Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/00ZqRRaHyy_GZGvJqHGHCjR2qmY.roa
File: 00ZqRRaHyy_GZGvJqHGHCjR2qmY.roa (raw, json)
Hash identifier: YGweCMdRQpy6T+yo1LcrdV6+cIdMlRbVGz8v51CAcE4=
Subject key identifier: D3:46:6A:45:16:87:CB:2F:C6:64:6B:C9:A8:71:87:0A:34:76:AA:66
Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial: 01856FF97EE2CEAC57EE1545CE09CFAB353A
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/00ZqRRaHyy_GZGvJqHGHCjR2qmY.roa
Signing time: Mon 02 Jan 2023 00:54:59 +0000
ROA not before: Mon 02 Jan 2023 00:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31148
IP address blocks: 94.76.105.77/32 maxlen: 32
94.76.105.78/32 maxlen: 32
94.76.105.73/32 maxlen: 32
94.76.105.74/32 maxlen: 32
195.160.220.0/22 maxlen: 24
193.24.25.14/32 maxlen: 32
94.76.105.109/32 maxlen: 32
94.76.105.110/32 maxlen: 32
94.76.105.105/32 maxlen: 32
94.76.105.106/32 maxlen: 32
94.76.104.121/32 maxlen: 32
94.76.104.122/32 maxlen: 32
94.76.106.117/32 maxlen: 32
94.76.104.117/32 maxlen: 32
94.76.104.118/32 maxlen: 32
94.76.106.118/32 maxlen: 32
94.76.106.113/32 maxlen: 32
94.76.106.114/32 maxlen: 32
94.76.105.13/32 maxlen: 32
109.251.255.186/32 maxlen: 32
94.76.105.14/32 maxlen: 32
109.251.255.185/32 maxlen: 32
193.24.25.93/32 maxlen: 32
94.76.105.5/32 maxlen: 32
109.251.255.178/32 maxlen: 32
109.251.255.177/32 maxlen: 32
94.76.105.6/32 maxlen: 32
109.251.255.182/32 maxlen: 32
193.24.25.85/32 maxlen: 32
193.24.25.86/32 maxlen: 32
109.251.255.181/32 maxlen: 32
193.24.25.73/32 maxlen: 32
94.76.105.25/32 maxlen: 32
109.251.255.174/32 maxlen: 32
109.251.255.173/32 maxlen: 32
94.76.105.26/32 maxlen: 32
109.251.255.154/32 maxlen: 32
109.251.255.153/32 maxlen: 32
94.76.106.41/32 maxlen: 32
94.76.106.42/32 maxlen: 32
185.124.168.0/22 maxlen: 24
109.251.252.146/32 maxlen: 32
94.76.104.37/32 maxlen: 32
94.76.104.38/32 maxlen: 32
109.251.252.145/32 maxlen: 32
46.219.0.0/16 maxlen: 24
109.251.252.150/32 maxlen: 32
94.76.104.33/32 maxlen: 32
94.76.104.34/32 maxlen: 32
109.251.252.149/32 maxlen: 32
109.251.255.138/32 maxlen: 32
109.251.255.137/32 maxlen: 32
94.76.104.56/32 maxlen: 32
109.251.252.142/32 maxlen: 32
94.76.104.57/32 maxlen: 32
109.251.252.141/32 maxlen: 32
78.159.32.0/19 maxlen: 24
94.76.104.52/32 maxlen: 32
94.76.104.53/32 maxlen: 32
193.24.25.0/24 maxlen: 24
109.251.255.134/32 maxlen: 32
109.251.255.133/32 maxlen: 32
89.252.0.0/18 maxlen: 24
109.251.255.126/32 maxlen: 32
109.251.255.125/32 maxlen: 32
212.22.192.0/19 maxlen: 24
94.76.104.197/32 maxlen: 32
109.251.255.114/32 maxlen: 32
94.76.104.198/32 maxlen: 32
109.251.255.113/32 maxlen: 32
109.251.255.118/32 maxlen: 32
94.76.104.193/32 maxlen: 32
109.251.255.117/32 maxlen: 32
94.76.104.194/32 maxlen: 32
94.76.105.217/32 maxlen: 32
94.76.105.218/32 maxlen: 32
89.252.40.101/32 maxlen: 32
89.252.35.101/32 maxlen: 32
193.24.25.129/32 maxlen: 32
89.252.35.102/32 maxlen: 32
89.252.40.102/32 maxlen: 32
94.76.104.209/32 maxlen: 32
89.252.40.97/32 maxlen: 32
89.252.40.98/32 maxlen: 32
94.76.104.210/32 maxlen: 32
109.251.255.82/32 maxlen: 32
109.251.255.81/32 maxlen: 32
109.251.0.0/16 maxlen: 24
109.251.255.86/32 maxlen: 32
109.251.255.85/32 maxlen: 32
109.251.255.74/32 maxlen: 32
109.251.255.73/32 maxlen: 32
188.231.128.0/17 maxlen: 24
109.251.252.66/32 maxlen: 32
94.76.104.245/32 maxlen: 32
