Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/bVwLnu10QbLfBU1IJC8V8mxM2B8.roa
File: bVwLnu10QbLfBU1IJC8V8mxM2B8.roa (raw, json)
Hash identifier: fNkXAJGV0bM4pS7etlyVI/xBB7tl6nHx5oZFKFixmIg=
Subject key identifier: 6D:5C:0B:9E:ED:74:41:B2:DF:05:4D:48:24:2F:15:F2:6C:4C:D8:1F
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01903A322E6731D0A1BBCF08F3775E7F4AA0
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/bVwLnu10QbLfBU1IJC8V8mxM2B8.roa
Signing time: Fri 21 Jun 2024 09:48:05 +0000
ROA not before: Fri 21 Jun 2024 09:48:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50129
IP address blocks: 5.187.38.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.157.212.0/23 maxlen: 23
185.157.214.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
185.161.185.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:32:2e:67:31:d0:a1:bb:cf:08:f3:77:5e:7f:4a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jun 21 09:48:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d5c0b9eed7441b2df054d48242f15f26c4cd81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:b1:77:51:57:e2:36:7d:5d:5f:2a:6f:d3:
3a:20:8c:77:52:83:c5:ff:18:30:f9:8f:c9:53:dd:
57:64:9a:ea:73:7c:21:dd:ca:d1:8e:02:80:b7:dc:
90:99:4e:e6:e9:bb:c1:03:25:b8:5f:b4:d1:af:8d:
84:6e:ff:ed:65:71:f4:6a:a5:55:06:bf:93:93:21:
1b:db:39:1f:e0:05:38:3d:71:71:04:7a:cc:30:83:
84:68:69:ed:5e:40:b2:7f:fe:f6:10:df:42:c6:d8:
10:77:2e:96:a0:74:6a:a6:a1:87:b4:b7:31:0b:ac:
48:a2:f9:b2:ff:a9:95:62:0d:a3:d1:0c:21:21:f0:
56:e4:a1:b4:0d:46:1f:2d:c7:d2:af:30:d6:a1:59:
a7:95:da:00:9d:c7:30:87:ba:39:d8:4d:6a:07:19:
28:51:52:da:78:84:29:ed:db:58:0d:8a:9c:79:90:
60:c9:9f:ef:b7:3b:de:04:42:da:55:81:70:bb:22:
49:55:98:5a:cc:47:72:2a:56:5f:2c:53:21:4a:56:
b0:0f:ec:50:0a:c3:95:7c:c1:05:bb:39:6d:0c:83:
a6:ca:80:bf:48:ed:2b:61:81:99:03:72:de:b4:70:
05:03:e7:15:09:9e:7e:1d:59:e2:25:d2:fe:e1:b8:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5C:0B:9E:ED:74:41:B2:DF:05:4D:48:24:2F:15:F2:6C:4C:D8:1F
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/bVwLnu10QbLfBU1IJC8V8mxM2B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.38.0/23
95.156.204.0/22
185.104.60.0/23
185.104.153.0/24
185.122.186.0/23
185.157.212.0/22
185.161.184.0/23
195.181.252.0/23
217.61.242.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:a9:48:20:bf:b5:7f:04:ce:55:20:0e:77:e5:35:6b:f3:bf:
22:2c:e1:4c:44:2c:50:a6:d4:ba:ec:a1:39:10:0c:15:93:c0:
50:0e:72:35:49:05:64:0d:df:05:71:79:35:4a:e1:56:b7:c4:
bf:3e:8f:6c:e1:e9:3d:56:05:0d:93:e7:cd:e3:cc:3b:d3:6e:
29:87:13:61:e4:16:0d:ac:a2:41:f1:c8:02:84:4a:7f:f2:c5:
10:f1:b8:45:39:bd:af:e5:db:fb:64:90:5c:d0:42:3e:ca:0c:
34:23:b1:99:02:93:cd:3f:6e:7a:ef:e5:d3:e0:3a:0e:cd:c2:
5b:a7:c6:e8:94:75:8a:5b:50:2e:20:f4:76:2d:2a:78:5c:b2:
81:6d:02:32:1e:81:57:49:5d:93:51:2b:68:00:ed:00:1d:78:
ab:a6:74:33:f4:35:7c:b9:97:c8:36:53:d4:38:3a:37:1f:2d:
3a:e3:0a:e6:f2:17:a7:e2:9c:a6:a3:94:10:1f:a8:df:0c:9d:
f3:f5:e2:75:ec:ca:99:08:b1:25:8d:62:49:df:0b:0f:e6:a5:
e3:43:1a:41:3d:4e:24:61:86:53:a1:1a:e8:c4:a5:ed:fb:32:
f5:67:9e:11:8f:99:9b:1a:a4:65:b5:25:34:b7:12:42:4b:00:
92:a7:8a:7a
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZA6Mi5nMdChu88I83def0qgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjQwNjIxMDk0ODA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDVjMGI5ZWVkNzQ0MWIyZGYwNTRkNDgyNDJmMTVmMjZjNGNkODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuexd1FX4jZ9XV8qb9M6IIx3UoPF
/xgw+Y/JU91XZJrqc3wh3crRjgKAt9yQmU7m6bvBAyW4X7TRr42Ebv/tZXH0aqVV
Br+TkyEb2zkf4AU4PXFxBHrMMIOEaGntXkCyf/72EN9CxtgQdy6WoHRqpqGHtLcx
C6xIovmy/6mVYg2j0QwhIfBW5KG0DUYfLcfSrzDWoVmnldoAnccwh7o52E1qBxko
UVLaeIQp7dtYDYqceZBgyZ/vtzveBELaVYFwuyJJVZhazEdyKlZfLFMhSlawD+xQ
CsOVfMEFuzltDIOmyoC/SO0rYYGZA3LetHAFA+cVCZ5+HVniJdL+4bhU9wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFG1cC57tdEGy3wVNSCQvFfJsTNgfMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvYlZ3TG51MTBRYkxmQlUxSUpDOFY4bXhNMkI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBBbsmAwQC
X5zMAwQBuWg8AwQAuWiZAwQBuXq6AwQCuZ3UAwQBuaG4AwQBw7X8AwQB2T3yMA0G
CSqGSIb3DQEBCwUAA4IBAQCyqUggv7V/BM5VIA535TVr878iLOFMRCxQptS67KE5
EAwVk8BQDnI1SQVkDd8FcXk1SuFWt8S/Po9s4ek9VgUNk+fN48w7024phxNh5BYN
rKJB8cgChEp/8sUQ8bhFOb2v5dv7ZJBc0EI+ygw0I7GZApPNP2567+XT4DoOzcJb
p8bolHWKW1AuIPR2LSp4XLKBbQIyHoFXSV2TUStoAO0AHXirpnQz9DV8uZfINlPU
ODo3Hy064wrm8hen4pymo5QQH6jfDJ3z9eJ17MqZCLEljWJJ3wsP5qXjQxpBPU4k
YYZToRroxKXt+zL1Z54Rj5mbGqRltSU0txJCSwCSp4p6
-----END CERTIFICATE-----
Generated at Tue Aug 13 14:24:59 2024 by rpki-client on console-ams.rpki-client.org