Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AgOAROxUV1eOmf0Vlw8ELN8BSGM.roa
File: AgOAROxUV1eOmf0Vlw8ELN8BSGM.roa (raw, json)
Hash identifier: 2LWA4mv+iduGjD7RvOHuqiBNlFYpnqzNDHlNaRkRYVY=
Subject key identifier: 02:03:80:44:EC:54:57:57:8E:99:FD:15:97:0F:04:2C:DF:01:48:63
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018A5EF1E1B702D7546FBA61614BBB64A517
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AgOAROxUV1eOmf0Vlw8ELN8BSGM.roa
Signing time: Mon 04 Sep 2023 06:47:04 +0000
ROA not before: Mon 04 Sep 2023 06:47:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.33.14.0/24 maxlen: 24
193.19.106.0/24 maxlen: 24
213.32.250.0/24 maxlen: 24
213.32.248.0/24 maxlen: 24
213.32.249.0/24 maxlen: 24
213.32.251.0/24 maxlen: 24
103.205.24.0/24 maxlen: 24
103.205.26.0/24 maxlen: 24
103.205.25.0/24 maxlen: 24
103.205.27.0/24 maxlen: 24
188.214.27.0/24 maxlen: 24
185.230.250.0/24 maxlen: 24
185.230.248.0/24 maxlen: 24
185.230.251.0/24 maxlen: 24
185.230.249.0/24 maxlen: 24
192.166.212.0/22 maxlen: 24
193.42.52.0/24 maxlen: 24
193.42.53.0/24 maxlen: 24
193.42.54.0/23 maxlen: 24
185.9.54.0/24 maxlen: 24
62.197.132.0/24 maxlen: 24
62.197.134.0/24 maxlen: 24
62.197.133.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
185.103.72.0/24 maxlen: 24
185.103.74.0/24 maxlen: 24
185.103.73.0/24 maxlen: 24
185.115.146.0/24 maxlen: 24
185.115.147.0/24 maxlen: 24
77.75.62.0/24 maxlen: 24
77.75.60.0/24 maxlen: 24
77.75.63.0/24 maxlen: 24
194.4.158.0/24 maxlen: 24
194.4.156.0/23 maxlen: 24
194.4.159.0/24 maxlen: 24
185.115.144.0/24 maxlen: 24
185.115.144.0/23 maxlen: 24
185.115.145.0/24 maxlen: 24
78.142.242.0/24 maxlen: 24
78.142.242.0/23 maxlen: 24
78.142.241.0/24 maxlen: 24
45.159.152.0/24 maxlen: 24
45.159.154.0/24 maxlen: 24
45.159.153.0/24 maxlen: 24
45.159.155.0/24 maxlen: 24
89.38.101.0/24 maxlen: 24
89.40.160.0/24 maxlen: 24
185.229.104.0/24 maxlen: 24
185.229.105.0/24 maxlen: 24
185.229.106.0/24 maxlen: 24
185.229.107.0/24 maxlen: 24
203.0.9.0/24 maxlen: 24
89.43.210.0/23 maxlen: 24
185.245.238.0/24 maxlen: 24
185.245.237.0/24 maxlen: 24
89.43.211.0/24 maxlen: 24
89.43.209.0/24 maxlen: 24
185.245.236.0/24 maxlen: 24
203.0.8.0/24 maxlen: 24
89.43.208.0/24 maxlen: 24
89.43.212.0/22 maxlen: 24
89.43.210.0/24 maxlen: 24
185.245.239.0/24 maxlen: 24
103.212.82.0/24 maxlen: 24
89.47.89.0/24 maxlen: 24
185.121.229.0/24 maxlen: 24
178.239.201.0/24 maxlen: 24
185.121.231.0/24 maxlen: 24
178.239.203.0/24 maxlen: 24
185.121.228.0/24 maxlen: 24
178.239.200.0/24 maxlen: 24
178.239.202.0/24 maxlen: 24
185.121.230.0/24 maxlen: 24
93.114.246.0/24 maxlen: 24
185.236.60.0/24 maxlen: 24
185.236.62.0/24 maxlen: 24
185.236.63.0/24 maxlen: 24
185.236.61.0/24 maxlen: 24
223.27.112.0/24 maxlen: 24
223.27.114.0/24 maxlen: 24
178.239.192.0/23 maxlen: 24
178.239.192.0/24 maxlen: 24
