Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mHPJcHeN4WHN6iEbkfIttjYcgio.roa
File: mHPJcHeN4WHN6iEbkfIttjYcgio.roa (raw, json)
Hash identifier: ChVKCkcOtTiYItgNK6O0oe5XXXpeqaLPcWc4PNE96IY=
Subject key identifier: 98:73:C9:70:77:8D:E1:61:CD:EA:21:1B:91:F2:2D:B6:36:1C:82:2A
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018A1858C3DD562B8EBAE4FF3079276D0556
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mHPJcHeN4WHN6iEbkfIttjYcgio.roa
Signing time: Mon 21 Aug 2023 13:46:25 +0000
ROA not before: Mon 21 Aug 2023 13:46:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
194.53.52.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
185.139.68.28/32 maxlen: 32
5.180.137.0/24 maxlen: 24
5.180.136.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
213.108.197.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
45.89.64.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a04:5200:fff2::/48 maxlen: 48
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0a:9300::/48 maxlen: 48
2a04:5200:a::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5205::/32 maxlen: 32
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300:aaaa::/48 maxlen: 48
2a04:5200:1::/48 maxlen: 48
2a0a:9300::/32 maxlen: 32
2a04:5200:fff7::/48 maxlen: 48
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5200:fff4::/48 maxlen: 48
2a04:5206::/32 maxlen: 32
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5207::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200::/29 maxlen: 29
2a04:5200:ffff::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:58:c3:dd:56:2b:8e:ba:e4:ff:30:79:27:6d:05:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 21 13:46:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9873c970778de161cdea211b91f22db6361c822a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:50:9c:72:eb:a8:4d:36:1c:9b:6b:85:3e:
26:f6:d4:88:b8:ef:97:cf:e6:ac:54:09:67:0e:54:
98:d5:11:61:d6:84:f8:99:80:f2:29:7f:84:8d:c8:
1a:d6:53:5a:95:b7:dc:e0:0e:cc:66:fa:91:a6:d5:
34:18:96:a0:09:2c:aa:b9:b6:cc:a5:d8:1c:a3:5b:
5a:6d:f0:2e:a5:a1:22:1b:e5:1c:f3:16:b7:e1:3b:
ee:41:e6:06:a4:10:43:e9:cb:23:8e:cf:9f:67:2b:
aa:28:85:f4:1a:c5:d9:26:d4:e2:5e:9f:73:9b:5b:
a7:d8:bc:40:3d:3b:b3:fa:b6:c9:08:28:9c:a2:80:
30:7d:a8:4a:ae:b8:ac:63:10:69:36:23:c2:81:90:
92:fa:fb:9f:c0:81:ca:22:01:7d:e9:c0:1f:ac:4b:
46:ac:14:39:20:19:38:78:74:97:fe:65:99:ec:80:
06:01:3f:1c:86:e5:d9:2a:20:27:34:33:5e:fb:50:
3a:75:68:32:aa:eb:f4:a2:99:b9:54:5a:ef:ba:bd:
80:30:6d:9e:d9:79:0c:f1:92:eb:5c:15:1c:61:fc:
d8:b5:1d:9b:43:0c:38:22:40:86:ab:c7:30:fe:50:
5a:c2:70:2c:49:c4:33:01:70:64:6a:13:26:00:8e:
e7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:73:C9:70:77:8D:E1:61:CD:EA:21:1B:91:F2:2D:B6:36:1C:82:2A
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mHPJcHeN4WHN6iEbkfIttjYcgio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.8.211.0/24
