Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/HYpEF_MFl0s6qdvj6bNQ1WX2YBc.roa
File: HYpEF_MFl0s6qdvj6bNQ1WX2YBc.roa (raw, json)
Hash identifier: 47qh7gMzUdqnM8rQ+Yil3yotgrjz5oCrO/1LSzilAC8=
Subject key identifier: 1D:8A:44:17:F3:05:97:4B:3A:A9:DB:E3:E9:B3:50:D5:65:F6:60:17
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 03A18646
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/HYpEF_MFl0s6qdvj6bNQ1WX2YBc.roa
Signing time: Thu 27 Jan 2022 11:11:37 +0000
ROA not before: Thu 27 Jan 2022 11:11:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.139.0/24 maxlen: 24
185.174.136.0/24 maxlen: 24
185.174.137.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.140.0/23 maxlen: 23
194.63.140.0/22 maxlen: 22
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
185.117.116.0/24 maxlen: 24
185.117.117.0/24 maxlen: 24
185.103.252.0/24 maxlen: 24
185.103.253.0/24 maxlen: 24
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
185.40.5.0/24 maxlen: 24
185.40.7.0/24 maxlen: 24
185.106.92.0/24 maxlen: 24
185.106.93.0/24 maxlen: 24
185.106.94.0/24 maxlen: 24
185.106.95.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
185.180.228.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
185.112.81.0/24 maxlen: 24
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
185.112.100.0/24 maxlen: 24
185.112.101.0/24 maxlen: 24
185.112.102.0/24 maxlen: 24
147.78.66.7/32 maxlen: 32
194.67.208.12/32 maxlen: 32
185.102.137.0/24 maxlen: 24
185.102.139.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
185.94.164.0/24 maxlen: 24
185.94.165.0/24 maxlen: 24
185.94.167.0/24 maxlen: 24
5.180.136.221/32 maxlen: 32
185.17.1.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.102.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.203.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
5.180.136.76/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.12.0/24 maxlen: 24
185.189.13.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.104.251.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a0f:c780::/29 maxlen: 29
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0e:d602::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a0c:6980::/29 maxlen: 29
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0c:f641::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a0c:f640::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60917318 (0x3a18646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 27 11:11:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d8a4417f305974b3aa9dbe3e9b350d565f66017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:53:fb:87:ff:21:b9:4f:ea:17:cd:56:ad:
2e:dc:50:5d:80:0a:0e:df:0d:76:e4:be:4a:18:05:
98:c2:f7:58:43:3b:e2:90:f6:bb:50:33:e0:1f:b1:
60:24:fe:04:e9:c5:76:6c:14:30:d3:f0:30:aa:39:
24:70:d0:19:03:8a:8a:ab:ca:1c:35:b8:84:ae:1d:
9b:9d:80:f0:d7:ea:fc:84:53:5f:dc:0d:b2:3d:d9:
1e:80:42:76:78:c2:cd:01:ab:37:06:a2:3b:c4:24:
28:c8:15:47:14:6b:3d:3d:a1:e0:68:53:ee:a3:87:
6d:d1:4e:05:0f:cc:30:b0:b7:92:1d:ac:e8:8e:cf:
ac:6f:74:e6:ea:89:d4:fe:93:be:80:a1:89:55:8e:
82:cc:ea:ec:6b:c5:e4:e9:b7:49:f0:20:c2:42:a5:
f0:1a:c3:4b:af:96:cf:c8:48:76:39:f2:4e:18:bf:
dd:29:1c:b0:54:ef:08:9f:8a:ae:01:34:ad:15:95:
b1:c9:4c:f6:e9:5a:99:6a:58:f3:a9:d6:73:58:d6:
bf:53:b0:fd:c4:20:07:b9:5b:da:84:e3:49:8d:6a:
d6:34:79:a8:14:92:c8:ef:6e:d6:57:f5:95:a8:67:
54:85:00:2e:bc:c6:0c:32:f1:15:7a:44:0b:4f:14:
d3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8A:44:17:F3:05:97:4B:3A:A9:DB:E3:E9:B3:50:D5:65:F6:60:17
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/HYpEF_MFl0s6qdvj6bNQ1WX2YBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.76/32
5.180.136.221/32
45.8.211.0/24
147.78.66.7/32
185.17.1.0/24
185.17.3.102/32
185.40.4.0/23
185.40.7.0/24
185.94.164.0/23
185.94.167.0/24
185.102.137.0/24
185.102.139.0/24
185.103.252.0/23
185.104.248.0/24
185.104.251.0/24
185.106.92.0/22
185.112.81.0/24
185.112.100.0-185.112.102.255
185.117.116.0/23
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/23
185.174.139.0/24
185.180.228.0/24
185.180.230.0/24
185.180.231.87/32
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a09:5303::/32
2a0a:9300::/32
2a0c:6980::/29
2a0c:f640::/31
2a0e:d602::/32
2a0f:4680::/32
2a0f:7300::/32
2a0f:c780::/29
Signature Algorithm: sha256WithRSAEncryption
3a:3c:b6:e3:12:ca:12:32:41:73:c6:17:2b:45:0c:20:45:1a:
11:78:3d:4f:55:20:32:84:d6:e1:10:b3:3d:fc:36:ce:43:2b:
f2:b6:e5:68:cd:57:21:e5:32:c0:17:2c:e8:bd:44:ba:8e:70:
f0:69:f1:a1:54:c0:43:21:e7:dd:28:cf:39:d5:b4:6b:4e:bf:
da:43:dd:18:a4:3f:c5:de:77:4f:3c:73:cc:1f:5e:e7:4d:18:
fc:54:d8:8b:c8:8a:35:a4:cb:19:08:4d:30:7d:d7:d6:bd:51:
ca:32:82:84:1f:f2:1f:01:58:52:a2:20:22:3f:b1:be:fd:6d:
e9:e8:ba:3a:52:24:b6:2f:d1:b6:f1:d2:44:83:ef:5d:aa:d2:
4a:06:fd:18:64:1f:d0:4c:05:77:1a:74:42:81:49:91:e0:e8:
34:3a:d2:78:65:51:3a:9e:de:bc:ff:8d:f3:c4:ef:76:39:fe:
3a:5c:19:74:6b:8c:e9:f3:3a:67:fb:a0:0a:ad:6e:95:af:16:
bf:7e:69:1e:50:53:39:3e:6a:6e:ba:72:0b:4f:52:3b:95:c2:
b7:7e:87:3d:fc:dd:35:27:df:85:28:72:2e:51:0b:65:ed:75:
fd:ad:9b:ea:b9:d3:f1:b4:f5:c2:12:33:dc:ca:8f:0d:70:68:
70:49:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:09 2024 by rpki-client on console-ams.rpki-client.org