Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/AQXyYFG7n0wQm0erBbSXEproq8A.roa
File: AQXyYFG7n0wQm0erBbSXEproq8A.roa (raw, json)
Hash identifier: PbJMKz417Oko0NZeV2+CgKDmVmTEEBDjaniXVIKNOQc=
Subject key identifier: 01:05:F2:60:51:BB:9F:4C:10:9B:47:AB:05:B4:97:12:9A:E8:AB:C0
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 12180DAC
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/AQXyYFG7n0wQm0erBbSXEproq8A.roa
Signing time: Thu 21 Apr 2022 07:12:37 +0000
ROA not before: Thu 21 Apr 2022 07:12:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51440
IP address blocks: 46.32.219.0/24 maxlen: 24
46.32.218.0/24 maxlen: 24
46.32.217.0/24 maxlen: 24
46.32.216.0/21 maxlen: 21
46.32.216.0/24 maxlen: 24
46.32.215.0/24 maxlen: 24
46.32.214.0/24 maxlen: 24
46.32.223.0/24 maxlen: 24
46.32.222.0/24 maxlen: 24
46.32.221.0/24 maxlen: 24
46.32.220.0/24 maxlen: 24
37.60.145.0/24 maxlen: 24
37.60.144.0/21 maxlen: 21
95.215.131.0/24 maxlen: 24
37.60.144.0/24 maxlen: 24
95.215.130.0/24 maxlen: 24
95.215.129.0/24 maxlen: 24
95.215.128.0/22 maxlen: 22
95.215.128.0/24 maxlen: 24
37.60.151.0/24 maxlen: 24
37.60.150.0/24 maxlen: 24
37.60.149.0/24 maxlen: 24
37.60.148.0/24 maxlen: 24
37.60.147.0/24 maxlen: 24
37.60.146.0/24 maxlen: 24
31.25.78.0/24 maxlen: 24
31.25.77.0/24 maxlen: 24
31.25.76.0/24 maxlen: 24
31.25.75.0/24 maxlen: 24
31.25.74.0/24 maxlen: 24
31.25.72.0/21 maxlen: 21
31.25.73.0/24 maxlen: 24
31.25.72.0/24 maxlen: 24
31.25.79.0/24 maxlen: 24
46.32.192.0/21 maxlen: 21
46.32.192.0/24 maxlen: 24
46.32.192.0/19 maxlen: 19
46.32.199.0/24 maxlen: 24
46.32.198.0/24 maxlen: 24
46.32.197.0/24 maxlen: 24
46.32.196.0/24 maxlen: 24
46.32.195.0/24 maxlen: 24
46.32.194.0/24 maxlen: 24
46.32.193.0/24 maxlen: 24
46.32.206.0/24 maxlen: 24
46.32.205.0/24 maxlen: 24
46.32.204.0/24 maxlen: 24
46.32.203.0/24 maxlen: 24
46.32.202.0/24 maxlen: 24
46.32.201.0/24 maxlen: 24
46.32.200.0/24 maxlen: 24
46.32.200.0/21 maxlen: 21
46.32.213.0/24 maxlen: 24
46.32.212.0/24 maxlen: 24
46.32.211.0/24 maxlen: 24
46.32.210.0/24 maxlen: 24
46.32.209.0/24 maxlen: 24
46.32.208.0/24 maxlen: 24
46.32.208.0/21 maxlen: 21
46.32.207.0/24 maxlen: 24
188.227.233.0/24 maxlen: 24
188.227.232.0/21 maxlen: 21
188.227.232.0/24 maxlen: 24
188.227.239.0/24 maxlen: 24
188.227.238.0/24 maxlen: 24
188.227.237.0/24 maxlen: 24
188.227.236.0/24 maxlen: 24
188.227.235.0/24 maxlen: 24
5.34.166.0/24 maxlen: 24
5.34.165.0/24 maxlen: 24
5.34.164.0/24 maxlen: 24
5.34.163.0/24 maxlen: 24
