Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1-cmQd7YMlR7KniHADkGsWSYwJuQ.roa
File: 1-cmQd7YMlR7KniHADkGsWSYwJuQ.roa (raw, json)
Hash identifier: Hg/xr38MQBarsBtjB+kXCV6JtyntigVGVdnRlPTnwWs=
Subject key identifier: F9:C9:90:77:B6:0C:95:1E:CA:9E:21:C0:0E:41:AC:59:26:30:26:E4
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018969C72B109D94AED598AD2B723DD4146F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1-cmQd7YMlR7KniHADkGsWSYwJuQ.roa
Signing time: Tue 18 Jul 2023 16:13:27 +0000
ROA not before: Tue 18 Jul 2023 16:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.205.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.201.0/24 maxlen: 24
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0c:77c0::/29 maxlen: 29
2a0a:9300:d0::/48 maxlen: 48
2a0d:3880::/29 maxlen: 29
2a0a:9302:1::/48 maxlen: 48
2a0f:4680::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:69:c7:2b:10:9d:94:ae:d5:98:ad:2b:72:3d:d4:14:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 18 16:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9c99077b60c951eca9e21c00e41ac59263026e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:01:a2:d5:5b:6b:6b:20:49:35:c5:e1:2e:
17:4b:62:47:00:24:21:f8:1d:54:eb:22:97:4c:45:
68:92:ff:97:24:fa:ff:99:3a:cb:86:9f:04:77:48:
87:46:a2:ea:f0:15:a6:04:3c:95:bc:79:ef:30:f4:
8a:3d:d9:68:a8:f9:25:49:2a:38:47:b3:46:9f:51:
e4:d4:86:ef:f3:be:0b:04:34:29:75:04:12:64:14:
b6:85:f7:2c:a2:36:1f:a4:de:35:62:b4:71:c6:30:
7a:ec:6a:05:cb:fa:82:2e:03:51:2c:e4:eb:f8:2c:
8d:25:5f:a6:2c:fa:a7:ef:dd:d5:0d:2b:88:79:a5:
4b:59:e9:97:55:1c:5f:0a:f1:dd:a2:d5:d6:6d:13:
d3:3c:26:ff:a6:14:9c:30:bb:7d:6c:6c:e2:56:73:
87:c1:65:55:2d:9e:22:52:3a:b6:fa:32:ab:1d:7f:
c4:4c:83:7e:6e:fd:60:30:db:1d:72:81:9b:17:a0:
e0:3a:3d:4a:cd:f5:e5:20:67:03:e1:7a:8e:4e:23:
69:c0:c6:8b:ad:62:c4:a8:b6:14:05:cc:e3:b1:57:
20:30:c2:d6:66:a7:07:75:2d:c9:a3:c9:ed:9c:b5:
24:2f:46:e5:75:2d:2f:bb:c6:db:3e:ff:d7:cd:f7:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C9:90:77:B6:0C:95:1E:CA:9E:21:C0:0E:41:AC:59:26:30:26:E4
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1-cmQd7YMlR7KniHADkGsWSYwJuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.109.85.0/24
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0c:77c0::/29
2a0d:3880::/29
2a0f:4680::/29
Signature Algorithm: sha256WithRSAEncryption
96:e5:a4:ea:78:91:b9:5d:90:37:c7:4d:ab:70:78:4a:b5:17:
a0:dc:c7:e2:38:6b:c3:da:c3:dd:b6:01:f3:8d:fe:19:b0:8f:
