Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/qrRxBkgyWQgYhhUJbyMZGE7zGsw.roa
File: qrRxBkgyWQgYhhUJbyMZGE7zGsw.roa (raw, json)
Hash identifier: hdUzTeLSEEbmhzj2zH0BxoXIwiLQsb1p9hH1Nn5ett8=
Subject key identifier: AA:B4:71:06:48:32:59:08:18:86:15:09:6F:23:19:18:4E:F3:1A:CC
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 040FA20F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/qrRxBkgyWQgYhhUJbyMZGE7zGsw.roa
Signing time: Fri 11 Mar 2022 10:38:37 +0000
ROA not before: Fri 11 Mar 2022 10:38:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.139.0/24 maxlen: 24
185.174.136.0/24 maxlen: 24
185.174.137.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.140.0/23 maxlen: 23
194.63.140.0/22 maxlen: 22
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
185.117.116.0/24 maxlen: 24
185.117.117.0/24 maxlen: 24
185.103.252.0/24 maxlen: 24
185.103.253.0/24 maxlen: 24
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
185.40.5.0/24 maxlen: 24
185.40.7.0/24 maxlen: 24
185.106.92.0/24 maxlen: 24
185.106.93.0/24 maxlen: 24
185.106.94.0/24 maxlen: 24
185.106.95.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
185.180.228.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
185.112.81.0/24 maxlen: 24
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
185.112.100.0/24 maxlen: 24
147.78.66.7/32 maxlen: 32
194.67.208.12/32 maxlen: 32
185.102.137.0/24 maxlen: 24
185.102.139.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
185.94.164.0/24 maxlen: 24
185.94.165.0/24 maxlen: 24
185.94.167.0/24 maxlen: 24
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.102.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.203.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
5.180.136.76/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.12.0/24 maxlen: 24
185.189.13.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.104.251.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a0f:7c80::/29 maxlen: 29
2a0f:c780::/29 maxlen: 29
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0e:d602::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a0c:6980::/29 maxlen: 29
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0c:f641::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a07:4a00::/29 maxlen: 29
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a0c:f640::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68133391 (0x40fa20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 11 10:38:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aab4710648325908188615096f2319184ef31acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:59:9d:36:e9:90:63:1c:d5:5f:29:35:1d:
e8:04:f1:7f:c7:fe:6b:a7:5b:5e:68:bd:a3:1d:00:
75:e7:54:4c:99:8e:c2:f2:ae:0d:30:75:d4:97:1b:
eb:f2:9d:7b:c1:d5:7e:3b:b2:f9:e9:63:d9:11:e2:
de:26:02:a9:35:02:2b:ab:21:4f:ad:42:bd:a6:39:
5c:9a:3c:1e:d2:93:bb:98:68:d0:e0:00:96:2c:af:
de:fb:34:66:0b:98:31:4c:14:7f:49:b8:f8:72:8e:
c3:30:c8:4e:ba:39:1a:1b:d1:54:42:c2:99:3a:dc:
05:13:96:c5:5d:73:3d:91:c1:41:a8:9a:c3:08:30:
14:24:a5:a5:24:0d:75:69:1b:54:06:aa:c5:74:4d:
de:4f:f6:77:01:77:67:13:5c:02:0c:c9:2f:bd:9b:
2c:35:4f:70:91:bf:dd:f5:96:bb:2f:c9:40:e2:ce:
52:a0:3c:54:b9:2a:e3:f2:37:c2:a8:3d:1a:7e:bd:
6e:25:c9:89:04:7b:da:d9:58:df:96:70:b0:06:4b:
75:f1:b5:36:9d:54:d3:64:fb:21:10:7f:58:7d:d0:
53:1d:4f:03:0d:bc:d0:0b:39:81:8a:de:0d:7d:28:
12:e9:19:a1:d2:28:69:7f:00:d9:6c:e0:28:14:96:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:71:06:48:32:59:08:18:86:15:09:6F:23:19:18:4E:F3:1A:CC
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/qrRxBkgyWQgYhhUJbyMZGE7zGsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.76/32
5.180.136.221/32
45.8.211.0/24
147.78.66.7/32
185.17.3.102/32
185.40.4.0/23
185.40.7.0/24
185.94.164.0/23
185.94.167.0/24
185.102.137.0/24
185.102.139.0/24
185.103.252.0/23
185.104.248.0/24
185.104.251.0/24
185.106.92.0/22
185.112.81.0/24
185.112.100.0/24
185.117.116.0/23
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/23
185.174.139.0/24
185.180.228.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a07:4a00::/29
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0c:6980::/29
2a0c:f640::/31
2a0e:d602::/32
2a0f:4680::/32
2a0f:7300::/32
2a0f:7c80::/29
2a0f:c780::/29
Signature Algorithm: sha256WithRSAEncryption
93:7b:12:e9:18:00:88:85:9a:17:90:2f:72:35:c7:33:fd:3a:
01:70:6d:f2:e6:82:1b:5b:93:fa:e1:7c:9b:33:00:4d:78:0c:
4e:b8:de:33:39:33:e9:6c:4e:07:f6:29:44:fd:82:87:dc:8f:
bb:8c:92:19:96:4a:5c:ae:c7:61:bf:71:4a:dc:43:20:82:18:
0a:f7:69:5c:ee:c3:79:3c:da:d2:e3:37:f8:ca:bf:5d:6d:bd:
40:58:b9:19:3a:d7:0f:70:82:9d:6a:10:42:7d:a5:de:8a:48:
76:e1:9e:41:b9:9e:22:87:45:d0:21:f7:a7:18:2a:44:c2:2f:
a7:79:6c:e3:12:6f:f8:4a:48:33:32:54:54:c1:2c:97:d3:28:
e2:69:64:e1:51:54:8c:61:4c:25:a5:91:ac:e5:76:58:46:68:
c9:75:05:5e:88:7e:06:81:c6:83:cf:c3:f0:a1:60:cc:52:37:
33:eb:b6:96:32:95:63:b5:d6:c4:a0:3a:39:5f:6c:75:50:bc:
ab:d8:e3:8c:67:63:d0:cf:ef:ef:94:71:70:46:c9:8e:c2:0a:
a1:19:2e:95:de:89:14:6e:f6:0d:fc:0d:ff:f0:a3:df:44:87:
f5:06:a6:cf:75:e6:91:3f:71:5d:e2:1b:9b:1e:2f:96:d1:47:
22:d2:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:38 2023 by rpki-client on console-fra.rpki-client.org