Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/IlP0HeJMbCduEZZzArfTFCymFo8.roa
File: IlP0HeJMbCduEZZzArfTFCymFo8.roa (raw, json)
Hash identifier: /aD8l7cTX9XCffTHBisSkH8mPHNqLY1ekC7dRntFrHs=
Subject key identifier: 22:53:F4:1D:E2:4C:6C:27:6E:11:96:73:02:B7:D3:14:2C:A6:16:8F
Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial: 0191DC26D8018D2B5C486D81A6F50CCD8380
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/IlP0HeJMbCduEZZzArfTFCymFo8.roa
Signing time: Tue 10 Sep 2024 13:36:58 +0000
ROA not before: Tue 10 Sep 2024 13:36:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39501
IP address blocks: 45.140.28.0/22 maxlen: 22
85.204.30.0/23 maxlen: 23
85.204.76.0/23 maxlen: 23
85.204.104.0/23 maxlen: 23
86.104.232.0/21 maxlen: 21
89.32.196.0/23 maxlen: 23
89.33.18.0/23 maxlen: 23
89.33.128.0/23 maxlen: 24
89.33.129.0/24 maxlen: 24
89.33.204.0/23 maxlen: 23
89.33.234.0/23 maxlen: 23
89.33.240.0/23 maxlen: 23
89.34.20.0/23 maxlen: 23
89.34.88.0/23 maxlen: 23
89.34.94.0/23 maxlen: 23
89.34.168.0/23 maxlen: 23
89.34.176.0/23 maxlen: 23
89.34.200.0/23 maxlen: 23
89.35.58.0/23 maxlen: 23
89.35.132.0/23 maxlen: 23
89.35.156.0/23 maxlen: 23
89.35.176.0/23 maxlen: 23
89.35.194.0/23 maxlen: 23
89.36.16.0/23 maxlen: 23
89.36.194.0/23 maxlen: 23
89.36.226.0/23 maxlen: 23
89.36.252.0/23 maxlen: 23
89.37.30.0/23 maxlen: 23
89.37.42.0/23 maxlen: 23
89.37.102.0/23 maxlen: 23
89.37.198.0/23 maxlen: 23
89.37.218.0/23 maxlen: 23
89.38.24.0/23 maxlen: 23
89.38.102.0/23 maxlen: 23
89.38.242.0/23 maxlen: 23
89.39.186.0/23 maxlen: 23
89.40.38.0/23 maxlen: 23
89.40.78.0/23 maxlen: 23
89.40.90.0/23 maxlen: 23
89.40.106.0/23 maxlen: 23
89.40.110.0/23 maxlen: 23
89.40.128.0/23 maxlen: 23
89.41.8.0/21 maxlen: 21
89.41.16.0/21 maxlen: 21
89.41.32.0/23 maxlen: 23
89.41.58.0/23 maxlen: 23
89.41.240.0/21 maxlen: 21
89.42.32.0/23 maxlen: 23
89.42.56.0/23 maxlen: 23
89.42.68.0/23 maxlen: 23
89.42.150.0/23 maxlen: 23
89.42.228.0/23 maxlen: 23
89.43.36.0/23 maxlen: 23
89.43.70.0/23 maxlen: 23
89.43.88.0/21 maxlen: 21
89.43.96.0/21 maxlen: 21
89.43.182.0/23 maxlen: 23
89.43.188.0/23 maxlen: 23
89.43.204.0/23 maxlen: 23
89.44.112.0/23 maxlen: 23
89.44.118.0/23 maxlen: 23
89.44.146.0/23 maxlen: 23
89.44.190.0/23 maxlen: 23
89.44.202.0/23 maxlen: 23
89.45.68.0/23 maxlen: 23
89.45.80.0/23 maxlen: 23
89.45.126.0/23 maxlen: 23
89.46.44.0/23 maxlen: 23
89.46.60.0/23 maxlen: 23
89.46.94.0/23 maxlen: 23
89.165.0.0/17 maxlen: 17
89.165.0.0/18 maxlen: 18
89.165.8.0/21 maxlen: 21
89.165.16.0/21 maxlen: 21
89.165.56.0/21 maxlen: 21
89.165.64.0/18 maxlen: 18
89.165.80.0/21 maxlen: 21
89.165.105.0/24 maxlen: 24
94.176.32.0/21 maxlen: 21
94.177.72.0/21 maxlen: 21
185.46.0.0/22 maxlen: 22
188.158.0.0/16 maxlen: 16
188.158.0.0/18 maxlen: 18
188.158.0.0/19 maxlen: 19
188.158.16.0/20 maxlen: 20
188.158.32.0/19 maxlen: 19
188.158.32.0/20 maxlen: 20
188.158.64.0/19 maxlen: 19
188.158.96.0/19 maxlen: 19
188.158.96.0/20 maxlen: 20
188.158.96.0/21 maxlen: 21
188.158.128.0/18 maxlen: 18
188.158.128.0/19 maxlen: 19
188.158.160.0/19 maxlen: 19
188.158.160.0/20 maxlen: 20
188.158.160.0/21 maxlen: 21
188.158.192.0/19 maxlen: 19
188.158.224.0/19 maxlen: 19
188.159.0.0/18 maxlen: 18
188.159.0.0/19 maxlen: 19
188.159.32.0/19 maxlen: 19
188.159.64.0/19 maxlen: 19
188.159.96.0/19 maxlen: 19
188.159.128.0/18 maxlen: 18
188.159.128.0/19 maxlen: 19