178.239.193.0/24 maxlen: 24
178.239.195.0/24 maxlen: 24
178.239.194.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:f1:e1:b7:02:d7:54:6f:ba:61:61:4b:bb:64:a5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 4 06:47:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02038044ec5457578e99fd15970f042cdf014863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:c2:11:48:51:1e:d6:3a:7c:33:91:30:52:
cc:fa:4e:81:d8:63:ac:5b:3b:e6:6d:f6:df:b8:f9:
e0:35:73:4a:23:13:a6:8b:69:6c:07:be:f4:b8:90:
a8:cd:4e:ef:16:36:6e:8e:15:9f:fd:1a:dc:7f:32:
1b:0c:2a:ab:8b:b2:a8:29:2c:14:b9:dd:62:9b:e5:
ba:34:83:5c:da:61:7b:9c:e8:e5:3a:a5:22:59:31:
c0:75:d9:9a:5f:fe:05:80:90:52:56:11:be:bd:29:
23:f7:d6:6e:54:07:d7:a0:0b:14:81:2e:4f:92:13:
2c:47:f6:8a:6e:73:43:de:87:8c:7b:31:a4:97:1c:
7d:76:2b:4e:3b:f1:93:cd:14:a5:7f:cc:f7:1a:1a:
fd:d7:31:32:92:b8:52:38:51:8e:64:66:32:57:12:
aa:fc:09:57:25:b7:63:5e:7b:e8:fd:47:cc:08:48:
77:48:86:cc:a2:a5:13:22:99:af:c9:a9:d7:70:dd:
5d:4e:28:6e:5d:a1:ef:c9:ce:0c:bc:e9:f6:8f:2f:
03:09:13:6e:a3:72:30:d7:9f:a8:e2:73:ca:04:ae:
9c:40:ea:b6:73:89:ba:73:8a:c0:68:9d:10:6d:25:
ba:5d:2f:87:b5:3e:15:a4:d3:57:c3:90:0d:4e:f0:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:03:80:44:EC:54:57:57:8E:99:FD:15:97:0F:04:2C:DF:01:48:63
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AgOAROxUV1eOmf0Vlw8ELN8BSGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0/22
62.197.132.0/22
77.75.60.0/24
77.75.62.0/23
78.142.241.0-78.142.243.255
89.33.14.0/24
89.38.101.0/24
89.40.160.0/24
89.43.208.0/21
89.47.89.0/24
93.114.246.0/24
103.205.24.0/22
103.212.82.0/24
178.239.192.0/22
178.239.200.0/22
185.9.54.0/24
185.103.72.0-185.103.74.255
185.115.144.0/22
185.121.228.0/22
185.229.104.0/22
185.230.248.0/22
185.236.60.0/22
185.245.236.0/22
188.214.27.0/24
192.166.212.0/22
193.19.106.0/24
193.42.52.0/22
194.4.156.0/22
203.0.8.0/23
213.32.248.0/22
223.27.112.0/24
223.27.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a4:76:32:27:b7:6f:2f:de:8b:51:27:6f:83:41:76:ea:1d:
10:a7:0b:73:9e:41:bd:19:d7:ae:86:97:ee:8f:5d:1a:f4:48:
05:76:1d:3c:06:d5:07:d3:64:19:79:68:4e:ef:67:45:2e:e7:
1e:b5:95:c2:e3:59:21:cc:15:e3:c9:4a:52:cc:5e:47:05:77:
0d:db:c9:e9:9e:32:f9:e3:7d:ef:65:86:ed:47:b8:33:40:20:
73:97:71:da:43:3c:f8:5b:88:62:24:e8:a1:e6:29:b1:97:f1:
e1:2d:b7:8c:28:85:1c:c9:f8:bc:a7:03:19:88:bb:1a:b8:85:
6a:e6:ea:42:a4:e4:94:ac:9f:d9:5c:a1:5b:ae:06:86:4b:bf:
55:85:71:d6:35:3e:6f:4d:08:25:fc:69:b0:73:cb:b8:b1:de:
7c:74:59:f9:aa:5e:8b:6b:6a:d0:ba:b5:47:4d:99:f8:04:f3:
a6:20:63:b3:0e:06:ee:39:6d:af:40:79:05:8f:cf:db:a5:53:
d9:60:55:67:ee:9d:17:4c:8b:c1:e0:8c:5f:83:02:42:40:31:
59:62:75:97:9b:a5:ee:c4:17:1f:c6:17:f9:af:48:6f:87:3d:
ad:94:5d:db:aa:65:43:84:94:2a:16:87:30:44:95:bb:a7:25:
66:76:3c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:44 2024 by rpki-client on console-fra.rpki-client.org