Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/OGLgOtzLhxZtPhHt8dP1gpru1pc.roa
File: OGLgOtzLhxZtPhHt8dP1gpru1pc.roa (raw, json)
Hash identifier: HqldlDwTJIQA51fF+cN2LV1R89ADHBbQS/7IwQpW+7E=
Subject key identifier: 38:62:E0:3A:DC:CB:87:16:6D:3E:11:ED:F1:D3:F5:82:9A:EE:D6:97
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 06D27B3F
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/OGLgOtzLhxZtPhHt8dP1gpru1pc.roa
Signing time: Thu 28 Apr 2022 15:11:49 +0000
ROA not before: Thu 28 Apr 2022 15:11:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.188.17.0/24 maxlen: 24
185.188.16.0/24 maxlen: 24
185.188.19.0/24 maxlen: 24
185.194.208.0/24 maxlen: 24
185.188.18.0/24 maxlen: 24
185.194.211.0/24 maxlen: 24
185.194.210.0/24 maxlen: 24
185.194.209.0/24 maxlen: 24
185.157.212.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.157.214.0/24 maxlen: 24
185.86.211.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.84.44.0/24 maxlen: 24
134.255.242.0/24 maxlen: 24
89.43.197.0/24 maxlen: 24
89.43.196.0/24 maxlen: 24
185.84.47.0/24 maxlen: 24
185.84.46.0/24 maxlen: 24
185.84.45.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
185.92.238.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.191.23.0/24 maxlen: 24
185.191.22.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
212.237.231.0/24 maxlen: 24
185.204.64.0/24 maxlen: 24
185.204.67.0/24 maxlen: 24
185.204.66.0/24 maxlen: 24
185.204.65.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
5.61.212.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
185.75.21.0/24 maxlen: 24
185.75.20.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114457407 (0x6d27b3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Apr 28 15:11:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3862e03adccb87166d3e11edf1d3f5829aeed697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:de:b7:fc:14:f6:fb:cb:9c:87:20:c3:a0:
6e:00:5a:a4:30:5b:53:49:96:1a:cd:1e:b2:d8:ed:
13:dd:55:d3:78:80:53:9c:86:84:8e:c6:b1:77:4d:
c6:d2:42:9c:13:cc:ad:57:6d:fc:75:8d:8f:cc:2e:
5b:a7:26:e2:1e:df:e9:3e:a2:33:30:bb:a2:5a:b7:
b9:0b:1c:dc:12:98:9c:b5:35:f8:0c:ea:3e:34:c4:
95:b7:29:23:4c:3e:92:db:d4:5b:98:7b:f4:36:25:
e1:82:29:d3:75:eb:ac:62:8e:65:45:23:e0:40:d3:
24:4f:84:51:70:78:a0:65:ec:1d:4f:c1:92:2b:c9:
35:8f:14:c4:59:ae:e5:d8:0e:eb:f5:59:18:91:85:
30:df:6e:dd:9e:47:3a:26:15:74:02:1f:e6:1d:5c:
e2:d6:eb:c6:6f:80:c9:08:70:7a:53:49:78:57:9b:
d3:b5:d5:56:d1:02:11:7e:ee:f6:55:4c:16:90:ad:
5a:d7:71:75:da:97:cd:b0:b7:32:34:2a:09:12:f0:
84:77:61:c6:20:e7:ad:0a:7b:e2:68:ca:66:c3:63:
a8:43:61:e8:a5:d4:77:8a:e5:94:66:13:8f:e2:16:
20:2e:5e:cd:e1:28:84:a0:f0:1a:b1:eb:8c:da:8d:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:E0:3A:DC:CB:87:16:6D:3E:11:ED:F1:D3:F5:82:9A:EE:D6:97
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/OGLgOtzLhxZtPhHt8dP1gpru1pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/23
89.43.196.0/23
95.156.204.0/22
134.255.242.0/24
185.75.20.0/23
185.76.78.0/23
185.84.44.0/22
185.86.211.0/24
185.89.28.0/23
185.89.31.0/24
185.92.238.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/24
185.157.214.0/23
185.161.184.0/24
185.188.16.0/22
185.191.20.0/22
185.194.208.0/22
185.204.64.0/22
195.181.252.0/23
212.237.231.0/24
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
71:e6:44:2c:6c:5c:08:14:c6:ca:bb:2b:83:86:b0:42:9c:4b:
bb:3d:5a:23:9b:c4:fa:9f:f0:36:29:aa:29:ad:03:ed:43:c7:
8c:67:c9:f4:17:b7:44:40:8f:26:62:80:d3:08:4c:49:58:44:
e6:cf:87:a1:d8:6d:ed:1d:8d:ba:64:be:9c:c8:75:68:ce:4a:
74:e1:c4:2a:59:20:78:c3:10:26:bc:ed:58:9e:6c:56:32:b3:
41:8f:c7:29:11:ad:dd:12:da:e9:fd:87:a0:44:18:62:31:52:
6d:b5:ef:02:71:ff:52:dc:d8:5c:bc:c9:bb:9f:e2:2c:fe:c0:
70:62:d8:9d:60:f2:ac:9e:fd:01:d9:e9:85:a3:42:91:c3:e1:
fe:0a:cf:1c:a4:a4:6f:43:3b:fc:0f:7b:d9:bd:a5:00:7c:db:
61:43:5f:fc:1d:de:da:ff:5b:da:01:73:54:52:16:7b:67:92:
d7:ae:e7:ee:44:9c:1e:2b:e4:70:39:02:d4:c8:3e:25:42:5d:
5c:f8:66:c5:ed:af:95:e2:ec:4f:62:2a:8e:c9:c3:f5:e2:e0:
ee:33:b0:8e:37:9d:c8:80:5d:44:37:0b:35:3f:9b:fa:73:fc:
c5:bd:14:77:bf:9d:26:8c:16:76:ce:8e:bb:53:d7:10:e5:19:
44:a6:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org