Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/_G8UQmdHSHEeF1ty1pQy-icwRS0.roa
File: _G8UQmdHSHEeF1ty1pQy-icwRS0.roa (raw, json)
Hash identifier: 6c8v91J/Ac00s/D49fa2R8ZeEN7AJ/12XWoDIleuRuA=
Subject key identifier: FC:6F:14:42:67:47:48:71:1E:17:5B:72:D6:94:32:FA:27:30:45:2D
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 01845BC2AB935D21AFF8729735CCE71B998A
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/_G8UQmdHSHEeF1ty1pQy-icwRS0.roa
Signing time: Wed 09 Nov 2022 09:39:55 +0000
ROA not before: Wed 09 Nov 2022 09:39:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44600
IP address blocks: 185.46.148.0/22 maxlen: 22
185.128.232.0/22 maxlen: 22
185.128.235.0/24 maxlen: 24
91.202.72.0/22 maxlen: 22
94.131.254.0/24 maxlen: 24
194.42.200.0/22 maxlen: 24
185.41.248.0/22 maxlen: 22
46.182.80.0/22 maxlen: 22
46.182.84.0/22 maxlen: 22
185.156.52.0/24 maxlen: 24
94.131.245.0/24 maxlen: 24
94.131.244.0/24 maxlen: 24
94.131.248.0/24 maxlen: 24
94.131.250.0/23 maxlen: 23
94.131.250.0/24 maxlen: 24
94.131.249.0/24 maxlen: 24
94.131.252.0/24 maxlen: 24
94.131.253.0/24 maxlen: 24
2a03:a600::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:c2:ab:93:5d:21:af:f8:72:97:35:cc:e7:1b:99:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Nov 9 09:39:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc6f1442674748711e175b72d69432fa2730452d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:31:53:ad:f2:c1:78:1a:e1:4e:06:02:a6:f3:
63:a3:ec:4f:bb:06:13:3d:56:68:1c:ca:fe:b4:14:
4c:80:1e:bb:7f:0e:35:c6:3a:6c:d9:70:c1:b3:2b:
81:72:f7:fe:65:64:8f:44:09:88:da:1c:b6:ab:59:
1a:3a:9f:93:c9:b7:18:2f:db:e8:dd:2e:4f:d5:fa:
ef:6d:40:d0:d8:ef:24:c0:ef:c5:87:06:55:8a:a5:
73:29:1f:9c:de:b8:8a:73:05:5c:6f:0f:e8:b6:25:
7a:a6:7e:99:0a:1a:dd:5d:f3:8c:87:e7:63:77:63:
4b:50:f5:57:ee:91:62:68:ff:d6:ad:c4:e0:ec:1e:
2c:08:30:63:96:5a:b5:58:7f:ea:78:ca:e7:80:ba:
41:ea:5a:4d:cf:ec:ee:3d:bd:17:c3:ee:ed:84:45:
5e:82:5c:da:98:c9:05:64:54:b3:d0:b2:0c:cb:8c:
cb:bf:c4:47:3f:2d:a8:60:56:07:bb:a6:2a:b5:60:
8c:2a:4d:d9:d2:e9:70:a7:a6:61:a8:84:9c:5f:f8:
19:b8:db:1b:65:0b:a4:63:16:ee:bd:10:3c:6b:08:
0a:41:7c:66:6c:50:f3:ed:b7:b5:0a:2d:08:c0:1f:
71:d7:94:43:42:00:c2:0f:cb:e7:9b:50:cf:63:55:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6F:14:42:67:47:48:71:1E:17:5B:72:D6:94:32:FA:27:30:45:2D
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/_G8UQmdHSHEeF1ty1pQy-icwRS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.80.0/21
91.202.72.0/22
94.131.244.0/23
