Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/8ymuIKbZSn_LfoIk9daPuDk8pMM.roa
File: 8ymuIKbZSn_LfoIk9daPuDk8pMM.roa (raw, json)
Hash identifier: 4g2uFEQNzHbgrFaw4abwQqBCGGc9zb3YvGhIE8RXIIY=
Subject key identifier: F3:29:AE:20:A6:D9:4A:7F:CB:7E:82:24:F5:D6:8F:B8:39:3C:A4:C3
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 018648000C8F901772B8F92E2DA95B5E9EE2
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/8ymuIKbZSn_LfoIk9daPuDk8pMM.roa
Signing time: Sun 12 Feb 2023 23:40:08 +0000
ROA not before: Sun 12 Feb 2023 23:40:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56630
IP address blocks: 45.141.8.0/22 maxlen: 24
185.224.248.0/22 maxlen: 24
185.6.12.0/23 maxlen: 24
185.6.14.0/23 maxlen: 24
45.150.232.0/22 maxlen: 24
195.238.124.0/22 maxlen: 24
185.140.209.0/24 maxlen: 24
185.140.208.0/24 maxlen: 24
185.131.64.0/24 maxlen: 24
185.131.66.0/24 maxlen: 24
185.131.65.0/24 maxlen: 24
185.131.67.0/24 maxlen: 24
88.218.240.0/22 maxlen: 24
217.30.8.0/22 maxlen: 24
194.59.46.0/24 maxlen: 24
185.140.12.0/22 maxlen: 24
194.59.59.0/24 maxlen: 24
194.59.155.0/24 maxlen: 24
91.201.64.0/22 maxlen: 24
194.59.142.0/24 maxlen: 24
213.183.36.0/24 maxlen: 24
213.183.38.0/24 maxlen: 24
213.183.37.0/24 maxlen: 24
213.183.33.0/24 maxlen: 24
213.183.32.0/24 maxlen: 24
5.182.228.0/22 maxlen: 24
213.183.39.0/24 maxlen: 24
213.183.41.0/24 maxlen: 24
213.183.40.0/24 maxlen: 24
213.183.43.0/24 maxlen: 24
213.183.42.0/24 maxlen: 24
213.183.44.0/24 maxlen: 24
213.183.50.0/24 maxlen: 24
213.183.49.0/24 maxlen: 24
88.210.38.0/24 maxlen: 24
213.183.51.0/24 maxlen: 24
213.183.45.0/24 maxlen: 24
213.183.46.0/24 maxlen: 24
213.183.48.0/24 maxlen: 24
213.183.47.0/24 maxlen: 24
213.183.52.0/24 maxlen: 24
88.210.39.0/24 maxlen: 24
213.183.53.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
213.183.54.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.58.0/24 maxlen: 24
77.72.16.0/23 maxlen: 24
213.183.59.0/24 maxlen: 24
213.183.60.0/24 maxlen: 24
213.183.62.0/24 maxlen: 24
213.183.61.0/24 maxlen: 24
77.72.18.0/23 maxlen: 24
77.72.20.0/23 maxlen: 24
77.72.22.0/23 maxlen: 24
213.183.63.0/24 maxlen: 24
92.119.88.0/22 maxlen: 24
91.192.83.0/24 maxlen: 24
91.192.81.0/24 maxlen: 24
91.192.80.0/24 maxlen: 24
5.188.172.0/24 maxlen: 24
5.188.173.0/24 maxlen: 24
5.188.180.0/22 maxlen: 24
185.246.152.0/24 maxlen: 24
185.246.153.0/24 maxlen: 24
185.246.155.0/24 maxlen: 24
185.246.154.0/24 maxlen: 24
45.135.120.0/22 maxlen: 24
31.40.216.0/22 maxlen: 24
213.226.68.0/22 maxlen: 24
93.189.58.0/24 maxlen: 24
93.189.57.0/24 maxlen: 24
185.135.84.0/22 maxlen: 24
93.189.56.0/24 maxlen: 24
93.189.61.0/24 maxlen: 24
93.189.60.0/24 maxlen: 24
93.189.63.0/24 maxlen: 24
93.189.62.0/24 maxlen: 24
2a06:f906::/36 maxlen: 36
2a06:f903::/36 maxlen: 36
2a06:f905::/36 maxlen: 36
2a06:f900:4000::/36 maxlen: 36
2a06:f900::/36 maxlen: 36
2a06:f902::/36 maxlen: 36
2a06:f904::/36 maxlen: 36
2a06:f907:4000::/36 maxlen: 36
2a06:f907::/36 maxlen: 36
2a06:f901::/36 maxlen: 36
