Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/qOUJVGsZzCARElVItXOw3ph_TFU.roa
File: qOUJVGsZzCARElVItXOw3ph_TFU.roa (raw, json)
Hash identifier: LHc6tRGletUWO181broZCPa3ONfTXdyjKZMx2rNRfAo=
Subject key identifier: A8:E5:09:54:6B:19:CC:20:11:12:55:48:B5:73:B0:DE:98:7F:4C:55
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 0193B52CB743BB52D29E4C93881DBEFE9890
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/qOUJVGsZzCARElVItXOw3ph_TFU.roa
Signing time: Wed 11 Dec 2024 10:03:46 +0000
ROA not before: Wed 11 Dec 2024 10:03:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198193
IP address blocks: 5.61.208.0/23 maxlen: 23
5.181.96.0/23 maxlen: 23
5.187.35.0/24 maxlen: 24
5.187.36.0/23 maxlen: 23
31.214.155.0/24 maxlen: 24
37.252.98.0/24 maxlen: 24
37.252.100.0/24 maxlen: 24
37.252.101.0/24 maxlen: 24
46.251.250.0/24 maxlen: 24
46.253.139.0/24 maxlen: 24
84.247.19.0/24 maxlen: 24
85.204.168.0/23 maxlen: 23
85.204.170.0/23 maxlen: 23
89.32.64.0/24 maxlen: 24
89.32.65.0/24 maxlen: 24
89.32.66.0/24 maxlen: 24
89.32.67.0/24 maxlen: 24
89.44.35.0/24 maxlen: 24
95.156.203.0/24 maxlen: 24
158.255.239.0/24 maxlen: 24
162.33.200.0/22 maxlen: 22
162.33.204.0/22 maxlen: 22
162.33.204.0/24 maxlen: 24
162.33.205.0/24 maxlen: 24
162.33.206.0/24 maxlen: 24
162.33.207.0/24 maxlen: 24
185.66.172.0/24 maxlen: 24
185.66.174.0/24 maxlen: 24
185.75.22.0/23 maxlen: 23
185.86.208.0/23 maxlen: 23
185.88.200.0/23 maxlen: 23
185.88.202.0/23 maxlen: 23
185.193.241.0/24 maxlen: 24
185.206.121.0/24 maxlen: 24
185.212.114.0/24 maxlen: 24
185.225.8.0/24 maxlen: 24
217.61.240.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:2c:b7:43:bb:52:d2:9e:4c:93:88:1d:be:fe:98:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Dec 11 10:03:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8e509546b19cc2011125548b573b0de987f4c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:fb:f6:9e:1a:0b:28:5c:e2:6c:c1:01:3a:
a2:e4:2a:3d:d1:ec:6c:86:a2:bf:db:bf:99:16:e8:
90:34:6b:a2:c0:db:67:f4:a8:ca:3e:03:47:d1:22:
f9:5e:f3:89:a7:b3:b2:f7:f1:21:ec:62:9b:24:4a:
18:6a:8a:a0:68:49:44:3f:4b:38:3b:d1:2a:b7:96:
28:05:27:89:e8:d3:e7:a3:7f:e6:2b:0d:b7:94:5b:
23:7c:ad:50:94:b3:19:3b:9d:95:a7:9b:f1:10:1e:
6f:2c:6a:43:93:83:78:d7:a0:d8:d0:3e:7a:6c:0b:
48:a8:67:27:c2:f3:ea:80:14:61:88:d8:50:d8:d1:
9f:c7:e2:15:cb:65:29:38:0c:ff:46:74:c0:fb:06:
31:59:1a:cb:ad:1e:c0:27:b5:b5:ca:9d:16:13:e0:
7c:a6:30:ac:b0:93:39:a6:78:68:b6:75:a9:17:e7:
5c:78:89:a0:de:71:9b:02:45:ff:f6:bb:3b:79:cf:
0d:9f:7d:1d:bf:d7:f2:01:8c:88:d4:fa:9d:db:a5:
9a:99:4d:03:6b:51:c8:12:c6:26:5a:d5:f8:b9:96:
fa:52:b8:ce:87:b2:65:73:ff:23:77:4e:4e:e2:9b:
62:bd:43:e1:67:96:04:e1:12:57:3b:be:db:8b:a1:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E5:09:54:6B:19:CC:20:11:12:55:48:B5:73:B0:DE:98:7F:4C:55
