Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IM5ZRSChGBk4OVWc7EFkV-9tEE8.roa
File: IM5ZRSChGBk4OVWc7EFkV-9tEE8.roa (raw, json)
Hash identifier: ohdEBm2HnShDKiru9fOC2tZzUF/F9Ta33ZLTEpq9Mj8=
Subject key identifier: 20:CE:59:45:20:A1:18:19:38:39:55:9C:EC:41:64:57:EF:6D:10:4F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018DB649BC249750099AC26ACDAC879311FA
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IM5ZRSChGBk4OVWc7EFkV-9tEE8.roa
Signing time: Sat 17 Feb 2024 08:58:21 +0000
ROA not before: Sat 17 Feb 2024 08:58:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.204.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.228.0/22 maxlen: 22
185.125.228.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.184.0/21 maxlen: 21
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.193.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a07:4a00::/29 maxlen: 29
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0b:9800::/29 maxlen: 29
2a0c:74c0::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:2cc0::/29 maxlen: 29
2a0d:3880::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b6:49:bc:24:97:50:09:9a:c2:6a:cd:ac:87:93:11:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Feb 17 08:58:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20ce594520a118193839559cec416457ef6d104f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:45:93:e4:6d:ea:4f:78:29:e5:79:d6:6d:7a:
34:c2:d7:b6:90:6d:9c:ec:cd:57:74:16:0f:21:29:
22:17:e5:af:73:dc:bf:5f:49:c0:b0:93:e2:ce:c0:
78:42:e3:12:53:13:c2:a5:be:32:d5:d1:13:28:54:
d1:a0:29:83:5e:60:3f:47:45:6b:49:45:4c:d0:12:
9c:10:2b:f1:b8:73:b9:26:84:d1:34:71:c0:40:a8:
fa:e4:2b:38:50:02:8e:a4:50:63:16:00:a5:37:83:
db:47:a9:ee:7f:93:85:2a:aa:31:ea:11:c9:30:32:
f3:7b:03:a7:23:c4:74:1f:00:a8:a7:47:e7:83:a2:
ac:13:29:cb:b9:24:98:c7:a4:ae:4d:dd:05:f5:35:
1f:7d:a1:0b:a6:07:b8:1c:d9:29:06:c5:98:5f:fc:
b5:5f:d3:f2:96:3d:f3:1d:86:30:4b:97:97:7f:55:
4d:fe:df:50:a8:c5:ef:19:ca:4c:e8:78:9f:e1:0b:
d8:f0:81:e8:11:95:f3:2a:8b:4f:cb:d3:c7:86:11:
a4:ae:42:97:f7:e8:bb:ad:23:11:09:55:78:1c:05:
2d:53:61:7d:eb:37:eb:1e:58:99:41:08:b7:cc:9c:
0a:03:63:06:4d:1a:5e:11:2e:56:d4:6c:6e:c5:94:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CE:59:45:20:A1:18:19:38:39:55:9C:EC:41:64:57:EF:6D:10:4F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IM5ZRSChGBk4OVWc7EFkV-9tEE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
185.200.188.0/24
193.109.85.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a07:4a00::/29
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0b:9800::/29
2a0c:74c0::/29
2a0c:77c0::/32
2a0d:2cc0::/29
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
81:26:2e:e4:d6:8e:90:9b:8c:fc:55:bf:8d:dd:79:72:b2:d5:
34:4c:74:f9:7b:16:0e:ce:df:e5:70:4a:83:78:a6:8d:f3:23:
18:13:c5:73:82:05:3a:94:66:f3:92:83:5f:15:83:1c:b3:2c:
50:ff:e4:b3:70:8d:f8:5d:36:30:f5:a7:55:7c:63:a9:13:86:
6c:5c:56:1e:53:6a:7a:78:e8:7f:bd:a4:63:6f:5b:c2:7d:fb:
d7:04:9b:2d:6a:43:a5:08:b9:81:c2:61:ca:bc:19:5f:e8:2f:
88:63:5d:05:dd:d8:d2:c4:fd:af:05:4d:74:3f:21:e7:3e:3a:
cf:85:72:cd:cf:f9:55:10:52:11:24:11:01:8f:f1:b9:1d:22:
4e:82:9e:98:f3:9d:61:53:35:63:08:9c:10:75:29:59:74:d8:
b1:43:e3:ad:0b:d5:e5:ee:c9:79:24:df:79:5b:0d:7f:25:b9:
69:9c:3e:98:54:01:85:99:10:ff:cc:b8:18:c8:e3:0e:fc:2f:
fe:25:28:93:42:c9:26:74:d0:70:0d:79:da:ae:2a:29:24:a7:
4b:8c:fa:a6:a2:b0:3f:dc:c2:5d:1f:25:e7:e9:76:47:fc:99:
e5:12:29:60:1c:f4:db:3f:54:97:1a:c2:00:52:e8:4f:0f:46:
30:55:84:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org