Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ALmLi7xaEoQH-uby2QIAsq5ApH8.roa
File: ALmLi7xaEoQH-uby2QIAsq5ApH8.roa (raw, json)
Hash identifier: vFHybtJ+pTbq8OT0WAMpOecMDrpFvSs16P0BbiS384c=
Subject key identifier: 00:B9:8B:8B:BC:5A:12:84:07:FA:E6:F2:D9:02:00:B2:AE:40:A4:7F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0183C1274A2F4C65E782F6A3033C2F2B9AA4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ALmLi7xaEoQH-uby2QIAsq5ApH8.roa
Signing time: Mon 10 Oct 2022 09:08:41 +0000
ROA not before: Mon 10 Oct 2022 09:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.136.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
5.252.116.0/24 maxlen: 24
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
5.180.139.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.180.136.0/24 maxlen: 24
5.180.138.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
45.89.64.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a04:5200:fff2::/48 maxlen: 48
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0a:9300::/48 maxlen: 48
2a0e:d602::/32 maxlen: 32
2a04:5200:ff00::/48 maxlen: 48
2a04:5200::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5205::/32 maxlen: 32
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300:aaaa::/48 maxlen: 48
2a04:5200:1::/48 maxlen: 48
2a0a:9300::/32 maxlen: 32
2a04:5200:fff7::/48 maxlen: 48
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5200:fff4::/48 maxlen: 48
2a04:5206::/32 maxlen: 32
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5207::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200:ffff::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:27:4a:2f:4c:65:e7:82:f6:a3:03:3c:2f:2b:9a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Oct 10 09:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00b98b8bbc5a128407fae6f2d90200b2ae40a47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dc:e1:3f:da:9a:84:1e:1c:4a:5c:15:40:22:
af:8e:ec:82:02:a0:3a:4c:17:1f:75:d4:f2:be:cb:
42:8c:18:38:79:c7:bc:b5:1f:d6:c5:ea:82:e1:67:
5e:dc:4c:40:1a:08:17:0c:ac:4a:59:b0:c4:e2:b1:
3d:ce:22:d6:d1:f9:6a:db:7c:2f:18:a5:5d:c1:04:
69:75:c8:75:bc:73:42:a0:5b:a4:40:f5:2a:d8:41:
2c:0a:56:af:bd:13:82:9c:f6:23:77:72:7f:f3:18:
16:5c:75:22:be:ec:f4:06:2a:d9:95:20:a4:73:86:
7d:25:24:43:48:f4:b4:bc:0b:db:ea:24:63:bf:da:
ab:7d:93:40:b4:59:4f:62:2d:5b:46:7e:93:1f:ac:
b8:20:27:5d:1d:46:a8:04:e9:97:1c:aa:b2:5d:91:
d1:e8:28:e6:16:43:08:9d:2f:c4:05:b6:3d:d4:e3:
29:f0:b7:b5:8c:36:6b:a4:87:93:f8:28:2f:b3:37:
e7:6e:f4:dc:a1:f8:d5:b6:64:cb:c3:2b:3c:ee:bb:
c7:b4:42:ee:0e:7b:de:23:a0:48:10:f7:91:da:e4:
28:eb:11:55:fc:a6:1a:99:1a:49:b5:92:4e:98:f7:
4b:3a:9f:0e:5d:62:91:59:d7:31:3e:81:45:f2:3c:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B9:8B:8B:BC:5A:12:84:07:FA:E6:F2:D9:02:00:B2:AE:40:A4:7F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ALmLi7xaEoQH-uby2QIAsq5ApH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/22
5.252.116.0/24
45.8.211.0/24
45.89.64.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.40.4.0/24
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/24
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.198.0/23
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0e:d602::/32
2a0f:4680::/32
2a0f:7300::/32
Signature Algorithm: sha256WithRSAEncryption
3b:b7:e7:46:7e:a0:88:f4:1c:46:58:8c:b4:cf:64:a8:b6:c3:
8e:cc:07:28:2d:06:90:7d:39:34:7f:6e:20:44:fa:f6:79:3e:
78:68:04:04:f7:bf:fb:70:f0:70:04:9c:5e:5d:33:9f:a2:8e:
30:44:e8:9f:ac:fc:a6:a6:d7:61:7b:be:bd:d5:81:a9:db:57:
8e:10:15:71:b8:2f:fb:3e:64:7d:81:91:9e:f2:6d:71:40:4f:
c7:78:49:1f:88:82:0b:8c:99:89:9e:4a:1c:f6:30:73:20:6a:
f5:af:b7:95:fd:5b:f5:b1:2a:d6:87:28:8f:cb:43:4f:16:c2:
ae:87:53:2c:2d:a6:c4:f0:9f:51:e7:c1:82:57:c2:8a:e5:47:
43:37:ba:41:29:7a:e7:e3:76:ff:1b:93:05:30:da:1d:c7:07:
44:f9:7e:72:d1:b9:e1:67:08:0b:21:e1:2e:ac:e1:b6:98:46:
3b:30:d7:8c:e5:6e:8b:7c:1f:36:1b:01:60:f3:55:e1:30:aa:
e9:b8:d1:53:67:72:0c:05:f8:2a:e1:06:16:6f:3a:23:b7:80:
fb:83:ca:d1:76:f0:0d:ad:0a:19:bf:a9:3c:a3:f6:46:6e:12:
93:32:ac:7d:0b:50:38:3b:fc:ea:6d:2e:2e:4e:cf:21:f6:e1:
ad:9f:4b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org