Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rTbos_MKMxtJujhalIpUQmzrlBM.roa
File: rTbos_MKMxtJujhalIpUQmzrlBM.roa (raw, json)
Hash identifier: a2fYmCm3KsLuJ3wAYHATMkt+fPEqYbHFnZ/kG3x6Cvw=
Subject key identifier: AD:36:E8:B3:F3:0A:33:1B:49:BA:38:5A:94:8A:54:42:6C:EB:94:13
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0186267384A348C336DF199FCE9E392367BD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rTbos_MKMxtJujhalIpUQmzrlBM.roa
Signing time: Mon 06 Feb 2023 11:19:10 +0000
ROA not before: Mon 06 Feb 2023 11:19:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50113
IP address blocks: 185.174.136.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/22 maxlen: 22
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.142.0/23 maxlen: 23
194.63.140.0/23 maxlen: 23
194.53.52.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
185.139.68.28/32 maxlen: 32
185.40.4.0/24 maxlen: 24
5.180.139.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.180.136.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
194.67.198.108/32 maxlen: 32
185.180.230.0/24 maxlen: 24
194.67.196.127/32 maxlen: 32
194.67.198.7/32 maxlen: 32
194.67.208.6/32 maxlen: 32
147.78.66.7/32 maxlen: 32
213.108.198.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
213.108.197.0/24 maxlen: 24
194.67.208.12/32 maxlen: 32
45.89.64.0/24 maxlen: 24
185.180.231.87/32 maxlen: 32
5.180.136.221/32 maxlen: 32
185.188.180.0/24 maxlen: 24
192.162.100.0/22 maxlen: 22
194.67.208.48/32 maxlen: 32
192.162.103.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
194.67.203.54/32 maxlen: 32
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
185.17.3.102/32 maxlen: 32
185.189.12.0/22 maxlen: 22
185.189.13.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
5.180.136.76/32 maxlen: 32
185.189.12.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
185.125.50.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.139.70.116/32 maxlen: 32
2a04:5200:fff2::/48 maxlen: 48
2a0f:7300::/32 maxlen: 32
2a09:5303::/32 maxlen: 32
2a0a:9300::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5205::/32 maxlen: 32
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a0a:9300:aaaa::/48 maxlen: 48
2a04:5200:1::/48 maxlen: 48
2a0a:9300::/32 maxlen: 32
2a04:5200:fff7::/48 maxlen: 48
2a04:5204::/32 maxlen: 32
2a04:5200::/32 maxlen: 32
2a0f:4680::/32 maxlen: 32
2a04:5200:fff4::/48 maxlen: 48
2a04:5206::/32 maxlen: 32
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5207::/32 maxlen: 32
2a0b:da00::/29 maxlen: 29
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200:ffff::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:73:84:a3:48:c3:36:df:19:9f:ce:9e:39:23:67:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Feb 6 11:19:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad36e8b3f30a331b49ba385a948a54426ceb9413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:2b:33:d4:f6:00:21:f2:ac:8f:5d:1e:5c:
6c:cb:d8:3f:78:df:84:08:e3:a9:2c:b2:23:e6:ac:
82:cf:5f:c4:1f:5f:2f:0d:7d:d1:b9:e6:da:ed:dc:
87:aa:62:f2:88:2c:10:08:89:06:81:9f:a2:bb:b4:
94:7c:39:ef:18:66:4a:eb:6e:7f:29:da:d5:c9:6e:
07:92:ef:f4:b5:3d:e8:68:58:95:11:46:14:d6:3e:
ff:7b:3a:da:ae:0d:b1:08:ec:8d:fc:4b:ab:63:6c:
e6:bd:64:e5:a7:6b:59:f6:f8:18:b6:d6:67:a3:a8:
92:25:e6:77:c1:d0:b7:68:57:5f:26:50:61:57:45:
8e:35:c7:4d:6e:10:58:2e:86:d2:b4:8c:53:d6:99:
db:9b:f6:ae:c3:82:68:d8:8b:2a:bc:48:79:2b:a8:
23:06:38:d0:55:d0:fd:f3:56:74:99:c9:ea:1e:7f:
9a:42:15:78:ea:5b:1d:5b:c3:44:8e:67:18:8d:df:
f4:66:02:cc:e2:50:52:60:64:2a:b2:bb:5b:47:17:
52:77:26:e0:f5:3b:af:08:d7:73:d6:3c:e1:01:f3:
4e:14:03:34:74:73:b4:df:96:95:a6:95:a7:e9:56:
8e:97:c9:74:cd:4e:da:db:d7:db:65:e4:18:15:17:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:E8:B3:F3:0A:33:1B:49:BA:38:5A:94:8A:54:42:6C:EB:94:13
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rTbos_MKMxtJujhalIpUQmzrlBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.180.139.0/24
5.252.116.0/24
45.8.211.0/24
45.89.64.0/24
91.217.77.0/24
147.78.66.7/32
185.17.3.102/32
185.40.4.0/24
185.104.248.0/24
185.125.50.0/24
185.139.68.28/32
185.139.70.116/32
185.172.130.0/23
185.174.136.0/24
185.174.139.0/24
185.180.230.0/24
185.180.231.87/32
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.53.52.0/24
194.63.140.0/22
194.67.196.127/32
194.67.198.7/32
194.67.198.108/32
194.67.203.54/32
194.67.208.6/32
194.67.208.12/32
194.67.208.48/32
213.108.197.0-213.108.199.255
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a09:5303::/32
2a0a:9300::/32
2a0b:da00::/29
2a0f:4680::/32
2a0f:7300::/32
Signature Algorithm: sha256WithRSAEncryption
58:d3:d3:04:e5:9e:ed:f7:db:57:63:dd:ba:86:f7:a9:7c:d0:
37:25:70:31:0e:25:36:59:3f:46:23:1a:8a:25:50:2f:19:20:
f4:f5:b2:85:35:c4:2f:e9:d4:1f:f3:de:0c:26:e6:3e:13:99:
34:c8:92:cc:5b:e8:0d:b3:e2:db:23:86:90:3d:36:45:42:27:
d4:d9:8d:a1:5e:f6:86:68:4a:3b:1c:b6:7e:8c:4e:23:6d:43:
ef:47:98:48:15:ca:db:19:b6:56:e0:90:14:dd:ec:f8:2f:51:
53:2c:c9:2b:6c:3b:54:97:41:41:cf:ea:17:a9:e1:41:fe:47:
6b:2f:ad:cc:57:0b:3a:dc:16:07:52:13:bd:99:95:3b:61:bd:
89:e2:5a:24:7c:32:88:07:b4:55:d6:c3:f2:a5:85:2d:56:90:
d0:80:58:58:7e:c9:d5:a9:a2:17:29:04:ec:70:88:08:27:89:
6f:c0:43:42:39:6c:f9:07:d2:cb:73:d0:9c:f4:81:ed:cb:dd:
0c:52:c3:4a:ac:f8:f8:ad:25:50:79:8f:77:7f:b0:da:08:71:
83:f8:01:fb:44:9a:b2:91:e8:9f:f1:27:c9:64:3b:80:35:61:
6d:a8:58:6f:f3:e9:3c:86:96:c2:d2:db:44:c6:77:af:3f:63:
d0:28:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org