Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/MqsWDSYA4Ud4lEndBs7sEg_N3is.roa
File: MqsWDSYA4Ud4lEndBs7sEg_N3is.roa (raw, json)
Hash identifier: vK/JrxfeVHBChhMCgjDit/VDKLLyTlMliAxjbN5RqfQ=
Subject key identifier: 32:AB:16:0D:26:00:E1:47:78:94:49:DD:06:CE:EC:12:0F:CD:DE:2B
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 0B042427
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/MqsWDSYA4Ud4lEndBs7sEg_N3is.roa
Signing time: Wed 04 May 2022 08:26:10 +0000
ROA not before: Wed 04 May 2022 08:26:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201453
IP address blocks: 185.183.17.0/24 maxlen: 24
185.183.16.0/24 maxlen: 24
185.183.16.0/22 maxlen: 22
185.183.19.0/24 maxlen: 24
185.183.18.0/24 maxlen: 24
185.219.216.0/22 maxlen: 22
185.178.83.0/24 maxlen: 24
185.178.82.0/24 maxlen: 24
185.178.80.0/22 maxlen: 22
185.178.81.0/24 maxlen: 24
185.178.80.0/24 maxlen: 24
185.225.148.0/24 maxlen: 24
185.163.166.0/24 maxlen: 24
185.163.165.0/24 maxlen: 24
185.163.164.0/24 maxlen: 24
185.163.164.0/22 maxlen: 22
185.163.167.0/24 maxlen: 24
185.224.95.0/24 maxlen: 24
185.224.94.0/24 maxlen: 24
185.194.24.0/22 maxlen: 22
185.194.24.0/24 maxlen: 24
185.74.192.0/24 maxlen: 24
185.74.192.0/22 maxlen: 22
185.192.183.0/24 maxlen: 24
185.192.182.0/24 maxlen: 24
185.192.180.0/22 maxlen: 22
185.192.181.0/24 maxlen: 24
185.192.180.0/24 maxlen: 24
185.194.25.0/24 maxlen: 24
185.194.27.0/24 maxlen: 24
185.194.26.0/24 maxlen: 24
2a05:4ac0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184820775 (0xb042427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: May 4 08:26:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32ab160d2600e147789449dd06ceec120fcdde2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:0e:42:68:0a:2c:fc:9b:e4:ac:c6:7a:03:
70:c9:6c:11:dc:48:26:43:7d:4a:95:fb:74:2c:2e:
8a:96:54:d9:11:3c:02:c2:af:c2:22:03:89:20:d0:
b5:1a:50:f8:51:1d:91:12:7f:ac:c6:06:1c:38:2f:
81:11:46:de:b6:86:d9:a2:cd:3d:89:27:c3:48:68:
c7:79:96:21:fe:56:4d:9f:4a:46:77:39:83:c9:33:
c6:85:5d:2b:b7:67:9e:d6:cf:de:68:46:32:bc:a8:
61:7b:b7:af:1e:06:33:97:8a:36:fa:d7:0b:04:79:
56:99:74:bd:0a:29:1c:59:31:fa:8a:cf:6f:65:ab:
80:69:8f:73:85:88:2c:c8:fe:4e:34:0d:63:b0:1f:
a1:af:37:af:a3:c2:86:bb:7a:2e:ac:37:5c:9e:9f:
cb:70:c9:ca:7c:16:0a:c4:dd:4c:cd:df:ac:65:f5:
7a:62:19:0f:a7:f0:3b:d1:6f:a3:8f:e2:a3:d9:b5:
1b:23:01:e0:7a:35:7e:31:eb:da:f3:b7:4e:7d:71:
b9:48:ee:52:9d:a8:74:bd:b1:78:a4:dc:68:88:21:
c8:56:d4:b9:2c:0a:00:a1:cd:a5:01:0a:9c:c6:9f:
b3:45:69:8e:74:1e:3c:76:8a:c9:df:b9:31:a1:7c:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AB:16:0D:26:00:E1:47:78:94:49:DD:06:CE:EC:12:0F:CD:DE:2B
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/MqsWDSYA4Ud4lEndBs7sEg_N3is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.192.0/22
185.163.164.0/22
