Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/x8CmUmcXPgNBZzsVOFo9vpYpWwc.roa
File: x8CmUmcXPgNBZzsVOFo9vpYpWwc.roa (raw, json)
Hash identifier: koz2w1mez/AyvLqLSUq7EGj/NqcjUffRsTY1EW5ud8I=
Subject key identifier: C7:C0:A6:52:67:17:3E:03:41:67:3B:15:38:5A:3D:BE:96:29:5B:07
Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial: 0193DA730105487A517FC795EDABDFB205BD
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/x8CmUmcXPgNBZzsVOFo9vpYpWwc.roa
Signing time: Wed 18 Dec 2024 15:46:30 +0000
ROA not before: Wed 18 Dec 2024 15:46:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 45.136.104.0/24 maxlen: 24
45.136.105.0/24 maxlen: 24
45.136.107.0/24 maxlen: 24
185.26.144.0/24 maxlen: 24
185.26.145.0/24 maxlen: 24
185.26.146.0/24 maxlen: 24
185.26.147.0/24 maxlen: 24
185.126.176.0/24 maxlen: 24
185.126.178.0/24 maxlen: 24
185.126.179.0/24 maxlen: 24
185.153.228.0/24 maxlen: 24
185.153.229.0/24 maxlen: 24
185.153.230.0/24 maxlen: 24
185.153.231.0/24 maxlen: 24
185.162.144.0/24 maxlen: 24
185.162.147.0/24 maxlen: 24
185.171.24.0/24 maxlen: 24
185.171.25.0/24 maxlen: 24
185.171.26.0/24 maxlen: 24
185.171.27.0/24 maxlen: 24
185.247.136.0/24 maxlen: 24
185.247.138.0/24 maxlen: 24
185.247.139.0/24 maxlen: 24
2a04:3880::/30 maxlen: 30
2a06:c380::/29 maxlen: 29
2a0b:6000::/29 maxlen: 29
2a0d:a2c0::/29 maxlen: 29
2a0d:c480::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:da:73:01:05:48:7a:51:7f:c7:95:ed:ab:df:b2:05:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Validity
Not Before: Dec 18 15:46:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7c0a65267173e0341673b15385a3dbe96295b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:ec:ec:44:40:64:61:8f:10:38:96:de:b5:
fa:5b:9f:07:65:f6:72:e3:59:52:20:8c:cb:a4:ad:
0e:bd:5f:17:66:d3:e4:a7:f9:67:8f:20:f1:d9:4f:
ce:96:76:62:10:19:07:c9:06:fd:c9:b2:7b:3c:53:
c1:7c:f3:84:62:bd:8f:46:ca:83:63:70:c3:64:70:
0b:45:47:23:74:93:88:f1:36:fa:f3:26:8f:02:ca:
4f:c7:77:55:ec:41:a1:2e:3a:03:0b:de:72:77:3f:
c3:af:48:40:ad:49:c9:c2:90:f2:d5:02:3e:0b:04:
3b:6e:b6:f2:dc:f4:1f:4e:e2:3d:bf:bd:62:b6:62:
0c:4a:78:f7:43:72:7b:86:21:ca:80:71:c2:dd:d1:
19:6f:17:34:46:77:8c:c9:18:7c:d3:6d:e5:a7:c0:
1c:91:c0:84:b4:7d:a0:ff:4a:67:1d:24:d7:b9:52:
c4:36:fa:c9:e6:ba:9f:3c:a4:05:83:15:85:a0:8b:
97:22:f4:49:21:98:d4:06:ea:28:e2:fe:97:9b:40:
b2:f1:07:02:8f:a5:e1:26:e9:d1:50:aa:3a:c0:89:
dd:5b:d4:f7:63:01:c6:65:60:29:53:b0:27:62:86:
de:c8:bd:da:b4:d6:c2:f0:2a:9d:9c:bb:10:ed:7b:
ad:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C0:A6:52:67:17:3E:03:41:67:3B:15:38:5A:3D:BE:96:29:5B:07
X509v3 Authority Key Identifier:
keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/x8CmUmcXPgNBZzsVOFo9vpYpWwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.104.0/23
45.136.107.0/24
185.26.144.0/22
185.126.176.0/24
185.126.178.0/23
