Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/L_RXPVKAejEKmuGGLANWEaqQN_U.roa
File: L_RXPVKAejEKmuGGLANWEaqQN_U.roa (raw, json)
Hash identifier: Tiu9Ro0I3/K5+pt4iqST3dRqn2y7qgnpp4XsnLXaxxU=
Subject key identifier: 2F:F4:57:3D:52:80:7A:31:0A:9A:E1:86:2C:03:56:11:AA:90:37:F5
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01862C701C27C4A2944B5DCCD097E062B6F5
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/L_RXPVKAejEKmuGGLANWEaqQN_U.roa
Signing time: Tue 07 Feb 2023 15:13:10 +0000
ROA not before: Tue 07 Feb 2023 15:13:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.136.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
194.53.52.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.180.136.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
213.108.197.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
45.89.64.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a04:5200:fff2::/48 maxlen: 48
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0a:9300::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5205::/32 maxlen: 32
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300:aaaa::/48 maxlen: 48
2a04:5200:1::/48 maxlen: 48
2a0a:9300::/32 maxlen: 32
2a04:5200:fff7::/48 maxlen: 48
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5200:fff4::/48 maxlen: 48
2a04:5206::/32 maxlen: 32
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5207::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200:ffff::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:70:1c:27:c4:a2:94:4b:5d:cc:d0:97:e0:62:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Feb 7 15:13:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ff4573d52807a310a9ae1862c035611aa9037f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:63:b4:29:38:06:ff:af:c5:43:a1:c3:b9:73:
15:5f:59:ff:31:b9:20:ca:c5:46:22:13:a8:7e:ec:
7f:5c:5b:be:33:6e:15:33:74:a8:8e:a2:03:e9:76:
81:f9:b1:70:36:0b:13:89:84:38:a9:fb:df:0c:de:
31:d7:a3:80:0d:3b:ec:be:d7:98:68:ad:7b:5f:40:
55:83:f3:bb:da:d7:f1:4d:07:a3:28:5d:79:29:d3:
81:03:7b:ae:cf:68:ef:22:a3:45:3e:7d:4c:0f:8f:
8e:6d:15:5e:ea:81:a0:1c:1a:8b:97:98:3c:c2:52:
56:f8:de:e5:fb:17:5f:d5:10:e1:59:2d:75:e1:2b:
cf:1f:d1:cc:98:84:9c:5f:95:86:39:9b:81:4d:e2:
ad:6f:86:69:c2:48:61:d8:bc:4d:fa:76:f8:5e:52:
43:a9:7f:72:35:6e:74:9a:ba:98:78:d9:9a:73:10:
35:30:97:67:2c:43:4b:8a:82:55:66:90:ea:a0:98:
12:3d:1b:fc:14:8f:4a:69:42:35:c3:85:5a:d3:43:
94:17:b5:20:d9:01:8d:f5:d5:ad:19:41:f4:36:22:
5c:eb:87:f8:09:88:b7:e4:3a:ef:b4:41:da:42:cd:
de:75:40:35:0e:cd:66:78:3a:72:cd:fd:79:88:fb:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F4:57:3D:52:80:7A:31:0A:9A:E1:86:2C:03:56:11:AA:90:37:F5
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/L_RXPVKAejEKmuGGLANWEaqQN_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.8.211.0/24
45.89.64.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.40.4.0/24
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/24
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.53.52.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.197.0-213.108.199.255
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0f:4680::/32
2a0f:7300::/32
Signature Algorithm: sha256WithRSAEncryption
b8:d0:9e:6c:4d:16:66:f0:a1:12:c8:78:68:61:3a:be:fe:be:
1d:68:34:2d:ac:e4:06:db:e7:03:89:70:f1:df:30:77:6a:95:
4f:4b:39:47:a7:5d:69:d7:7b:fd:a5:7d:88:53:18:54:b4:e6:
49:cd:14:1d:ad:e4:4a:5c:34:ea:ef:8d:15:7a:3b:57:b5:fe:
c4:c8:db:5f:35:b0:32:94:09:fe:ad:e8:9a:7c:8c:fb:b8:d0:
79:e6:6c:58:80:44:b7:80:6e:f4:46:c2:22:0b:9b:b2:0c:24:
66:2f:07:0b:a4:a2:86:e0:07:df:00:2a:6d:c0:98:28:99:40:
9a:1a:4e:57:df:47:51:b7:f9:f1:d7:05:47:6d:25:33:ca:fc:
33:1b:b7:4a:b5:29:f3:3a:c6:83:cc:f0:a0:56:90:4b:d4:27:
3a:e9:78:1f:0a:8f:d9:c2:50:df:00:0c:d8:24:77:c3:f1:d1:
5b:2d:fe:b1:7a:4c:ba:43:5a:a2:22:21:09:e2:38:58:c1:38:
87:5a:81:64:bd:2b:f7:79:50:0f:db:52:f5:90:cc:a5:4a:23:
64:61:d7:90:d1:b0:83:c4:e6:0d:fd:78:be:7a:4f:85:11:99:
0b:ac:99:08:5f:7f:ab:ac:78:79:47:c1:d7:7e:f3:32:33:2a:
c5:3f:06:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org