ef:a3:40:02:9a:04:8b:9e:61:b5:6c:5c:3b:f2:53:46:ba:a7:
5a:64:91:f8:a1:d1:af:41:c6:0e:42:2a:a5:35:5d:c7:2a:6e:
e5:11:4d:d8:26:d3:dd:7b:17:78:bf:c4:ee:7c:0e:ff:9d:80:
86:16:08:4d:f0:4d:ed:7b:14:88:57:49:69:58:17:2c:59:69:
c2:0c:c6:cf:27:99:a0:97:dc:46:f3:4b:7e:21:d4:01:ca:bc:
b2:7a:2f:64:1e:c7:01:83:10:3f:51:5d:48:e7:f1:da:00:f1:
19:94:53:2d:9e:8a:ba:46:1a:f8:e4:aa:7e:10:d6:bd:58:12:
ba:7b:38:ba:7c:17:e2:c1:3d:9d:df:50:cf:f0:ff:e4:e4:5a:
6c:10:9d:85:07:fb:a2:8a:0e:3a:d4:bf:62:cb:30:e3:76:2a:
58:d0:af:da:e9:39:62:49:ad:de:17:dc:3d:4d:d9:6a:e6:b1:
ab:0b:a3:27:a4:17:fe:2a:e3:df:40:b5:fb:5c:41:50:f3:61:
e5:bd:92:29:3e:76:8b:dc:26:95:8f:7b:9a:7d:cc:03:92:ef:
9d:1c:91:1c
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgISAYlpxysQnZSu1ZitK3I91BRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwNzE4MTYxMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWM5OTA3N2I2MGM5NTFlY2E5ZTIxYzAwZTQxYWM1OTI2MzAyNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYQBotVba2sgSTXF4S4XS2JHACQh
+B1U6yKXTEVokv+XJPr/mTrLhp8Ed0iHRqLq8BWmBDyVvHnvMPSKPdloqPklSSo4
R7NGn1Hk1Ibv874LBDQpdQQSZBS2hfcsojYfpN41YrRxxjB67GoFy/qCLgNRLOTr
+CyNJV+mLPqn793VDSuIeaVLWemXVRxfCvHdotXWbRPTPCb/phScMLt9bGziVnOH
wWVVLZ4iUjq2+jKrHX/ETIN+bv1gMNsdcoGbF6DgOj1KzfXlIGcD4XqOTiNpwMaL
rWLEqLYUBczjsVcgMMLWZqcHdS3Jo8ntnLUkL0bldS0vu8bbPv/Xzfdh/QIDAQAB
o4ICvTCCArkwHQYDVR0OBBYEFPnJkHe2DJUeyp4hwA5BrFkmMCbkMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvMS1jbVFkN1lNbFI3S25pSEFEa0dzV1NZd0p1US5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzUvOGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2Nk
Mi8xL3RQbGpSZFB5THRzNVhTUl9lNGJTMXo1S0FKRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB0QYIKwYBBQUHAQcBAf8EgcEwgb4wYAQCAAEwWgMEAS1Z
QgMEAi2AsAMEAFvZUAMEA16OiAMEArkF+AMEArk6zAMEArlXMAMEAblpdAMEArl1
mAMEArl92AMEArl95AMEAMFtVQMEBMF8sAMEBcJDwAMEAMMv+jBaBAIAAjBUAwcA
KgqTAAAAAwcAKgqTAAACMBIDBwQqCpMAANADBwAqCpMAANIwEAMFACoKkwEDBwAq
CpMBAAIDBQAqCpMCAwUDKgx3wAMFAyoNOIADBQMqD0aAMA0GCSqGSIb3DQEBCwUA
A4IBAQCW5aTqeJG5XZA3x02rcHhKtReg3MfiOGvD2sPdtgHzjf4ZsI/vo0ACmgSL
nmG1bFw78lNGuqdaZJH4odGvQcYOQiqlNV3HKm7lEU3YJtPdexd4v8TufA7/nYCG
FghN8E3texSIV0lpWBcsWWnCDMbPJ5mgl9xG80t+IdQByryyei9kHscBgxA/UV1I
5/HaAPEZlFMtnoq6Rhr45Kp+ENa9WBK6ezi6fBfiwT2d31DP8P/k5FpsEJ2FB/ui
ig461L9iyzDjdipY0K/a6TliSa3eF9w9Tdlq5rGrC6MnpBf+KuPfQLX7XEFQ82Hl
vZIpPnaL3CaVj3uafcwDku+dHJEc
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org