Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/t44-qpnEtVUC5xFylQKC57jvBuY.roa
File: t44-qpnEtVUC5xFylQKC57jvBuY.roa (raw, json)
Hash identifier: ip9kTM0yjMn8T5vQ0wkizEpZpW9zxC2zhkElJcBa6AM=
Subject key identifier: B7:8E:3E:AA:99:C4:B5:55:02:E7:11:72:95:02:82:E7:B8:EF:06:E6
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 11F3E8F8
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/t44-qpnEtVUC5xFylQKC57jvBuY.roa
Signing time: Tue 26 Apr 2022 14:28:31 +0000
ROA not before: Tue 26 Apr 2022 14:28:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13287
IP address blocks: 213.162.192.0/24 maxlen: 24
213.162.193.0/24 maxlen: 24
213.162.195.0/24 maxlen: 24
213.162.197.0/24 maxlen: 24
213.162.196.0/22 maxlen: 24
213.162.206.0/24 maxlen: 24
213.162.205.0/24 maxlen: 24
213.162.200.0/22 maxlen: 22
213.162.212.0/24 maxlen: 24
213.162.211.0/24 maxlen: 24
213.162.210.0/24 maxlen: 24
213.162.208.0/23 maxlen: 23
213.162.207.0/24 maxlen: 24
213.162.219.0/24 maxlen: 24
213.162.216.0/22 maxlen: 22
213.162.218.0/24 maxlen: 24
213.162.217.0/24 maxlen: 24
213.162.215.0/24 maxlen: 24
213.162.214.0/24 maxlen: 24
213.162.220.0/24 maxlen: 24
213.162.221.0/24 maxlen: 24
185.33.64.0/24 maxlen: 24
185.33.65.0/24 maxlen: 24
185.33.67.0/24 maxlen: 24
185.33.66.0/24 maxlen: 24
109.234.84.0/24 maxlen: 24
109.234.85.0/24 maxlen: 24
109.234.81.0/24 maxlen: 24
109.234.80.0/24 maxlen: 24
109.234.82.0/24 maxlen: 24
109.234.82.0/23 maxlen: 23
109.234.87.0/24 maxlen: 24
185.19.68.0/22 maxlen: 22
185.111.185.0/24 maxlen: 24
185.111.184.0/24 maxlen: 24
185.111.184.0/22 maxlen: 22
2a02:23a0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301197560 (0x11f3e8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Apr 26 14:28:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b78e3eaa99c4b55502e71172950282e7b8ef06e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:83:2b:1c:a8:50:5d:ab:12:16:94:11:4a:
4f:d2:ca:93:95:0f:19:06:f7:16:bd:0f:07:66:5b:
1e:a6:f9:9b:c7:eb:ad:c6:bd:ca:cb:0f:e4:5c:0b:
c7:a6:fa:3b:72:4e:01:7d:8e:e9:9e:07:cd:8a:e0:
32:fa:ec:a9:eb:ff:0e:30:ee:a2:7c:0e:24:e1:40:
69:59:68:50:71:9d:5b:f1:5f:02:71:35:23:28:6e:
fa:41:ad:53:19:c6:b5:35:47:dd:93:4d:98:ef:dc:
ef:7b:b7:6d:dd:11:74:7f:43:f2:8b:15:78:d2:4c:
da:ca:be:01:32:46:0c:11:5f:63:da:0e:5f:85:d1:
96:21:c5:2a:d1:0b:bb:e9:6b:41:ce:fc:f7:6c:46:
2f:1d:bc:37:2e:a1:b4:c2:88:71:a4:59:63:85:fd:
6f:78:e7:ff:3e:7f:41:3b:bb:5e:1a:5a:5d:08:39:
61:40:a4:a5:12:ab:22:fd:37:d1:37:32:9e:2c:42:
95:f3:7d:8d:1d:d5:bb:dc:8d:76:fd:65:da:53:89:
aa:0e:c1:0a:34:6c:f5:38:cb:ed:66:69:c4:3f:21:
14:7f:ce:d1:0e:bb:e2:5b:e8:a4:9a:d5:32:3b:63:
65:19:7a:bb:a7:7c:25:ee:14:4c:08:ef:ce:6f:d2:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8E:3E:AA:99:C4:B5:55:02:E7:11:72:95:02:82:E7:B8:EF:06:E6
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/t44-qpnEtVUC5xFylQKC57jvBuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.80.0-109.234.85.255
