Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/8qN4cOnuSaxvFPW-e7ALPQCCj98.roa
File: 8qN4cOnuSaxvFPW-e7ALPQCCj98.roa (raw, json)
Hash identifier: w3acCRths9tHiJQRZ1Zf8dwMRx2IFmEP/qG6/UuuteE=
Subject key identifier: F2:A3:78:70:E9:EE:49:AC:6F:14:F5:BE:7B:B0:0B:3D:00:82:8F:DF
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018B14272B87BE79D78128EEB2B12F38BF64
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/8qN4cOnuSaxvFPW-e7ALPQCCj98.roa
Signing time: Mon 09 Oct 2023 11:16:33 +0000
ROA not before: Mon 09 Oct 2023 11:16:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
194.53.52.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
185.139.68.28/32 maxlen: 32
5.180.137.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
5.180.136.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
185.244.174.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
213.108.197.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
45.89.64.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a04:5200:fff2::/48 maxlen: 48
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0a:9300::/48 maxlen: 48
2a04:5200:a::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5205::/32 maxlen: 32
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300:aaaa::/48 maxlen: 48
2a04:5200:1::/48 maxlen: 48
2a0a:9300::/32 maxlen: 32
2a04:5200:fff7::/48 maxlen: 48
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5200:fff4::/48 maxlen: 48
2a04:5206::/32 maxlen: 32
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5207::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200::/29 maxlen: 29
2a04:5200:ffff::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:27:2b:87:be:79:d7:81:28:ee:b2:b1:2f:38:bf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Oct 9 11:16:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2a37870e9ee49ac6f14f5be7bb00b3d00828fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:54:c7:1c:2a:6e:10:9b:04:16:69:c6:c1:21:
97:f7:47:fb:83:c8:dc:66:c6:d2:a0:62:19:d1:0d:
a5:33:a4:4b:08:16:62:2d:50:aa:4d:b8:a5:94:1f:
02:13:98:16:ac:a9:61:49:bb:6d:ca:13:4d:6f:44:
a0:bc:2f:a8:48:a1:56:86:56:26:54:8e:a4:f8:0a:
b1:54:04:61:b0:bb:5f:a3:4c:2e:56:6b:09:7a:7c:
f3:d0:de:10:3e:87:69:dc:4b:bb:d0:1e:90:c7:38:
6e:d3:9e:00:45:78:33:a7:c1:98:c3:47:b6:c7:f3:
b8:83:de:12:f7:67:63:6d:ac:20:4a:53:8d:9c:cb:
82:3f:47:3c:42:bf:c1:b8:1d:e0:1b:a3:77:65:aa:
7f:17:08:da:50:d0:2f:93:4c:4a:51:31:a1:9f:87:
94:90:55:2e:24:01:60:2b:ce:53:63:41:a8:e7:00:
88:b7:d0:9c:b1:9e:ce:c2:c0:c3:f1:18:1b:d5:d7:
77:c1:02:fb:1f:c5:57:3e:45:fd:a3:ac:16:4c:7d:
56:3c:77:58:57:2f:88:fc:c8:1b:88:df:30:24:ba:
06:f2:84:94:af:11:d7:89:a6:1f:0a:db:12:0b:ba:
f3:55:74:c1:6c:a7:68:5c:ca:26:1f:fc:8e:8a:42:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A3:78:70:E9:EE:49:AC:6F:14:F5:BE:7B:B0:0B:3D:00:82:8F:DF
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/8qN4cOnuSaxvFPW-e7ALPQCCj98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.8.211.0/24
45.89.64.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
185.200.188.0/24
185.244.174.0/24
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.53.52.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.197.0-213.108.199.255
IPv6:
2a04:5200::/29
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0f:4680::/32
2a0f:7300::/32
Signature Algorithm: sha256WithRSAEncryption
b7:6c:df:0b:85:f4:c8:f5:2b:3f:41:a9:0f:96:7b:ca:79:03:
20:3c:28:f7:05:7d:4e:22:3c:9e:9b:0f:74:f8:be:cf:1e:56:
82:04:46:17:4e:1c:1d:66:9d:a2:bf:24:f9:f9:f8:77:0b:91:
1e:12:d7:76:87:70:a4:59:41:3e:4f:ec:ac:21:a1:dd:40:48:
d3:61:96:57:82:36:21:4f:bc:d4:52:05:7a:28:96:22:d5:af:
ef:70:db:5f:46:51:55:25:b8:15:8f:5b:45:ea:e8:3b:4c:f1:
2f:f9:c7:f7:ad:97:3f:2a:4f:4c:46:74:7b:07:1b:c6:4b:a1:
1b:00:39:2d:7e:43:ab:fc:b9:17:f2:91:95:d2:4e:b5:df:52:
60:03:fc:30:7a:18:6b:3d:27:d9:7b:79:a3:bb:f1:91:45:b9:
9d:dd:1b:9d:f0:b5:db:70:21:7b:35:7b:e9:34:3f:ee:06:42:
12:68:39:a6:d2:a1:e9:57:0e:d6:14:a6:8f:3b:50:9e:4b:c8:
04:8b:4c:5c:1e:64:2f:e9:5f:1e:59:96:1f:27:a7:fd:9a:ad:
94:c6:03:aa:c4:fe:be:38:6e:f9:9c:09:b6:ce:13:1b:c8:c2:
27:96:b5:23:9a:8d:9e:68:d7:12:50:89:64:10:39:6d:bb:34:
39:c5:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org