Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/nYWqnCrG0N6QsPHwFx1RPO86RlE.roa
File: nYWqnCrG0N6QsPHwFx1RPO86RlE.roa (raw, json)
Hash identifier: jEl8rD0bpwMzerRBnGdNBYkFeoH77J837nECrZ3Z7/c=
Subject key identifier: 9D:85:AA:9C:2A:C6:D0:DE:90:B0:F1:F0:17:1D:51:3C:EF:3A:46:51
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018C3E390BC459E188A881E13C996BA72C68
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/nYWqnCrG0N6QsPHwFx1RPO86RlE.roa
Signing time: Wed 06 Dec 2023 08:22:55 +0000
ROA not before: Wed 06 Dec 2023 08:22:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.188.17.0/24 maxlen: 24
185.188.19.0/24 maxlen: 24
185.194.208.0/24 maxlen: 24
185.194.211.0/24 maxlen: 24
185.194.210.0/24 maxlen: 24
185.194.209.0/24 maxlen: 24
185.157.212.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
5.61.212.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.157.214.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:39:0b:c4:59:e1:88:a8:81:e1:3c:99:6b:a7:2c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Dec 6 08:22:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d85aa9c2ac6d0de90b0f1f0171d513cef3a4651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:c5:39:03:e6:31:89:64:28:a6:53:4e:e0:
3e:0a:87:6c:2e:6e:21:c4:9c:d2:fc:f4:0e:a9:ac:
30:ef:a8:bc:05:e7:e2:70:d0:b1:1b:1e:f8:75:c0:
65:31:8c:cf:5e:6d:05:24:3a:59:ef:a1:9b:df:d9:
c9:09:8b:8e:6b:8b:be:ee:3c:84:87:1f:9b:c1:85:
bf:71:b4:74:ae:c3:e3:3d:0b:16:d2:c6:ff:5a:c1:
82:40:52:03:b1:5a:ea:c3:0a:eb:17:9f:bc:41:ef:
e8:54:b3:7a:31:d6:cb:05:11:69:80:50:28:a5:a4:
ef:c4:02:5d:e2:a2:24:b4:7e:6f:6f:b1:28:c6:5d:
2d:ec:4b:39:9b:2b:06:5e:72:50:b7:93:84:19:df:
f0:7b:02:0e:df:34:98:fc:2d:7e:86:ec:d5:77:2e:
ec:94:6f:93:92:12:1a:a1:02:68:7d:9b:4f:cc:69:
df:a8:b0:ef:9b:16:ba:47:ea:d0:39:53:0b:24:13:
c1:29:d3:fa:dc:1d:7a:74:f2:af:01:87:76:96:f7:
7f:21:6d:42:04:b1:4b:65:1f:b9:7e:af:c7:4a:4d:
a5:0f:20:8e:97:63:f6:70:f3:1e:a0:c9:26:4d:5b:
66:66:d2:67:ee:33:70:52:bd:f2:cb:c7:7c:c9:00:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:85:AA:9C:2A:C6:D0:DE:90:B0:F1:F0:17:1D:51:3C:EF:3A:46:51
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/nYWqnCrG0N6QsPHwFx1RPO86RlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/23
95.156.204.0/22
185.89.28.0/23
185.89.31.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/24
185.157.214.0/23
185.161.184.0/24
185.188.17.0/24
185.188.19.0/24
185.194.208.0/22
195.181.252.0/23
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
94:9e:db:31:be:ad:12:f9:8e:6c:17:f5:1f:4d:3f:ba:6a:44:
fe:98:47:b2:0e:08:fb:2a:d5:95:3a:2c:8d:e8:20:f6:6f:c7:
58:7c:28:20:26:bb:8d:5e:53:8f:42:15:e5:9f:f6:8b:54:68:
13:52:e5:cd:94:92:b0:8c:87:76:5b:b9:92:78:a3:2c:95:ff:
23:1e:86:1a:b5:cf:17:51:0e:04:39:4e:28:4b:f4:2f:13:87:
c9:d3:8e:05:b2:23:62:65:f1:d5:13:42:b1:04:9d:07:f1:0a:
7c:02:69:c4:78:e7:86:2b:0d:74:85:7c:e9:18:81:d8:3b:bf:
a2:2e:23:30:d5:e1:a5:e9:b1:1e:3f:75:df:06:7e:56:76:8f:
31:34:6c:b1:64:e1:89:93:e7:7c:cc:8f:9e:e0:66:ce:87:37:
f5:fb:a6:45:a9:7d:ac:a4:6c:c3:dd:73:ac:ed:b0:5f:0e:ff:
67:0e:f2:9c:47:eb:72:a5:f3:af:2f:d7:8e:76:01:84:e1:3a:
05:e5:36:93:51:d1:8c:0a:a1:76:4b:6a:a6:e9:d8:0e:af:cc:
45:8d:33:8f:91:a7:88:2d:a8:ac:c4:9f:6d:a6:98:ec:87:cf:
be:d7:b5:2e:74:d4:28:51:23:20:20:73:f2:87:9a:d2:3b:f0:
96:f8:61:a6
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAYw+OQvEWeGIqIHhPJlrpyxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjMxMjA2MDgyMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDg1YWE5YzJhYzZkMGRlOTBiMGYxZjAxNzFkNTEzY2VmM2E0NjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvofFOQPmMYlkKKZTTuA+CodsLm4h
xJzS/PQOqaww76i8BeficNCxGx74dcBlMYzPXm0FJDpZ76Gb39nJCYuOa4u+7jyE
hx+bwYW/cbR0rsPjPQsW0sb/WsGCQFIDsVrqwwrrF5+8Qe/oVLN6MdbLBRFpgFAo
paTvxAJd4qIktH5vb7Eoxl0t7Es5mysGXnJQt5OEGd/wewIO3zSY/C1+huzVdy7s
lG+TkhIaoQJofZtPzGnfqLDvmxa6R+rQOVMLJBPBKdP63B16dPKvAYd2lvd/IW1C
BLFLZR+5fq/HSk2lDyCOl2P2cPMeoMkmTVtmZtJn7jNwUr3yy8d8yQB9vwIDAQAB
o4ICdDCCAnAwHQYDVR0OBBYEFJ2FqpwqxtDekLDx8BcdUTzvOkZRMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvbllXcW5DckcwTjZRc1BId0Z4MVJQTzg2UmxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEAgU91AME
AQW7JgMEAl+czAMEAblZHAMEALlZHwMEAbloPDAMAwQAuWiZAwQCuWiYAwQBuXq6
AwQAuZ3UAwQBuZ3WAwQAuaG4AwQAubwRAwQAubwTAwQCucLQAwQBw7X8MAwDBADZ
PfEDBALZPfAwDQYJKoZIhvcNAQELBQADggEBAJSe2zG+rRL5jmwX9R9NP7pqRP6Y
R7IOCPsq1ZU6LI3oIPZvx1h8KCAmu41eU49CFeWf9otUaBNS5c2UkrCMh3ZbuZJ4
oyyV/yMehhq1zxdRDgQ5TihL9C8Th8nTjgWyI2Jl8dUTQrEEnQfxCnwCacR454Yr
DXSFfOkYgdg7v6IuIzDV4aXpsR4/dd8GflZ2jzE0bLFk4YmT53zMj57gZs6HN/X7
pkWpfaykbMPdc6ztsF8O/2cO8pxH63Kl868v1452AYThOgXlNpNR0YwKoXZLaqbp
2A6vzEWNM4+Rp4gtqKzEn22mmOyHz77XtS501ChRIyAgc/KHmtI78Jb4YaY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org