109.234.87.0/24
185.19.68.0/22
185.33.64.0/22
185.111.184.0/22
213.162.192.0/23
213.162.195.0-213.162.203.255
213.162.205.0-213.162.212.255
213.162.214.0-213.162.221.255
IPv6:
2a02:23a0::/32
Signature Algorithm: sha256WithRSAEncryption
7e:c1:44:a7:51:d9:72:2d:cd:d1:73:dd:e7:fa:6a:ed:65:9e:
0b:b7:ac:04:8e:d3:70:8f:b7:b1:ad:26:9d:00:5f:5b:30:c3:
74:3f:a5:aa:18:9c:99:0e:f2:61:e2:9a:65:ff:cc:ef:84:71:
0f:12:59:47:ed:07:c0:d2:bd:c3:da:11:1e:b5:0d:78:3d:38:
a6:10:df:34:c6:01:37:ef:c1:d7:66:56:90:63:f4:cf:27:18:
71:5c:e5:67:20:7d:31:8d:a8:24:81:21:18:89:3f:4c:9d:01:
a9:f4:d6:5e:8c:f1:db:d5:c5:f0:b3:5d:91:1a:2f:0b:70:22:
e6:bc:68:69:e7:5a:a7:cb:66:91:18:f1:a5:5e:a1:6a:23:93:
e9:33:e0:04:32:6e:9b:21:50:b8:d4:5a:a7:f0:75:d9:f3:34:
8b:40:f7:e7:86:1c:bf:d5:aa:f8:e6:69:70:9d:7a:53:65:20:
26:b9:f9:3e:6f:c0:bc:66:58:04:31:8a:54:db:71:76:18:50:
5b:92:28:a9:65:e3:8b:30:5d:0e:7e:aa:0c:25:77:e8:83:f1:
4f:22:4d:9d:ca:5a:0d:f6:77:a4:54:cb:1f:27:9a:43:af:30:
fd:62:b5:ca:ee:2b:ea:e5:08:1e:9b:48:f9:e5:a7:fb:7a:f4:
b3:1f:d6:74
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIEEfPo+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjU0ZmU4MzFiNmE3MTlmNDJlNmM4NDg2ZmQwM2I1NTBiZTc2MWZiMB4XDTIyMDQy
NjE0MjgzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjc4ZTNlYWE5OWM0
YjU1NTAyZTcxMTcyOTUwMjgyZTdiOGVmMDZlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKqTgyscqFBdqxIWlBFKT9LKk5UPGQb3Fr0PB2ZbHqb5m8fr
rca9yssP5FwLx6b6O3JOAX2O6Z4HzYrgMvrsqev/DjDuonwOJOFAaVloUHGdW/Ff
AnE1Iyhu+kGtUxnGtTVH3ZNNmO/c73u3bd0RdH9D8osVeNJM2sq+ATJGDBFfY9oO
X4XRliHFKtELu+lrQc7892xGLx28Ny6htMKIcaRZY4X9b3jn/z5/QTu7XhpaXQg5
YUCkpRKrIv030TcynixClfN9jR3Vu9yNdv1l2lOJqg7BCjRs9TjL7WZpxD8hFH/O
0Q674lvopJrVMjtjZRl6u6d8Je4UTAjvzm/Sq1sCAwEAAaOCAmgwggJkMB0GA1Ud
DgQWBBS3jj6qmcS1VQLnEXKVAoLnuO8G5jAfBgNVHSMEGDAWgBSrVP6DG2pxn0Lm
yEhv0DtVC+dh+zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ExVC1neHRxY1o5QzVzaEliOUE3VlF2bllmcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGEvNWVhYWE3LTMxMDctNDI2OC1hYWQ2LTZmZDk3ODkyMDViYS8x
L3Q0NC1xcG5FdFZVQzV4RnlsUUtDNTdqdkJ1WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEv
NWVhYWE3LTMxMDctNDI2OC1hYWQ2LTZmZDk3ODkyMDViYS8xL3ExVC1neHRxY1o5
QzVzaEliOUE3VlF2bllmcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB+
BggrBgEFBQcBBwEB/wRvMG0wXAQCAAEwVjAMAwQEbepQAwQBbepUAwQAbepXAwQC
uRNEAwQCuSFAAwQCuW+4AwQB1aLAMAwDBADVosMDBALVosgwDAMEANWizQMEANWi
1DAMAwQB1aLWAwQB1aLcMA0EAgACMAcDBQAqAiOgMA0GCSqGSIb3DQEBCwUAA4IB
AQB+wUSnUdlyLc3Rc93n+mrtZZ4Lt6wEjtNwj7exrSadAF9bMMN0P6WqGJyZDvJh
4ppl/8zvhHEPEllH7QfA0r3D2hEetQ14PTimEN80xgE378HXZlaQY/TPJxhxXOVn
IH0xjagkgSEYiT9MnQGp9NZejPHb1cXws12RGi8LcCLmvGhp51qny2aRGPGlXqFq
I5PpM+AEMm6bIVC41Fqn8HXZ8zSLQPfnhhy/1ar45mlwnXpTZSAmufk+b8C8ZlgE
MYpU23F2GFBbkiipZeOLMF0OfqoMJXfog/FPIk2dyloN9nekVMsfJ5pDrzD9YrXK
7ivq5Qgem0j55af7evSzH9Z0
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:15:52 2025 by rpki-client