Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/uO-Ro9OFM-C2o4HJcj79IxY4LZ8.roa
File: uO-Ro9OFM-C2o4HJcj79IxY4LZ8.roa (raw, json)
Hash identifier: JxOYnrYtWhYDwbLtl+ihF4xsz10uKpa3OR/QZ3D/gF0=
Subject key identifier: B8:EF:91:A3:D3:85:33:E0:B6:A3:81:C9:72:3E:FD:23:16:38:2D:9F
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018B80A4AF8D876A40F520E6CB7616EBC08A
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/uO-Ro9OFM-C2o4HJcj79IxY4LZ8.roa
Signing time: Mon 30 Oct 2023 12:52:38 +0000
ROA not before: Mon 30 Oct 2023 12:52:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.188.17.0/24 maxlen: 24
185.188.16.0/24 maxlen: 24
185.188.19.0/24 maxlen: 24
185.194.208.0/24 maxlen: 24
185.194.211.0/24 maxlen: 24
185.194.210.0/24 maxlen: 24
185.194.209.0/24 maxlen: 24
185.157.212.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
5.61.212.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.157.214.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.191.23.0/24 maxlen: 24
185.191.22.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:a4:af:8d:87:6a:40:f5:20:e6:cb:76:16:eb:c0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Oct 30 12:52:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8ef91a3d38533e0b6a381c9723efd2316382d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:10:f0:ae:bb:90:00:15:92:86:34:1d:e4:
2a:74:c9:b4:87:36:8d:bf:b1:b2:64:cb:ad:80:d1:
3d:03:1b:a0:9f:48:16:85:d5:66:c5:65:e7:31:4a:
36:14:6d:f5:80:4b:a1:0f:0c:10:90:ac:dd:e4:79:
c5:a9:26:94:ed:44:ab:21:aa:b6:40:fa:c8:54:52:
9e:43:bd:3b:ba:c4:42:52:f8:3f:b8:1f:22:28:a6:
a4:36:95:59:38:b5:6e:e6:9e:45:e8:37:9e:85:a2:
fa:f0:49:92:65:e4:4e:a9:df:df:bb:1f:08:20:44:
53:80:b1:51:53:48:31:bf:43:c6:94:ca:ef:6c:d8:
c6:54:59:15:b7:b3:13:cf:58:e2:05:71:75:24:7d:
35:6d:30:b6:64:82:89:82:69:ec:d3:f3:c1:30:9f:
bc:f2:a7:c6:3c:50:04:9d:ad:10:c5:7e:d0:e0:70:
b6:fe:96:71:b4:72:be:01:e5:60:34:06:dc:2f:2a:
b5:20:01:cb:1a:b6:07:d4:57:87:91:c1:5a:24:42:
12:7d:ce:4d:ae:95:57:00:6c:f8:4b:1c:5d:0d:f8:
4a:93:60:b5:82:68:c0:19:64:3d:bc:ca:a7:9e:8c:
36:8c:e0:eb:f9:d5:be:69:a6:f5:ce:42:61:45:df:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EF:91:A3:D3:85:33:E0:B6:A3:81:C9:72:3E:FD:23:16:38:2D:9F
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/uO-Ro9OFM-C2o4HJcj79IxY4LZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/23
95.156.204.0/22
185.76.78.0/23
185.89.28.0/23
185.89.31.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/24
185.157.214.0/23
185.161.184.0/24
185.188.16.0/23
185.188.19.0/24
185.191.20.0/22
185.194.208.0/22
195.181.252.0/23
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
25:e1:ee:1c:ec:17:ff:06:85:a6:7f:02:64:7f:f9:27:85:8c:
d0:ae:66:8b:05:8a:83:46:2e:76:76:f2:07:5e:2f:b9:50:1a:
67:19:4b:db:d5:b5:bb:9c:4a:c6:5e:93:67:23:c2:aa:6c:91:
d0:d5:20:8f:4c:df:a3:27:f9:3f:d5:ef:da:32:de:2e:bb:62:
b1:d5:30:b8:e2:fa:18:b2:55:e0:a0:4c:c5:a0:26:4e:9e:d9:
31:e6:43:e0:dc:f5:af:9e:15:bf:2e:18:fd:81:77:0c:2b:94:
a2:f0:5f:c9:46:95:44:ac:c6:cd:88:6d:00:ba:5b:ef:52:3e:
c7:eb:59:80:f5:a0:89:1c:c1:a5:6c:cf:37:75:ca:bb:45:81:
5c:d1:cd:8d:24:5e:4d:47:ba:ab:a7:9a:7d:a6:c9:f8:2d:1b:
6f:9d:15:56:b0:8c:18:e9:28:ea:a1:ba:ef:82:81:c3:bf:60:
57:a9:4b:e8:8f:ae:5f:73:00:df:33:bb:04:67:43:08:cc:7b:
7f:12:d6:74:90:cf:fc:fa:93:d5:6e:52:5d:cd:47:63:b0:6b:
83:2e:e7:de:26:b0:a2:55:6e:5a:d0:c9:d3:9a:f2:57:40:c1:
6b:94:c6:9c:ae:b3:30:bd:a3:33:e8:8b:03:ca:32:39:9e:56:
55:63:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org