Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/UBG6LQCFnstyMWiZo2T8TMvZqtQ.roa
File: UBG6LQCFnstyMWiZo2T8TMvZqtQ.roa (raw, json)
Hash identifier: ldd+MwsnW5WpxX66vsTRBpf81WxImaKcpO/BKJlPoN4=
Subject key identifier: 50:11:BA:2D:00:85:9E:CB:72:31:68:99:A3:64:FC:4C:CB:D9:AA:D4
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 04AA065E
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/UBG6LQCFnstyMWiZo2T8TMvZqtQ.roa
Signing time: Tue 19 Apr 2022 09:41:27 +0000
ROA not before: Tue 19 Apr 2022 09:41:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.136.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
45.8.210.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
185.180.228.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
194.67.208.12/32 maxlen: 32
185.102.137.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a0f:7c80::/29 maxlen: 29
2a0f:c780::/29 maxlen: 29
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0e:d602::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a0c:6980::/29 maxlen: 29
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0c:f641::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a07:4a00::/29 maxlen: 29
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a0c:f640::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78251614 (0x4aa065e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 19 09:41:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5011ba2d00859ecb72316899a364fc4ccbd9aad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:bc:4b:fd:0b:9f:54:6b:04:26:f5:b7:a3:
63:79:9a:a0:8a:63:e0:fb:b2:7a:b9:d8:f6:2f:9d:
4a:20:0a:3d:0f:8d:31:80:a9:5d:c4:9a:20:98:ee:
79:69:49:49:1e:6a:24:3b:fe:43:04:3a:ad:43:44:
70:40:c6:5c:69:97:ae:71:80:2e:ba:7a:f1:e6:c7:
3f:2f:d4:d5:75:25:ec:d6:1f:07:51:83:73:96:b3:
ac:eb:f6:0b:c6:96:8e:e4:4d:a7:0e:af:1f:5a:5c:
7f:de:b4:22:8a:fb:67:83:3b:11:f0:c1:23:12:85:
6f:c6:4c:37:8a:6b:be:75:97:37:c8:0b:90:96:e7:
0b:c5:b2:30:68:26:5f:d5:53:24:1c:38:2b:80:a0:
7d:85:72:70:6e:0d:63:3b:27:48:ed:4c:2e:34:8d:
c0:cf:24:d6:7f:c3:09:78:a3:ce:0b:56:1d:0e:b1:
91:dd:25:13:23:c9:f1:1b:7e:52:1c:c4:c0:5c:62:
39:81:5e:07:71:a9:13:9d:66:5a:6a:c1:6a:e4:e7:
e1:2a:24:74:c7:01:ad:fa:b1:4c:a6:57:ca:2b:a6:
36:8d:18:df:6b:27:3a:23:f6:0b:91:a1:dc:57:63:
b6:cc:37:81:7e:07:a9:b7:6d:a2:9a:75:15:65:f9:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:11:BA:2D:00:85:9E:CB:72:31:68:99:A3:64:FC:4C:CB:D9:AA:D4
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/UBG6LQCFnstyMWiZo2T8TMvZqtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.76/32
5.180.136.221/32
45.8.210.0/23
147.78.66.7/32
185.17.3.102/32
185.40.4.0/24
185.102.137.0/24
185.104.248.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/24
185.174.139.0/24
185.180.228.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a07:4a00::/29
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0c:6980::/29
2a0c:f640::/31
2a0e:d602::/32
2a0f:4680::/32
2a0f:7300::/32
2a0f:7c80::/29
2a0f:c780::/29
Signature Algorithm: sha256WithRSAEncryption
a2:27:c1:bb:19:f6:dc:1a:55:35:3b:36:3b:f2:3a:3f:29:96:
0f:a8:e4:1a:89:5a:7a:28:1f:d4:30:70:f1:84:23:db:90:5c:
98:2c:a6:14:99:52:52:f0:43:50:a8:a1:76:15:4b:6f:07:1a:
eb:f6:db:bf:29:21:f1:1c:c8:9d:3d:ef:e6:eb:10:d9:37:7e:
2e:08:c3:75:03:42:69:22:ea:a7:9f:4c:d7:5c:71:78:51:be:
0e:f9:64:87:a2:ff:85:d2:00:45:94:2d:fd:60:fa:be:b7:6f:
07:a7:84:04:10:85:d7:27:a5:34:dc:f9:fa:45:e1:59:6c:2d:
9f:f1:61:e9:f0:f1:03:a6:29:8a:36:aa:b0:ed:25:4e:89:1d:
51:79:ca:99:3a:74:a6:51:8e:66:51:67:79:ee:20:29:e4:18:
c9:82:2e:e7:66:45:4c:b0:a2:ff:f5:da:95:99:ac:63:ad:43:
85:5b:b3:db:e7:f0:d0:62:0a:9b:c2:f1:01:5f:46:51:12:62:
4e:39:df:76:46:33:7f:71:a3:c6:92:77:f7:8e:b2:55:1e:72:
5f:bf:68:c8:ca:cb:a2:60:d2:e6:3d:9e:6b:8e:ee:ac:63:e9:
ff:18:dd:a2:32:52:96:02:84:7c:fe:14:9c:ef:1c:e4:06:2e:
2a:b8:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org