188.159.192.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dc:26:d8:01:8d:2b:5c:48:6d:81:a6:f5:0c:cd:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Validity
Not Before: Sep 10 13:36:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2253f41de24c6c276e11967302b7d3142ca6168f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:2c:b5:07:bd:eb:1c:d4:f0:66:dc:24:c7:
4c:20:e4:ce:f7:ce:ce:7f:8c:7a:90:cf:1a:24:cf:
f3:98:b3:b3:d3:b9:b9:08:1a:51:0e:b1:38:71:72:
fc:73:78:e7:2c:7c:06:a2:a3:8d:6c:ce:d7:ec:7e:
1f:ce:fb:12:6b:6f:7d:f6:69:f5:57:87:b1:82:0c:
d1:85:7c:8e:38:ec:c8:d7:da:34:19:38:da:ce:d0:
90:92:9d:25:e4:9d:37:b6:41:87:ea:13:d5:8c:b0:
45:2e:01:11:f3:20:d1:23:d9:bf:51:63:85:be:6a:
43:8e:15:95:1c:d0:d1:f3:5e:f2:ce:90:f6:83:9f:
b5:14:4c:eb:fb:33:2e:df:66:71:07:1b:4f:35:49:
27:43:e2:0b:5e:58:00:72:c7:cd:e9:61:9c:c8:8f:
91:30:d4:ff:00:91:01:8a:1d:e4:d5:5e:7f:7f:ee:
1e:b6:36:fb:ab:a1:e9:c5:cb:8b:af:41:e0:74:65:
fc:96:b3:dc:ad:53:ba:2a:f0:f2:dc:e9:81:26:26:
3f:b9:75:2a:a3:40:ec:d6:09:d9:00:5d:9e:cd:da:
44:3f:f3:9c:2e:cc:e4:de:63:43:97:79:0c:83:8f:
e4:ae:b9:19:d5:a6:06:11:0b:2f:cf:77:3c:14:e2:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:53:F4:1D:E2:4C:6C:27:6E:11:96:73:02:B7:D3:14:2C:A6:16:8F
X509v3 Authority Key Identifier:
keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/IlP0HeJMbCduEZZzArfTFCymFo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
85.204.30.0/23
85.204.76.0/23
85.204.104.0/23
86.104.232.0/21
89.32.196.0/23
89.33.18.0/23
89.33.128.0/23
89.33.204.0/23
89.33.234.0/23
89.33.240.0/23
89.34.20.0/23
89.34.88.0/23
89.34.94.0/23
89.34.168.0/23
89.34.176.0/23
89.34.200.0/23
89.35.58.0/23
89.35.132.0/23
89.35.156.0/23
89.35.176.0/23
89.35.194.0/23
89.36.16.0/23
89.36.194.0/23
89.36.226.0/23
89.36.252.0/23
89.37.30.0/23
89.37.42.0/23
89.37.102.0/23
89.37.198.0/23
89.37.218.0/23
89.38.24.0/23
89.38.102.0/23
89.38.242.0/23
89.39.186.0/23
89.40.38.0/23
89.40.78.0/23
89.40.90.0/23
89.40.106.0/23
89.40.110.0/23
89.40.128.0/23
89.41.8.0-89.41.23.255
89.41.32.0/23
89.41.58.0/23
89.41.240.0/21
89.42.32.0/23
89.42.56.0/23
89.42.68.0/23
89.42.150.0/23
89.42.228.0/23
89.43.36.0/23
89.43.70.0/23
89.43.88.0-89.43.103.255
89.43.182.0/23
89.43.188.0/23
89.43.204.0/23
89.44.112.0/23
89.44.118.0/23
89.44.146.0/23
89.44.190.0/23
89.44.202.0/23
89.45.68.0/23
89.45.80.0/23
89.45.126.0/23
89.46.44.0/23
89.46.60.0/23
89.46.94.0/23
89.165.0.0/17
94.176.32.0/21
94.177.72.0/21
185.46.0.0/22
188.158.0.0-188.159.223.255
Signature Algorithm: sha256WithRSAEncryption
3e:1e:ab:76:0b:8a:a8:5a:6a:27:c1:44:5a:50:02:8a:40:f9:
74:51:b9:8b:49:5b:f8:ec:9b:eb:0c:72:92:ec:c9:5c:d9:c0:
89:41:1c:24:1e:00:7d:a2:03:d6:b9:1a:3f:75:7e:27:39:89:
22:06:69:bc:b1:97:7a:ee:19:2f:b4:e0:cd:72:b4:9c:6d:d5:
7a:52:89:36:10:76:e8:34:8c:09:a7:d1:d1:bf:ff:be:26:79:
f3:50:81:e3:c5:6e:f1:71:7d:c8:03:0a:24:df:d7:6e:94:59:
21:d6:43:38:fc:8e:58:c6:e1:f9:7d:e4:e6:8f:19:5c:9d:7a:
f8:e4:64:c6:94:7d:9f:b1:fb:48:1a:19:ae:31:fe:e5:ea:60:
2e:95:dc:b3:ae:78:71:95:78:3f:f9:fb:bd:0b:6f:e5:ab:1f:
10:7f:a0:03:3b:82:6f:e0:b0:bd:be:72:d6:31:58:4f:dd:05:
5f:6a:4a:bd:e4:ef:63:b7:34:d6:a7:8e:60:8b:28:fd:36:8b:
20:b6:bc:4a:d2:61:47:c8:ec:ce:9c:1a:27:e6:d7:9b:cb:ba:
ff:ab:f3:e0:8f:ab:0e:29:bc:94:7e:39:5e:80:ae:8c:54:01:
a5:60:dc:b6:eb:f6:12:88:3e:3f:11:61:23:c2:98:50:0d:a9:
9e:41:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 10:35:14 2024 by rpki-client on console-fra.rpki-client.org