Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/cluugI8W8btZ7pD5lK_HkeDGsNg.roa
File: cluugI8W8btZ7pD5lK_HkeDGsNg.roa (raw, json)
Hash identifier: wMcMBe4+/s8aWSxFr7g4RhekMr49SNdwWHM58PEbOi8=
Subject key identifier: 72:5B:AE:80:8F:16:F1:BB:59:EE:90:F9:94:AF:C7:91:E0:C6:B0:D8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01820F6C948D43755C20663F5FF7C3150077
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/cluugI8W8btZ7pD5lK_HkeDGsNg.roa
Signing time: Mon 18 Jul 2022 03:49:10 +0000
ROA not before: Mon 18 Jul 2022 03:49:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.136.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a0f:7c80::/29 maxlen: 29
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0e:d602::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0c:f641::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a0c:f640::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0f:6c:94:8d:43:75:5c:20:66:3f:5f:f7:c3:15:00:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 18 03:49:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=725bae808f16f1bb59ee90f994afc791e0c6b0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:47:c2:50:40:77:e7:9f:7a:1f:82:fa:cd:
af:36:f6:60:cd:ce:cd:fc:27:0b:3c:39:2e:05:23:
85:21:fa:f7:0e:6f:b5:5b:d3:e8:90:92:f5:74:d3:
b1:2f:2b:16:21:93:7d:0d:89:dc:bd:3f:aa:1e:bb:
90:90:1f:8b:b8:f2:2b:e4:a8:fe:e9:c0:ad:b7:60:
a2:a8:c8:5c:7f:c4:10:fc:c3:eb:01:e5:f4:cc:cf:
82:90:69:a2:77:8b:9f:bc:28:9a:85:d3:c8:a4:be:
ad:93:79:77:4f:24:cd:c8:69:a3:e8:4b:19:7a:8e:
66:13:16:0f:1d:c1:61:c5:f7:43:b6:d0:02:12:4f:
87:53:8f:33:2c:1e:58:85:46:9a:26:45:dc:c4:56:
bb:c4:c1:aa:46:0d:1c:2e:ab:9d:dc:98:e7:9f:46:
0e:77:96:fc:69:30:fe:e6:63:bd:56:70:54:bd:7d:
df:11:eb:5d:7e:c5:4b:b0:e4:02:3a:77:de:e5:3c:
ba:da:a8:1a:3b:6b:fb:a2:39:98:8b:c3:ae:25:b2:
12:38:83:07:6c:d5:c7:81:df:bc:2e:b2:59:42:43:
c2:f0:b9:f2:9f:e0:53:ae:13:34:9f:c1:12:b1:5d:
a5:81:83:9d:7e:9f:c8:6a:a9:36:06:ee:07:a1:74:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5B:AE:80:8F:16:F1:BB:59:EE:90:F9:94:AF:C7:91:E0:C6:B0:D8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/cluugI8W8btZ7pD5lK_HkeDGsNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.76/32
5.180.136.221/32
45.8.211.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.40.4.0/24
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/24
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.198.0/23
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0c:f640::/31
2a0e:d602::/32
2a0f:4680::/32
2a0f:7300::/32
2a0f:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
b9:15:25:ce:7b:3c:58:ed:66:5a:c1:6b:27:3c:9f:89:45:55:
42:cc:ab:e5:f9:c6:83:0b:fc:1f:e1:d2:fb:75:b9:e0:f7:1a:
18:a7:77:a3:c5:81:db:21:16:23:1c:82:73:44:9f:20:f2:4c:
9f:af:fe:9d:08:2a:2a:ef:d6:64:bb:c2:ee:3c:02:14:9f:8a:
39:75:a5:4b:2e:88:d6:3d:cd:49:29:2d:ae:43:ba:b1:d1:31:
85:a5:85:48:a9:e7:e9:2b:d8:7b:83:99:fa:fd:c3:2a:85:34:
66:0e:95:27:0e:9b:b6:8d:9b:ca:d3:71:d4:fa:b6:5e:1b:41:
e5:e9:36:f3:dc:74:d2:58:3b:0f:21:43:f2:f8:db:e4:92:03:
b9:33:1a:e6:b0:23:62:68:9a:3e:8c:dc:24:73:7e:c5:88:c8:
29:32:b3:c9:30:b7:77:77:de:56:ec:0e:a8:fe:45:79:91:f6:
ce:16:14:12:d9:f5:ce:5a:e6:88:02:1e:f4:4d:45:7a:fd:48:
a1:9f:45:bd:29:ad:d9:3f:61:59:f9:d8:9f:e9:09:5c:c2:2b:
a7:d9:fc:e5:ec:35:b5:ae:c8:5b:fd:d2:df:ea:7f:d3:5f:38:
66:6d:cd:aa:a3:a8:b3:48:ac:10:96:55:ec:a9:02:fe:d4:63:
0b:5e:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org