45.89.64.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.53.52.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.197.0-213.108.199.255
IPv6:
2a04:5200::/29
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0f:4680::/32
2a0f:7300::/32
Signature Algorithm: sha256WithRSAEncryption
bc:f6:04:b7:cd:dc:66:09:dd:19:1a:99:5a:61:13:f4:94:82:
34:86:23:e1:11:60:28:49:00:44:37:be:f7:cd:27:f1:a8:95:
b3:e7:23:2c:00:1f:6f:68:b7:9c:a7:6f:92:9e:54:e2:46:02:
b4:a8:47:62:f3:04:b3:cf:fc:a4:fc:98:55:2b:10:20:18:6c:
db:0b:3a:26:78:a4:d1:de:b7:2e:30:10:05:a3:2a:54:8b:2d:
3b:82:63:c8:35:f5:0f:b4:75:84:d0:bb:e3:0d:30:b3:ea:a6:
8f:54:a9:2c:1f:07:36:b9:ce:e1:e1:0b:4f:09:c5:83:6d:00:
a1:d4:28:c6:da:e9:e3:f2:89:fc:bd:a4:f0:0e:4d:92:89:5a:
77:35:16:ec:e4:a6:66:51:87:4d:fc:f4:c0:0e:75:fe:b2:f8:
b7:6d:6a:47:e2:16:02:ae:29:fc:36:5b:37:1f:4a:75:7b:76:
cf:33:43:4b:48:cb:6f:26:f6:2c:65:60:a0:de:14:07:d3:26:
d9:11:72:1e:d5:1b:46:83:af:c6:19:be:88:81:6d:f5:e7:7d:
f4:fc:3f:ad:47:7a:23:56:8f:11:22:9d:39:99:02:92:4a:d2:
e1:0d:21:0d:dc:d8:bf:e6:a8:c3:8b:0f:ca:32:93:a1:d1:b7:
70:67:a2:58
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgISAYoYWMPdViuOuuT/MHknbQVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwODIxMTM0NjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODczYzk3MDc3OGRlMTYxY2RlYTIxMWI5MWYyMmRiNjM2MWM4MjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4RQnHLrqE02HJtrhT4m9tSIuO+X
z+asVAlnDlSY1RFh1oT4mYDyKX+Ejcga1lNalbfc4A7MZvqRptU0GJagCSyqubbM
pdgco1tabfAupaEiG+Uc8xa34TvuQeYGpBBD6csjjs+fZyuqKIX0GsXZJtTiXp9z
m1un2LxAPTuz+rbJCCicooAwfahKrrisYxBpNiPCgZCS+vufwIHKIgF96cAfrEtG
rBQ5IBk4eHSX/mWZ7IAGAT8chuXZKiAnNDNe+1A6dWgyquv0opm5VFrvur2AMG2e
2XkM8ZLrXBUcYfzYtR2bQww4IkCGq8cw/lBawnAsScQzAXBkahMmAI7nlQIDAQAB
o4IDCzCCAwcwHQYDVR0OBBYEFJhzyXB3jeFhzeohG5HyLbY2HIIqMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvbUhQSmNIZU40V0hONmlFYmtmSXR0alljZ2lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHwYIKwYBBQUHAQcBAf8EggEOMIIBCjCB1QQCAAEwgc4D
BAEFtIgDBAAF/HQDBAAtCNMDBAAtWUADBABb2U0DBQCTTkIHAwUAuREDZgMEALlo
+AMEALl9MgMFALmLRBwDBQC5i0Z0AwQBuayCAwQAua6LAwQAubTmAwUAubTnVwME
ALm8tAMEArm9DAMEAsCiZAMEAMEAyAMEAcEAygMEAMGo4gMEAMI1NAMEAsI/jAMF
AMJDxH8DBQDCQ8YHAwUAwkPGbAMFAMJDyzYDBQDCQ9AGAwUAwkPQDAMFAMJD0DAw
DAMEANVsxQMEA9VswDAwBAIAAjAqAwUDKgRSAAMFACoJUwMDBQAqCpMAAwUDKgva
AAMFACoPRoADBQAqD3MAMA0GCSqGSIb3DQEBCwUAA4IBAQC89gS3zdxmCd0ZGpla
YRP0lII0hiPhEWAoSQBEN773zSfxqJWz5yMsAB9vaLecp2+SnlTiRgK0qEdi8wSz
z/yk/JhVKxAgGGzbCzomeKTR3rcuMBAFoypUiy07gmPINfUPtHWE0LvjDTCz6qaP
VKksHwc2uc7h4QtPCcWDbQCh1CjG2unj8on8vaTwDk2SiVp3NRbs5KZmUYdN/PTA
DnX+svi3bWpH4hYCrin8Nls3H0p1e3bPM0NLSMtvJvYsZWCg3hQH0ybZEXIe1RtG
g6/GGb6IgW315330/D+tR3ojVo8RIp05mQKSStLhDSEN3Ni/5qjDiw/KMpOh0bdw
Z6JY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org