185.178.80.0/22
185.183.16.0/22
185.192.180.0/22
185.194.24.0/22
185.219.216.0/22
185.224.94.0/23
185.225.148.0/24
IPv6:
2a05:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:7c:9a:47:d9:5e:fe:8c:cc:93:5e:c7:b8:3d:8e:bb:66:74:
dc:1c:05:82:3c:47:38:b5:83:da:a8:2f:41:62:62:72:50:f7:
10:c2:0b:00:ad:c8:30:81:05:dd:9a:fe:be:5d:c1:a7:dd:4f:
b9:56:9b:1c:d9:d1:2c:79:d1:46:43:ff:62:7d:86:3f:52:e6:
e0:a6:1b:ee:43:e9:9d:fb:db:63:40:7e:a1:2f:fe:b1:62:53:
a9:7c:23:7d:b6:05:9c:2e:3a:4a:2d:cb:2a:9a:6f:2f:58:5f:
ae:29:9e:0f:bd:cb:a7:b3:6f:7d:41:71:ef:50:7e:34:00:b3:
09:17:2c:b5:fa:32:4c:4d:54:c7:8d:48:ad:de:31:f2:cc:71:
ae:c6:90:c1:7c:92:96:72:96:35:6a:e5:b5:4c:bf:41:4f:9d:
ae:ec:10:91:44:59:48:df:35:0d:89:3b:40:25:06:be:67:49:
df:f5:b0:a9:d5:72:f1:d3:be:1c:73:7d:3d:51:87:a4:e0:b4:
4a:bd:65:74:d6:0e:c5:1b:e1:ae:e8:36:de:85:4c:4f:98:fb:
ca:eb:97:fb:cd:08:54:38:c8:4b:6e:b7:a9:3f:4a:96:fc:11:
40:20:2b:49:cd:22:79:60:b4:df:3a:96:fd:8b:e5:94:02:91:
bb:ea:f5:71
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIECwQkJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YmEzMTg2NTk3NzQyYTkyNmNkMjY1MDRlMWVkNzZmODU0M2ZkYjI2MB4XDTIyMDUw
NDA4MjYxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzJhYjE2MGQyNjAw
ZTE0Nzc4OTQ0OWRkMDZjZWVjMTIwZmNkZGUyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKGvDkJoCiz8m+SsxnoDcMlsEdxIJkN9SpX7dCwuipZU2RE8
AsKvwiIDiSDQtRpQ+FEdkRJ/rMYGHDgvgRFG3raG2aLNPYknw0hox3mWIf5WTZ9K
Rnc5g8kzxoVdK7dnntbP3mhGMryoYXu3rx4GM5eKNvrXCwR5Vpl0vQopHFkx+orP
b2WrgGmPc4WILMj+TjQNY7Afoa83r6PChrt6Lqw3XJ6fy3DJynwWCsTdTM3frGX1
emIZD6fwO9Fvo4/io9m1GyMB4Ho1fjHr2vO3Tn1xuUjuUp2odL2xeKTcaIghyFbU
uSwKAKHNpQEKnMafs0VpjnQePHaKyd+5MaF8Ae0CAwEAAaOCAkgwggJEMB0GA1Ud
DgQWBBQyqxYNJgDhR3iUSd0GzuwSD83eKzAfBgNVHSMEGDAWgBRroxhll3QqkmzS
ZQTh7Xb4VD/bJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2E2TVlaWmQwS3BKczBtVUU0ZTEyLUZRXzJ5WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTYvOWQ1OTEwLTlmNWUtNDQ2Yy04ZDNjLWJjMDA3ZjJkYWMyNC8x
L01xc1dEU1lBNFVkNGxFbmRCczdzRWdfTjNpcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYv
OWQ1OTEwLTlmNWUtNDQ2Yy04ZDNjLWJjMDA3ZjJkYWMyNC8xL2E2TVlaWmQwS3BK
czBtVUU0ZTEyLUZRXzJ5WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBe
BggrBgEFBQcBBwEB/wRPME0wPAQCAAEwNgMEArlKwAMEArmjpAMEArmyUAMEArm3
EAMEArnAtAMEArnCGAMEArnb2AMEAbngXgMEALnhlDANBAIAAjAHAwUAKgVKwDAN
BgkqhkiG9w0BAQsFAAOCAQEAsnyaR9le/ozMk17HuD2Ou2Z03BwFgjxHOLWD2qgv
QWJiclD3EMILAK3IMIEF3Zr+vl3Bp91PuVabHNnRLHnRRkP/Yn2GP1Lm4KYb7kPp
nfvbY0B+oS/+sWJTqXwjfbYFnC46Si3LKppvL1hfrimeD73Lp7NvfUFx71B+NACz
CRcstfoyTE1Ux41Ird4x8sxxrsaQwXySlnKWNWrltUy/QU+druwQkURZSN81DYk7
QCUGvmdJ3/WwqdVy8dO+HHN9PVGHpOC0Sr1ldNYOxRvhrug23oVMT5j7yuuX+80I
VDjIS263qT9KlvwRQCArSc0ieWC03zqW/YvllAKRu+r1cQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:50 2024 by rpki-client on console-ams.rpki-client.org