Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JZLv5WogtUr7JPSV6gpPRiQsmSw.roa
File: JZLv5WogtUr7JPSV6gpPRiQsmSw.roa (raw, json)
Hash identifier: dgEdzv3dnewa+DvjI4UY72WRH0cBQYlXZFfy8Ds7VhQ=
Subject key identifier: 25:92:EF:E5:6A:20:B5:4A:FB:24:F4:95:EA:0A:4F:46:24:2C:99:2C
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF9AE3FDFA9BAFF34AB8E468A3E1FF
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JZLv5WogtUr7JPSV6gpPRiQsmSw.roa
Signing time: Tue 02 Jan 2024 06:32:26 +0000
ROA not before: Tue 02 Jan 2024 06:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
194.53.52.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
185.139.68.28/32 maxlen: 32
5.180.137.0/24 maxlen: 24
5.180.136.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
185.244.174.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
213.108.197.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
45.89.64.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a04:5200:fff2::/48 maxlen: 48
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0a:9300::/48 maxlen: 48
2a04:5200:a::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5205::/32 maxlen: 32
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300:aaaa::/48 maxlen: 48
2a04:5200:1::/48 maxlen: 48
2a0a:9300::/32 maxlen: 32
2a04:5200:fff7::/48 maxlen: 48
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5200:fff4::/48 maxlen: 48
2a04:5206::/32 maxlen: 32
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5207::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200::/29 maxlen: 29
2a04:5200:ffff::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9a:e3:fd:fa:9b:af:f3:4a:b8:e4:68:a3:e1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2592efe56a20b54afb24f495ea0a4f46242c992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:c9:d6:f3:f6:7a:1e:47:dd:44:fc:1b:23:
58:14:14:64:10:7f:2c:43:fb:ec:94:7d:2e:fa:fc:
92:d1:8d:66:d1:58:ba:6e:73:fa:3c:04:23:cb:17:
be:33:cd:6e:91:90:b0:81:7d:b2:cc:15:34:31:35:
a1:66:4b:c0:89:0a:f4:33:5a:04:6d:99:6d:61:db:
16:1a:1e:6d:a5:37:21:de:23:e3:32:6a:eb:2a:aa:
8b:87:ca:42:b2:59:cb:d7:0f:20:03:81:3d:a9:91:
c3:88:6e:d5:07:89:34:07:d3:73:7f:ef:70:e8:12:
b8:ac:68:40:ef:9c:de:ca:07:0e:65:d7:7a:93:b6:
c1:f1:e4:1c:0a:68:82:a0:0e:2f:a5:8c:77:72:91:
50:2e:eb:1e:df:1f:80:13:09:60:d0:f0:c6:a6:00:
e1:4a:b9:27:92:d6:72:2b:1d:fc:03:54:67:5c:02:
ed:1b:f2:09:6a:27:f4:e6:fa:1d:00:56:ae:13:91:
27:86:dd:28:0b:18:23:ae:7d:48:4e:af:0d:fe:c3:
19:4d:a9:52:55:bf:6b:11:ae:0c:09:b1:dc:e7:81:
2b:cf:5e:5a:c2:f8:40:28:2f:3a:2d:69:5f:57:22:
df:7a:73:d0:4d:b8:cd:19:63:99:8d:ec:5e:20:6d:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:92:EF:E5:6A:20:B5:4A:FB:24:F4:95:EA:0A:4F:46:24:2C:99:2C
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JZLv5WogtUr7JPSV6gpPRiQsmSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.8.211.0/24
