Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3s_cWzq2G_ll5USJWVP030I_4QA.roa
File: 3s_cWzq2G_ll5USJWVP030I_4QA.roa (raw, json)
Hash identifier: GL1wJXnxSIJ3Ar0Rhhj/VPGFNkRSgmA/mqMkWX62SKo=
Subject key identifier: DE:CF:DC:5B:3A:B6:1B:F9:65:E5:44:89:59:53:F4:DF:42:3F:E1:00
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0182113CC061F7E48E44C6F76A375238C653
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3s_cWzq2G_ll5USJWVP030I_4QA.roa
Signing time: Mon 18 Jul 2022 12:16:10 +0000
ROA not before: Mon 18 Jul 2022 12:16:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.136.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0e:d602::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0c:f641::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a0c:f640::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:3c:c0:61:f7:e4:8e:44:c6:f7:6a:37:52:38:c6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 18 12:16:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=decfdc5b3ab61bf965e544895953f4df423fe100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:d3:aa:d3:8e:7f:6c:b9:1d:76:b5:29:0e:
10:f0:9f:58:e1:7d:ea:54:75:fc:da:fb:da:9d:c4:
00:09:e7:21:c0:26:64:f3:4e:ad:dd:df:b2:b7:04:
d7:f0:c5:07:3e:a5:5d:be:7a:65:9d:17:eb:3c:0c:
d0:89:f4:55:06:64:77:ac:c0:40:a8:04:c5:8f:cf:
79:a2:64:b7:bb:57:d6:9d:9c:38:63:14:50:51:57:
7f:f5:42:f3:fd:42:e6:5f:5c:4c:18:6e:40:28:12:
eb:64:e5:a3:fc:39:7b:82:37:fe:7b:4d:d9:7a:1b:
b0:a5:60:ab:b1:be:06:dd:57:1d:f8:37:ec:c1:d3:
6d:f8:e6:0b:be:87:c0:31:ba:09:a1:c1:98:7c:37:
59:84:86:2f:1b:78:89:b9:95:07:da:52:9c:4c:6b:
9d:ed:d3:64:a8:8f:d8:ee:e2:55:c9:3d:d4:30:42:
bc:48:32:89:6a:07:81:91:14:33:e6:1f:21:72:a2:
93:b7:63:ee:95:3b:f6:d5:c0:2d:09:fc:a9:c4:13:
a1:c8:f6:d7:d8:22:68:21:da:00:a6:7c:fd:17:e4:
d5:a6:e0:2c:81:ac:4b:88:5e:0d:ee:5b:5d:ee:69:
ef:8a:c1:f2:ca:95:90:2d:a6:46:e9:5f:8b:23:ec:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CF:DC:5B:3A:B6:1B:F9:65:E5:44:89:59:53:F4:DF:42:3F:E1:00
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/3s_cWzq2G_ll5USJWVP030I_4QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.76/32
5.180.136.221/32
45.8.211.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.40.4.0/24
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/24
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.198.0/23
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0c:f640::/31
2a0e:d602::/32
2a0f:4680::/32
2a0f:7300::/32
Signature Algorithm: sha256WithRSAEncryption