109.251.252.65/32 maxlen: 32
94.76.64.0/18 maxlen: 24
94.76.104.246/32 maxlen: 32
193.24.25.209/32 maxlen: 32
109.251.255.42/32 maxlen: 32
193.24.25.201/32 maxlen: 32
193.24.25.202/32 maxlen: 32
109.251.255.41/32 maxlen: 32
193.24.25.205/32 maxlen: 32
193.24.25.206/32 maxlen: 32
109.251.255.34/32 maxlen: 32
109.251.255.33/32 maxlen: 32
81.95.176.0/20 maxlen: 24
109.251.255.38/32 maxlen: 32
109.251.255.37/32 maxlen: 32
109.251.255.30/32 maxlen: 32
109.251.255.29/32 maxlen: 32
109.251.255.18/32 maxlen: 32
109.251.255.17/32 maxlen: 32
109.251.255.10/32 maxlen: 32
109.251.255.9/32 maxlen: 32
109.251.255.14/32 maxlen: 32
94.76.104.185/32 maxlen: 32
94.76.104.186/32 maxlen: 32
109.251.255.13/32 maxlen: 32
109.251.255.2/32 maxlen: 32
109.251.255.1/32 maxlen: 32
109.251.255.6/32 maxlen: 32
109.251.255.5/32 maxlen: 32
2a00:1228::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:7e:e2:ce:ac:57:ee:15:45:ce:09:cf:ab:35:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Validity
Not Before: Jan 2 00:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3466a451687cb2fc6646bc9a871870a3476aa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:4b:c5:0d:2b:ef:bf:47:0e:48:1f:05:fd:
57:8c:10:3e:1b:65:44:7a:fc:05:d5:ae:18:41:51:
6a:95:95:83:76:8a:d8:9a:99:6c:6e:e8:a2:da:13:
78:46:ea:26:6a:18:2b:0c:82:36:06:2b:fd:08:2c:
4d:ec:9e:f6:e8:a5:b8:43:52:66:a0:6b:8d:ff:d7:
dd:44:2a:a7:b3:ca:90:cd:4a:f4:64:56:c9:fe:bc:
bf:e9:1d:9e:93:0d:83:bb:a5:4c:0e:f8:c2:a3:b0:
50:b0:09:1b:d9:30:52:a3:d9:f0:bf:0b:39:0a:70:
92:d5:7b:40:3d:ae:9e:fd:1b:f9:31:68:f1:6f:fe:
98:d5:80:1b:d1:ea:d0:97:4b:33:bf:cf:35:dc:3e:
d6:75:52:2f:03:f3:3d:2c:a2:04:ae:f5:a0:74:21:
c3:67:1a:5f:5b:33:e6:d6:dc:34:82:ee:f9:aa:8c:
6d:69:03:02:1f:fb:03:7f:4b:aa:8e:f6:77:ea:85:
9a:5d:ec:40:87:f7:62:df:1d:ff:c8:9a:c1:ab:92:
e6:94:37:4c:a6:46:03:9c:48:60:50:05:56:3b:a9:
e4:76:d4:87:42:d1:6d:9e:dd:93:8e:52:95:d9:fd:
c1:e3:cc:9e:52:d8:1a:67:ed:73:14:ea:de:c5:3b:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:46:6A:45:16:87:CB:2F:C6:64:6B:C9:A8:71:87:0A:34:76:AA:66
X509v3 Authority Key Identifier:
keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/00ZqRRaHyy_GZGvJqHGHCjR2qmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.219.0.0/16
78.159.32.0/19
81.95.176.0/20
89.252.0.0/18
94.76.64.0/18
109.251.0.0/16
185.124.168.0/22
188.231.128.0/17
193.24.25.0/24
195.160.220.0/22
212.22.192.0/19
IPv6:
2a00:1228::/32
Signature Algorithm: sha256WithRSAEncryption
0f:e0:9c:89:ee:f9:e9:d7:b2:cd:45:e9:e9:20:68:8e:34:84:
e1:4f:fd:25:c1:8c:58:63:ce:1d:e6:7b:d9:0b:1e:d4:7a:50:
ec:d6:85:3a:7c:5b:a1:5d:13:8c:6c:6c:1d:4a:e0:cf:f3:49:
08:56:3c:71:df:fa:97:a8:e4:c4:e3:c1:d2:fd:13:22:19:f9:
2d:de:0f:20:fd:14:27:69:e0:c5:a9:79:50:f7:1a:bd:d1:e0:
a8:0e:07:9d:51:d0:5c:ee:07:8c:8a:58:1a:0a:1d:cf:14:10:
ee:85:fe:64:a9:fd:af:4b:40:a0:fb:07:66:ca:84:68:ee:92:
c4:ce:56:3d:81:fb:74:9f:17:2c:4d:cd:f5:f9:d4:e1:5b:a5:
46:6d:5a:88:20:bd:1b:54:80:b9:b2:6f:d9:21:34:89:88:81:
19:76:b8:e5:08:9e:52:9d:7d:fc:f7:7d:d5:1b:ba:16:ca:0f:
ea:c4:04:7d:5e:74:d6:d0:a4:cb:a4:05:f1:d0:57:35:1b:15:
de:4a:26:76:57:04:bb:0d:1b:00:4c:13:d2:12:ad:e0:f6:e5:
4b:b2:60:98:a3:54:1b:57:65:b5:da:2b:41:70:07:89:99:35:
ba:3b:f6:57:ca:7d:19:c1:23:fa:2d:cd:5f:f0:88:33:7f:04:
d7:e2:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:55 2023 by rpki-client on console-fra.rpki-client.org