Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/wqGrvFthy-V1m-PDnr1_yr-OcNs.roa
File: wqGrvFthy-V1m-PDnr1_yr-OcNs.roa (raw, json)
Hash identifier: tJPoPY/n7NYm8gyKgeibHb/0MGmuIJCXtWXDgeP4u3k=
Subject key identifier: C2:A1:AB:BC:5B:61:CB:E5:75:9B:E3:C3:9E:BD:7F:CA:BF:8E:70:DB
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01856D8AC2830906B81EC62C4DC33D5CDF0C
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/wqGrvFthy-V1m-PDnr1_yr-OcNs.roa
Signing time: Sun 01 Jan 2023 13:34:48 +0000
ROA not before: Sun 01 Jan 2023 13:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50129
IP address blocks: 185.188.16.0/23 maxlen: 23
185.194.209.0/24 maxlen: 24
185.194.210.0/24 maxlen: 24
185.194.211.0/24 maxlen: 24
185.188.18.0/24 maxlen: 24
185.188.19.0/24 maxlen: 24
185.194.208.0/24 maxlen: 24
185.157.212.0/23 maxlen: 23
185.157.214.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.86.211.0/24 maxlen: 24
185.104.60.0/24 maxlen: 24
185.104.61.0/24 maxlen: 24
185.84.44.0/24 maxlen: 24
134.255.242.0/24 maxlen: 24
185.84.45.0/24 maxlen: 24
185.84.46.0/24 maxlen: 24
185.84.47.0/24 maxlen: 24
89.43.196.0/24 maxlen: 24
89.43.197.0/24 maxlen: 24
93.114.131.0/24 maxlen: 24
5.187.39.0/24 maxlen: 24
185.92.238.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
5.187.38.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
185.191.22.0/24 maxlen: 24
185.191.23.0/24 maxlen: 24
212.237.231.0/24 maxlen: 24
185.204.64.0/24 maxlen: 24
185.204.65.0/24 maxlen: 24
185.204.66.0/24 maxlen: 24
185.204.67.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
5.61.212.0/24 maxlen: 24
5.61.213.0/24 maxlen: 24
5.61.214.0/24 maxlen: 24
5.61.215.0/24 maxlen: 24
185.75.20.0/24 maxlen: 24
185.75.21.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.89.31.0/24 maxlen: 24
185.89.28.0/24 maxlen: 24
185.89.29.0/24 maxlen: 24
217.61.241.0/24 maxlen: 24
217.61.242.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
185.161.184.0/24 maxlen: 24
185.161.185.0/24 maxlen: 24
195.181.252.0/24 maxlen: 24
195.181.253.0/24 maxlen: 24
185.104.153.0/24 maxlen: 24
185.104.154.0/24 maxlen: 24
185.104.155.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:c2:83:09:06:b8:1e:c6:2c:4d:c3:3d:5c:df:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 13:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2a1abbc5b61cbe5759be3c39ebd7fcabf8e70db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:98:af:22:51:30:24:78:84:52:e6:24:29:
06:2b:6f:13:46:f9:69:f6:e6:01:0e:c6:8b:ff:03:
a1:1c:10:12:bc:cb:ed:94:98:40:7e:43:cc:1d:d8:
7f:7c:a5:ee:d4:75:9b:01:aa:3f:57:4b:43:35:60:
30:6b:54:32:38:1c:3c:cd:df:21:2a:20:74:d4:69:
22:a7:20:f7:9b:1e:06:4d:92:d6:3c:79:f8:16:b8:
15:59:2e:f9:e4:99:95:fd:6a:7d:a5:fa:97:0f:c7:
5b:11:84:e4:32:7e:b8:33:4b:75:40:a1:06:65:75:
73:16:ef:6b:ac:4c:18:e7:f3:7b:78:62:ca:39:82:
9f:0d:a0:37:cc:52:5f:9e:65:2c:69:2b:1f:fe:94:
61:22:e3:dd:0f:fa:78:cf:25:a5:35:17:b5:d0:7b:
88:60:6f:c6:5b:b4:05:a1:3d:29:89:be:08:f1:19:
19:c3:fe:cf:29:96:e6:62:58:99:39:90:24:0e:37:
85:c8:46:2a:26:95:60:84:fd:c0:5e:c1:fe:a2:4e:
9f:de:51:58:22:e3:69:24:cc:5c:ae:38:c5:02:b9:
f5:c5:d9:2e:f7:b7:94:d2:bd:15:6c:e1:89:0a:6b:
bb:e7:99:1e:6c:8b:92:d6:28:8e:13:1d:af:06:a4:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A1:AB:BC:5B:61:CB:E5:75:9B:E3:C3:9E:BD:7F:CA:BF:8E:70:DB
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/wqGrvFthy-V1m-PDnr1_yr-OcNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.212.0/22
5.187.38.0/23
89.43.196.0/23
93.114.131.0/24
95.156.204.0/22
134.255.242.0/24
185.75.20.0/23
185.76.78.0/23
185.84.44.0/22
185.86.211.0/24
185.89.28.0/23
185.89.31.0/24
185.92.238.0/24
185.104.60.0/23
185.104.153.0-185.104.155.255
185.122.186.0/23
185.157.212.0/22
185.161.184.0/23
185.188.16.0/22
185.191.20.0/22
185.194.208.0/22
185.204.64.0/22
195.181.252.0/23
212.237.231.0/24
217.61.241.0-217.61.243.255
Signature Algorithm: sha256WithRSAEncryption
1b:87:b2:e8:58:d8:97:d1:b0:b3:74:43:5a:03:7e:59:6e:ee:
f0:b4:b1:bd:90:e1:b0:18:07:41:5b:a7:4b:3e:c2:a4:cc:93:
f2:a1:fc:20:60:51:d2:d7:44:77:6b:37:27:b7:e9:e2:55:a7:
9a:d9:04:2b:09:a8:0e:6c:4c:9d:7a:2a:31:a6:4b:ce:67:7e:
89:55:ea:c8:2a:e5:ad:22:32:07:e5:ce:51:5b:f4:43:f3:90:
ff:22:a0:25:63:d7:fa:d6:ae:f3:4a:ce:40:36:73:12:34:68:
d4:78:b6:57:e6:0b:ed:b1:44:4b:23:cd:62:fa:cf:14:06:b2:
71:56:b4:37:ec:8b:bf:10:f6:98:a1:8d:25:89:b0:09:08:eb:
a8:5f:c6:55:f3:ed:98:b0:eb:b1:6a:a0:9d:89:0c:20:33:27:
ad:af:e8:ed:e3:71:03:15:e0:2d:f3:2d:59:d8:9a:0a:56:37:
a0:e3:bc:6e:ec:64:76:33:15:cc:c3:50:94:c0:b4:8c:b4:94:
0c:51:c9:1f:ac:1f:49:ff:7a:e8:fa:ae:46:3f:bd:48:7d:45:
8d:54:07:4c:66:e1:ec:fe:7a:f0:3f:b3:86:74:e0:c8:cf:d1:
e1:dc:2a:19:6f:38:eb:51:a8:73:34:d7:cc:17:3d:f3:38:07:
61:49:15:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org