Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/cdBTmUcqhVEr-YSnaqHZG5vCxuA.roa
File: cdBTmUcqhVEr-YSnaqHZG5vCxuA.roa (raw, json)
Hash identifier: hE/yYWmuhBGPtIcBjuZX7OxtFeYlPLEaawTUjRRToN8=
Subject key identifier: 71:D0:53:99:47:2A:85:51:2B:F9:84:A7:6A:A1:D9:1B:9B:C2:C6:E0
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 125E7607
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/cdBTmUcqhVEr-YSnaqHZG5vCxuA.roa
Signing time: Tue 10 May 2022 14:03:01 +0000
ROA not before: Tue 10 May 2022 14:03:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24631
IP address blocks: 217.66.197.0/24 maxlen: 24
217.66.203.0/24 maxlen: 24
217.66.205.0/24 maxlen: 24
217.66.209.0/24 maxlen: 24
217.66.210.0/24 maxlen: 24
217.66.212.0/24 maxlen: 24
79.174.166.0/24 maxlen: 24
217.66.216.0/24 maxlen: 24
79.174.165.0/24 maxlen: 24
89.235.68.0/22 maxlen: 24
217.66.218.0/24 maxlen: 24
79.174.162.0/24 maxlen: 24
79.174.164.0/24 maxlen: 24
217.66.223.0/24 maxlen: 24
89.235.78.0/23 maxlen: 23
89.235.72.0/21 maxlen: 24
217.66.220.0/24 maxlen: 24
78.154.32.0/19 maxlen: 19
213.195.0.0/19 maxlen: 19
185.208.148.0/22 maxlen: 22
185.45.188.0/22 maxlen: 22
217.146.214.0/24 maxlen: 24
217.146.221.0/24 maxlen: 24
46.32.0.0/22 maxlen: 22
46.32.0.0/21 maxlen: 21
46.32.0.0/19 maxlen: 24
46.32.8.0/21 maxlen: 21
46.32.6.0/23 maxlen: 23
46.32.10.0/23 maxlen: 23
46.32.16.0/20 maxlen: 24
87.247.180.0/22 maxlen: 23
176.221.66.0/23 maxlen: 23
176.221.68.0/22 maxlen: 22
109.201.18.0/24 maxlen: 24
109.201.19.0/24 maxlen: 24
109.201.21.0/24 maxlen: 24
109.201.27.0/24 maxlen: 24
185.12.63.0/24 maxlen: 24
185.12.60.0/24 maxlen: 24
185.153.184.0/22 maxlen: 22
185.12.62.0/24 maxlen: 24
185.133.152.0/24 maxlen: 24
185.133.154.0/24 maxlen: 24
178.248.40.0/22 maxlen: 22
178.248.40.0/21 maxlen: 21
178.248.44.0/22 maxlen: 22
176.221.64.0/21 maxlen: 21
109.201.11.0/24 maxlen: 24
80.253.129.0/24 maxlen: 24
80.253.136.0/24 maxlen: 24
80.253.133.0/24 maxlen: 24
80.253.135.0/24 maxlen: 24
80.253.145.0/24 maxlen: 24
80.253.148.0/24 maxlen: 24
80.253.152.0/24 maxlen: 24
80.253.147.0/24 maxlen: 24
80.253.151.0/24 maxlen: 24
79.132.216.0/24 maxlen: 24
79.132.218.0/24 maxlen: 24
5.200.66.0/24 maxlen: 24
5.200.70.0/24 maxlen: 24
5.200.71.0/24 maxlen: 24
79.132.205.0/24 maxlen: 24
79.132.211.0/24 maxlen: 24
79.132.212.0/24 maxlen: 24
78.158.167.0/24 maxlen: 24
78.158.178.0/24 maxlen: 24
