Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/7vXdnJkaTPeUbTUCZuSaHlH7awE.roa
File: 7vXdnJkaTPeUbTUCZuSaHlH7awE.roa (raw, json)
Hash identifier: 1V9rAVqZalcUnprNOHPo8+wF5Y15VTdWcK4jdDzk9yI=
Subject key identifier: EE:F5:DD:9C:99:1A:4C:F7:94:6D:35:02:66:E4:9A:1E:51:FB:6B:01
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 05750E29
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/7vXdnJkaTPeUbTUCZuSaHlH7awE.roa
Signing time: Sun 03 Jul 2022 14:30:25 +0000
ROA not before: Sun 03 Jul 2022 14:30:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.136.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
185.102.137.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a0f:7c80::/29 maxlen: 29
2a0f:c780::/29 maxlen: 29
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0e:d602::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a0c:6980::/29 maxlen: 29
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0c:f641::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a0c:f640::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91557417 (0x5750e29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 3 14:30:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eef5dd9c991a4cf7946d350266e49a1e51fb6b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0f:e7:8e:4e:de:df:cc:2d:c2:83:52:99:6b:
cd:59:41:2f:5f:97:c6:b9:ab:5c:2f:a7:ae:d4:5d:
b7:5b:f1:af:43:79:d1:c9:6e:45:a5:5d:66:8e:9c:
68:e1:ec:e3:2e:e5:67:be:0c:50:69:64:d1:f3:23:
b2:02:ec:62:62:ae:e1:60:75:39:17:ee:65:73:c0:
0e:92:ce:79:c8:5c:83:55:3e:84:94:e2:c5:5b:a0:
7f:1f:2d:54:a8:c3:a9:94:83:f4:75:49:77:eb:0a:
a5:8d:45:23:f7:a8:b3:88:68:e2:16:8b:c1:60:42:
7f:be:8e:fc:10:80:12:06:e1:a4:fd:48:02:1b:e9:
f8:40:00:ad:75:59:f3:da:1d:86:d1:b6:e2:be:fd:
40:d7:11:d1:87:84:e7:24:11:e4:80:90:0d:8a:ca:
26:88:a5:24:af:eb:97:a3:a8:61:1c:6d:b7:af:0d:
fa:56:59:17:4a:71:8d:16:e3:a0:46:fb:e5:14:50:
f3:c0:ca:7e:c4:6d:fd:df:ed:8a:ce:c7:05:3b:1a:
2c:87:6f:98:99:f0:9f:30:cf:1e:1c:67:51:50:ec:
4a:a5:59:8f:f3:98:db:bd:ac:c9:4f:77:88:2a:25:
ac:2f:b8:cd:38:60:cf:4c:b1:28:d6:f6:58:a5:6a:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:DD:9C:99:1A:4C:F7:94:6D:35:02:66:E4:9A:1E:51:FB:6B:01
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/7vXdnJkaTPeUbTUCZuSaHlH7awE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.76/32
5.180.136.221/32
45.8.211.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.40.4.0/24
185.102.137.0/24
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/24
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.198.0/23
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0c:6980::/29
2a0c:f640::/31
2a0e:d602::/32
2a0f:4680::/32
2a0f:7300::/32
2a0f:7c80::/29
2a0f:c780::/29
Signature Algorithm: sha256WithRSAEncryption
42:b0:2d:86:9d:68:83:d8:b0:81:ee:55:6b:a2:c7:af:af:fc:
d6:ab:c0:d9:16:e9:e6:cd:b4:21:46:21:f0:5c:af:2b:a3:f7:
c8:e5:c1:bf:d3:e5:8f:67:20:26:f3:c5:c0:06:b2:35:8a:2d:
8d:28:c6:92:20:14:57:f7:35:83:43:d0:c3:bb:e0:16:26:fb:
6a:82:76:53:a6:04:64:ce:db:4c:9c:a4:c4:90:aa:be:13:3d:
5c:2c:28:d5:31:1b:e5:94:dc:e9:a3:9f:c4:42:f4:cc:29:67:
65:f6:da:57:e6:27:c7:26:bb:5a:29:18:9f:9d:a5:2d:cd:c9:
67:b9:cd:2f:46:38:dd:1b:d1:4f:a9:b4:26:a0:34:b3:d7:7c:
2f:fc:e8:94:6a:1e:57:bb:a8:ee:01:41:41:ae:6d:49:91:78:
42:34:6f:d3:0c:74:62:c8:6a:64:a1:1f:b9:10:70:f1:3f:b5:
9d:cd:7f:59:2e:20:96:7a:4a:4a:9a:1d:f5:d1:a1:87:8e:ed:
fb:21:86:1b:fc:f0:f1:da:18:89:25:c3:d8:f3:5b:29:cd:14:
9b:86:c7:8e:c2:7b:90:62:55:1d:d0:21:5d:e2:b2:1d:a8:33:
f6:d2:1d:cc:52:0b:9d:40:28:6f:1c:77:52:c4:33:25:75:34:
20:d5:73:c4
-----BEGIN CERTIFICATE-----
MIIGJDCCBQygAwIBAgIEBXUOKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGY5NjM0NWQzZjIyZWRiMzk1ZDI0N2Y3Yjg2ZDJkNzNlNGEwMDkxMB4XDTIyMDcw
MzE0MzAyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWVmNWRkOWM5OTFh
NGNmNzk0NmQzNTAyNjZlNDlhMWU1MWZiNmIwMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIMP545O3t/MLcKDUplrzVlBL1+XxrmrXC+nrtRdt1vxr0N5
0cluRaVdZo6caOHs4y7lZ74MUGlk0fMjsgLsYmKu4WB1ORfuZXPADpLOechcg1U+
hJTixVugfx8tVKjDqZSD9HVJd+sKpY1FI/eos4ho4haLwWBCf76O/BCAEgbhpP1I
Ahvp+EAArXVZ89odhtG24r79QNcR0YeE5yQR5ICQDYrKJoilJK/rl6OoYRxtt68N
+lZZF0pxjRbjoEb75RRQ88DKfsRt/d/tis7HBTsaLIdvmJnwnzDPHhxnUVDsSqVZ
j/OY272syU93iColrC+4zThgz0yxKNb2WKVqk80CAwEAAaOCAz4wggM6MB0GA1Ud
DgQWBBTu9d2cmRpM95RtNQJm5JoeUftrATAfBgNVHSMEGDAWgBS0+WNF0/Iu2zld
JH97htLXPkoAkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RQbGpSZFB5THRzNVhTUl9lNGJTMXo1S0FKRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvOGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8x
Lzd2WGRuSmthVFBlVWJUVUNadVNhSGxIN2F3RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
OGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8xL3RQbGpSZFB5THRz
NVhTUl9lNGJTMXo1S0FKRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AVIGCCsGAQUFBwEHAQH/BIIBQTCCAT0wgdUEAgABMIHOAwUABbSITAMFAAW0iN0D
BAAtCNMDBABb2U0DBQCTTkIHAwUAuREDZgMEALkoBAMEALlmiQMEALlo+AMEALl9
MgMFALmLRBwDBQC5i0Z0AwQBuayCAwQAua6IAwQAua6LAwQAubTmAwUAubTnVwME
ALm8tAMEArm9DAMEAsCiZAMEAMEAyAMEAcEAygMEAMGo4gMEAsI/jAMFAMJDxH8D
BQDCQ8YHAwUAwkPGbAMFAMJDyzYDBQDCQ9AGAwUAwkPQDAMFAMJD0DADBAHVbMYw
YwQCAAIwXQMFACoEUgAwDgMFASoEUgIDBQMqBFIAAwUAKglTAwMFACoKkwADBQMq
C9oAAwUDKgxpgAMFASoM9kADBQAqDtYCAwUAKg9GgAMFACoPcwADBQMqD3yAAwUD
Kg/HgDANBgkqhkiG9w0BAQsFAAOCAQEAQrAthp1og9iwge5Va6LHr6/81qvA2Rbp
5s20IUYh8FyvK6P3yOXBv9Plj2cgJvPFwAayNYotjSjGkiAUV/c1g0PQw7vgFib7
aoJ2U6YEZM7bTJykxJCqvhM9XCwo1TEb5ZTc6aOfxEL0zClnZfbaV+Ynxya7WikY
n52lLc3JZ7nNL0Y43RvRT6m0JqA0s9d8L/zolGoeV7uo7gFBQa5tSZF4QjRv0wx0
YshqZKEfuRBw8T+1nc1/WS4glnpKSpod9dGhh47t+yGGG/zw8doYiSXD2PNbKc0U
m4bHjsJ7kGJVHdAhXeKyHagz9tIdzFILnUAobxx3UsQzJXU0INVzxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org