Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/8MAprfUivKZq2V8nDk6-0HS0PXQ.roa
File: 8MAprfUivKZq2V8nDk6-0HS0PXQ.roa (raw, json)
Hash identifier: SFp7A/OFy9UdFj6nyUXhY+v99d0+AZr988FrXD93y38=
Subject key identifier: F0:C0:29:AD:F5:22:BC:A6:6A:D9:5F:27:0E:4E:BE:D0:74:B4:3D:74
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 068F4516
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/8MAprfUivKZq2V8nDk6-0HS0PXQ.roa
Signing time: Wed 30 Mar 2022 13:56:09 +0000
ROA not before: Wed 30 Mar 2022 13:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.188.16.0/24 maxlen: 24
185.188.19.0/24 maxlen: 24
185.194.208.0/24 maxlen: 24
185.188.18.0/24 maxlen: 24
185.194.211.0/24 maxlen: 24
185.194.210.0/24 maxlen: 24
185.194.209.0/24 maxlen: 24
185.157.212.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.157.214.0/24 maxlen: 24
185.86.211.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.84.44.0/24 maxlen: 24
134.255.242.0/24 maxlen: 24
89.43.197.0/24 maxlen: 24
89.43.196.0/24 maxlen: 24
185.84.47.0/24 maxlen: 24
185.84.46.0/24 maxlen: 24
185.84.45.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
185.92.238.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.191.23.0/24 maxlen: 24
185.191.22.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
212.237.231.0/24 maxlen: 24
185.204.64.0/24 maxlen: 24
185.204.67.0/24 maxlen: 24
185.204.66.0/24 maxlen: 24
185.204.65.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
5.61.212.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
185.75.21.0/24 maxlen: 24
185.75.20.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110052630 (0x68f4516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Mar 30 13:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0c029adf522bca66ad95f270e4ebed074b43d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:17:a4:31:ca:95:ce:84:ba:23:31:84:f4:3e:
07:28:fe:a5:25:c5:db:a2:95:b5:fb:d2:d3:f7:7f:
12:ae:cb:4b:1f:11:f3:ed:de:0b:9b:61:39:87:5e:
2a:29:10:4c:3f:1b:69:93:40:79:74:66:22:04:8c:
bd:14:e9:ae:8f:fc:0f:ba:82:96:92:04:08:be:4c:
ab:a3:fd:c5:86:5b:86:79:27:ec:1b:fc:e1:b2:67:
4a:12:f5:dd:b8:f0:80:f3:67:19:ec:4c:a2:52:69:
b8:57:3d:eb:fa:c2:b8:42:8b:5d:f8:c2:2f:1c:af:
08:f6:14:84:f4:b5:cb:0c:c8:37:02:a2:4b:6e:4b:
0a:2f:af:3f:2d:7f:a5:bc:75:8d:41:01:44:c6:1c:
7a:bb:d2:0a:87:6b:2f:0d:7a:03:9b:05:84:4a:91:
63:5a:80:26:99:dc:42:b0:bb:93:ec:72:9f:71:c3:
a3:27:b7:eb:d3:c1:ce:7c:97:54:5d:5c:5a:85:f6:
6b:1c:6a:1d:a5:56:9b:51:39:e3:d1:9d:21:d0:2c:
c3:55:97:b5:70:32:f4:c0:56:e2:54:44:b1:9a:ef:
c7:bb:3c:b0:e9:78:73:1e:4c:a5:c5:16:9d:ad:04:
9d:19:4b:97:18:c3:bc:50:05:53:e3:e2:48:d4:e2:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C0:29:AD:F5:22:BC:A6:6A:D9:5F:27:0E:4E:BE:D0:74:B4:3D:74
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/8MAprfUivKZq2V8nDk6-0HS0PXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/23
89.43.196.0/23
95.156.204.0/22
134.255.242.0/24
185.75.20.0/23
185.76.78.0/23
185.84.44.0/22
185.86.211.0/24
185.89.28.0/23
185.89.31.0/24
185.92.238.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/24
185.157.214.0/23
185.161.184.0/24
185.188.16.0/24
185.188.18.0/23
185.191.20.0/22
185.194.208.0/22
185.204.64.0/22
195.181.252.0/23
212.237.231.0/24
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
15:a0:15:3f:8b:44:fa:16:df:4d:f6:b9:56:08:4f:57:39:ad:
68:ce:c2:65:fc:a2:48:2c:40:15:8e:3f:8b:5e:b6:b1:85:60:
d8:24:55:9e:9b:d6:13:40:72:ca:70:b0:73:9b:ee:71:47:23:
2a:ad:7a:7e:bd:9f:12:0e:4d:49:6c:08:ce:1c:7f:23:48:fc:
5c:be:c7:31:76:ad:5d:20:17:07:e3:62:d2:f9:80:e2:a4:fc:
bf:e0:2b:98:4d:8c:59:79:62:8e:68:1a:d3:90:2f:2d:37:ce:
81:47:ad:e8:44:76:b7:4f:04:8e:23:9e:c2:31:12:a8:6c:33:
a3:60:1e:dc:ac:cd:31:33:74:20:ae:8e:e3:fc:6a:65:51:39:
c8:4f:85:8c:c7:5d:79:28:16:c9:dc:5c:4d:16:d8:32:86:ce:
d0:13:76:99:cf:17:f1:2a:50:19:ee:47:11:bd:05:0c:d6:92:
4d:7f:8d:75:16:41:6c:8c:39:4b:04:c6:33:59:d0:b9:a5:b3:
cb:14:3e:0c:9c:9e:f6:33:9d:aa:df:5c:ff:ea:a9:72:68:ac:
0b:f1:2a:ee:fe:cb:7a:4e:36:ba:ab:e9:fe:92:70:c4:9e:ff:
d2:38:13:70:9d:ab:2a:d7:46:9f:d8:d3:c8:42:67:0a:8a:43:
24:98:72:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org