78.158.183.0/24 maxlen: 24
78.158.184.0/24 maxlen: 24
80.71.112.0/23 maxlen: 23
185.4.16.0/22 maxlen: 22
80.71.112.0/20 maxlen: 20
80.71.116.0/22 maxlen: 22
80.71.120.0/23 maxlen: 23
80.71.120.0/21 maxlen: 21
80.71.120.0/22 maxlen: 22
78.158.187.0/24 maxlen: 24
78.158.189.0/24 maxlen: 24
78.158.190.0/24 maxlen: 24
185.104.229.0/24 maxlen: 24
185.70.60.0/22 maxlen: 22
78.111.8.0/21 maxlen: 21
78.111.8.0/23 maxlen: 23
78.111.10.0/23 maxlen: 23
81.29.240.0/20 maxlen: 20
81.29.244.0/22 maxlen: 22
81.29.248.0/23 maxlen: 23
81.29.252.0/23 maxlen: 23
185.82.164.0/23 maxlen: 23
185.82.164.0/22 maxlen: 22
31.217.208.0/21 maxlen: 21
46.34.190.0/24 maxlen: 24
188.75.65.0/24 maxlen: 24
188.75.71.0/24 maxlen: 24
188.75.84.0/24 maxlen: 24
188.75.88.0/24 maxlen: 24
185.101.228.0/24 maxlen: 24
185.101.231.0/24 maxlen: 24
46.34.177.0/24 maxlen: 24
188.75.98.0/24 maxlen: 24
188.75.93.0/24 maxlen: 24
188.75.95.0/24 maxlen: 24
188.75.104.0/24 maxlen: 24
188.75.105.0/24 maxlen: 24
188.75.106.0/24 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.109.0/24 maxlen: 24
86.109.34.0/23 maxlen: 23
86.109.36.0/23 maxlen: 23
86.109.32.0/19 maxlen: 19
188.75.124.0/24 maxlen: 24
86.109.44.0/23 maxlen: 23
86.109.46.0/23 maxlen: 23
188.75.127.0/24 maxlen: 24
86.109.48.0/20 maxlen: 20
86.109.48.0/21 maxlen: 21
185.142.232.0/24 maxlen: 24
86.109.56.0/23 maxlen: 23
86.109.58.0/23 maxlen: 23
86.109.60.0/22 maxlen: 22
185.40.240.0/22 maxlen: 22
217.66.192.0/20 maxlen: 20
217.66.192.0/19 maxlen: 19
217.66.206.0/23 maxlen: 23
217.66.212.0/22 maxlen: 22
79.174.160.0/21 maxlen: 21
89.235.71.0/24 maxlen: 24
217.66.216.0/22 maxlen: 22
89.235.70.0/24 maxlen: 24
217.66.220.0/22 maxlen: 22
89.235.76.0/24 maxlen: 24
185.208.149.0/24 maxlen: 24
185.208.151.0/24 maxlen: 24
185.208.148.0/24 maxlen: 24
185.208.150.0/24 maxlen: 24
217.146.208.0/20 maxlen: 20
46.32.2.0/24 maxlen: 24
46.32.4.0/24 maxlen: 24
46.32.3.0/24 maxlen: 24
46.32.6.0/24 maxlen: 24
46.32.8.0/24 maxlen: 24
46.32.7.0/24 maxlen: 24
46.32.12.0/24 maxlen: 24
46.32.13.0/24 maxlen: 24
46.32.15.0/24 maxlen: 24
46.32.20.0/24 maxlen: 24
46.32.21.0/24 maxlen: 24
46.32.23.0/24 maxlen: 24
46.32.26.0/24 maxlen: 24
46.32.30.0/24 maxlen: 24
87.247.179.0/24 maxlen: 24
46.32.25.0/24 maxlen: 24
46.32.27.0/24 maxlen: 24
176.221.68.0/24 maxlen: 24
176.221.70.0/24 maxlen: 24
109.201.18.0/23 maxlen: 23
185.12.60.0/23 maxlen: 23
