Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/MaqaamBqTW2Vfv-WBLguUy3CtS4.roa
File: MaqaamBqTW2Vfv-WBLguUy3CtS4.roa (raw, json)
Hash identifier: MxE8G57EdvxnqpuTpnDymljNSRA/kGvQM8hzC8u4PAE=
Subject key identifier: 31:AA:9A:6A:60:6A:4D:6D:95:7E:FF:96:04:B8:2E:53:2D:C2:B5:2E
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 018CC4247815AF775542439192885877B84E
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/MaqaamBqTW2Vfv-WBLguUy3CtS4.roa
Signing time: Mon 01 Jan 2024 08:29:33 +0000
ROA not before: Mon 01 Jan 2024 08:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8374
IP address blocks: 5.60.0.0/16 maxlen: 16
5.172.224.0/19 maxlen: 19
46.215.0.0/16 maxlen: 16
37.98.208.0/20 maxlen: 20
37.109.0.0/16 maxlen: 16
93.154.128.0/17 maxlen: 17
84.39.160.0/20 maxlen: 20
87.251.224.0/19 maxlen: 19
77.112.0.0/14 maxlen: 14
193.41.112.0/23 maxlen: 23
92.60.128.0/20 maxlen: 20
37.247.128.0/17 maxlen: 17
78.30.64.0/18 maxlen: 18
95.40.0.0/15 maxlen: 15
46.168.0.0/15 maxlen: 15
185.4.212.0/22 maxlen: 22
46.76.0.0/15 maxlen: 15
37.7.0.0/16 maxlen: 16
31.0.0.0/15 maxlen: 15
37.209.128.0/19 maxlen: 19
212.2.96.0/19 maxlen: 19
37.152.16.0/20 maxlen: 20
37.248.0.0/15 maxlen: 15
188.125.32.0/19 maxlen: 19
151.248.32.0/20 maxlen: 20
5.174.0.0/16 maxlen: 16
2a01:2e0::/28 maxlen: 28
2a01:bb80::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:78:15:af:77:55:42:43:91:92:88:58:77:b8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Jan 1 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31aa9a6a606a4d6d957eff9604b82e532dc2b52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:c8:07:cd:10:13:67:0f:f7:5c:53:ae:95:
6d:c2:81:38:b4:c6:51:2a:c1:8e:92:29:c1:63:47:
c4:d0:a1:83:0e:02:e2:81:d1:de:2c:93:8b:00:74:
c7:43:8d:33:0c:ba:2f:cd:d4:fa:a6:9e:c7:25:80:
b9:49:3d:3b:e7:55:41:a8:df:03:11:f3:52:1a:23:
f7:29:d5:1a:ed:f3:c5:c4:17:cc:51:99:62:44:4d:
80:50:61:e0:4f:e0:e3:94:73:81:dc:b8:be:1f:ad:
aa:49:70:9c:ab:8d:aa:5c:67:45:54:a4:a8:95:a9:
6f:fb:1e:65:2b:c5:19:83:ce:fd:e1:66:c7:df:66:
60:73:3a:86:75:76:67:b8:33:82:43:e6:08:39:f3:
fc:93:e6:60:6d:7c:89:90:33:41:91:9d:22:98:56:
a6:af:90:e3:d1:9e:b8:96:0c:0d:32:7f:20:42:b0:
b1:51:7f:05:1a:86:ab:cc:f4:ad:67:d3:0d:e0:08:
c7:66:95:24:df:8a:3d:c1:9d:91:1f:01:10:f4:04:
40:44:c2:69:da:77:34:e6:d9:5b:01:db:fa:f6:0f:
a1:e2:a8:01:d5:5d:fe:98:02:80:3e:5d:f2:ba:71:
d2:0b:8b:1e:5b:d7:49:00:a3:20:80:2e:86:07:98:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AA:9A:6A:60:6A:4D:6D:95:7E:FF:96:04:B8:2E:53:2D:C2:B5:2E
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/MaqaamBqTW2Vfv-WBLguUy3CtS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.60.0.0/16
5.172.224.0/19
5.174.0.0/16
31.0.0.0/15
37.7.0.0/16
37.98.208.0/20
37.109.0.0/16
37.152.16.0/20
37.209.128.0/19
37.247.128.0-37.249.255.255
46.76.0.0/15
46.168.0.0/15
46.215.0.0/16
