Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KECn8dssfr0ztQbuWSgDVJ1YQzg.roa
File: KECn8dssfr0ztQbuWSgDVJ1YQzg.roa (raw, json)
Hash identifier: IGEh8UY7W8xgaP8nv/WRKE+8XU2cxorOzmmuIoqGbj8=
Subject key identifier: 28:40:A7:F1:DB:2C:7E:BD:33:B5:06:EE:59:28:03:54:9D:58:43:38
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01875C74AA55A40AC07D1717F0513D82B414
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KECn8dssfr0ztQbuWSgDVJ1YQzg.roa
Signing time: Fri 07 Apr 2023 16:02:42 +0000
ROA not before: Fri 07 Apr 2023 16:02:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
194.53.52.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
185.139.68.28/32 maxlen: 32
5.180.137.0/24 maxlen: 24
5.180.136.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
213.108.197.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
45.89.64.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a04:5200:fff2::/48 maxlen: 48
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0a:9300::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5205::/32 maxlen: 32
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300:aaaa::/48 maxlen: 48
2a04:5200:1::/48 maxlen: 48
2a0a:9300::/32 maxlen: 32
2a04:5200:fff7::/48 maxlen: 48
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5200:fff4::/48 maxlen: 48
2a04:5206::/32 maxlen: 32
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5207::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200:ffff::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5c:74:aa:55:a4:0a:c0:7d:17:17:f0:51:3d:82:b4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 7 16:02:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2840a7f1db2c7ebd33b506ee592803549d584338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:e3:14:6f:93:a7:04:b8:23:35:2c:9e:b0:
71:70:33:7b:5b:d7:ce:74:2d:e8:de:48:3f:ed:2c:
32:30:4e:23:fc:bf:4e:a4:de:83:7c:8f:1b:17:f1:
dd:97:c1:d5:3b:65:86:e0:b9:05:1d:b0:4f:43:c8:
fe:fd:0c:6e:39:27:69:0c:40:06:b2:bf:ba:04:74:
8e:94:ab:d2:fa:1c:e1:d9:0e:29:64:ba:84:c5:ad:
ec:5c:4a:ab:02:54:03:86:8e:b4:9c:02:b5:5c:d0:
09:4a:75:ee:54:97:52:44:30:51:18:41:c7:72:16:
e7:1f:c9:1e:74:0d:da:19:bf:b7:ec:52:95:f9:27:
45:9c:c6:0e:2b:48:00:01:d5:7f:0f:07:bf:0e:c2:
2f:c0:dc:3f:fe:11:0d:85:f0:a0:ce:14:81:63:fe:
ac:21:5b:1c:a9:57:73:74:af:98:17:1e:1d:c1:8c:
35:8b:3e:93:74:44:8d:44:43:00:8b:ae:af:8c:22:
04:df:d0:1d:52:c9:f6:c0:42:61:4a:50:78:f7:5d:
f9:a8:a1:31:14:86:eb:32:47:91:03:82:d1:a6:88:
f4:a4:d6:bc:f9:a5:c6:71:ee:35:e7:12:57:f6:a5:
1e:ce:6c:77:83:30:60:0e:17:99:59:50:95:47:85:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:40:A7:F1:DB:2C:7E:BD:33:B5:06:EE:59:28:03:54:9D:58:43:38
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KECn8dssfr0ztQbuWSgDVJ1YQzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.8.211.0/24