185.153.185.0/24 maxlen: 24
185.12.60.0/22 maxlen: 22
185.133.152.0/22 maxlen: 22
109.201.0.0/19 maxlen: 24
178.248.43.0/24 maxlen: 24
178.248.42.0/24 maxlen: 24
176.221.64.0/24 maxlen: 24
80.253.128.0/19 maxlen: 24
79.132.214.0/23 maxlen: 23
79.132.220.0/22 maxlen: 22
79.132.200.0/21 maxlen: 21
79.132.208.0/20 maxlen: 20
79.132.208.0/22 maxlen: 22
185.4.17.0/24 maxlen: 24
80.71.112.0/24 maxlen: 24
80.71.115.0/24 maxlen: 24
80.71.114.0/24 maxlen: 24
80.71.121.0/24 maxlen: 24
80.71.127.0/24 maxlen: 24
80.71.126.0/24 maxlen: 24
185.104.230.0/23 maxlen: 23
185.104.228.0/22 maxlen: 22
37.191.76.0/24 maxlen: 24
78.111.8.0/24 maxlen: 24
78.111.9.0/24 maxlen: 24
78.111.14.0/24 maxlen: 24
81.29.240.0/24 maxlen: 24
81.29.242.0/24 maxlen: 24
81.29.244.0/24 maxlen: 24
81.29.241.0/24 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.253.0/24 maxlen: 24
81.29.255.0/24 maxlen: 24
46.34.188.0/22 maxlen: 24
185.21.68.0/22 maxlen: 22
46.34.188.0/23 maxlen: 23
46.34.190.0/23 maxlen: 24
185.21.76.0/22 maxlen: 22
185.21.78.0/23 maxlen: 23
188.75.64.0/20 maxlen: 20
188.75.64.0/19 maxlen: 19
188.75.64.0/18 maxlen: 18
188.75.80.0/21 maxlen: 21
188.75.88.0/22 maxlen: 22
188.75.86.0/23 maxlen: 23
185.101.228.0/22 maxlen: 22
46.34.164.0/22 maxlen: 22
46.34.168.0/21 maxlen: 21
46.34.176.0/20 maxlen: 24
46.34.176.0/23 maxlen: 23
46.34.178.0/23 maxlen: 23
46.34.180.0/22 maxlen: 22
46.34.184.0/22 maxlen: 22
188.75.96.0/22 maxlen: 22
188.75.92.0/23 maxlen: 23
188.75.100.0/23 maxlen: 23
188.75.108.0/22 maxlen: 22
188.75.110.0/23 maxlen: 23
188.75.116.0/22 maxlen: 22
86.109.38.0/24 maxlen: 24
86.109.39.0/24 maxlen: 24
188.75.124.0/22 maxlen: 22
86.109.43.0/24 maxlen: 24
86.109.40.0/24 maxlen: 24
188.75.120.0/23 maxlen: 23
86.109.42.0/24 maxlen: 24
86.109.51.0/24 maxlen: 24
185.142.232.0/22 maxlen: 23
86.109.58.0/24 maxlen: 24
86.109.53.0/24 maxlen: 24
86.109.55.0/24 maxlen: 24
185.190.21.0/24 maxlen: 24
185.190.23.0/24 maxlen: 24
86.109.59.0/24 maxlen: 24
86.109.61.0/24 maxlen: 24
185.190.22.0/24 maxlen: 24
86.109.63.0/24 maxlen: 24
37.114.192.0/18 maxlen: 18
2a06:db80::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308180487 (0x125e7607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: May 10 14:03:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71d05399472a85512bf984a76aa1d91b9bc2c6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:41:bd:22:63:10:e6:3e:3a:78:92:75:00:
