.163.113.0/24 maxlen: 24
46.21.250.0/24 maxlen: 24
194.62.105.0/24 maxlen: 24
185.203.240.0/22 maxlen: 22
185.203.240.0/24 maxlen: 24
185.203.242.0/24 maxlen: 24
185.203.243.0/24 maxlen: 24
185.251.25.0/24 maxlen: 24
185.203.241.0/24 maxlen: 24
45.82.176.0/22 maxlen: 22
185.237.165.0/24 maxlen: 24
193.22.21.0/24 maxlen: 24
185.244.216.0/24 maxlen: 24
185.244.216.0/22 maxlen: 22
185.244.219.0/24 maxlen: 24
185.204.109.0/24 maxlen: 24
185.244.217.0/24 maxlen: 24
185.244.218.0/24 maxlen: 24
45.137.64.0/22 maxlen: 22
193.56.8.0/24 maxlen: 24
185.224.132.0/22 maxlen: 22
185.224.132.0/24 maxlen: 24
185.231.70.0/24 maxlen: 24
185.224.134.0/24 maxlen: 24
185.224.133.0/24 maxlen: 24
185.231.68.0/22 maxlen: 22
212.8.246.0/24 maxlen: 24
185.224.135.0/24 maxlen: 24
185.231.68.0/24 maxlen: 24
185.231.71.0/24 maxlen: 24
212.8.244.0/24 maxlen: 24
185.231.69.0/24 maxlen: 24
5.8.248.0/24 maxlen: 24
194.29.53.0/24 maxlen: 24
45.88.106.0/24 maxlen: 24
45.88.107.0/24 maxlen: 24
212.162.152.0/22 maxlen: 24
185.229.251.0/24 maxlen: 24
193.169.105.0/24 maxlen: 24
45.81.224.0/22 maxlen: 22
91.209.226.0/24 maxlen: 24
185.250.206.0/24 maxlen: 24
185.250.204.0/24 maxlen: 24
185.250.205.0/24 maxlen: 24
185.250.207.0/24 maxlen: 24
45.136.85.0/24 maxlen: 24
45.136.84.0/24 maxlen: 24
45.136.86.0/24 maxlen: 24
45.136.87.0/24 maxlen: 24
193.163.7.0/24 maxlen: 24
45.82.68.0/22 maxlen: 22
95.215.204.0/22 maxlen: 22
185.209.20.0/24 maxlen: 24
185.209.21.0/24 maxlen: 24
185.209.20.0/22 maxlen: 22
185.209.22.0/24 maxlen: 24
185.209.23.0/24 maxlen: 24
185.107.237.0/24 maxlen: 24
45.88.78.0/24 maxlen: 24
45.88.76.0/24 maxlen: 24
45.88.77.0/24 maxlen: 24
45.88.79.0/24 maxlen: 24
45.88.104.0/24 maxlen: 24
45.88.105.0/24 maxlen: 24
85.209.90.0/24 maxlen: 24
85.209.88.0/24 maxlen: 24
85.209.89.0/24 maxlen: 24
85.209.91.0/24 maxlen: 24
2a07:5980::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:f4:c2:5d:cb:62:bd:05:c3:41:6c:ac:20:f4:1c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Dec 15 14:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a52426f502821be2916bf1f201ba50297f94a8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:62:fa:0b:2d:06:0a:c5:9e:c6:1e:a7:67:
20:21:c2:2a:2a:c6:24:70:ca:1f:c0:15:db:5c:4f:
7f:5a:32:53:29:38:00:ad:10:58:d8:4b:d7:47:7b:
05:bd:8f:d2:1a:30:0b:93:20:48:98:e7:62:d9:6f:
3a:47:bc:50:b5:a0:5d:ef:cc:67:4c:1f:bf:78:37:
15:ad:30:bf:e1:94:75:79:8d:8e:2f:cf:65:f4:02:
fe:e4:3d:b7:87:16:e9:df:ce:bc:04:de:78:6f:9c:
75:e5:4c:5f:67:97:38:53:84:61:cf:04:ff:7b:7d:
c4:4a:a5:68:3f:62:77:28:5e:23:a3:b0:47:5e:46:
9a:0d:fc:e2:dc:46:e7:c9:a2:82:c2:da:51:ed:79:
af:f4:c5:2c:1d:3f:fc:63:ae:23:cc:d6:36:31:6f:
c1:48:70:65:23:ae:aa:f3:6e:9d:74:c5:11:c8:d9:
b5:5f:a9:09:a8:ce:38:ff:4f:44:92:31:5e:d8:95:
54:8d:54:17:27:77:e1:da:48:9e:55:cb:fc:5e:fc:
d3:c3:df:0a:d4:df:68:59:f9:15:80:b6:98:d9:69:
19:c6:cc:ac:01:7e:96:fd:26:7f:b0:81:08:8b:ac:
54:c0:86:d3:99:97:e5:04:bd:bf:ba:a8:61:1e:54:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:24:26:F5:02:82:1B:E2:91:6B:F1:F2:01:BA:50:29:7F:94:A8:D3
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/pSQm9QKCG-KRa_HyAbpQKX-UqNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.248.0/24
45.12.212.0/22
45.66.8.0/22
45.81.224.0/22
45.82.68.0/22
45.82.176.0/22
45.87.0.0/22
45.88.76.0/22
45.88.104.0/22
45.91.200.0/22
45.132.104.0/22
45.136.84.0/22
45.137.64.0/22
45.147.196.0/22
46.18.107.0/24
46.21.250.0/24
77.83.172.0/22
77.220.212.0/22
80.85.136.0/21
81.31.197.0/24
81.91.176.0/22
85.209.88.0/22
91.198.166.0/24
91.201.25.0/24
91.208.127.0/24
91.209.226.0/24
91.211.248.0/22
91.228.56.0/24
92.119.112.0/22
94.124.78.0/24
95.215.204.0/22
103.246.144.0/22
109.107.157.0/24
176.57.68.0/22
178.159.38.0/23
178.159.42.0/23
185.23.108.0/24
185.51.121.0/24
185.51.246.0/23
185.93.6.0/24
185.107.237.0/24
185.154.12.0/22
185.201.252.0/24
185.203.240.0/22
185.204.109.0/24
185.206.212.0/22
185.209.20.0/22
185.213.208.0/22
185.219.80.0/22
185.224.132.0/22
185.229.251.0/24
185.231.68.0/22
185.232.164.0/24
185.235.128.0/22
185.237.165.0/24
185.241.52.0/22
185.241.61.0/24
185.244.216.0/22
185.250.204.0/22
185.251.25.0/24
185.253.7.0/24
193.3.168.0/24
193.22.21.0/24
193.56.8.0/24
193.163.7.0/24
193.163.113.0/24
193.169.105.0/24
194.15.46.0/24
194.26.232.0/24
194.29.53.0/24
194.62.105.0/24
212.8.244.0/24
212.8.246.0/24
212.23.221.0/24
212.86.101.0-212.86.102.255
212.86.108.0/23
212.86.114.0/23
212.162.152.0/22
213.166.68.0/22
IPv6:
2a07:5980::/29
Signature Algorithm: sha256WithRSAEncryption
34:ca:03:ec:a1:87:85:ac:d1:af:d9:42:2c:e2:a5:55:40:53:
b7:4e:4f:2a:fd:c0:36:78:f1:b3:c5:24:66:05:5b:bc:40:09:
dc:62:8b:a3:69:58:7f:aa:8f:d8:8b:fe:26:6b:8d:fc:42:93:
fe:29:15:5c:77:99:63:3f:b7:46:fa:70:b4:a3:b5:7c:c4:e9:
f4:62:10:c0:84:ee:d5:c8:e4:8d:f1:3c:37:69:cc:7c:ba:77:
e3:58:47:6b:bf:f8:a8:19:ea:ed:fd:c6:6c:92:d2:c4:00:5b:
b3:70:b2:0c:c4:59:44:fb:75:3d:a1:a3:50:2a:43:9f:1e:ab:
5d:4a:ed:fa:31:4d:c4:72:31:e7:17:72:ef:ac:8f:00:ac:18:
03:76:91:47:19:05:87:29:2e:db:da:44:3b:b7:6d:b4:9e:66:
e0:c2:42:e9:22:b8:65:4d:32:49:7c:69:9a:2f:9c:71:67:f4:
35:e9:5c:05:30:5c:f8:5b:be:2d:ac:94:6e:b9:b0:2f:c5:8a:
f4:e2:c7:6e:a5:cf:61:bc:c6:f5:d6:8b:82:df:e8:6a:70:a5:
23:db:31:f4:d1:e7:94:7d:87:82:78:05:9e:08:62:40:9e:25:
0a:f3:db:58:e3:33:29:37:66:95:43:f0:30:40:53:01:4d:f4:
d9:51:d5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:20 2024 by rpki-client on console-ams.rpki-client.org