6c:bf:db:1c:15:cf:80:84:e4:5a:68:3d:1a:da:71:e8:1b:57:
a5:03:0a:b1:8a:1b:8e:4c:9e:ea:d4:b9:f1:fa:63:6c:ba:52:
76:79:85:72:1d:2f:22:a6:b4:3a:8a:0e:20:87:ca:25:f6:99:
76:04:fa:53:ef:6d:ea:59:1f:2d:28:07:3d:fe:19:79:15:65:
ef:42:cd:dd:0c:e0:73:1e:9d:a4:4f:51:1d:f1:bc:f5:ff:d2:
3a:9a:07:9d:73:00:f0:7a:96:cd:8f:33:c9:e9:c0:4a:5d:44:
2d:c1:1c:33:5a:64:46:ff:fc:64:6b:16:62:8e:94:61:33:ab:
12:30:0a:ce:d2:4c:68:34:ba:26:8c:5d:b6:ce:30:b2:87:c8:
19:3a:8a:fa:20:a7:db:9d:1b:de:13:cc:7e:b3:06:ec:ac:b5:
0e:bd:67:8b:31:45:b1:e1:59:dd:b5:5c:03:8e:10:cc:5b:64:
3f:e6:02:90:4b:5b:4c:35:cd:fa:9c:c4:93:d4:31:00:c1:dc:
d5:49:8c:6c:33:3c:de:b5:f8:28:c3:d4:de:6a:aa:85:4a:d0:
e1:14:f2:fd:1f:fa:20:d1:d9:4e:b1:5b:d8:ea:14:0b:e3:fb:
cc:c6:6b:22:26:b1:6a:d7:6c:0b:12:76:ea:96:ee:28:57:84:
e6:22:58:ae
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgISAYIRPMBh9+SORMb3ajdSOMZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjIwNzE4MTIxNjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWNmZGM1YjNhYjYxYmY5NjVlNTQ0ODk1OTUzZjRkZjQyM2ZlMTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrvTqtOOf2y5HXa1KQ4Q8J9Y4X3q
VHX82vvancQACechwCZk806t3d+ytwTX8MUHPqVdvnplnRfrPAzQifRVBmR3rMBA
qATFj895omS3u1fWnZw4YxRQUVd/9ULz/ULmX1xMGG5AKBLrZOWj/Dl7gjf+e03Z
ehuwpWCrsb4G3Vcd+DfswdNt+OYLvofAMboJocGYfDdZhIYvG3iJuZUH2lKcTGud
7dNkqI/Y7uJVyT3UMEK8SDKJageBkRQz5h8hcqKTt2PulTv21cAtCfypxBOhyPbX
2CJoIdoApnz9F+TVpuAsgaxLiF4N7ltd7mnvisHyypWQLaZG6V+LI+yvFwIDAQAB
o4IDIzCCAx8wHQYDVR0OBBYEFN7P3Fs6thv5ZeVEiVlT9N9CP+EAMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvM3NfY1d6cTJHX2xsNVVTSldWUDAzMElfNFFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNwYIKwYBBQUHAQcBAf8EggEmMIIBIjCBzwQCAAEwgcgD
BQAFtIhMAwUABbSI3QMEAC0I0wMEAFvZTQMFAJNOQgcDBQC5EQNmAwQAuSgEAwQA
uWj4AwQAuX0yAwUAuYtEHAMFALmLRnQDBAG5rIIDBAC5rogDBAC5rosDBAC5tOYD
BQC5tOdXAwQAuby0AwQCub0MAwQCwKJkAwQAwQDIAwQBwQDKAwQAwajiAwQCwj+M
AwUAwkPEfwMFAMJDxgcDBQDCQ8ZsAwUAwkPLNgMFAMJD0AYDBQDCQ9AMAwUAwkPQ
MAMEAdVsxjBOBAIAAjBIAwUAKgRSADAOAwUBKgRSAgMFAyoEUgADBQAqCVMDAwUA
KgqTAAMFAyoL2gADBQEqDPZAAwUAKg7WAgMFACoPRoADBQAqD3MAMA0GCSqGSIb3
DQEBCwUAA4IBAQBsv9scFc+AhORaaD0a2nHoG1elAwqxihuOTJ7q1Lnx+mNsulJ2
eYVyHS8iprQ6ig4gh8ol9pl2BPpT723qWR8tKAc9/hl5FWXvQs3dDOBzHp2kT1Ed
8bz1/9I6mgedcwDwepbNjzPJ6cBKXUQtwRwzWmRG//xkaxZijpRhM6sSMArO0kxo
NLomjF22zjCyh8gZOor6IKfbnRveE8x+swbsrLUOvWeLMUWx4VndtVwDjhDMW2Q/
5gKQS1tMNc36nMST1DEAwdzVSYxsMzzetfgow9TeaqqFStDhFPL9H/og0dlOsVvY
6hQL4/vMxmsiJrFq12wLEnbqlu4oV4TmIliu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org