Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BhcPDE21kgWskBXimlczg_A45dE.roa
File: BhcPDE21kgWskBXimlczg_A45dE.roa (raw, json)
Hash identifier: 0SbdWtTGcPtGaOwFaTYLzuvnrPhDYIWqx9LQM2MPG0U=
Subject key identifier: 06:17:0F:0C:4D:B5:92:05:AC:90:15:E2:9A:57:33:83:F0:38:E5:D1
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 051966C8
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BhcPDE21kgWskBXimlczg_A45dE.roa
Signing time: Mon 30 May 2022 14:54:13 +0000
ROA not before: Mon 30 May 2022 14:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.136.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
185.180.228.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
194.67.208.12/32 maxlen: 32
185.102.137.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a0f:7c80::/29 maxlen: 29
2a0f:c780::/29 maxlen: 29
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0e:d602::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a0c:6980::/29 maxlen: 29
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0c:f641::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a07:4a00::/29 maxlen: 29
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a0c:f640::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85550792 (0x51966c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: May 30 14:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06170f0c4db59205ac9015e29a573383f038e5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:e7:fd:c3:6f:d0:7b:b4:55:1a:f3:bb:9c:
31:84:5e:bd:93:cd:3a:02:76:f4:81:4f:7e:d2:89:
00:d1:f3:a0:3d:40:88:96:e7:04:a2:8c:43:5a:3f:
95:49:e1:e2:64:0a:f8:a6:77:a5:82:b6:26:f9:c8:
fe:29:ac:a0:ca:ea:3f:bc:c3:b1:a7:71:d7:2f:a5:
c0:23:bf:aa:92:53:69:49:15:76:e8:90:90:34:41:
36:f9:d6:49:4f:82:c5:17:7d:71:28:64:90:8a:b5:
c0:a1:e5:d7:b3:d6:4e:6a:cc:f5:07:d8:3a:42:6e:
f0:a6:70:db:70:3b:d1:93:cb:24:2e:47:6b:86:44:
f2:e5:25:0e:83:5f:d8:3b:8b:95:c8:a3:29:58:ec:
67:68:e6:c4:ac:2b:c3:67:fb:e4:64:54:2b:39:64:
dc:1e:f2:af:e7:5a:a4:79:71:63:9a:f1:70:ad:4a:
cf:f7:7c:76:5f:2f:8f:9d:d9:3c:77:b7:63:c6:89:
be:8a:01:05:1e:61:c4:12:a5:63:f7:9f:36:a7:0e:
0a:95:a5:47:f8:fa:f2:f5:c8:1c:59:14:bc:03:5a:
73:bc:43:61:90:15:be:ea:81:5e:8b:31:44:45:56:
1d:39:60:10:2c:53:93:a8:bc:24:48:d8:9c:ab:30:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:0F:0C:4D:B5:92:05:AC:90:15:E2:9A:57:33:83:F0:38:E5:D1
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BhcPDE21kgWskBXimlczg_A45dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.76/32
5.180.136.221/32
45.8.211.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.40.4.0/24
185.102.137.0/24
185.104.248.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/24
185.174.139.0/24
185.180.228.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a07:4a00::/29
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0c:6980::/29
2a0c:f640::/31
2a0e:d602::/32
2a0f:4680::/32
2a0f:7300::/32
2a0f:7c80::/29
2a0f:c780::/29
Signature Algorithm: sha256WithRSAEncryption
75:1a:4a:12:af:01:10:f6:87:08:ba:d0:e1:71:2f:ef:95:e1:
5a:d4:f5:85:6c:c3:c9:a6:af:41:66:48:c6:4d:fe:32:5b:42:
f1:e2:95:f7:66:a9:1f:df:78:66:d0:17:c8:30:d3:11:93:2b:
77:53:50:50:05:cc:e3:13:60:92:f5:4c:86:ec:94:6a:53:92:
ae:8c:76:66:72:dc:72:7b:aa:f2:94:35:95:77:63:35:40:20:
01:a6:c9:dd:be:d4:7c:e6:f4:47:83:26:aa:3c:21:bf:eb:64:
80:34:dc:6f:71:4a:8f:0e:28:8f:92:b0:ef:d9:0f:6f:99:aa:
3b:02:fa:5b:1e:b9:9d:0e:7d:db:c5:53:dd:00:e3:d2:96:0b:
e2:ee:0d:f2:20:f2:8d:a7:71:ea:14:6a:eb:8b:14:9c:07:77:
ca:61:19:1a:38:79:92:97:16:04:bc:8c:74:33:66:b1:60:2d:
eb:bc:12:46:4a:98:f2:eb:0b:76:ae:52:c1:b2:e3:8f:67:e0:
55:6a:e6:5f:a8:66:82:9a:47:99:12:d1:e4:8b:59:14:97:95:
7d:fb:d1:e4:67:84:a2:65:a1:61:0e:2d:e5:b6:88:73:0f:97:
c5:d6:f9:e5:a7:70:44:8e:a6:e7:da:54:74:f7:18:f0:a8:04:
b0:3d:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:28 2023 by rpki-client on console-ams.rpki-client.org