Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/f5dOW7FdXUPfKnUF7qgP6Wcqfow.roa
File: f5dOW7FdXUPfKnUF7qgP6Wcqfow.roa (raw, json)
Hash identifier: 3CR8b54zXmHNklC/zXeoN7M23QZ/IYwtbTraN7LerJg=
Subject key identifier: 7F:97:4E:5B:B1:5D:5D:43:DF:2A:75:05:EE:A8:0F:E9:67:2A:7E:8C
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 068E3D23
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/f5dOW7FdXUPfKnUF7qgP6Wcqfow.roa
Signing time: Wed 30 Mar 2022 13:56:09 +0000
ROA not before: Wed 30 Mar 2022 13:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50129
IP address blocks: 185.188.16.0/23 maxlen: 23
185.194.209.0/24 maxlen: 24
185.194.210.0/24 maxlen: 24
185.194.211.0/24 maxlen: 24
185.188.18.0/24 maxlen: 24
185.188.19.0/24 maxlen: 24
185.194.208.0/24 maxlen: 24
185.157.212.0/23 maxlen: 23
185.157.214.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.86.211.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.84.44.0/24 maxlen: 24
134.255.242.0/24 maxlen: 24
185.84.45.0/24 maxlen: 24
185.84.46.0/24 maxlen: 24
185.84.47.0/24 maxlen: 24
89.43.196.0/24 maxlen: 24
89.43.197.0/24 maxlen: 24
93.114.131.0/24 maxlen: 24
185.92.238.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
185.191.22.0/24 maxlen: 24
185.191.23.0/24 maxlen: 24
212.237.231.0/24 maxlen: 24
185.204.64.0/24 maxlen: 24
185.204.65.0/24 maxlen: 24
185.204.66.0/24 maxlen: 24
185.204.67.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
5.61.212.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
185.75.20.0/24 maxlen: 24
185.75.21.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
185.161.185.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109985059 (0x68e3d23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Mar 30 13:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f974e5bb15d5d43df2a7505eea80fe9672a7e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:3c:de:13:a4:b2:4e:1e:94:f3:4f:38:55:
73:dd:db:bf:82:6e:6b:7c:7f:b5:55:69:c2:55:da:
5f:2a:27:27:4b:fb:06:24:75:c2:90:fb:44:ea:46:
ce:df:db:46:74:91:9f:25:66:bd:8f:74:94:0c:e5:
f0:18:1c:d0:2f:53:ab:e1:1e:2b:98:d4:51:1f:5f:
da:12:d7:d9:50:0d:94:31:13:50:83:90:0a:41:0d:
81:6f:e2:f3:e8:a5:69:de:02:96:39:d6:2d:39:ec:
01:95:9c:b6:e2:19:c0:2a:9f:b8:58:b4:e8:34:3e:
43:6f:9c:53:82:c0:8c:24:cc:0b:9c:94:c1:a9:e2:
f3:c4:f5:b8:3d:f9:56:5b:4e:c2:32:7f:34:69:ae:
23:1b:2d:12:84:ae:0c:16:e4:cb:4f:0b:e3:18:26:
e0:e2:8b:a8:7d:c2:c9:07:27:4d:8f:17:37:8f:6d:
ea:18:65:04:af:a2:83:e0:58:27:63:28:c7:c0:03:
09:a1:63:c1:39:aa:78:5b:18:8d:b9:c2:5d:6f:20:
32:aa:86:b8:95:2b:76:db:c6:58:a1:37:2d:4d:10:
ff:2a:0e:6d:84:eb:34:0b:3d:31:01:92:5e:c5:cf:
5d:de:b6:79:e9:32:4c:4f:74:12:7b:46:57:71:55:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:97:4E:5B:B1:5D:5D:43:DF:2A:75:05:EE:A8:0F:E9:67:2A:7E:8C
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/f5dOW7FdXUPfKnUF7qgP6Wcqfow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/24
89.43.196.0/23
93.114.131.0/24
95.156.204.0/22
134.255.242.0/24
185.75.20.0/23
185.76.78.0/23
185.84.44.0/22
185.86.211.0/24
185.89.28.0/23
185.89.31.0/24
185.92.238.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/22
185.161.184.0/23
185.188.16.0/22
185.191.20.0/22
185.194.208.0/22
185.204.64.0/22
195.181.252.0/23
212.237.231.0/24
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
51:49:c5:3a:d9:7f:fe:e7:99:ae:49:5c:9a:63:ce:9d:4d:10:
29:94:ce:22:b8:b0:e3:a0:1b:90:ac:7f:58:14:d7:4e:ef:a9:
27:cc:82:c9:95:d9:b9:e6:00:f7:a2:87:94:25:75:d7:c9:0f:
90:c1:16:35:75:eb:68:e6:5e:fb:8b:c7:50:ef:73:4f:08:19:
8f:66:7a:05:ac:68:42:14:92:3e:ce:77:c1:22:b0:27:3b:ad:
ec:37:ef:d9:87:79:62:8a:c0:8d:f3:48:72:de:04:c4:d4:99:
c4:69:12:f2:bc:88:c2:51:42:88:7c:94:84:ac:57:48:40:e8:
c1:53:38:5d:4f:e8:49:63:98:7a:a1:32:59:f0:92:bc:21:7a:
21:be:9c:c2:93:8b:d1:79:03:10:f9:53:a5:7f:08:fd:c6:33:
60:3a:3b:aa:41:6d:85:d6:13:06:00:4e:c6:71:ff:72:66:bf:
49:7e:45:fc:bb:e1:5a:6b:b6:ec:c8:7d:c7:ca:15:56:75:e4:
6a:3c:ea:a0:f2:79:ec:8e:a3:2c:9d:2e:39:46:bc:10:69:a6:
33:16:54:b6:eb:32:5e:00:c9:2c:26:8f:56:1f:03:76:82:1a:
5f:19:ec:ea:6a:4b:7b:46:5a:87:3d:ca:15:52:1a:d6:4c:bb:
20:ae:dc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org