94.131.248.0-94.131.254.255
185.41.248.0/22
185.46.148.0/22
185.128.232.0/22
185.156.52.0/24
194.42.200.0/22
IPv6:
2a03:a600::/29
Signature Algorithm: sha256WithRSAEncryption
39:13:3c:16:f5:f0:ea:28:43:b0:f6:d7:31:e7:78:cc:25:67:
dc:02:48:67:8d:d1:b6:ff:23:09:ea:39:f0:44:09:c5:7f:68:
b5:91:71:ea:cf:00:b4:af:66:c2:0e:fb:b1:ac:17:ad:87:37:
ae:91:ff:37:d5:68:29:b2:9d:76:07:33:5c:1c:fe:90:05:12:
9a:0c:c8:8a:79:a4:29:e9:48:0d:0e:29:07:b0:ed:1a:d7:ad:
28:b5:49:18:c1:04:66:8d:29:9f:e5:03:49:76:7f:d7:b9:de:
82:51:25:03:c8:38:47:ef:f8:14:89:38:be:67:c7:d3:06:84:
a6:17:03:bc:42:e6:52:2b:4b:4a:6e:50:87:0d:ea:b5:7d:67:
e3:39:2d:bd:23:eb:e1:df:fa:00:01:ce:e4:34:71:f5:79:7a:
47:fc:8b:de:60:b8:27:96:46:46:d5:4c:66:5b:1f:73:69:c7:
11:7a:90:9b:da:0d:60:83:97:6b:41:74:e0:83:0b:86:22:16:
be:d2:83:97:28:38:ee:b6:1f:fa:fb:96:77:4e:49:7e:1a:33:
ad:ee:8c:61:71:38:99:e2:eb:5f:95:6f:44:a6:43:7d:aa:b6:
e9:2d:fc:4f:ce:58:52:52:25:a4:21:cb:1c:24:84:69:60:9e:
36:dd:97:47
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAYRbwquTXSGv+HKXNcznG5mKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw
M2MwMTkwHhcNMjIxMTA5MDkzOTU1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzZmMTQ0MjY3NDc0ODcxMWUxNzViNzJkNjk0MzJmYTI3MzA0NTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijFTrfLBeBrhTgYCpvNjo+xPuwYT
PVZoHMr+tBRMgB67fw41xjps2XDBsyuBcvf+ZWSPRAmI2hy2q1kaOp+TybcYL9vo
3S5P1frvbUDQ2O8kwO/FhwZViqVzKR+c3riKcwVcbw/otiV6pn6ZChrdXfOMh+dj
d2NLUPVX7pFiaP/WrcTg7B4sCDBjllq1WH/qeMrngLpB6lpNz+zuPb0Xw+7thEVe
glzamMkFZFSz0LIMy4zLv8RHPy2oYFYHu6YqtWCMKk3Z0ulwp6ZhqIScX/gZuNsb
ZQukYxbuvRA8awgKQXxmbFDz7be1Ci0IwB9x15RDQgDCD8vnm1DPY1VpZwIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFPxvFEJnR0hxHhdbctaUMvonMEUtMB8GA1UdIwQY
MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt
YzE4ZTNjY2M3NDJiLzEvX0c4VVFtZEhTSEVlRjF0eTFwUXktaWN3UlMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi
LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBEBAIAATA+AwQDLrZQAwQC
W8pIAwQBXoP0MAwDBANeg/gDBABeg/4DBAK5KfgDBAK5LpQDBAK5gOgDBAC5nDQD
BALCKsgwDQQCAAIwBwMFAyoDpgAwDQYJKoZIhvcNAQELBQADggEBADkTPBb18Ooo
Q7D21zHneMwlZ9wCSGeN0bb/IwnqOfBECcV/aLWRcerPALSvZsIO+7GsF62HN66R
/zfVaCmynXYHM1wc/pAFEpoMyIp5pCnpSA0OKQew7RrXrSi1SRjBBGaNKZ/lA0l2
f9e53oJRJQPIOEfv+BSJOL5nx9MGhKYXA7xC5lIrS0puUIcN6rV9Z+M5Lb0j6+Hf
+gABzuQ0cfV5ekf8i95guCeWRkbVTGZbH3NpxxF6kJvaDWCDl2tBdOCDC4YiFr7S
g5coOO62H/r7lndOSX4aM63ujGFxOJni61+Vb0SmQ32qtukt/E/OWFJSJaQhyxwk
hGlgnjbdl0c=
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:35:30 2025 by rpki-client