72:22:3c:bc:e0:5d:83:d9:34:88:12:9b:54:87:ad:
e1:f0:74:a5:e2:1e:f5:12:e1:9f:c8:a6:49:09:72:
b9:ce:81:66:ea:20:47:74:de:f0:9c:30:a6:b6:0c:
73:1f:ca:7f:49:09:89:da:cf:2e:74:b3:eb:c2:66:
ee:21:6b:b8:c2:01:27:57:3f:ee:5e:19:4b:b0:e5:
cb:15:8f:28:c1:e1:f2:a0:7c:11:9f:de:f4:d6:a3:
db:ba:5a:39:f5:21:8d:73:f0:f7:74:e7:fa:0d:69:
57:de:b5:61:be:f3:21:77:b1:f9:51:de:c8:7c:11:
ad:96:05:bd:8d:1e:9c:b8:79:ec:9f:5e:4f:ca:35:
3c:32:a2:1b:5c:33:8e:52:4e:d6:00:39:c8:26:d5:
04:99:d7:bb:f0:cd:55:c7:e2:c4:07:ef:75:58:ca:
ba:a5:22:08:d6:93:e9:1a:f2:6b:9e:07:82:ea:8b:
ee:83:57:7d:02:0f:b3:fa:f0:cb:b6:c8:55:3c:b2:
42:27:f3:e3:c6:18:44:69:36:26:d7:90:21:c9:94:
fc:61:1e:39:f1:b7:1e:f5:23:7f:51:ec:79:a7:63:
aa:25:7b:1c:24:9c:e8:0e:03:fd:d9:2b:67:bc:3b:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D0:53:99:47:2A:85:51:2B:F9:84:A7:6A:A1:D9:1B:9B:C2:C6:E0
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/cdBTmUcqhVEr-YSnaqHZG5vCxuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.200.66.0/24
5.200.70.0/23
31.217.208.0/21
37.114.192.0/18
37.191.76.0/24
46.32.0.0/19
46.34.164.0-46.34.191.255
78.111.8.0/21
78.154.32.0/19
78.158.167.0/24
78.158.178.0/24
78.158.183.0-78.158.184.255
78.158.187.0/24
78.158.189.0-78.158.190.255
79.132.200.0-79.132.223.255
79.174.160.0/21
80.71.112.0/20
80.253.128.0/19
81.29.240.0/20
86.109.32.0/19
87.247.179.0-87.247.183.255
89.235.68.0-89.235.79.255
109.201.0.0/19
176.221.64.0/21
178.248.40.0/21
185.4.16.0/22
185.12.60.0/22
185.21.68.0/22
185.21.76.0/22
185.40.240.0/22
185.45.188.0/22
185.70.60.0/22
185.82.164.0/22
185.101.228.0/22
185.104.228.0/22
185.133.152.0/22
185.142.232.0/22
185.153.184.0/22
185.190.21.0-185.190.23.255
185.208.148.0/22
188.75.64.0/18
213.195.0.0/19
217.66.192.0/19
217.146.208.0/20
IPv6:
2a06:db80::/29
Signature Algorithm: sha256WithRSAEncryption
32:38:91:b7:3f:8b:db:57:07:e9:ff:34:24:d0:20:cb:2b:c8:
98:0c:82:51:a2:b9:fc:f8:92:1a:81:1d:8e:11:21:58:fd:0a:
cf:cd:d7:be:e1:db:dc:c7:08:83:ba:9f:07:30:d5:11:33:7a:
3f:c8:fd:4b:0a:fb:84:1c:a5:01:07:b6:c0:ea:88:64:03:69:
9d:8b:49:d5:f8:4b:5a:e6:ba:d0:4d:ef:a9:4d:9e:2a:72:fe:
8d:4e:7d:42:88:86:b8:9e:c2:cc:3b:7a:88:9a:8f:a4:8c:e3:
e8:18:92:51:4e:37:54:c1:65:3a:df:db:5e:b3:24:11:0d:8c:
02:b2:7c:c3:83:b7:a9:ad:86:ee:87:f7:bf:ba:e9:2a:65:e0:
0e:39:66:d8:31:34:38:aa:2f:08:b9:26:36:91:65:0b:ab:30:
55:f9:c9:c8:27:eb:fe:01:cc:60:9a:4e:d0:6f:a5:e1:ac:e3:
36:59:8a:16:1b:55:74:62:76:2d:ee:42:6c:25:56:11:80:75:
df:58:54:03:d2:4e:92:1e:8e:c8:0c:10:41:68:87:27:a8:2f:
e2:43:c5:3a:b6:e5:51:e0:c6:9b:7f:79:b7:3e:fb:ba:90:d4:
62:22:86:18:ed:84:18:3d:06:7b:2e:af:84:ef:6a:20:49:d6:
ab:5b:0e:71
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIEEl52BzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjY5OGM0YjYxMmFmZWUyY2JiMWNkZDUwOWU0ZjAyNDZmYmI4MGUxMB4XDTIyMDUx
MDE0MDMwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzFkMDUzOTk0NzJh
ODU1MTJiZjk4NGE3NmFhMWQ5MWI5YmMyYzZlMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOIHQb0iYxDmPjp4knUAciI8vOBdg9k0iBKbVIet4fB0peIe
9RLhn8imSQlyuc6BZuogR3Te8JwwprYMcx/Kf0kJidrPLnSz68Jm7iFruMIBJ1c/
7l4ZS7DlyxWPKMHh8qB8EZ/e9Naj27paOfUhjXPw93Tn+g1pV961Yb7zIXex+VHe
yHwRrZYFvY0enLh57J9eT8o1PDKiG1wzjlJO1gA5yCbVBJnXu/DNVcfixAfvdVjK
uqUiCNaT6Rrya54HguqL7oNXfQIPs/rwy7bIVTyyQifz48YYRGk2JteQIcmU/GEe
OfG3HvUjf1HseadjqiV7HCSc6A4D/dkrZ7w7BI8CAwEAAaOCA1wwggNYMB0GA1Ud
DgQWBBRx0FOZRyqFUSv5hKdqodkbm8LG4DAfBgNVHSMEGDAWgBRbaYxLYSr+4sux
zdUJ5PAkb7uA4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1cybU1TMkVxX3VMTHNjM1ZDZVR3SkctN2dPRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvYzE2ZjU1LWI0NGQtNDBjMy05ZGFjLWNjMmZhZmUzYThiNC8x
L2NkQlRtVWNxaFZFci1ZU25hcUhaRzV2Q3h1QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
YzE2ZjU1LWI0NGQtNDBjMy05ZGFjLWNjMmZhZmUzYThiNC8xL1cybU1TMkVxX3VM
THNjM1ZDZVR3SkctN2dPRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AXAGCCsGAQUFBwEHAQH/BIIBXzCCAVswggFIBAIAATCCAUADBAAFyEIDBAEFyEYD
BAMf2dADBAYlcsADBAAlv0wDBAUuIAAwDAMEAi4ipAMEBi4igAMEA05vCAMEBU6a
IAMEAE6epwMEAE6esjAMAwQATp63AwQATp64AwQATp67MAwDBABOnr0DBABOnr4w
DAMEA0+EyAMEBU+EwAMEA0+uoAMEBFBHcAMEBVD9gAMEBFEd8AMEBVZtIDAMAwQA
V/ezAwQDV/ewMAwDBAJZ60QDBARZ60ADBAVtyQADBAOw3UADBAOy+CgDBAK5BBAD
BAK5DDwDBAK5FUQDBAK5FUwDBAK5KPADBAK5LbwDBAK5RjwDBAK5UqQDBAK5ZeQD
BAK5aOQDBAK5hZgDBAK5jugDBAK5mbgwDAMEALm+FQMEA7m+EAMEArnQlAMEBrxL
QAMEBdXDAAMEBdlCwAMEBNmS0DANBAIAAjAHAwUDKgbbgDANBgkqhkiG9w0BAQsF
AAOCAQEAMjiRtz+L21cH6f80JNAgyyvImAyCUaK5/PiSGoEdjhEhWP0Kz83XvuHb
3McIg7qfBzDVETN6P8j9Swr7hBylAQe2wOqIZANpnYtJ1fhLWua60E3vqU2eKnL+
jU59QoiGuJ7CzDt6iJqPpIzj6BiSUU43VMFlOt/bXrMkEQ2MArJ8w4O3qa2G7of3
v7rpKmXgDjlm2DE0OKovCLkmNpFlC6swVfnJyCfr/gHMYJpO0G+l4azjNlmKFhtV
dGJ2Le5CbCVWEYB131hUA9JOkh6OyAwQQWiHJ6gv4kPFOrblUeDGm395tz77upDU
YiKGGO2EGD0Gey6vhO9qIEnWq1sOcQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org