Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/DU2TSPrISa2cj_Ytv271VWkqHjg.roa
File: DU2TSPrISa2cj_Ytv271VWkqHjg.roa (raw, json)
Hash identifier: Vpvs+rM1tOOQCGebNlgSQCJBPqOOREsIfKNWaCI9rm4=
Subject key identifier: 0D:4D:93:48:FA:C8:49:AD:9C:8F:F6:2D:BF:6E:F5:55:69:2A:1E:38
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018AA7253ECA9D7FD29FC98090E2FCAEE96D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/DU2TSPrISa2cj_Ytv271VWkqHjg.roa
Signing time: Mon 18 Sep 2023 07:15:50 +0000
ROA not before: Mon 18 Sep 2023 07:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0c:74c0::/29 maxlen: 29
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a07:4a00::/29 maxlen: 29
2a0b:9800::/29 maxlen: 29
2a0a:9300:d0::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
2a0d:2cc0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:25:3e:ca:9d:7f:d2:9f:c9:80:90:e2:fc:ae:e9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 18 07:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d4d9348fac849ad9c8ff62dbf6ef555692a1e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:ca:21:48:2b:28:8f:de:41:da:21:a2:08:
81:e7:4b:48:b1:4f:0d:0e:8e:d2:40:9b:c8:f0:2d:
44:d2:5b:75:37:fa:49:44:f1:67:8b:96:fc:7c:aa:
79:b4:7b:fa:c2:6b:27:84:0f:b1:44:64:6e:47:eb:
ce:8d:66:24:06:b3:b7:09:b3:7f:f7:b7:4d:95:4d:
5d:32:cf:b9:c1:a6:e7:36:be:b1:a7:22:85:7b:5a:
4f:c8:b3:eb:3e:e6:31:3f:bf:3c:72:c7:73:75:b4:
d6:28:85:17:b6:94:f9:28:27:08:10:05:56:0a:64:
af:a5:9a:71:56:1a:8c:1c:7a:c6:47:82:c1:9b:7a:
02:a5:53:d5:3e:50:ac:63:c3:1f:57:61:26:60:07:
6c:83:ad:a6:f4:d8:3b:8b:09:6b:ac:4c:42:af:2b:
dd:27:5e:c4:c2:79:ab:e5:e0:32:70:bc:d4:c2:b3:
30:4d:f9:a4:91:1f:05:be:3d:bd:94:00:55:e5:e0:
86:d3:62:ed:48:f7:1b:38:d8:d1:02:55:48:39:4d:
6d:f7:8d:87:b9:3f:ff:5a:94:95:15:80:0d:bc:26:
cd:81:7c:7b:b6:65:57:ff:48:74:fc:bd:e3:3c:5a:
b7:05:d1:22:47:3d:f1:e7:d3:9d:8f:81:b0:6f:28:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4D:93:48:FA:C8:49:AD:9C:8F:F6:2D:BF:6E:F5:55:69:2A:1E:38
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/DU2TSPrISa2cj_Ytv271VWkqHjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.109.85.0/24
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
IPv6:
2a07:4a00::/29
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:9800::/29
2a0c:74c0::/29
2a0d:2cc0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:e4:3d:68:9d:7c:83:69:f6:a4:e0:a8:7f:ae:7e:0f:c5:11:
24:ee:b6:0d:6c:49:59:e2:72:01:9b:2d:92:ba:3d:e2:16:d6:
54:5c:48:25:80:32:3b:dc:25:3a:c6:f9:4f:d8:2b:a7:d4:02:
2b:d1:f4:fd:ec:47:ec:25:b4:a9:ef:e4:fb:b2:18:ae:bd:47:
77:cb:9d:53:af:5e:e6:0b:5e:cf:12:bd:b6:9d:44:d3:f5:eb:
67:46:04:bc:f5:23:c8:67:8b:ad:bc:d8:32:4f:de:70:30:10:
d3:90:a9:30:e2:40:b5:99:f8:27:7c:9e:97:c0:51:d3:b9:38:
ba:a0:12:34:4b:4c:fb:af:96:38:a6:e5:21:bc:35:7f:6e:da:
1e:6a:f4:f3:3e:97:13:8e:72:92:97:1f:66:6f:06:f9:36:fb:
e0:19:6b:ac:0f:b6:cb:77:ea:20:0f:16:ff:79:db:99:82:01:
88:5c:e8:ee:9b:52:9c:35:5a:1c:aa:0c:7a:4e:8c:6a:01:ac:
c2:24:a5:58:f9:54:a4:16:f7:c1:de:d8:08:6b:ec:ca:92:8c:
ce:84:2c:9d:40:ec:c6:bf:76:18:8a:10:1f:f9:3e:06:7b:f2:
0e:03:33:8e:2a:e2:e2:0b:b7:1f:51:81:dd:1a:f5:26:6c:80:
18:e2:31:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org