Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/AofYYZbXbSqRdjJcZDO5pzNmEQ8.roa
File: AofYYZbXbSqRdjJcZDO5pzNmEQ8.roa (raw, json)
Hash identifier: ZVWcblfmj9rFEevuPtrZ6a0lz7mqQPGcwJRhIRNxrDE=
Subject key identifier: 02:87:D8:61:96:D7:6D:2A:91:76:32:5C:64:33:B9:A7:33:66:11:0F
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018EC18C2C310C313BE83E5E8AE7BE522696
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/AofYYZbXbSqRdjJcZDO5pzNmEQ8.roa
Signing time: Tue 09 Apr 2024 06:29:32 +0000
ROA not before: Tue 09 Apr 2024 06:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 5.44.42.0/24 maxlen: 24
31.129.22.0/24 maxlen: 24
37.220.86.0/24 maxlen: 24
45.95.232.0/24 maxlen: 24
45.95.233.0/24 maxlen: 24
45.129.184.0/24 maxlen: 24
45.129.187.0/24 maxlen: 24
77.83.116.0/24 maxlen: 24
85.92.109.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
91.107.116.0/24 maxlen: 24
92.118.112.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
185.166.199.0/24 maxlen: 24
185.247.184.0/24 maxlen: 24
194.28.192.0/24 maxlen: 24
195.80.48.0/24 maxlen: 24
195.80.49.0/24 maxlen: 24
212.60.23.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:8c:2c:31:0c:31:3b:e8:3e:5e:8a:e7:be:52:26:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Apr 9 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0287d86196d76d2a9176325c6433b9a73366110f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:8d:8f:c1:62:aa:00:10:45:e1:29:ca:13:
55:53:d9:f0:53:2a:59:54:03:4a:2e:2c:d5:6c:77:
0f:e7:fa:c5:b0:3a:e9:b4:09:37:64:36:d6:3c:22:
0d:75:2d:1b:18:3d:4b:35:bd:be:97:1f:6b:3e:ef:
8d:57:37:b9:0e:83:22:9b:9d:96:51:89:09:91:ea:
8f:a6:6c:c3:37:87:78:b9:c0:37:fa:a1:9c:6d:af:
af:03:45:b5:d4:93:bc:1f:b8:6c:72:47:66:8b:17:
24:96:4f:b9:32:c5:8c:9a:4c:e1:bf:74:42:e9:f1:
59:61:23:ac:db:32:a1:b7:fa:c7:32:f0:33:98:97:
ad:b3:64:11:e7:4a:ff:01:99:7c:0a:f5:cd:48:cb:
51:44:4b:c8:a4:12:a9:c2:8c:97:17:5b:0f:6f:d2:
a8:8f:fd:f7:59:c2:22:5a:d1:b8:b5:b3:e3:3e:ce:
98:bc:8a:b1:ce:97:19:29:66:6c:02:ab:dd:35:09:
f3:b1:b3:b7:7c:67:e3:db:1a:d1:3b:f9:da:61:0c:
0e:dc:dc:e2:4f:a4:6f:16:ef:e0:97:06:b0:53:07:
32:dc:a6:9f:6a:62:68:b6:a4:d6:f8:60:89:0f:0f:
9f:60:3a:18:f7:b9:df:7f:55:04:b3:2d:8c:a9:62:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:87:D8:61:96:D7:6D:2A:91:76:32:5C:64:33:B9:A7:33:66:11:0F
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/AofYYZbXbSqRdjJcZDO5pzNmEQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.42.0/24
31.129.22.0/24
37.220.86.0/24
45.95.232.0/23
