Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/1ppo-sQ8WoFLuVxuzZ9f7fap09I.roa
File: 1ppo-sQ8WoFLuVxuzZ9f7fap09I.roa (raw, json)
Hash identifier: vSylFB/uqPng9S/x3qYO/Arp6gq9iqfUb66tEf000lE=
Subject key identifier: D6:9A:68:FA:C4:3C:5A:81:4B:B9:5C:6E:CD:9F:5F:ED:F6:A9:D3:D2
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018B1C3AC8CA3F72587A804B69AC1479A816
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/1ppo-sQ8WoFLuVxuzZ9f7fap09I.roa
Signing time: Wed 11 Oct 2023 00:54:56 +0000
ROA not before: Wed 11 Oct 2023 00:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.188.17.0/24 maxlen: 24
185.188.16.0/24 maxlen: 24
185.188.19.0/24 maxlen: 24
185.194.208.0/24 maxlen: 24
185.188.18.0/24 maxlen: 24
185.194.211.0/24 maxlen: 24
185.194.210.0/24 maxlen: 24
185.194.209.0/24 maxlen: 24
185.157.212.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
5.61.212.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.157.214.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.191.23.0/24 maxlen: 24
185.191.22.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1c:3a:c8:ca:3f:72:58:7a:80:4b:69:ac:14:79:a8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Oct 11 00:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d69a68fac43c5a814bb95c6ecd9f5fedf6a9d3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:ed:be:a5:54:41:77:6f:a1:a3:e5:42:0c:
94:a9:b0:8b:ee:19:d9:4b:29:04:2f:82:27:42:31:
eb:d0:b7:5d:03:42:07:23:b9:3e:09:00:4b:e3:8a:
61:20:ea:5b:b9:6c:04:4c:30:b4:bf:09:93:69:2c:
6e:b0:65:6b:1a:c5:a7:7c:94:82:f3:77:15:cd:b8:
63:84:a1:80:28:10:82:5d:b6:c4:d7:8c:06:84:aa:
b3:9a:de:50:d6:8c:14:ef:e1:9d:b1:bb:2a:8c:b4:
43:31:79:ad:ab:f5:b1:12:4d:b6:7a:d8:59:e1:aa:
fc:bb:53:6b:93:09:f0:e6:6f:48:17:35:5a:a0:24:
ee:57:47:97:f0:fd:b4:00:41:df:3a:75:d5:1e:b6:
1d:3a:0a:04:67:35:eb:c4:5a:6b:84:73:f8:64:55:
95:a5:2b:fe:a1:57:10:22:b4:15:83:ca:8a:98:c4:
94:49:b6:76:fd:d9:f5:e1:cc:0e:d3:e9:59:ce:b4:
55:be:73:48:da:5b:f5:aa:eb:e8:b5:ea:dd:f3:17:
73:0c:c8:80:99:f1:e7:40:93:6b:f1:4a:a2:de:5e:
f9:fc:6b:d9:6a:ca:4d:4e:ef:32:2d:42:2f:a8:c1:
25:25:8d:d3:41:12:cd:05:b6:12:3f:c7:fb:e2:4a:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9A:68:FA:C4:3C:5A:81:4B:B9:5C:6E:CD:9F:5F:ED:F6:A9:D3:D2
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/1ppo-sQ8WoFLuVxuzZ9f7fap09I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/23
95.156.204.0/22
185.76.78.0/23
185.89.28.0/23
185.89.31.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/24
185.157.214.0/23
185.161.184.0/24
185.188.16.0/22
185.191.20.0/22
185.194.208.0/22
195.181.252.0/23
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
39:34:0f:cb:48:93:01:5b:b0:48:79:b6:d7:7a:86:e3:9b:6c:
e3:02:8d:4e:de:01:37:8e:3d:c5:d5:c5:25:e7:dd:1a:85:d1:
3b:af:77:c3:bf:94:9b:8a:1d:47:0f:b4:b5:7a:1f:af:36:94:
26:51:cb:e9:85:70:65:62:48:55:d7:fa:1b:bb:ef:00:9a:af:
5e:74:71:21:26:79:4a:0e:d8:08:cc:9f:1e:ba:bb:b8:7e:0d:
f6:26:5b:e3:2c:a1:50:49:73:e9:a7:84:79:45:d1:8d:a6:06:
e1:e0:a2:50:1c:6f:c6:d3:d7:a3:4c:67:ba:40:1a:ff:fe:79:
ca:57:c9:d6:04:cf:b7:92:3e:70:8d:fe:a2:ca:63:2d:20:f8:
6b:20:1e:56:83:c8:d1:32:46:6c:aa:af:27:83:f5:de:75:38:
c4:e1:07:76:70:22:ac:16:d7:55:e6:a7:7a:63:fe:c7:f0:6e:
ec:59:5e:8a:1a:e5:4e:d8:99:e4:4e:c0:51:e8:1c:b0:83:9b:
8e:55:3a:85:bd:9d:c0:12:1a:88:72:a1:eb:9c:53:67:6b:b2:
f9:fc:87:43:13:af:0e:2a:8b:75:64:58:d4:5d:e6:bd:0f:39:
fe:3d:e9:7d:a3:d8:f9:1d:94:28:01:d2:aa:01:02:cb:ab:dd:
d7:f4:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org