Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/baa5QCeaEqWjtaCb-3VXSF8pe40.roa
File: baa5QCeaEqWjtaCb-3VXSF8pe40.roa (raw, json)
Hash identifier: xPEn3NcHypcX1HW3BTF8ZlZmZCb24SooQnNBIi+B4fc=
Subject key identifier: 6D:A6:B9:40:27:9A:12:A5:A3:B5:A0:9B:FB:75:57:48:5F:29:7B:8D
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185C655F32EA48EE81DFF353D73FE46FBD7
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/baa5QCeaEqWjtaCb-3VXSF8pe40.roa
Signing time: Wed 18 Jan 2023 19:23:19 +0000
ROA not before: Wed 18 Jan 2023 19:23:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.136.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
194.53.52.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
5.180.139.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.180.136.0/24 maxlen: 24
5.180.138.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
213.108.197.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
45.89.64.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a04:5200:fff2::/48 maxlen: 48
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0a:9300::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5205::/32 maxlen: 32
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300:aaaa::/48 maxlen: 48
2a04:5200:1::/48 maxlen: 48
2a0a:9300::/32 maxlen: 32
2a04:5200:fff7::/48 maxlen: 48
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5200:fff4::/48 maxlen: 48
2a04:5206::/32 maxlen: 32
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5207::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200:ffff::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:55:f3:2e:a4:8e:e8:1d:ff:35:3d:73:fe:46:fb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 18 19:23:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6da6b940279a12a5a3b5a09bfb7557485f297b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:1c:cc:8e:04:30:86:22:25:a1:1a:8f:7f:
2f:e2:4d:28:1e:90:14:62:f9:ba:47:28:2c:f4:4a:
ae:aa:ce:48:67:66:24:34:1d:74:5c:61:4b:83:fa:
28:10:1e:39:5d:fe:d5:a8:7b:07:f0:49:b1:aa:cc:
a1:2c:77:ee:17:ab:bc:2c:b2:cb:a8:f2:87:2d:26:
f2:08:34:dd:f4:7c:14:5d:e4:dd:fb:0b:d6:0d:55:
dc:59:80:6e:3f:01:18:63:50:c2:fa:00:24:45:e7:
67:76:29:36:2a:74:77:8b:72:1d:ea:e8:74:71:9a:
0d:89:8d:0d:2d:f6:de:67:10:60:6e:8a:84:54:75:
6f:d8:b2:3f:e1:08:c4:e4:72:93:c9:e2:47:5c:15:
fc:46:18:f4:69:2d:82:cd:12:b3:c9:5a:20:a2:53:
91:c4:d7:31:28:e7:29:26:07:a8:78:d5:84:df:3e:
06:68:25:9e:31:ac:5a:dc:36:4b:fd:5c:7d:7b:bb:
36:5b:22:7d:60:ea:b7:a3:a0:40:aa:f0:9f:2b:30:
b6:25:67:9b:81:f5:fc:22:b7:45:db:e3:38:b1:6f:
cd:38:8a:7f:f0:6a:24:26:bc:34:81:d6:6b:e0:74:
05:4a:ea:8c:6c:ce:da:77:92:b9:02:fd:a4:00:af:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:B9:40:27:9A:12:A5:A3:B5:A0:9B:FB:75:57:48:5F:29:7B:8D
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/baa5QCeaEqWjtaCb-3VXSF8pe40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/22
5.252.116.0/24
45.8.211.0/24
45.89.64.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.40.4.0/24
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/24
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.53.52.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.197.0-213.108.199.255
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0f:4680::/32
2a0f:7300::/32
Signature Algorithm: sha256WithRSAEncryption
67:6f:3a:1c:1e:91:b8:74:9d:71:7b:ca:92:61:03:f0:2b:7a:
f2:da:cd:6a:56:b8:f1:2c:c6:d2:9d:d4:48:03:1c:d6:1a:31:
e4:30:c1:d3:06:b1:d5:03:a3:33:e3:03:c7:a6:ed:1b:90:ef:
13:17:25:da:21:8d:90:79:96:3a:0a:e5:b8:15:f6:ab:6d:4c:
d6:c5:76:30:de:49:39:37:a4:fd:0c:d7:9f:27:bd:9f:d5:45:
01:6b:d9:44:90:59:ee:72:46:32:14:44:2e:7d:6f:ed:9c:f8:
8c:93:60:f7:50:64:51:98:f1:63:a1:40:53:b6:60:d9:9b:4e:
08:2a:57:1c:f8:0e:8a:d7:0e:8d:61:94:a1:5c:62:28:47:35:
3a:92:d5:da:43:f8:94:f4:aa:3d:2e:dc:4a:c9:ba:fd:5d:f4:
c8:1d:9f:fa:b7:a0:0d:d4:c0:63:32:05:53:03:a3:07:2e:3f:
a2:8f:07:61:c2:78:e9:f9:9f:89:da:ce:35:92:70:c9:92:99:
32:8a:56:64:5f:1d:54:68:6c:40:a8:1e:55:01:2d:12:cd:4c:
1b:21:b8:a6:eb:3d:d2:31:d1:1b:e3:96:18:06:18:97:55:b9:
e7:5d:7d:6a:fb:fe:fc:07:81:1a:76:b1:52:ec:d7:f7:cb:a3:
0c:5b:dc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org