Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/nxUztkBc5E9TCooIYS7dofCxILM.roa
File: nxUztkBc5E9TCooIYS7dofCxILM.roa (raw, json)
Hash identifier: m9fpE+ld4e54omZa3UcKuk3gHFPVEGKZf09dIkUxCic=
Subject key identifier: 9F:15:33:B6:40:5C:E4:4F:53:0A:8A:08:61:2E:DD:A1:F0:B1:20:B3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01836A7B9C0003B3DF7DB90CA3541F796D1B
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/nxUztkBc5E9TCooIYS7dofCxILM.roa
Signing time: Fri 23 Sep 2022 13:13:48 +0000
ROA not before: Fri 23 Sep 2022 13:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.136.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
194.53.55.0/24 maxlen: 24
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
5.180.139.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.180.136.0/24 maxlen: 24
5.180.138.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0a:9300::/48 maxlen: 48
2a0e:d602::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300:aaaa::/48 maxlen: 48
2a0a:9300::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:7b:9c:00:03:b3:df:7d:b9:0c:a3:54:1f:79:6d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 23 13:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f1533b6405ce44f530a8a08612edda1f0b120b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:e4:1b:b1:de:c0:0c:ea:f3:27:d9:d4:12:
4f:a6:8b:60:05:d1:c7:e3:14:7f:19:02:ae:ab:7b:
8a:37:96:dc:7b:4b:6c:99:09:49:7c:ce:de:de:d0:
89:76:2c:9f:44:74:0d:57:23:18:34:be:1a:47:74:
13:0f:4f:fd:61:9e:34:79:c6:1b:40:d7:7b:b1:6a:
10:af:f1:fb:99:02:e1:07:a7:5e:9c:0c:89:4e:d4:
59:bc:eb:7e:eb:61:f2:b5:28:ea:52:0e:23:3d:a2:
66:1f:b3:86:5f:bc:a5:0b:fb:e3:70:55:76:86:d6:
9d:2d:4c:cd:ab:e1:60:60:da:26:6d:e1:ac:a6:15:
6e:8e:d9:f5:bb:1b:37:31:b4:c7:be:a8:0c:26:38:
08:a7:f0:9a:33:f6:30:11:eb:eb:b1:e5:c2:e4:0c:
96:05:19:32:77:ee:63:37:2d:51:22:7f:b1:d1:7a:
8e:71:e9:18:ee:49:4f:44:e3:8d:eb:de:80:92:1f:
68:c8:9e:bf:12:b2:8c:5d:53:73:aa:18:fb:48:88:
4a:9d:b5:cf:28:24:4e:dd:d7:7c:3c:12:7f:41:c8:
cc:0b:f6:bb:87:f7:7f:d0:fc:49:21:c2:ec:51:a0:
8a:fd:f5:09:ff:e4:8b:c4:f3:cf:3a:26:8b:02:6a:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:15:33:B6:40:5C:E4:4F:53:0A:8A:08:61:2E:DD:A1:F0:B1:20:B3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/nxUztkBc5E9TCooIYS7dofCxILM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/22
45.8.211.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.40.4.0/24
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/24
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.53.55.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.198.0/23
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0e:d602::/32
2a0f:4680::/32
2a0f:7300::/32
Signature Algorithm: sha256WithRSAEncryption
6d:7d:6c:8a:68:bc:16:a5:ed:87:87:ba:4b:f8:7a:09:e8:20:
f7:a3:62:5a:56:48:98:2a:eb:b6:d0:0c:ab:47:c6:44:b0:f5:
f4:09:5f:18:43:49:91:09:cc:a0:0b:09:b4:48:99:a9:63:68:
ff:24:a8:a3:e3:3a:50:7f:52:0e:8e:f9:b2:15:2d:cc:58:61:
bd:95:7d:6a:ff:f3:80:aa:87:8f:d3:35:9a:e3:6f:57:e1:f3:
f6:d6:1d:bc:17:f1:2b:5c:b0:b4:89:c9:79:27:e2:1c:63:9c:
0d:85:6c:3e:17:9a:76:43:5b:b4:bd:42:de:10:70:80:21:73:
c9:0f:09:c0:71:23:fc:93:3c:2f:bd:6b:df:c8:75:4f:f0:74:
78:d3:72:64:9c:01:e2:b2:96:2c:1b:cd:2b:82:1a:5b:85:47:
2a:4a:2e:87:68:72:ec:f5:d1:2b:6a:dd:70:e5:a3:b1:91:0f:
54:85:0a:04:80:7a:e8:4a:d0:e1:0b:1e:c7:8c:e7:2d:79:ef:
0e:ee:2e:e4:40:b3:8b:a0:3f:61:b7:46:39:f4:2d:fd:6a:e8:
2c:4e:e5:7a:46:5e:0c:3f:c5:ee:b4:ad:03:85:f4:0c:10:0a:
ee:44:84:5e:f1:56:2d:64:41:d3:1b:34:e9:32:99:78:53:08:
1f:c9:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org