2a0d:8400::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:48:00:0c:8f:90:17:72:b8:f9:2e:2d:a9:5b:5e:9e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Feb 12 23:40:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f329ae20a6d94a7fcb7e8224f5d68fb8393ca4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:db:e9:a0:e4:a8:31:1b:81:ea:60:87:bd:
74:66:b6:cd:c0:99:da:39:d7:ce:2d:38:a7:8f:6c:
7e:55:43:3a:67:63:cb:42:86:50:f8:7c:f5:45:d6:
83:c6:93:91:dc:90:2b:46:11:a0:5d:6e:d0:5f:67:
88:d3:75:26:3c:14:6d:ea:74:70:4b:b0:d3:33:55:
b8:e9:8c:5a:bc:fd:4c:1f:30:ca:06:68:23:bf:f6:
3d:2e:61:15:76:e8:e8:f7:65:61:e3:a0:11:b7:67:
7c:e2:77:0f:ce:03:37:4a:68:e3:73:22:8b:7b:b3:
0e:8e:39:ee:cc:5e:ca:d2:b4:32:20:08:fa:83:38:
e7:7f:c0:8b:b1:12:a8:ba:9b:ce:ef:3d:cd:ea:7a:
4e:71:08:58:28:10:d9:8d:38:29:58:e2:3d:7b:da:
f2:85:6a:27:b0:3c:4f:22:60:7a:ca:b1:e0:db:fc:
16:5e:af:09:b8:87:d9:52:08:ef:34:06:4c:37:0d:
76:a4:81:5d:fb:46:0d:e3:76:f0:7e:71:69:25:3d:
8a:d6:e3:e9:d9:b0:43:c3:a1:22:5c:ae:cc:a1:e4:
0f:6f:51:60:41:64:d0:3e:a8:95:25:2e:09:a1:2b:
7f:3e:07:86:c2:d9:5e:95:77:3e:8a:4d:b1:c6:ca:
d3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:29:AE:20:A6:D9:4A:7F:CB:7E:82:24:F5:D6:8F:B8:39:3C:A4:C3
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/8ymuIKbZSn_LfoIk9daPuDk8pMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.228.0/22
5.188.172.0/23
5.188.180.0/22
31.40.216.0/22
45.135.120.0/22
45.141.8.0/22
45.150.232.0/22
77.72.16.0/21
88.210.38.0/23
88.218.240.0/22
91.192.80.0/23
91.192.83.0/24
91.201.64.0/22
92.119.88.0/22
93.189.56.0-93.189.58.255
93.189.60.0/22
185.6.12.0/22
185.131.64.0/22
185.135.84.0/22
185.140.12.0/22
185.140.208.0/23
185.224.248.0/22
185.246.152.0/22
194.59.46.0/24
194.59.59.0/24
194.59.142.0/24
194.59.155.0/24
195.238.124.0/22
213.183.32.0/23
213.183.36.0-213.183.63.255
213.226.68.0/22
217.30.8.0/22
IPv6:
2a06:f900::/36
2a06:f900:4000::/36
2a06:f901::/36
2a06:f902::/36
2a06:f903::/36
2a06:f904::/36
2a06:f905::/36
2a06:f906::/36
2a06:f907::/36
2a06:f907:4000::/36
2a0d:8400::/32
Signature Algorithm: sha256WithRSAEncryption
63:67:ee:f7:f1:d5:2b:89:38:bf:e5:58:25:ae:90:70:ab:bc:
f4:98:60:70:17:aa:ca:fb:d2:fb:ba:23:ef:b4:1d:51:67:ac:
bb:00:50:ea:4d:13:c3:44:db:ec:6a:32:8d:16:67:39:b9:c1:
fa:56:f4:05:33:e8:80:21:a5:c3:aa:05:16:59:4a:ad:21:ab:
e1:2d:ec:bf:ee:86:5a:c5:58:91:73:c6:f3:b2:f9:36:97:8f:
a1:3e:76:d9:f1:45:ec:08:e9:f4:c0:70:d4:dd:a9:71:22:7a:
52:69:68:16:cc:d6:fd:3d:70:ec:e2:ae:0b:3b:75:04:cf:c9:
5e:f6:fb:1b:e2:cc:ca:a3:1a:48:e4:08:d8:fc:d9:dd:55:67:
8e:a5:77:19:64:0d:2e:86:53:12:ad:a0:71:fe:52:2c:7a:99:
2a:30:aa:fe:b9:78:de:ab:ae:9e:17:6e:03:bc:e3:af:1f:f6:
fb:0e:43:93:f3:b5:9b:52:e5:46:8e:2f:57:bd:bc:3f:9e:38:
e0:11:a0:1e:15:bc:ab:45:a2:3c:30:6d:ed:ec:0d:83:9c:48:
73:f3:a2:03:13:83:c3:30:35:1d:7f:9b:b3:1c:e2:30:7f:c0:
75:f1:6f:1f:5f:63:9b:66:86:ae:4f:96:b8:0b:45:2e:62:1c:
bb:ff:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:37 2024 by rpki-client on console-ams.rpki-client.org