Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RFD1-eu0oxdUYH5fgUxoNJgGjhU.roa
File: RFD1-eu0oxdUYH5fgUxoNJgGjhU.roa (raw, json)
Hash identifier: aisB8FgPiljv4FWTuNwWP5n6sbc7D4jSRqsFDdRx6Qg=
Subject key identifier: 44:50:F5:F9:EB:B4:A3:17:54:60:7E:5F:81:4C:68:34:98:06:8E:15
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01892B22BC9D1CDB365BB586FA17FFFA7B52
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RFD1-eu0oxdUYH5fgUxoNJgGjhU.roa
Signing time: Thu 06 Jul 2023 12:17:23 +0000
ROA not before: Thu 06 Jul 2023 12:17:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.205.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.200.0/23 maxlen: 23
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9300:d0::/48 maxlen: 48
2a0d:3880::/29 maxlen: 29
2a0a:9302:1::/48 maxlen: 48
2a0f:4680::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:22:bc:9d:1c:db:36:5b:b5:86:fa:17:ff:fa:7b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 6 12:17:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4450f5f9ebb4a31754607e5f814c683498068e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:17:79:6e:b6:8b:38:84:c6:b2:d6:b7:a4:9f:
4c:8e:c4:db:50:fd:c3:64:01:1d:58:36:aa:e4:de:
65:95:ac:76:f3:19:40:02:88:0a:1a:f2:72:86:e0:
14:e0:9f:97:92:9c:47:b5:41:c0:1b:da:c2:86:b1:
d7:90:ff:0d:6c:b8:e9:bb:13:d6:03:ca:2a:f0:29:
bf:24:0e:75:0b:e9:74:7b:56:7b:9f:0a:30:02:34:
8a:fb:bd:ce:a0:5a:d1:dd:a7:25:32:f2:6c:9a:73:
8e:62:53:24:9c:0d:40:dc:ff:73:98:8b:6b:69:a3:
4b:e9:01:9a:91:b6:cc:2c:89:d2:2c:50:c3:c1:0d:
a5:2c:6f:cd:95:32:8e:c8:33:70:4f:aa:20:c5:a4:
e6:85:b9:5b:c3:d1:40:e6:50:c8:9c:85:e4:7c:57:
55:4f:66:64:cf:74:3e:b5:c5:08:91:52:05:40:4a:
a4:ac:fc:95:52:2f:25:8d:55:5a:68:32:cb:16:b3:
32:bb:70:fc:4e:bd:d8:ac:28:e9:e8:47:44:e5:1d:
90:0f:1d:6d:89:74:22:f8:8b:39:82:dc:94:8a:bc:
cd:3b:c7:49:a6:c6:f3:a9:6e:34:03:e7:ee:df:89:
fc:03:5b:54:87:5e:64:9b:2a:23:10:c5:50:6b:41:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:50:F5:F9:EB:B4:A3:17:54:60:7E:5F:81:4C:68:34:98:06:8E:15
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RFD1-eu0oxdUYH5fgUxoNJgGjhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.109.85.0/24
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0d:3880::/29
2a0f:4680::/29
Signature Algorithm: sha256WithRSAEncryption
ad:df:83:39:f2:f5:c0:d1:5d:48:b0:d7:d3:5c:bf:08:1d:a4:
43:51:08:0c:3d:ba:da:c1:fb:37:7e:0f:b9:cd:aa:16:7a:19:
0a:33:d1:f1:09:d5:da:8a:f7:71:e4:50:f9:b5:15:99:bb:a3:
d0:b8:86:4d:6e:03:78:14:36:07:90:fb:66:b1:a2:dd:55:db:
24:1d:19:28:5b:cb:ae:76:58:fc:f1:aa:f9:e7:0b:78:ff:dd:
af:2c:3e:38:33:f7:34:d6:88:37:e0:29:ce:eb:ee:dd:de:75:
36:56:27:18:90:69:9d:c5:3c:36:eb:3c:6a:87:07:42:61:25:
43:26:3b:1f:cb:c6:e3:06:58:74:bc:4b:76:e3:b3:ea:a4:b1:
9d:45:06:30:2f:b2:58:22:c4:69:0a:4a:f0:76:d6:6f:82:c2:
dd:58:11:4c:b1:3f:a5:f5:dc:40:19:67:cf:74:7e:ba:09:7f:
9f:03:0a:32:02:35:30:93:c3:bb:6f:52:5d:88:11:5e:b6:57:
91:9a:f9:a9:2e:39:5e:a9:9a:60:7c:f5:66:07:84:7d:0d:6d:
42:98:31:d2:6e:73:cc:6e:3a:08:8d:04:3a:4f:88:9b:e8:a7:
7f:3b:a4:42:60:18:b6:4e:f0:36:56:c4:b7:87:be:38:c9:ed:
10:ef:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org