Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/qcOZjWIHLkyaDHrHucoj-tA4Bz8.roa
File: qcOZjWIHLkyaDHrHucoj-tA4Bz8.roa (raw, json)
Hash identifier: OUIp4aPhrQjxayd4nwyJhyh7As61fsXj6ngMcXAZScg=
Subject key identifier: A9:C3:99:8D:62:07:2E:4C:9A:0C:7A:C7:B9:CA:23:FA:D0:38:07:3F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018972717B0468F374396A03FF7DE9D85BEE
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/qcOZjWIHLkyaDHrHucoj-tA4Bz8.roa
Signing time: Thu 20 Jul 2023 08:36:26 +0000
ROA not before: Thu 20 Jul 2023 08:36:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.205.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.201.0/24 maxlen: 24
194.67.208.0/20 maxlen: 20
2a0f:3380::/29 maxlen: 29
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0f:a500::/29 maxlen: 29
2a0a:9301:1::/48 maxlen: 48
2a0f:4580::/29 maxlen: 29
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0c:77c0::/29 maxlen: 29
2a0a:9300:d0::/48 maxlen: 48
2a0d:3880::/29 maxlen: 29
2a0a:9302:1::/48 maxlen: 48
2a0f:1180::/29 maxlen: 29
2a0f:4680::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:71:7b:04:68:f3:74:39:6a:03:ff:7d:e9:d8:5b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 20 08:36:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9c3998d62072e4c9a0c7ac7b9ca23fad038073f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:3f:11:ae:d1:8a:59:78:59:11:56:ec:e1:
f9:41:64:ae:19:9a:bc:f9:b9:d7:0e:d7:c1:c7:3e:
90:07:f3:34:c6:3f:93:79:15:2c:17:eb:92:88:4d:
b5:02:87:c5:d3:53:e0:2c:dc:3b:86:5c:a2:bf:20:
4e:23:44:e7:6f:3e:02:ed:f9:4c:80:a9:de:d3:6f:
d0:b1:a4:d0:c0:dd:33:3d:32:fc:25:b0:28:da:05:
40:13:cc:a9:25:2e:f7:f6:4c:a9:9b:67:15:21:d6:
9c:65:6c:af:e6:eb:3a:a9:10:c0:34:14:a0:3d:f4:
37:ab:54:77:4c:60:75:bd:c9:0e:7f:7d:21:17:ab:
92:53:68:fd:79:d8:ab:87:72:45:9d:7c:1b:1c:8f:
65:6e:5a:e1:41:f3:00:5e:19:dd:03:74:10:5b:d5:
f4:d8:ae:fc:70:9f:5e:e0:83:22:fd:0e:41:32:3e:
ab:2f:1b:ac:17:3e:f7:61:56:34:46:9c:68:b9:2d:
e9:f0:b0:fa:88:28:a3:38:89:f3:8c:11:57:77:a0:
36:b2:ef:4e:49:76:b9:e9:43:9f:ac:e6:cb:0a:fe:
55:84:5f:47:2b:12:55:3f:85:de:b3:66:37:5c:f7:
2b:24:ea:b5:bc:83:22:ac:dc:bb:ab:58:6a:ce:71:
d9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C3:99:8D:62:07:2E:4C:9A:0C:7A:C7:B9:CA:23:FA:D0:38:07:3F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/qcOZjWIHLkyaDHrHucoj-tA4Bz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.109.85.0/24
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0c:77c0::/29
2a0d:3880::/29
2a0f:1180::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:4680::/29
2a0f:a500::/29
Signature Algorithm: sha256WithRSAEncryption
11:9f:ff:1d:3f:07:b1:67:3f:96:9b:d9:02:97:7f:5b:f6:56:
4e:e7:30:de:c0:b1:9e:ed:d9:75:24:b9:7a:40:85:83:b7:2f:
69:51:a9:e3:54:f2:3c:ca:9e:c1:4d:58:98:95:f0:8e:3e:1d:
92:d1:48:39:45:19:9c:32:8b:20:12:8e:0e:de:c3:d8:b7:97:
b7:bd:d1:67:f7:ad:5c:7c:71:e3:6e:95:bc:05:a1:50:16:ef:
b8:9c:86:48:90:03:fd:e4:a1:88:18:5d:45:d1:01:d2:51:80:
56:a1:ea:27:1e:8e:cf:09:b3:b3:01:cd:6e:15:83:0d:20:d8:
aa:13:53:fc:fb:28:23:c4:60:c5:86:75:19:99:59:9f:92:29:
44:5c:bc:e7:19:bc:90:75:b7:d0:c6:74:18:37:15:01:7b:a1:
b1:66:3f:8f:a2:97:65:70:10:53:9a:1d:c4:f8:ea:07:31:77:
24:ec:44:f2:83:86:df:2f:0b:63:9d:01:f2:69:55:cf:81:93:
62:39:19:88:a9:b9:d6:fb:eb:83:9e:2d:53:45:f9:c3:89:e4:
1c:09:18:07:96:b7:aa:b9:69:eb:70:2e:e1:27:a8:91:31:c6:
b6:67:0b:38:26:97:e7:81:7a:c6:0a:16:00:1c:a9:f3:30:c0:
6d:fd:55:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org