Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/CFlNFcti8eUeDf8iKVar8WXX99w.roa
File: CFlNFcti8eUeDf8iKVar8WXX99w.roa (raw, json)
Hash identifier: wTLQSeEgqn6JodCdOhVhrv1cGcZqE9DcD+aDDmt4nlg=
Subject key identifier: 08:59:4D:15:CB:62:F1:E5:1E:0D:FF:22:29:56:AB:F1:65:D7:F7:DC
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01859F20671A15B2C7EC2B6C54D1BE1B090B
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/CFlNFcti8eUeDf8iKVar8WXX99w.roa
Signing time: Wed 11 Jan 2023 04:39:38 +0000
ROA not before: Wed 11 Jan 2023 04:39:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 212.60.23.0/24 maxlen: 24
46.16.12.0/24 maxlen: 24
46.16.15.0/24 maxlen: 24
46.16.14.0/24 maxlen: 24
195.80.50.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
91.107.116.0/24 maxlen: 24
45.80.129.0/24 maxlen: 24
45.80.130.0/23 maxlen: 23
91.107.124.0/23 maxlen: 23
91.107.127.0/24 maxlen: 24
194.5.93.0/24 maxlen: 24
185.166.196.0/23 maxlen: 24
45.129.187.0/24 maxlen: 24
194.28.192.0/24 maxlen: 24
81.200.144.0/21 maxlen: 24
81.200.152.0/22 maxlen: 24
81.200.156.0/23 maxlen: 24
46.19.64.0/22 maxlen: 24
45.66.117.0/24 maxlen: 24
45.66.119.0/24 maxlen: 24
31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.21.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
85.92.109.0/24 maxlen: 24
45.8.98.0/24 maxlen: 24
45.8.97.0/24 maxlen: 24
37.220.80.0/22 maxlen: 22
194.31.174.0/24 maxlen: 24
194.31.173.0/24 maxlen: 24
5.44.46.0/24 maxlen: 24
5.44.47.0/24 maxlen: 24
94.198.216.0/22 maxlen: 24
94.198.220.0/23 maxlen: 24
109.236.56.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9f:20:67:1a:15:b2:c7:ec:2b:6c:54:d1:be:1b:09:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 11 04:39:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08594d15cb62f1e51e0dff222956abf165d7f7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:df:d9:6a:75:4c:a8:dc:8c:f0:30:3c:b0:
31:00:b2:f4:b0:f0:65:a5:bf:33:00:1a:09:bf:a4:
67:39:0a:2e:de:22:a0:a5:66:b2:8a:66:cf:53:da:
3e:6b:89:d3:2f:a2:78:eb:a1:a6:53:d3:59:cb:77:
b4:4e:eb:dc:0d:0d:c1:1e:74:32:f2:09:ef:5f:cf:
84:5e:e5:69:75:4f:ef:eb:dd:16:98:05:51:99:fc:
b8:67:96:fa:24:1e:31:4f:c2:58:e4:8a:b4:37:42:
b8:b8:53:08:28:34:75:e7:17:7b:63:d1:9a:e3:1e:
e8:52:b1:8f:3b:b3:c1:a4:e5:a0:8a:3e:3d:07:4a:
f3:cd:e1:cb:98:2a:aa:d8:ef:89:22:46:9b:a9:11:
88:ec:2d:79:1d:a4:a0:e9:08:1a:2c:d9:e8:f7:47:
93:13:41:76:c5:f1:ec:e7:fb:35:26:e1:22:8b:fd:
02:4e:54:99:8d:ea:2e:8c:f6:22:2d:bf:2d:e5:8a:
08:8a:6e:3d:c9:4b:eb:47:07:32:01:c1:ad:5a:52:
33:f2:2e:c0:ee:20:c0:06:52:58:3b:a0:d9:ca:c9:
c6:df:0f:ad:38:de:11:fa:00:6f:51:0e:35:92:41:
40:81:0d:26:c5:12:3b:27:e7:d0:f9:65:e0:79:60:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:59:4D:15:CB:62:F1:E5:1E:0D:FF:22:29:56:AB:F1:65:D7:F7:DC
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/CFlNFcti8eUeDf8iKVar8WXX99w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.46.0/23
31.129.0.0-31.129.21.255
31.129.23.0-31.129.29.255
31.129.31.0/24
37.220.80.0/22
45.8.97.0-45.8.98.255
45.66.117.0/24
45.66.119.0/24
45.80.129.0-45.80.131.255
45.129.187.0/24
46.16.12.0/24
46.16.14.0/23
46.19.64.0/22
81.200.144.0-81.200.157.255
85.92.109.0/24
89.191.232.0/24
91.107.116.0/24
91.107.124.0/23
91.107.127.0/24
94.198.216.0-94.198.221.255
109.236.56.0/23
141.98.233.0-141.98.234.255
185.166.196.0/23
194.5.93.0/24
194.28.192.0/24
194.31.173.0-194.31.174.255
195.80.50.0/24
212.60.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a1:a6:07:87:0a:88:7c:52:8c:71:b8:ee:1d:4e:ef:1a:ce:
cf:6d:6b:06:82:0c:ec:2d:10:4d:72:6e:41:0d:37:b4:1a:0f:
47:34:80:48:99:31:a6:6d:a7:3e:d8:cc:5e:c8:27:dd:f3:59:
0e:f8:6e:2d:54:f6:5b:0c:fd:32:ac:fb:eb:e5:5f:93:94:6f:
06:13:31:62:06:76:65:03:66:44:7d:9d:b7:4d:f5:36:cd:d8:
4c:69:a7:94:19:8f:e2:11:a9:7f:8a:eb:88:4f:8b:78:8a:55:
b4:dd:1d:23:93:57:74:10:e7:f7:48:cd:79:43:35:53:9a:ca:
74:b2:dd:84:81:0a:df:d5:53:c7:09:ab:b1:c4:cf:22:f9:9e:
49:d6:5d:bd:5c:5c:81:3c:93:82:9f:30:1a:48:36:8a:4b:f1:
1b:63:ac:0c:bd:75:1c:74:43:ff:0c:e8:b5:cd:04:55:cf:e2:
1d:18:d0:40:06:a1:34:53:f4:27:89:59:b4:35:ea:ff:20:f6:
6e:8e:b3:ab:17:78:97:ff:33:d4:e8:fe:9b:51:c1:1f:e4:02:
3b:1a:cb:b5:14:9a:a1:17:23:35:fb:7d:39:da:0a:68:17:d2:
9d:82:a5:1d:aa:23:17:74:af:d2:f3:24:e2:99:af:13:93:8a:
a9:50:59:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:54 2024 by rpki-client on console-fra.rpki-client.org