5.34.162.0/24 maxlen: 24
5.34.161.0/24 maxlen: 24
5.34.160.0/24 maxlen: 24
5.34.160.0/21 maxlen: 21
5.34.167.0/24 maxlen: 24
46.28.139.0/24 maxlen: 24
46.28.138.0/24 maxlen: 24
46.28.137.0/24 maxlen: 24
46.28.136.0/21 maxlen: 21
46.28.136.0/24 maxlen: 24
46.28.143.0/24 maxlen: 24
46.28.142.0/24 maxlen: 24
46.28.141.0/24 maxlen: 24
46.28.140.0/24 maxlen: 24
195.35.85.0/24 maxlen: 24
37.122.159.0/24 maxlen: 24
37.122.158.0/23 maxlen: 23
37.122.158.0/24 maxlen: 24
31.13.166.0/24 maxlen: 24
31.13.165.0/24 maxlen: 24
31.13.164.0/24 maxlen: 24
31.13.163.0/24 maxlen: 24
31.13.161.0/24 maxlen: 24
31.13.167.0/24 maxlen: 24
185.7.123.0/24 maxlen: 24
185.7.122.0/24 maxlen: 24
185.7.121.0/24 maxlen: 24
185.7.120.0/22 maxlen: 22
185.7.120.0/24 maxlen: 24
2a03:2940::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303566252 (0x12180dac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Apr 21 07:12:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0105f26051bb9f4c109b47ab05b497129ae8abc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0b:92:7a:f3:e9:aa:bd:b7:e0:8e:0b:57:66:
e8:ab:91:60:d1:14:04:a0:f7:3b:39:cd:95:e4:b2:
80:e0:b3:39:7f:47:d4:0c:5b:ef:f3:80:0f:4c:b3:
d2:a1:cd:87:e1:c7:dd:9f:04:d3:10:5d:40:7d:d2:
38:f7:a5:38:9e:a7:4f:8b:7d:64:8b:d0:06:44:ea:
ef:7e:92:27:27:4a:52:c6:29:24:be:c5:83:af:ca:
34:ee:a4:2d:35:74:1b:a4:87:b3:5a:da:de:89:88:
34:b9:08:fe:10:02:01:94:39:2b:8f:0d:80:91:83:
7f:11:5f:a6:ad:dc:55:1b:79:54:25:c5:c9:da:95:
89:4b:8f:21:18:93:05:a3:1b:79:cf:e9:5a:0a:62:
6f:51:97:05:e6:81:33:46:7a:af:5b:fd:3c:a7:ba:
09:a1:f9:d4:30:d0:f8:03:2a:b2:52:0c:0a:ca:26:
4e:d0:7c:5a:24:8a:96:04:fd:b3:b2:01:6d:f2:36:
7d:d3:49:48:80:6c:df:6d:1c:36:29:ad:fd:e1:cc:
0a:35:a0:b0:19:25:22:0b:cf:eb:91:5b:33:62:1a:
e3:73:56:e1:c6:35:b2:e2:6a:a2:45:40:7b:78:e6:
25:b4:82:dd:7c:01:d7:5c:cd:6c:27:9a:cb:75:a8:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:05:F2:60:51:BB:9F:4C:10:9B:47:AB:05:B4:97:12:9A:E8:AB:C0
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/AQXyYFG7n0wQm0erBbSXEproq8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.160.0/21
31.13.161.0/24
31.13.163.0-31.13.167.255
31.25.72.0/21
37.60.144.0/21
37.122.158.0/23
46.28.136.0/21
46.32.192.0/19
95.215.128.0/22
185.7.120.0/22
188.227.232.0/21
195.35.85.0/24
IPv6:
2a03:2940::/32
Signature Algorithm: sha256WithRSAEncryption
93:49:00:16:f2:ce:b7:e7:73:d4:0a:c9:84:54:65:27:80:c6:
da:4f:50:4f:bf:d2:3c:7a:5b:68:af:8e:82:88:25:1a:54:76:
cf:a0:d6:08:54:4d:b0:09:22:36:23:04:92:6f:19:19:cb:27:
27:37:66:de:46:ed:01:10:56:74:48:8d:23:c1:71:54:5a:09:
70:2b:88:7e:d6:b6:dd:6f:76:da:1d:35:a9:84:f6:ac:bd:d9:
08:1b:7d:a7:ff:99:86:70:f2:62:23:1c:5f:c5:f2:2d:a1:c3:
71:87:0f:99:4c:5c:0c:4b:6b:87:61:e9:10:f8:ba:b2:cc:6b:
bb:85:cf:3b:b0:70:a3:b9:66:bd:00:1e:d0:7c:20:04:5d:ad:
d9:69:89:fa:5b:28:13:ae:7a:7e:92:09:65:a7:81:b2:d4:fa:
2c:93:4a:85:3e:29:8c:48:56:ba:63:b0:0c:1f:a7:06:67:55:
7e:60:54:56:bf:ae:87:e5:a5:10:9c:a9:cb:b1:ae:2a:1f:79:
7b:e9:7c:66:5f:d7:d5:ed:28:9b:53:28:a3:a7:98:eb:d2:5e:
ef:2e:f2:37:c7:fe:9f:3c:01:7c:6a:6a:fd:38:47:69:e4:a6:
4f:f5:2d:55:43:9a:7c:cc:21:a8:85:98:4e:ba:71:db:fe:8e:
b4:9b:2f:02
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIEEhgNrDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjU3NzI1YjBhNjA1ZDRkZGNjNDY0YjcwZGNiM2ExNjJhNWYwNTViMB4XDTIyMDQy
MTA3MTIzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDEwNWYyNjA1MWJi
OWY0YzEwOWI0N2FiMDViNDk3MTI5YWU4YWJjMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOULknrz6aq9t+COC1dm6KuRYNEUBKD3OznNleSygOCzOX9H
1Axb7/OAD0yz0qHNh+HH3Z8E0xBdQH3SOPelOJ6nT4t9ZIvQBkTq736SJydKUsYp
JL7Fg6/KNO6kLTV0G6SHs1ra3omINLkI/hACAZQ5K48NgJGDfxFfpq3cVRt5VCXF
ydqViUuPIRiTBaMbec/pWgpib1GXBeaBM0Z6r1v9PKe6CaH51DDQ+AMqslIMCsom
TtB8WiSKlgT9s7IBbfI2fdNJSIBs320cNimt/eHMCjWgsBklIgvP65FbM2Ia43NW
4cY1suJqokVAe3jmJbSC3XwB11zNbCeay3WoeKMCAwEAAaOCAmIwggJeMB0GA1Ud
DgQWBBQBBfJgUbufTBCbR6sFtJcSmuirwDAfBgNVHSMEGDAWgBRLV3JbCmBdTdzE
ZLcNyzoWKl8FWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1MxZHlXd3BnWFUzY3hHUzNEY3M2RmlwZkJWcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvZTAwNWMyLWFmZmEtNDU4Zi1hYWY4LThhZjU2ZTczMzYwMC8x
L0FRWHlZRkc3bjB3UW0wZXJCYlNYRXByb3E4QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
ZTAwNWMyLWFmZmEtNDU4Zi1hYWY4LThhZjU2ZTczMzYwMC8xL1MxZHlXd3BnWFUz
Y3hHUzNEY3M2RmlwZkJWcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB4
BggrBgEFBQcBBwEB/wRpMGcwVgQCAAEwUAMEAwUioAMEAB8NoTAMAwQAHw2jAwQD
Hw2gAwQDHxlIAwQDJTyQAwQBJXqeAwQDLhyIAwQFLiDAAwQCX9eAAwQCuQd4AwQD
vOPoAwQAwyNVMA0EAgACMAcDBQAqAylAMA0GCSqGSIb3DQEBCwUAA4IBAQCTSQAW
8s6353PUCsmEVGUngMbaT1BPv9I8eltor46CiCUaVHbPoNYIVE2wCSI2IwSSbxkZ
yycnN2beRu0BEFZ0SI0jwXFUWglwK4h+1rbdb3baHTWphPasvdkIG32n/5mGcPJi
IxxfxfItocNxhw+ZTFwMS2uHYekQ+LqyzGu7hc87sHCjuWa9AB7QfCAEXa3ZaYn6
WygTrnp+kgllp4Gy1Posk0qFPimMSFa6Y7AMH6cGZ1V+YFRWv66H5aUQnKnLsa4q
H3l76XxmX9fV7SibUyijp5jr0l7vLvI3x/6fPAF8amr9OEdp5KZP9S1VQ5p8zCGo
hZhOunHb/o60my8C
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:07 2024 by rpki-client on console-fra.rpki-client.org