45.129.184.0/24
45.129.187.0/24
77.83.116.0/24
85.92.109.0/24
89.191.232.0/24
91.107.116.0/24
92.118.112.0/24
141.98.233.0-141.98.234.255
185.166.199.0/24
185.247.184.0/24
194.28.192.0/24
195.80.48.0/23
212.60.23.0/24
Signature Algorithm: sha256WithRSAEncryption
37:fb:37:18:09:14:5c:96:44:fa:b5:81:97:18:94:e4:ef:83:
98:7c:45:2a:c0:a8:2b:33:8c:34:4e:c5:61:91:b3:62:18:b6:
c6:2d:84:3d:21:66:3d:ae:0b:9f:aa:1a:19:5a:59:7b:b5:d5:
9d:47:c6:b6:3e:dc:fe:dc:e0:b9:38:27:71:ff:93:6e:09:47:
a6:96:06:fc:48:e2:55:ab:ff:21:fb:3c:d0:cf:f4:79:78:3c:
b9:ef:4d:ec:92:40:3e:c9:9b:42:0b:ac:0b:b8:56:a3:b9:10:
de:bb:05:99:55:cb:26:36:d8:e7:df:a8:bf:da:f9:53:fd:b1:
fa:fc:5a:be:21:79:14:3f:a5:35:ac:3c:e5:c0:4d:42:92:7f:
74:7a:c6:d8:10:ed:fe:17:1c:67:51:e5:32:3e:ee:c7:43:fa:
a2:47:fe:e1:59:17:3c:06:49:62:f2:64:48:3f:e0:5b:af:8c:
3e:04:8d:22:c6:57:02:e3:bf:73:44:c0:fd:9f:03:ce:0d:90:
97:27:5c:07:9f:45:49:54:2c:e9:77:8b:6c:49:40:fb:7a:80:
55:be:13:a5:e2:76:e3:11:50:9a:85:d1:96:a4:b5:b3:0e:f3:
54:e4:48:b5:c3:19:1b:e5:ca:ca:2e:32:90:1f:d1:9d:6f:2d:
60:92:59:3c
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAY7BjCwxDDE76D5eiue+UiaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjQwNDA5MDYyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjg3ZDg2MTk2ZDc2ZDJhOTE3NjMyNWM2NDMzYjlhNzMzNjYxMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW6Nj8FiqgAQReEpyhNVU9nwUypZ
VANKLizVbHcP5/rFsDrptAk3ZDbWPCINdS0bGD1LNb2+lx9rPu+NVze5DoMim52W
UYkJkeqPpmzDN4d4ucA3+qGcba+vA0W11JO8H7hsckdmixcklk+5MsWMmkzhv3RC
6fFZYSOs2zKht/rHMvAzmJets2QR50r/AZl8CvXNSMtRREvIpBKpwoyXF1sPb9Ko
j/33WcIiWtG4tbPjPs6YvIqxzpcZKWZsAqvdNQnzsbO3fGfj2xrRO/naYQwO3Nzi
T6RvFu/glwawUwcy3KafamJotqTW+GCJDw+fYDoY97nff1UEsy2MqWJ5PwIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFAKH2GGW120qkXYyXGQzuaczZhEPMB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvQW9mWVlaYlhiU3FSZGpKY1pETzVwek5tRVE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAAUsKgME
AB+BFgMEACXcVgMEAS1f6AMEAC2BuAMEAC2BuwMEAE1TdAMEAFVcbQMEAFm/6AME
AFtrdAMEAFx2cDAMAwQAjWLpAwQAjWLqAwQAuabHAwQAufe4AwQAwhzAAwQBw1Aw
AwQA1DwXMA0GCSqGSIb3DQEBCwUAA4IBAQA3+zcYCRRclkT6tYGXGJTk74OYfEUq
wKgrM4w0TsVhkbNiGLbGLYQ9IWY9rgufqhoZWll7tdWdR8a2Ptz+3OC5OCdx/5Nu
CUemlgb8SOJVq/8h+zzQz/R5eDy5703skkA+yZtCC6wLuFajuRDeuwWZVcsmNtjn
36i/2vlT/bH6/Fq+IXkUP6U1rDzlwE1Ckn90esbYEO3+FxxnUeUyPu7HQ/qiR/7h
WRc8Bkli8mRIP+Bbr4w+BI0ixlcC479zRMD9nwPODZCXJ1wHn0VJVCzpd4tsSUD7
eoBVvhOl4nbjEVCahdGWpLWzDvNU5Ei1wxkb5crKLjKQH9Gdby1gklk8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org