Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Oy47h5oAr-G2zVa8MNwbHx4GJyk.roa
File: Oy47h5oAr-G2zVa8MNwbHx4GJyk.roa (raw, json)
Hash identifier: Mi7QTum/JTVvE2/OkfNLU7y3MfC+0LpKJpDglktYF/o=
Subject key identifier: 3B:2E:3B:87:9A:00:AF:E1:B6:CD:56:BC:30:DC:1B:1F:1E:06:27:29
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0181D496A10424EE1EE5F54EB8827C6876B0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Oy47h5oAr-G2zVa8MNwbHx4GJyk.roa
Signing time: Wed 06 Jul 2022 17:37:30 +0000
ROA not before: Wed 06 Jul 2022 17:37:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.136.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a0f:7c80::/29 maxlen: 29
2a0f:c780::/29 maxlen: 29
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0e:d602::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a0c:6980::/29 maxlen: 29
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0c:f641::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a0c:f640::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:96:a1:04:24:ee:1e:e5:f5:4e:b8:82:7c:68:76:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 6 17:37:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b2e3b879a00afe1b6cd56bc30dc1b1f1e062729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:97:dd:23:e0:e6:4c:ef:f6:7e:8b:79:32:
f4:b9:7f:a4:91:3f:3c:f9:b9:8c:09:0c:21:c5:a3:
fc:35:a0:a8:cd:21:bd:71:c4:f5:0c:4a:33:11:3e:
b3:77:08:27:54:cf:9f:ba:09:2e:48:c7:ed:dd:b1:
3d:99:09:d7:be:31:b2:39:40:3c:0a:84:f6:88:95:
25:9e:bb:d5:ad:6c:cb:48:5c:73:0f:e5:69:a7:68:
1e:b6:96:36:57:aa:2f:bc:81:cb:c7:0f:67:7e:7f:
ff:f2:e1:b7:6d:93:f7:4d:41:49:65:09:24:e6:90:
c0:4c:62:af:39:61:1c:3a:ee:92:05:b6:44:5b:27:
d9:6c:22:c2:17:5c:05:76:4f:2d:7f:64:23:9a:a2:
8d:d6:ff:97:71:f6:91:cb:6e:c6:bf:48:16:4c:7a:
11:30:93:8a:f9:eb:c9:21:92:01:f7:38:69:66:0d:
b3:63:37:7a:9f:e6:24:b6:24:fc:1d:1a:28:56:89:
bb:3c:2b:0d:f6:e4:82:7c:c5:84:38:04:5f:16:8d:
a0:60:0e:4e:28:a8:7a:79:7b:3a:2b:3a:be:16:eb:
9a:79:9e:16:71:09:42:76:17:1d:22:3b:56:76:8b:
eb:30:a7:a7:f0:c3:5f:e9:7a:c6:c7:97:9f:8d:25:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:3B:87:9A:00:AF:E1:B6:CD:56:BC:30:DC:1B:1F:1E:06:27:29
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Oy47h5oAr-G2zVa8MNwbHx4GJyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.76/32
5.180.136.221/32
45.8.211.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.40.4.0/24
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/24
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.198.0/23
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0c:6980::/29
2a0c:f640::/31
2a0e:d602::/32
2a0f:4680::/32