185.153.228.0/22
185.162.144.0/24
185.162.147.0/24
185.171.24.0/22
185.247.136.0/24
185.247.138.0/23
IPv6:
2a04:3880::/30
2a06:c380::/29
2a0b:6000::/29
2a0d:a2c0::/29
2a0d:c480::/29
Signature Algorithm: sha256WithRSAEncryption
9b:0f:70:5e:ea:a3:90:f1:4a:8b:77:8b:74:7b:70:e6:4f:2b:
61:b4:d6:de:97:d1:0c:3d:65:0d:21:47:f4:53:9a:a3:77:54:
d3:67:65:5e:b1:24:56:03:06:58:8b:62:9b:fd:ff:dc:36:73:
be:04:8f:3b:4b:4d:72:33:63:29:01:ad:12:20:77:b8:f9:ad:
50:f3:b8:d6:ba:52:6b:82:d2:e5:dd:37:dc:d6:43:e6:df:c1:
cb:ad:b3:ee:dc:27:44:45:e1:bf:46:f0:21:e7:74:f8:c0:06:
56:3a:b6:b8:0b:5f:e9:20:c3:cc:09:65:ac:57:4a:7e:c2:37:
71:ba:fc:b3:b6:13:ac:19:be:f6:9b:55:60:0f:5f:cd:cd:69:
28:84:6e:d7:fb:0e:cd:2f:98:d6:51:fd:58:59:99:64:1e:5f:
b3:bb:e3:20:d5:2e:3a:0e:37:96:0b:bf:1c:36:62:fa:4b:02:
af:1a:d7:90:40:53:90:b5:1f:e1:3d:29:b7:a9:e1:63:1e:34:
82:d7:63:43:57:a6:3f:80:40:a0:66:43:79:29:d6:2a:a2:de:
d6:47:2e:61:e2:dc:d8:e1:5a:2e:e5:77:e5:9b:e1:80:2d:2a:
0a:33:49:a1:7a:f7:fe:9b:4f:d5:00:02:c5:fe:98:b8:7d:b7:
87:be:32:34
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgISAZPacwEFSHpRf8eV7avfsgW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MjAzYTBjMDRiODFmZTE3NjZmYTQxYmQzMWI3M2I1ODgx
ODhhYzcwHhcNMjQxMjE4MTU0NjMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2MwYTY1MjY3MTczZTAzNDE2NzNiMTUzODVhM2RiZTk2Mjk1YjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfTs7ERAZGGPEDiW3rX6W58HZfZy
41lSIIzLpK0OvV8XZtPkp/lnjyDx2U/OlnZiEBkHyQb9ybJ7PFPBfPOEYr2PRsqD
Y3DDZHALRUcjdJOI8Tb68yaPAspPx3dV7EGhLjoDC95ydz/Dr0hArUnJwpDy1QI+
CwQ7brby3PQfTuI9v71itmIMSnj3Q3J7hiHKgHHC3dEZbxc0RneMyRh8023lp8Ac
kcCEtH2g/0pnHSTXuVLENvrJ5rqfPKQFgxWFoIuXIvRJIZjUBuoo4v6Xm0Cy8QcC
j6XhJunRUKo6wIndW9T3YwHGZWApU7AnYobeyL3atNbC8CqdnLsQ7Xut0QIDAQAB
o4ICczCCAm8wHQYDVR0OBBYEFMfAplJnFz4DQWc7FThaPb6WKVsHMB8GA1UdIwQY
MBaAFPggOgwEuB/hdm+kG9Mbc7WIGIrHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1DQTZEQVM0SC1GMmI2UWIweHR6dFlnWWlzYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNh
LTMzODk2MjBjMWJkNy8xL3g4Q21VbWNYUGdOQlp6c1ZPRm85dnBZcFd3Yy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNhLTMzODk2MjBjMWJk
Ny8xLzEtQ0E2REFTNEgtRjJiNlFiMHh0enRZZ1lpc2MuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgYYGCCsGAQUFBwEHAQH/BHcwdTBIBAIAATBCAwQBLYho
AwQALYhrAwQCuRqQAwQAuX6wAwQBuX6yAwQCuZnkAwQAuaKQAwQAuaKTAwQCuasY
AwQAufeIAwQBufeKMCkEAgACMCMDBQIqBDiAAwUDKgbDgAMFAyoLYAADBQMqDaLA
AwUDKg3EgDANBgkqhkiG9w0BAQsFAAOCAQEAmw9wXuqjkPFKi3eLdHtw5k8rYbTW
3pfRDD1lDSFH9FOao3dU02dlXrEkVgMGWItim/3/3DZzvgSPO0tNcjNjKQGtEiB3
uPmtUPO41rpSa4LS5d033NZD5t/By62z7twnREXhv0bwIed0+MAGVjq2uAtf6SDD
zAllrFdKfsI3cbr8s7YTrBm+9ptVYA9fzc1pKIRu1/sOzS+Y1lH9WFmZZB5fs7vj
INUuOg43lgu/HDZi+ksCrxrXkEBTkLUf4T0pt6nhYx40gtdjQ1emP4BAoGZDeSnW
KqLe1kcuYeLc2OFaLuV35ZvhgC0qCjNJoXr3/ptP1QACxf6YuH23h74yNA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:20 2025 by rpki-client