45.89.64.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.53.52.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.197.0-213.108.199.255
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0f:4680::/32
2a0f:7300::/32
Signature Algorithm: sha256WithRSAEncryption
be:67:33:a4:c8:fe:0b:d3:fe:aa:4d:a4:a4:87:d7:17:fa:d9:
c4:2c:27:3d:1a:3e:a3:69:75:d2:e3:48:73:0c:bb:14:0c:c1:
b2:6d:82:d0:c3:e1:f9:ae:eb:09:07:b3:8e:e2:07:56:c9:a9:
72:41:92:e7:95:2a:fc:6f:7c:a1:ec:b7:30:e0:da:8e:51:e0:
09:16:78:64:c7:06:34:ac:7f:f8:bf:32:21:a9:19:57:fb:b7:
5d:a7:ce:78:b5:93:9f:b5:56:c0:d0:da:a9:db:46:05:8a:49:
16:68:9f:97:b5:89:0f:31:26:82:c4:ff:c3:a7:ec:c6:5b:9f:
df:a5:c4:1e:da:5c:1d:ee:48:f7:12:a8:56:ea:d1:1c:f1:2a:
51:90:b4:11:2e:3e:38:de:ab:42:fc:9d:cf:5f:25:72:38:67:
88:c9:e6:0c:2e:ee:83:bf:78:7b:1b:c4:03:9a:c2:af:db:11:
16:d0:96:f7:bd:d4:9a:2e:f3:a8:27:b6:4a:b2:0b:5a:10:9a:
3d:90:c3:f5:b0:57:2f:ca:1e:07:de:52:6b:c6:8e:f5:11:de:
a8:a0:a3:16:12:84:63:db:b8:f1:49:fa:f4:02:21:5f:5f:c6:
15:be:f9:3d:9d:17:2c:db:d6:7f:45:ce:54:85:c8:a0:f6:f2:
8f:0c:b9:b0
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgISAYdcdKpVpArAfRcX8FE9grQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwNDA3MTYwMjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODQwYTdmMWRiMmM3ZWJkMzNiNTA2ZWU1OTI4MDM1NDlkNTg0MzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4LjFG+TpwS4IzUsnrBxcDN7W9fO
dC3o3kg/7SwyME4j/L9OpN6DfI8bF/Hdl8HVO2WG4LkFHbBPQ8j+/QxuOSdpDEAG
sr+6BHSOlKvS+hzh2Q4pZLqExa3sXEqrAlQDho60nAK1XNAJSnXuVJdSRDBRGEHH
chbnH8kedA3aGb+37FKV+SdFnMYOK0gAAdV/Dwe/DsIvwNw//hENhfCgzhSBY/6s
IVscqVdzdK+YFx4dwYw1iz6TdESNREMAi66vjCIE39AdUsn2wEJhSlB49135qKEx
FIbrMkeRA4LRpoj0pNa8+aXGce415xJX9qUezmx3gzBgDheZWVCVR4XiFQIDAQAB
o4IDGzCCAxcwHQYDVR0OBBYEFChAp/HbLH69M7UG7lkoA1SdWEM4MB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvS0VDbjhkc3NmcjB6dFFidVdTZ0RWSjFZUXpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjCB1QQCAAEwgc4D
BAEFtIgDBAAF/HQDBAAtCNMDBAAtWUADBABb2U0DBQCTTkIHAwUAuREDZgMEALlo
+AMEALl9MgMFALmLRBwDBQC5i0Z0AwQBuayCAwQAua6LAwQAubTmAwUAubTnVwME
ALm8tAMEArm9DAMEAsCiZAMEAMEAyAMEAcEAygMEAMGo4gMEAMI1NAMEAsI/jAMF
AMJDxH8DBQDCQ8YHAwUAwkPGbAMFAMJDyzYDBQDCQ9AGAwUAwkPQDAMFAMJD0DAw
DAMEANVsxQMEA9VswDBABAIAAjA6AwUAKgRSADAOAwUBKgRSAgMFAyoEUgADBQAq
CVMDAwUAKgqTAAMFAyoL2gADBQAqD0aAAwUAKg9zADANBgkqhkiG9w0BAQsFAAOC
AQEAvmczpMj+C9P+qk2kpIfXF/rZxCwnPRo+o2l10uNIcwy7FAzBsm2C0MPh+a7r
CQezjuIHVsmpckGS55Uq/G98oey3MODajlHgCRZ4ZMcGNKx/+L8yIakZV/u3XafO
eLWTn7VWwNDaqdtGBYpJFmifl7WJDzEmgsT/w6fsxluf36XEHtpcHe5I9xKoVurR
HPEqUZC0ES4+ON6rQvydz18lcjhniMnmDC7ug794exvEA5rCr9sRFtCW973Umi7z
qCe2SrILWhCaPZDD9bBXL8oeB95Sa8aO9RHeqKCjFhKEY9u48Un69AIhX1/GFb75
PZ0XLNvWf0XOVIXIoPbyjwy5sA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org