Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/M6w2R98i_z4BNh4mqnaZlNXH5sY.roa
File: M6w2R98i_z4BNh4mqnaZlNXH5sY.roa (raw, json)
Hash identifier: tTXfbUdmPEaud2Q6N2dREk1IyS+y1Mv33m1Z1BlflnY=
Subject key identifier: 33:AC:36:47:DF:22:FF:3E:01:36:1E:26:AA:76:99:94:D5:C7:E6:C6
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01897599E3B00E499D1190DD543D123A4C51
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/M6w2R98i_z4BNh4mqnaZlNXH5sY.roa
Signing time: Thu 20 Jul 2023 23:19:26 +0000
ROA not before: Thu 20 Jul 2023 23:19:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.188.17.0/24 maxlen: 24
185.188.16.0/24 maxlen: 24
185.188.19.0/24 maxlen: 24
185.194.208.0/24 maxlen: 24
185.188.18.0/24 maxlen: 24
185.194.211.0/24 maxlen: 24
185.194.210.0/24 maxlen: 24
185.194.209.0/24 maxlen: 24
185.157.212.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.157.214.0/24 maxlen: 24
185.86.211.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.84.44.0/24 maxlen: 24
134.255.242.0/24 maxlen: 24
185.84.47.0/24 maxlen: 24
185.84.46.0/24 maxlen: 24
185.84.45.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.191.23.0/24 maxlen: 24
185.191.22.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
212.237.231.0/24 maxlen: 24
185.204.64.0/24 maxlen: 24
185.204.67.0/24 maxlen: 24
185.204.66.0/24 maxlen: 24
185.204.65.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
5.61.212.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
185.75.21.0/24 maxlen: 24
185.75.20.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:75:99:e3:b0:0e:49:9d:11:90:dd:54:3d:12:3a:4c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jul 20 23:19:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33ac3647df22ff3e01361e26aa769994d5c7e6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:53:5c:b9:9c:30:d1:44:bb:34:45:bb:5d:
0e:c2:2f:e8:69:98:75:c6:3d:cd:b2:f0:86:b5:49:
8e:8a:1d:3c:67:20:34:ca:20:01:6d:00:16:a5:03:
1f:6d:65:09:7e:51:a5:1c:3d:e4:b9:cd:90:ae:67:
dc:cb:fc:f0:2d:cf:b7:40:58:ed:f8:a5:69:f8:6c:
74:b7:ab:30:d3:2b:43:6b:19:b6:20:75:63:12:4c:
c4:85:24:b2:77:5a:56:0e:42:fb:81:02:57:c9:32:
2b:41:c6:cb:65:be:ac:85:c7:54:c8:9a:2b:0d:95:
67:5c:ea:5b:a2:76:4b:24:08:d7:55:88:03:08:64:
23:ae:cf:ca:69:a6:eb:9d:ee:e1:13:86:55:4e:1b:
e5:33:14:b8:dc:b2:7b:69:4c:bf:c3:6f:4f:64:8a:
aa:7f:2b:6a:8f:91:1d:36:59:22:de:8a:d2:27:69:
ef:db:16:fb:53:b2:7a:02:53:43:87:a8:7e:e8:00:
63:a8:c5:3c:33:26:e6:94:d9:97:f7:89:12:c6:b1:
48:b9:d7:35:d7:41:2a:d9:4e:c7:c2:1e:e0:a5:bf:
11:e6:5c:12:2e:56:71:70:1d:4e:63:c6:a2:6f:9c:
42:02:88:d1:00:a7:02:10:f1:20:33:de:a9:ad:f1:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:36:47:DF:22:FF:3E:01:36:1E:26:AA:76:99:94:D5:C7:E6:C6
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/M6w2R98i_z4BNh4mqnaZlNXH5sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/23
95.156.204.0/22
134.255.242.0/24
185.75.20.0/23
185.76.78.0/23
185.84.44.0/22
185.86.211.0/24
185.89.28.0/23
185.89.31.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/24
185.157.214.0/23
185.161.184.0/24
185.188.16.0/22
185.191.20.0/22
185.194.208.0/22
185.204.64.0/22
195.181.252.0/23
212.237.231.0/24
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
ab:31:92:e2:e9:2d:7a:f5:99:c9:9c:91:41:e7:ed:ea:c2:b0:
a2:c7:d4:b9:43:71:d5:1d:e5:f9:2d:ef:69:6a:7d:be:d1:de:
06:39:ec:32:7a:91:db:40:03:dc:0e:97:e2:14:76:10:68:3b:
0a:12:9d:54:92:3d:d5:4d:39:53:35:ae:02:fc:c2:77:38:39:
9c:4f:86:0e:a8:ff:d4:04:8e:5c:36:3f:40:a3:91:f3:6a:cf:
7e:6f:1c:60:83:de:e3:02:78:87:26:c7:68:a5:b6:3d:a3:60:
45:70:9e:1c:50:45:76:eb:d0:89:d7:e5:38:72:c0:ed:e7:6a:
ca:51:d5:b3:24:d5:9e:d4:d0:26:d0:09:52:56:b2:ed:e9:0c:
b2:67:59:ae:13:8e:9e:61:71:ab:9d:62:d2:19:75:1d:a4:3b:
e9:28:cd:7a:d1:cc:69:c4:45:52:10:91:46:53:89:78:94:24:
d6:a6:4f:59:47:04:f5:74:1a:87:e4:d7:19:e6:a4:9e:92:12:
1b:d2:4e:e4:56:21:83:ad:c4:82:5a:5b:aa:b0:e0:2e:2d:f3:
22:5d:89:d1:ac:e0:6f:96:e9:bb:a7:a6:a1:db:bc:bd:02:37:
79:a6:46:96:f5:50:80:a4:5f:da:bd:77:46:b0:e0:82:12:3f:
72:6c:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org