45.89.64.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
185.244.174.0/24
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.53.52.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.197.0-213.108.199.255
IPv6:
2a04:5200::/29
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0f:4680::/32
2a0f:7300::/32
Signature Algorithm: sha256WithRSAEncryption
76:53:ea:e4:5f:49:c1:cd:46:9f:bf:87:70:03:de:8c:a3:3f:
ff:56:ea:b6:14:56:cf:0b:dd:ea:7d:ff:1a:2c:a4:50:1c:3b:
52:c6:75:a7:68:b7:18:85:18:24:54:59:be:8f:dc:53:13:b6:
2c:c9:9c:93:f8:3e:df:89:5f:9f:80:ee:1b:99:b6:b8:87:49:
bd:71:b4:5c:76:ed:c5:e6:7b:4f:7b:52:4f:33:ea:0e:f5:95:
7f:d7:fe:9d:f3:70:fd:30:42:19:76:5e:53:b0:75:e2:31:d7:
c8:30:7a:3b:f7:14:fb:ce:6a:4b:34:70:27:e6:61:e4:8d:86:
a6:33:c8:c0:f3:8a:2d:17:c0:d2:8d:d9:24:ad:da:ed:2b:0b:
71:8f:be:ec:7e:b2:1f:41:d1:7f:19:6a:3e:73:d1:e5:53:eb:
31:0d:1c:f4:0f:f3:f0:ce:a7:1b:24:0e:3e:84:7d:31:09:91:
20:e2:69:d0:5b:bb:9c:bc:6f:45:a2:3b:bd:b9:48:68:9d:c9:
63:aa:0a:a6:6b:1e:3f:5b:45:40:aa:a9:66:ee:4e:17:4f:f6:
2b:71:01:0a:43:6b:d1:2f:01:02:f0:22:89:6e:8f:1c:f4:67:
c7:bd:72:7e:af:61:a9:ee:70:df:d1:fe:48:20:5b:99:44:66:
2a:a5:6d:8e
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgISAYzI35rj/fqbr/NKuORoo+H/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwMTAyMDYzMjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTkyZWZlNTZhMjBiNTRhZmIyNGY0OTVlYTBhNGY0NjI0MmM5OTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdzJ1vP2eh5H3UT8GyNYFBRkEH8s
Q/vslH0u+vyS0Y1m0Vi6bnP6PAQjyxe+M81ukZCwgX2yzBU0MTWhZkvAiQr0M1oE
bZltYdsWGh5tpTch3iPjMmrrKqqLh8pCslnL1w8gA4E9qZHDiG7VB4k0B9Nzf+9w
6BK4rGhA75zeygcOZdd6k7bB8eQcCmiCoA4vpYx3cpFQLuse3x+AEwlg0PDGpgDh
SrknktZyKx38A1RnXALtG/IJaif05vodAFauE5Enht0oCxgjrn1ITq8N/sMZTalS
Vb9rEa4MCbHc54Erz15awvhAKC86LWlfVyLfenPQTbjNGWOZjexeIG3gKwIDAQAB
o4IDETCCAw0wHQYDVR0OBBYEFCWS7+VqILVK+yT0leoKT0YkLJksMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvSlpMdjVXb2d0VXI3SlBTVjZncFBSaVFzbVN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJQYIKwYBBQUHAQcBAf8EggEUMIIBEDCB2wQCAAEwgdQD
BAEFtIgDBAAF/HQDBAAtCNMDBAAtWUADBABb2U0DBQCTTkIHAwUAuREDZgMEALlo
+AMEALl9MgMFALmLRBwDBQC5i0Z0AwQBuayCAwQAua6LAwQAubTmAwUAubTnVwME
ALm8tAMEArm9DAMEALn0rgMEAsCiZAMEAMEAyAMEAcEAygMEAMGo4gMEAMI1NAME
AsI/jAMFAMJDxH8DBQDCQ8YHAwUAwkPGbAMFAMJDyzYDBQDCQ9AGAwUAwkPQDAMF
AMJD0DAwDAMEANVsxQMEA9VswDAwBAIAAjAqAwUDKgRSAAMFACoJUwMDBQAqCpMA
AwUDKgvaAAMFACoPRoADBQAqD3MAMA0GCSqGSIb3DQEBCwUAA4IBAQB2U+rkX0nB
zUafv4dwA96Moz//Vuq2FFbPC93qff8aLKRQHDtSxnWnaLcYhRgkVFm+j9xTE7Ys
yZyT+D7fiV+fgO4bmba4h0m9cbRcdu3F5ntPe1JPM+oO9ZV/1/6d83D9MEIZdl5T
sHXiMdfIMHo79xT7zmpLNHAn5mHkjYamM8jA84otF8DSjdkkrdrtKwtxj77sfrIf
QdF/GWo+c9HlU+sxDRz0D/PwzqcbJA4+hH0xCZEg4mnQW7ucvG9Foju9uUhonclj
qgqmax4/W0VAqqlm7k4XT/YrcQEKQ2vRLwEC8CKJbo8c9GfHvXJ+r2Gp7nDf0f5I
IFuZRGYqpW2O
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org