Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/TOBVp-FVpfxA2Hxv1wTfHFUcqAk.roa
File: TOBVp-FVpfxA2Hxv1wTfHFUcqAk.roa (raw, json)
Hash identifier: XUzUNX58/ASqUsCT6wjLmesaqVeRWvQ6vvDZkxVm9PE=
Subject key identifier: 4C:E0:55:A7:E1:55:A5:FC:40:D8:7C:6F:D7:04:DF:1C:55:1C:A8:09
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 046C43F8
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/TOBVp-FVpfxA2Hxv1wTfHFUcqAk.roa
Signing time: Tue 29 Mar 2022 12:41:50 +0000
ROA not before: Tue 29 Mar 2022 12:41:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.139.0/24 maxlen: 24
185.174.136.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
194.63.140.0/22 maxlen: 22
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
185.40.5.0/24 maxlen: 24
185.40.7.0/24 maxlen: 24
45.8.210.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
185.180.228.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
185.112.100.0/24 maxlen: 24
147.78.66.7/32 maxlen: 32
194.67.208.12/32 maxlen: 32
185.102.137.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.102.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.203.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
5.180.136.76/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.12.0/24 maxlen: 24
185.189.13.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a0f:7c80::/29 maxlen: 29
2a0f:c780::/29 maxlen: 29
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0e:d602::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a0c:6980::/29 maxlen: 29
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0c:f641::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a07:4a00::/29 maxlen: 29
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a0c:f640::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74204152 (0x46c43f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 29 12:41:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ce055a7e155a5fc40d87c6fd704df1c551ca809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:15:23:b8:f1:ab:53:3c:f5:e4:f1:9a:85:
a7:61:2d:73:6a:f3:e4:2f:b7:7b:8d:f8:9f:16:48:
44:5f:32:b8:bc:8c:3d:7e:1d:27:89:85:1c:78:11:
3f:3b:55:01:b0:82:00:33:15:20:d1:eb:09:19:20:
ca:12:e7:c6:ff:9f:36:af:2c:fc:46:8d:97:be:e8:
d5:48:06:f7:e9:d0:0b:48:ba:95:98:87:bd:fa:09:
9f:34:9a:d1:46:79:e8:b2:c0:a7:98:61:8a:7d:e9:
4b:86:e2:2b:d0:4a:ca:87:c1:8c:df:27:11:ae:9f:
b7:dd:ad:92:db:2e:14:e1:2c:d2:cb:fd:68:80:81:
81:ca:22:99:56:a2:d1:26:2a:78:47:56:77:24:d8:
07:91:2a:e1:ad:c3:97:8f:6a:4f:fc:51:42:01:f6:
eb:e0:e3:07:04:20:6e:e8:d7:5c:09:80:17:60:0b:
14:f8:f1:a4:18:e7:04:05:08:a0:21:b0:45:85:e6:
d7:07:8e:07:93:97:ed:fc:06:77:95:41:97:47:70:
32:57:6f:85:f8:97:44:8e:91:e5:6f:86:d0:87:01:
7f:c4:4b:e1:bb:b4:db:11:9b:34:33:23:2b:92:9e:
52:ac:e0:20:8d:bf:11:38:0e:90:b5:a1:0c:1f:dd:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:55:A7:E1:55:A5:FC:40:D8:7C:6F:D7:04:DF:1C:55:1C:A8:09
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/TOBVp-FVpfxA2Hxv1wTfHFUcqAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.76/32
5.180.136.221/32
45.8.210.0/23
147.78.66.7/32
185.17.3.102/32
185.40.4.0/23
185.40.7.0/24
185.102.137.0/24
185.104.248.0/24
185.112.100.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/24
185.174.139.0/24
185.180.228.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a07:4a00::/29
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0c:6980::/29
2a0c:f640::/31
2a0e:d602::/32
2a0f:4680::/32
2a0f:7300::/32
2a0f:7c80::/29
2a0f:c780::/29
Signature Algorithm: sha256WithRSAEncryption
79:8f:a7:c9:5c:8e:0d:93:b6:29:f1:b9:7e:62:dd:b4:af:81:
9e:ce:36:a1:9e:94:f7:1e:16:b0:95:fc:a3:ce:74:58:bc:37:
f1:b8:44:69:d1:c6:f2:65:85:22:4b:fb:d0:1b:ee:af:1b:d5:
8b:af:9c:ca:29:50:c7:b2:d2:f4:cc:a6:f0:bb:38:e3:7b:c5:
12:83:72:4c:5b:09:13:43:6c:54:9f:66:cb:e5:d6:f1:20:9e:
ab:3c:0a:75:40:e8:8b:00:38:af:2a:19:50:57:6d:7f:a7:16:
fe:36:a0:e9:57:69:5e:33:0d:34:19:3f:49:e5:99:0a:ee:88:
6b:7f:73:2e:8c:c8:ef:66:e6:69:6c:07:5b:32:1f:da:41:a6:
40:ac:35:55:21:c3:18:c2:b6:f4:ea:13:d4:22:b3:8c:bf:e3:
eb:ca:d3:d6:ab:b8:d6:cc:96:6e:3e:36:e1:4b:e4:39:fb:dd:
05:c7:14:d3:38:35:62:9c:00:d0:31:2e:da:1e:ef:4b:68:54:
11:1c:24:1b:2b:c7:eb:23:49:b0:54:7f:d9:a7:fe:79:20:cd:
26:e5:78:df:f2:b6:46:82:7b:a0:9d:95:f5:2a:53:b1:7e:f3:
fa:6a:3e:8b:84:25:53:0b:dd:e0:14:03:d6:4e:79:52:33:c1:
11:62:f4:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org