Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/F9BKfL3vc9_5sxF4H24ciHfS_XM.roa
File: F9BKfL3vc9_5sxF4H24ciHfS_XM.roa (raw, json)
Hash identifier: VQXJl475LlKdGtfQFrdX+S81o160RRkNESpWyrIaYOM=
Subject key identifier: 17:D0:4A:7C:BD:EF:73:DF:F9:B3:11:78:1F:6E:1C:88:77:D2:FD:73
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01897599E3528423E2AA16EBB047F405FB75
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/F9BKfL3vc9_5sxF4H24ciHfS_XM.roa
Signing time: Thu 20 Jul 2023 23:19:26 +0000
ROA not before: Thu 20 Jul 2023 23:19:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50129
IP address blocks: 185.188.16.0/23 maxlen: 23
185.194.209.0/24 maxlen: 24
185.194.210.0/24 maxlen: 24
185.194.211.0/24 maxlen: 24
185.188.18.0/24 maxlen: 24
185.188.19.0/24 maxlen: 24
185.194.208.0/24 maxlen: 24
185.157.212.0/23 maxlen: 23
185.157.214.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.86.211.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.84.44.0/24 maxlen: 24
134.255.242.0/24 maxlen: 24
185.84.45.0/24 maxlen: 24
185.84.46.0/24 maxlen: 24
185.84.47.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
185.191.22.0/24 maxlen: 24
185.191.23.0/24 maxlen: 24
212.237.231.0/24 maxlen: 24
185.204.64.0/24 maxlen: 24
185.204.65.0/24 maxlen: 24
185.204.66.0/24 maxlen: 24
185.204.67.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
5.61.212.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
185.75.20.0/24 maxlen: 24
185.75.21.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
185.161.185.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:75:99:e3:52:84:23:e2:aa:16:eb:b0:47:f4:05:fb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jul 20 23:19:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17d04a7cbdef73dff9b311781f6e1c8877d2fd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:34:f0:39:9e:29:cd:59:0c:ed:39:1c:84:f0:
83:9d:be:a3:26:73:4a:fd:f3:c9:dd:12:93:69:1c:
e2:51:14:61:29:a9:d2:49:b2:10:6a:2d:51:80:c7:
ac:2b:6a:df:47:5c:4c:e6:f9:03:58:2a:0b:ac:2c:
33:cd:26:c8:a4:3b:b2:a2:7e:28:4f:0f:c1:fe:8b:
27:58:96:52:f7:38:7a:4d:97:65:18:c6:75:11:e8:
40:a9:69:4b:a4:0f:f2:aa:d1:e7:39:4d:7c:0d:b6:
3d:68:83:0f:13:30:af:20:cb:d3:a8:ba:34:b3:a1:
96:da:df:ed:ba:71:e1:74:05:1c:7e:0e:68:28:8c:
4a:ef:a3:62:da:57:3d:6c:49:8f:d4:30:64:bc:ce:
b3:a3:d6:8a:56:04:1b:bb:46:02:a3:7d:b0:76:15:
2c:cc:c8:04:98:67:9b:49:e0:78:71:dd:b2:d7:64:
f3:6f:fb:0f:b2:b1:eb:e1:9f:e4:af:0c:0f:43:e8:
b7:79:bf:66:d4:a3:12:b6:6a:91:7d:f0:8a:ec:b6:
7a:79:8f:0e:30:5b:c5:10:a5:86:60:97:8a:42:73:
42:1d:83:ba:8f:df:92:1c:b4:a5:ff:de:09:52:6a:
10:07:1c:4e:13:04:8a:68:fa:9c:71:eb:dc:a1:0a:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D0:4A:7C:BD:EF:73:DF:F9:B3:11:78:1F:6E:1C:88:77:D2:FD:73