77.112.0.0/14
78.30.64.0/18
84.39.160.0/20
87.251.224.0/19
92.60.128.0/20
93.154.128.0/17
95.40.0.0/15
151.248.32.0/20
185.4.212.0/22
188.125.32.0/19
193.41.112.0/23
212.2.96.0/19
IPv6:
2a01:2e0::/28
2a01:bb80::/32
Signature Algorithm: sha256WithRSAEncryption
63:58:15:21:a5:85:6f:46:cb:9e:d2:93:d0:f5:b9:77:f6:e5:
d8:df:64:0a:31:1f:f5:e0:8c:20:e7:1d:86:58:dd:2b:eb:a1:
87:1f:c4:82:67:40:5e:95:62:34:c9:11:a8:c3:55:00:4f:a1:
52:ff:0a:9a:7e:8e:7e:35:71:55:a0:42:94:9c:77:e3:7a:70:
02:e6:c4:aa:ab:1c:90:18:1c:86:3a:a4:41:33:2b:42:e4:04:
94:d2:e0:a0:5d:6f:22:62:68:0a:ee:2f:12:36:cd:1d:a3:7b:
7c:00:24:7a:d8:41:6b:04:20:ea:93:d0:64:6a:98:22:89:75:
d7:a0:ea:69:64:0a:06:5e:d4:9a:55:e0:3c:5e:2c:ea:9f:b3:
f7:0c:42:06:ec:59:e0:49:ea:b8:79:a4:cf:2f:ac:0b:e6:7e:
46:a2:a4:e1:c0:22:c4:11:03:60:e7:10:8b:50:35:4e:c5:fe:
b9:d3:cd:e4:f0:fd:d0:ca:f2:6e:e0:a8:56:6e:2b:7e:12:4d:
2b:a7:91:0c:d6:49:5d:51:d5:51:7b:dc:81:3b:eb:6f:d6:fd:
47:87:1b:90:25:79:f9:e4:de:fb:a8:57:14:f6:09:91:ad:7f:
d0:57:6d:d1:b5:55:dc:37:53:e4:72:19:fb:b7:a1:7a:71:37:
10:ea:2c:df
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAYzEJHgVr3dVQkORkohYd7hOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWI5YWMyZWY2MzFiOTJlODJmNTk1ZDczZTQ3OTJjODE2
ZWM2ZTYwHhcNMjQwMTAxMDgyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWFhOWE2YTYwNmE0ZDZkOTU3ZWZmOTYwNGI4MmU1MzJkYzJiNTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySfIB80QE2cP91xTrpVtwoE4tMZR
KsGOkinBY0fE0KGDDgLigdHeLJOLAHTHQ40zDLovzdT6pp7HJYC5ST0751VBqN8D
EfNSGiP3KdUa7fPFxBfMUZliRE2AUGHgT+DjlHOB3Li+H62qSXCcq42qXGdFVKSo
lalv+x5lK8UZg8794WbH32ZgczqGdXZnuDOCQ+YIOfP8k+ZgbXyJkDNBkZ0imFam
r5Dj0Z64lgwNMn8gQrCxUX8FGoarzPStZ9MN4AjHZpUk34o9wZ2RHwEQ9ARARMJp
2nc05tlbAdv69g+h4qgB1V3+mAKAPl3yunHSC4seW9dJAKMggC6GB5hgLwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFDGqmmpgak1tlX7/lgS4LlMtwrUuMB8GA1UdIwQY
MBaAFOKbmsLvYxuS6C9ZXXPkeSyBbsbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYt
OTE2NGUzNTJhODNjLzEvTWFxYWFtQnFUVzJWZnYtV0JMZ3VVeTNDdFM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYtOTE2NGUzNTJhODNj
LzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHGBggrBgEFBQcBBwEB/wSBtjCBszCBmgQCAAEwgZMDAwAF
PAMEBQWs4AMDAAWuAwMBHwADAwAlBwMEBCVi0AMDACVtAwQEJZgQAwQFJdGAMAsD
BAcl94ADAwEl+AMDAS5MAwMBLqgDAwAu1wMDAk1wAwQGTh5AAwQEVCegAwQFV/vg
AwQEXDyAAwQHXZqAAwMBXygDBASX+CADBAK5BNQDBAW8fSADBAHBKXADBAXUAmAw
FAQCAAIwDgMFBCoBAuADBQAqAbuAMA0GCSqGSIb3DQEBCwUAA4IBAQBjWBUhpYVv
Rsue0pPQ9bl39uXY32QKMR/14Iwg5x2GWN0r66GHH8SCZ0BelWI0yRGow1UAT6FS
/wqafo5+NXFVoEKUnHfjenAC5sSqqxyQGByGOqRBMytC5ASU0uCgXW8iYmgK7i8S
Ns0do3t8ACR62EFrBCDqk9BkapgiiXXXoOppZAoGXtSaVeA8Xizqn7P3DEIG7Fng
Seq4eaTPL6wL5n5GoqThwCLEEQNg5xCLUDVOxf65083k8P3QyvJu4KhWbit+Ek0r
p5EM1kldUdVRe9yBO+tv1v1HhxuQJXn55N77qFcU9gmRrX/QV23RtVXcN1Pkchn7
t6F6cTcQ6izf
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:40 2025 by rpki-client