Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/bZPQvEs-O-cYU7ikaaX7LuCZ6VI.roa
File: bZPQvEs-O-cYU7ikaaX7LuCZ6VI.roa (raw, json)
Hash identifier: xN9vJ2IWfAxguXADSS6XdVatPfVXm0APQKgCd5zhjek=
Subject key identifier: 6D:93:D0:BC:4B:3E:3B:E7:18:53:B8:A4:69:A5:FB:2E:E0:99:E9:52
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 018CC727515BD6E394E45EF058E38A635FA3
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/bZPQvEs-O-cYU7ikaaX7LuCZ6VI.roa
Signing time: Mon 01 Jan 2024 22:31:31 +0000
ROA not before: Mon 01 Jan 2024 22:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62164
IP address blocks: 185.199.226.0/24 maxlen: 24
185.199.224.0/23 maxlen: 23
45.92.29.0/24 maxlen: 24
45.11.88.0/23 maxlen: 24
45.11.88.0/22 maxlen: 22
45.11.90.0/23 maxlen: 23
212.162.148.0/22 maxlen: 22
185.235.14.0/23 maxlen: 23
193.39.185.0/24 maxlen: 24
193.39.186.0/24 maxlen: 24
193.39.184.0/24 maxlen: 24
193.39.187.0/24 maxlen: 24
185.191.231.0/24 maxlen: 24
185.191.228.0/23 maxlen: 23
185.218.235.0/24 maxlen: 24
5.181.164.0/23 maxlen: 23
5.181.164.0/22 maxlen: 22
5.181.167.0/24 maxlen: 24
185.149.232.0/22 maxlen: 22
185.149.232.0/24 maxlen: 24
185.149.233.0/24 maxlen: 24
185.215.151.0/24 maxlen: 24
185.215.148.0/24 maxlen: 24
185.149.234.0/23 maxlen: 23
45.81.150.0/24 maxlen: 24
85.209.84.0/23 maxlen: 23
85.209.87.0/24 maxlen: 24
185.202.172.0/23 maxlen: 23
185.202.175.0/24 maxlen: 24
185.202.174.0/24 maxlen: 24
2a0b:aac0::/29 maxlen: 29
2a0a:1f42::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:51:5b:d6:e3:94:e4:5e:f0:58:e3:8a:63:5f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 1 22:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d93d0bc4b3e3be71853b8a469a5fb2ee099e952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8c:5f:b6:c5:3a:fa:56:86:1d:e2:e1:3c:35:
aa:72:09:d2:58:15:1e:f9:2d:82:e2:75:3c:10:4e:
bc:6d:15:17:fe:3b:f5:7e:c6:15:e3:be:87:ec:a1:
80:ca:e3:67:66:2f:58:72:35:be:e9:c6:82:a9:ef:
16:01:88:72:57:f3:b7:1d:28:9f:10:50:92:5b:bc:
7f:31:43:f0:5b:13:39:75:27:c4:ea:ff:3b:ec:b2:
d3:ac:ca:84:3d:60:66:c2:a7:2c:e8:bf:38:84:9e:
cd:ad:ac:9a:e4:80:f2:fc:45:6f:b2:73:69:62:49:
51:3f:8b:9d:2c:b9:b3:df:c6:0c:fa:a2:b9:cd:22:
70:39:d0:ff:6d:16:91:83:76:ee:c1:3d:ff:a6:9e:
41:8d:d8:06:54:c5:2b:96:5f:11:92:1c:73:ce:68:
f7:3f:a8:a4:5d:bf:8e:64:9d:0c:fd:a5:cb:5f:a6:
69:60:95:48:fe:77:39:c5:8d:91:45:d9:af:42:e4:
b0:b3:bd:1d:db:35:f7:e4:9b:1b:41:bd:b6:80:09:
04:18:4d:54:32:e1:cd:24:57:cc:37:5b:96:a5:b0:
5f:bb:78:df:86:bc:5d:9b:92:63:47:1d:40:78:42:
66:2b:f0:78:6c:20:f3:64:6c:36:cf:52:d2:ae:8a:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:93:D0:BC:4B:3E:3B:E7:18:53:B8:A4:69:A5:FB:2E:E0:99:E9:52
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/bZPQvEs-O-cYU7ikaaX7LuCZ6VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.164.0/22
45.11.88.0/22
45.81.150.0/24
45.92.29.0/24
85.209.84.0/23
85.209.87.0/24
185.149.232.0/22
185.191.228.0/23
185.191.231.0/24
185.199.224.0-185.199.226.255
185.202.172.0/22
185.215.148.0/24
185.215.151.0/24
185.218.235.0/24
185.235.14.0/23
193.39.184.0/22
212.162.148.0/22
IPv6:
2a0a:1f42::/32
2a0b:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:88:da:53:42:ee:99:36:63:fe:da:00:9c:64:55:fb:97:6e:
17:f3:5b:e1:cd:66:87:a0:af:e5:63:f8:db:49:fe:4b:a4:3d:
87:64:08:ab:c8:8e:61:c3:28:11:02:b1:62:f9:e0:f2:69:c9:
2c:7d:a0:a7:e2:78:2f:7b:d1:f3:e5:33:24:f3:30:e0:61:f9:
d2:2e:6c:a4:c6:cc:50:4f:40:0d:64:98:67:e2:6f:7f:88:4f:
c7:f1:1d:21:3b:01:da:b1:f7:3b:db:9e:34:a5:e6:ef:e6:8b:
15:bb:e0:21:1e:ad:af:40:19:91:15:7a:85:0d:9f:6d:bc:0e:
7b:07:7e:d9:99:dd:42:03:c0:34:36:ff:bc:e5:45:e2:ac:40:
39:1f:05:06:0c:4e:b7:f4:bf:7a:54:c1:c2:ec:00:ff:16:bb:
72:42:b0:00:d7:bd:2d:11:ec:cf:67:a8:28:93:6e:0c:95:61:
88:f2:89:0a:93:2d:06:bb:0e:2b:50:74:d4:d6:02:96:93:51:
b4:19:4f:15:e8:0a:2a:a3:9d:c2:a3:a4:bc:8d:20:e7:7c:92:
79:db:3e:67:fa:04:8f:df:07:ed:2a:1d:ff:4b:30:d2:b9:08:
2b:6a:1c:ab:2f:27:71:1a:40:42:c8:e5:34:26:77:46:7d:26:
67:45:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org