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/F9BKfL3vc9_5sxF4H24ciHfS_XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/23
95.156.204.0/22
134.255.242.0/24
185.75.20.0/23
185.76.78.0/23
185.84.44.0/22
185.86.211.0/24
185.89.28.0/23
185.89.31.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/22
185.161.184.0/23
185.188.16.0/22
185.191.20.0/22
185.194.208.0/22
185.204.64.0/22
195.181.252.0/23
212.237.231.0/24
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
7a:6d:b7:d5:ba:1f:e4:a5:07:dc:46:c7:c1:27:ae:cf:a4:44:
ea:67:a7:ef:0b:2b:b8:3c:82:7d:e1:d0:7e:fa:7a:30:32:0e:
33:58:0f:4a:64:6d:d7:74:1a:41:9e:6f:3e:32:75:43:b2:97:
94:82:0c:8f:a4:92:3f:6a:4d:19:50:97:b4:f4:79:17:e6:e3:
6b:a8:df:41:c0:f7:d6:d5:40:ff:3c:e4:ab:5f:25:24:82:d1:
7f:45:c8:0d:f6:06:05:f2:e2:f2:cd:d1:2d:de:8d:f4:62:58:
44:d8:26:30:d4:68:48:ad:42:e8:8b:61:af:e4:34:01:21:8c:
ea:ff:43:1f:c6:c6:ac:d3:19:c7:16:92:11:3f:99:7d:8e:f9:
17:0f:3d:d4:25:c4:21:d9:67:1f:f5:2b:61:0b:09:e5:64:b3:
3d:6a:ad:3c:56:98:48:5f:73:20:49:8a:19:48:ca:df:7e:ee:
3b:91:0b:46:5b:6f:71:7f:4d:61:8a:50:3b:55:98:76:d3:17:
5c:9f:91:53:8d:3c:f5:26:86:86:b6:75:5f:10:54:0f:67:bf:
5f:db:55:01:5f:91:fc:a8:5f:81:2c:c6:be:09:d1:25:5c:46:
95:72:fc:63:4b:6a:d0:29:c9:94:3b:71:2a:4a:bc:1d:0a:62:
f1:3f:e0:8e
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAYl1meNShCPiqhbrsEf0Bft1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjMwNzIwMjMxOTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2QwNGE3Y2JkZWY3M2RmZjliMzExNzgxZjZlMWM4ODc3ZDJmZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTTwOZ4pzVkM7TkchPCDnb6jJnNK
/fPJ3RKTaRziURRhKanSSbIQai1RgMesK2rfR1xM5vkDWCoLrCwzzSbIpDuyon4o
Tw/B/osnWJZS9zh6TZdlGMZ1EehAqWlLpA/yqtHnOU18DbY9aIMPEzCvIMvTqLo0
s6GW2t/tunHhdAUcfg5oKIxK76Ni2lc9bEmP1DBkvM6zo9aKVgQbu0YCo32wdhUs
zMgEmGebSeB4cd2y12Tzb/sPsrHr4Z/krwwPQ+i3eb9m1KMStmqRffCK7LZ6eY8O
MFvFEKWGYJeKQnNCHYO6j9+SHLSl/94JUmoQBxxOEwSKaPqccevcoQpdTwIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFBfQSny973Pf+bMReB9uHIh30v1zMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvRjlCS2ZMM3ZjOV81c3hGNEgyNGNpSGZTX1hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQDBAIF
PdQDBAEFuyYDBAJfnMwDBACG//IDBAG5SxQDBAG5TE4DBAK5VCwDBAC5VtMDBAG5
WRwDBAC5WR8DBAG5aDwwDAMEALlomQMEArlomAMEAbl6ugMEArmd1AMEAbmhuAME
Arm8EAMEArm/FAMEArnC0AMEArnMQAMEAcO1/AMEANTt5zAMAwQA2T3xAwQC2T3w
MA0GCSqGSIb3DQEBCwUAA4IBAQB6bbfVuh/kpQfcRsfBJ67PpETqZ6fvCyu4PIJ9
4dB++nowMg4zWA9KZG3XdBpBnm8+MnVDspeUggyPpJI/ak0ZUJe09HkX5uNrqN9B
wPfW1UD/POSrXyUkgtF/RcgN9gYF8uLyzdEt3o30YlhE2CYw1GhIrULoi2Gv5DQB
IYzq/0Mfxsas0xnHFpIRP5l9jvkXDz3UJcQh2Wcf9SthCwnlZLM9aq08VphIX3Mg
SYoZSMrffu47kQtGW29xf01hilA7VZh20xdcn5FTjTz1JoaGtnVfEFQPZ79f21UB
X5H8qF+BLMa+CdElXEaVcvxjS2rQKcmUO3EqSrwdCmLxP+CO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org