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/qOUJVGsZzCARElVItXOw3ph_TFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.208.0/23
5.181.96.0/23
5.187.35.0-5.187.37.255
31.214.155.0/24
37.252.98.0/24
37.252.100.0/23
46.251.250.0/24
46.253.139.0/24
84.247.19.0/24
85.204.168.0/22
89.32.64.0/22
89.44.35.0/24
95.156.203.0/24
158.255.239.0/24
162.33.200.0/21
185.66.172.0/24
185.66.174.0/24
185.75.22.0/23
185.86.208.0/23
185.88.200.0/22
185.193.241.0/24
185.206.121.0/24
185.212.114.0/24
185.225.8.0/24
217.61.240.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6c:73:cc:8f:91:61:b4:ba:f6:82:be:92:7d:fd:38:25:57:
ec:c3:f8:bd:53:60:76:26:9b:c3:26:88:98:b3:ab:da:d3:f4:
45:40:28:95:4b:cb:64:bf:96:5a:30:09:c4:e4:57:87:9c:e4:
fc:e5:1e:0b:4c:f3:88:52:7e:8e:12:1d:d4:cf:4b:b9:32:05:
e3:43:01:e0:f9:e3:a4:e1:00:55:d7:ff:c9:9f:0a:b8:f6:55:
85:00:6b:23:2d:e7:d2:e9:d7:82:e1:c3:06:63:4d:c6:e7:c3:
64:eb:93:bd:18:d1:ef:66:49:51:f1:0a:a1:7a:75:46:ba:02:
87:74:69:f4:50:ff:d4:13:0f:e1:e4:0a:0f:ea:2d:ae:66:77:
d3:e9:34:6d:d6:ba:af:cf:8e:f9:00:a8:8e:89:ff:0c:f3:14:
8f:37:07:a5:80:52:61:ea:ff:27:8f:eb:e6:97:6a:62:9a:94:
14:9e:b3:34:bb:37:a6:e0:cc:13:d6:bd:20:82:e6:08:fd:e0:
4a:e4:8a:cb:62:35:2a:8b:9d:2c:b2:34:12:41:1e:ed:fb:9d:
fe:5a:de:c4:fa:44:c6:0b:47:33:8e:a6:d4:d9:23:91:cc:2c:
45:83:22:d4:6b:77:60:4c:02:2b:13:2f:b9:c5:fa:e8:8d:df:
16:3d:36:6a
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZO1LLdDu1LSnkyTiB2+/piQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjQxMjExMTAwMzQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGU1MDk1NDZiMTljYzIwMTExMjU1NDhiNTczYjBkZTk4N2Y0YzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3D79p4aCyhc4mzBATqi5Co90exs
hqK/27+ZFuiQNGuiwNtn9KjKPgNH0SL5XvOJp7Oy9/Eh7GKbJEoYaoqgaElEP0s4
O9Eqt5YoBSeJ6NPno3/mKw23lFsjfK1QlLMZO52Vp5vxEB5vLGpDk4N416DY0D56
bAtIqGcnwvPqgBRhiNhQ2NGfx+IVy2UpOAz/RnTA+wYxWRrLrR7AJ7W1yp0WE+B8
pjCssJM5pnhotnWpF+dceImg3nGbAkX/9rs7ec8Nn30dv9fyAYyI1Pqd26WamU0D
a1HIEsYmWtX4uZb6UrjOh7Jlc/8jd05O4ptivUPhZ5YE4RJXO77bi6EbzQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFKjlCVRrGcwgERJVSLVzsN6Yf0xVMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvcU9VSlZHc1p6Q0FSRWxWSXRYT3czcGhfVEZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAEF
PdADBAEFtWAwDAMEAAW7IwMEAQW7JAMEAB/WmwMEACX8YgMEASX8ZAMEAC77+gME
AC79iwMEAFT3EwMEAlXMqAMEAlkgQAMEAFksIwMEAF+cywMEAJ7/7wMEA6IhyAME
ALlCrAMEALlCrgMEAblLFgMEAblW0AMEArlYyAMEALnB8QMEALnOeQMEALnUcgME
ALnhCAMEANk98DANBgkqhkiG9w0BAQsFAAOCAQEAKWxzzI+RYbS69oK+kn39OCVX
7MP4vVNgdiabwyaImLOr2tP0RUAolUvLZL+WWjAJxORXh5zk/OUeC0zziFJ+jhId
1M9LuTIF40MB4PnjpOEAVdf/yZ8KuPZVhQBrIy3n0unXguHDBmNNxufDZOuTvRjR
72ZJUfEKoXp1RroCh3Rp9FD/1BMP4eQKD+otrmZ30+k0bda6r8+O+QCojon/DPMU
jzcHpYBSYer/J4/r5pdqYpqUFJ6zNLs3puDME9a9IILmCP3gSuSKy2I1KoudLLI0
EkEe7fud/lrexPpExgtHM46m1NkjkcwsRYMi1Gt3YEwCKxMvucX66I3fFj02ag==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:31 2025 by rpki-client