2a0f:7300::/32
2a0f:7c80::/29
2a0f:c780::/29
Signature Algorithm: sha256WithRSAEncryption
27:d6:66:a3:94:a3:45:ac:1f:aa:25:ac:4a:e1:c9:33:f0:95:
95:93:e4:0f:93:3b:b5:1c:fc:71:bf:7c:0f:6f:fa:1b:59:55:
49:11:01:12:47:42:7f:76:be:ab:9c:01:f6:e1:94:d4:c2:71:
5a:74:58:e0:04:e0:d6:98:8b:16:86:f9:9a:47:33:37:e6:e3:
19:57:69:03:98:eb:5f:bb:2e:96:07:84:24:b4:6d:73:f6:ab:
30:8c:df:5b:4f:d0:ff:ff:d7:31:8a:c1:3e:f9:8f:f4:49:5b:
b9:d1:d6:c3:4a:55:0a:07:34:a8:19:90:91:f5:5c:de:30:b7:
ec:b2:ec:89:bc:1e:10:9b:f7:7c:c0:8b:12:4d:4b:9d:96:bd:
59:8f:d9:b8:32:96:cd:eb:ba:2a:17:93:b6:66:78:83:bf:44:
a7:25:cd:c8:17:05:49:8a:be:e5:49:1c:dc:40:f4:96:0c:62:
82:58:11:df:c2:9b:59:51:70:56:ea:db:fe:71:3e:93:df:89:
e0:61:51:6c:d9:1b:52:34:9f:6a:02:01:64:17:8a:0d:51:07:
79:ab:ee:6b:12:14:af:00:32:50:21:49:87:71:79:d0:c5:dc:
04:41:c0:0a:65:01:79:b5:5d:0f:29:38:f7:ed:2e:e9:be:b5:
d6:97:87:dc
-----BEGIN CERTIFICATE-----
MIIGLDCCBRSgAwIBAgISAYHUlqEEJO4e5fVOuIJ8aHawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjIwNzA2MTczNzMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjJlM2I4NzlhMDBhZmUxYjZjZDU2YmMzMGRjMWIxZjFlMDYyNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkluX3SPg5kzv9n6LeTL0uX+kkT88
+bmMCQwhxaP8NaCozSG9ccT1DEozET6zdwgnVM+fugkuSMft3bE9mQnXvjGyOUA8
CoT2iJUlnrvVrWzLSFxzD+Vpp2getpY2V6ovvIHLxw9nfn//8uG3bZP3TUFJZQkk
5pDATGKvOWEcOu6SBbZEWyfZbCLCF1wFdk8tf2QjmqKN1v+XcfaRy27Gv0gWTHoR
MJOK+evJIZIB9zhpZg2zYzd6n+YktiT8HRooVom7PCsN9uSCfMWEOARfFo2gYA5O
KKh6eXs6Kzq+FuuaeZ4WcQlCdhcdIjtWdovrMKen8MNf6XrGx5efjSXpWwIDAQAB
o4IDODCCAzQwHQYDVR0OBBYEFDsuO4eaAK/hts1WvDDcGx8eBicpMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvT3k0N2g1b0FyLUcyelZhOE1Od2JIeDRHSnlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBTAYIKwYBBQUHAQcBAf8EggE7MIIBNzCBzwQCAAEwgcgD
BQAFtIhMAwUABbSI3QMEAC0I0wMEAFvZTQMFAJNOQgcDBQC5EQNmAwQAuSgEAwQA
uWj4AwQAuX0yAwUAuYtEHAMFALmLRnQDBAG5rIIDBAC5rogDBAC5rosDBAC5tOYD
BQC5tOdXAwQAuby0AwQCub0MAwQCwKJkAwQAwQDIAwQBwQDKAwQAwajiAwQCwj+M
AwUAwkPEfwMFAMJDxgcDBQDCQ8ZsAwUAwkPLNgMFAMJD0AYDBQDCQ9AMAwUAwkPQ
MAMEAdVsxjBjBAIAAjBdAwUAKgRSADAOAwUBKgRSAgMFAyoEUgADBQAqCVMDAwUA
KgqTAAMFAyoL2gADBQMqDGmAAwUBKgz2QAMFACoO1gIDBQAqD0aAAwUAKg9zAAMF
AyoPfIADBQMqD8eAMA0GCSqGSIb3DQEBCwUAA4IBAQAn1majlKNFrB+qJaxK4ckz
8JWVk+QPkzu1HPxxv3wPb/obWVVJEQESR0J/dr6rnAH24ZTUwnFadFjgBODWmIsW
hvmaRzM35uMZV2kDmOtfuy6WB4QktG1z9qswjN9bT9D//9cxisE++Y/0SVu50dbD
SlUKBzSoGZCR9VzeMLfssuyJvB4Qm/d8wIsSTUudlr1Zj9m4MpbN67oqF5O2ZniD
v0SnJc3IFwVJir7lSRzcQPSWDGKCWBHfwptZUXBW6tv+cT6T34ngYVFs2RtSNJ9q
AgFkF4oNUQd5q+5rEhSvADJQIUmHcXnQxdwEQcAKZQF5tV0PKTj37S7pvrXWl4fc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org