Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/zCCP4_jb33sevPuv2CkWA-qJO4U.roa
File: zCCP4_jb33sevPuv2CkWA-qJO4U.roa (raw, json)
Hash identifier: Irax1arZ7pqrWl4xt1I6Ir+Jyfzz38GXeflc/ygSCC8=
Subject key identifier: CC:20:8F:E3:F8:DB:DF:7B:1E:BC:FB:AF:D8:29:16:03:EA:89:3B:85
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018BAA207EFE4C568CCC0C4ECF3D85FEFA92
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/zCCP4_jb33sevPuv2CkWA-qJO4U.roa
Signing time: Tue 07 Nov 2023 14:12:18 +0000
ROA not before: Tue 07 Nov 2023 14:12:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.200.188.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/21 maxlen: 21
193.124.176.0/20 maxlen: 20
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
193.168.224.0/24 maxlen: 24
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0c:77c0::/32 maxlen: 32
2a0c:74c0::/29 maxlen: 29
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a07:4a00::/29 maxlen: 29
2a0b:9800::/29 maxlen: 29
2a0c:77c0::/29 maxlen: 29
2a0a:9300:d0::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
2a0d:2cc0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:20:7e:fe:4c:56:8c:cc:0c:4e:cf:3d:85:fe:fa:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 7 14:12:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc208fe3f8dbdf7b1ebcfbafd8291603ea893b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cc:77:56:ee:f0:8f:d8:0e:d3:41:f4:e3:3a:
4f:70:5f:70:d0:d9:5f:4f:f5:af:8d:56:8c:ad:69:
10:fc:c2:b6:a2:1f:dd:28:f1:e3:54:a8:88:d0:a0:
37:42:f8:df:5a:72:50:95:27:33:d0:b4:45:5c:aa:
8d:c0:89:2a:49:c6:7d:90:12:c6:e4:92:0c:81:27:
70:dd:df:50:58:ab:01:0f:f4:5e:59:47:d4:93:91:
c6:1c:08:57:a8:6e:10:21:47:f1:c7:7a:95:a6:fa:
0d:25:83:e2:60:12:28:f2:c9:77:8e:77:6f:ae:d2:
28:73:ff:d6:e8:89:2e:1f:86:36:77:80:2e:37:fc:
b6:cf:94:5e:dd:11:ff:d8:af:85:4f:42:2f:32:78:
46:5e:d5:e0:28:3d:d2:83:64:c5:a2:d0:85:3d:1f:
3d:cb:c5:6a:22:40:1f:c0:2f:e4:a4:2b:44:f8:7a:
9f:7a:52:00:e8:90:e0:50:61:df:6a:92:b0:ce:67:
11:f3:ee:31:08:29:54:c6:07:55:fc:7f:93:27:16:
94:2d:39:7a:ce:9d:5d:25:2c:73:7f:f2:67:ea:61:
d3:09:54:5e:6f:6f:71:9c:f9:1b:1f:bd:68:95:70:
71:24:25:5a:11:2d:bb:fa:31:39:b1:3b:7c:44:b6:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:20:8F:E3:F8:DB:DF:7B:1E:BC:FB:AF:D8:29:16:03:EA:89:3B:85
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/zCCP4_jb33sevPuv2CkWA-qJO4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
185.200.188.0/24
193.109.85.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a07:4a00::/29
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:9800::/29
2a0c:74c0::/29
2a0c:77c0::/29
2a0d:2cc0::/29
Signature Algorithm: sha256WithRSAEncryption
58:3a:c5:e2:fc:65:41:f6:cd:2d:f5:8f:6d:6c:54:5f:77:e6:
f8:28:6a:e3:3d:70:d0:ce:2a:4d:82:ee:3d:5c:44:82:e7:ca:
9d:1b:a2:64:3b:94:2c:cb:94:bf:69:fb:a6:f5:01:fc:9d:24:
16:71:05:cb:6e:a7:5a:14:ff:8f:d1:d1:97:c8:18:df:2f:8c:
95:28:a2:85:c4:e8:36:fd:8b:5f:4a:ab:aa:f1:45:89:ea:83:
e1:a1:09:9b:5a:e4:58:8f:d5:fd:cc:25:da:2a:c9:99:35:55:
80:24:d3:3f:d7:d4:6f:3a:54:1c:49:ea:2d:fe:89:c4:bd:ad:
73:8e:26:61:2f:60:95:19:68:75:3c:ab:d4:bf:7a:aa:06:99:
9f:3e:b1:c8:a6:23:a6:12:4a:4e:a1:dc:a2:21:b8:d4:63:85:
fd:1d:ee:21:1e:e5:14:35:28:e3:08:3e:ac:3f:22:8b:5b:9a:
0f:f8:0f:c5:51:29:63:9c:f4:a7:97:d9:b8:b9:0c:a8:96:10:
2d:2a:80:2d:e0:ee:5b:e4:e7:2c:fc:4d:14:01:47:89:d6:97:
ce:f3:77:39:c8:62:30:d0:b5:b8:de:28:3c:90:f6:ef:44:bb:
2c:09:1c:43:91:8d:31:fa:ef:81:4d:ca:cc:e1:d3:a2:5c:fc:
3b:72:4f:5e
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgISAYuqIH7+TFaMzAxOzz2F/vqSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMxMTA3MTQxMjE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzIwOGZlM2Y4ZGJkZjdiMWViY2ZiYWZkODI5MTYwM2VhODkzYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88x3Vu7wj9gO00H04zpPcF9w0Nlf
T/WvjVaMrWkQ/MK2oh/dKPHjVKiI0KA3QvjfWnJQlScz0LRFXKqNwIkqScZ9kBLG
5JIMgSdw3d9QWKsBD/ReWUfUk5HGHAhXqG4QIUfxx3qVpvoNJYPiYBIo8sl3jndv
rtIoc//W6IkuH4Y2d4AuN/y2z5Re3RH/2K+FT0IvMnhGXtXgKD3Sg2TFotCFPR89
y8VqIkAfwC/kpCtE+HqfelIA6JDgUGHfapKwzmcR8+4xCClUxgdV/H+TJxaULTl6
zp1dJSxzf/Jn6mHTCVReb29xnPkbH71olXBxJCVaES27+jE5sTt8RLYpswIDAQAB
o4IC1jCCAtIwHQYDVR0OBBYEFMwgj+P42997Hrz7r9gpFgPqiTuFMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvekNDUDRfamIzM3NldlB1djJDa1dBLXFKTzRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHrBggrBgEFBQcBBwEB/wSB2zCB2DBsBAIAATBmAwQBLVlC
AwQCLYCwAwQAW9lQAwQDXo6IAwQCuQX4AwQCuTrMAwQCuVcwAwQBuWl0AwQCuXWY
AwQCuX3YAwQCuX3kAwQAuci8AwQAwW1VAwQEwXywAwQAwajgAwQFwkPAAwQAwy/6
MGgEAgACMGIDBQMqB0oAAwcAKgqTAAAAAwcAKgqTAAACMBIDBwQqCpMAANADBwAq
CpMAANIwEAMFACoKkwEDBwAqCpMBAAIDBQAqCpMCAwUDKguYAAMFAyoMdMADBQMq
DHfAAwUDKg0swDANBgkqhkiG9w0BAQsFAAOCAQEAWDrF4vxlQfbNLfWPbWxUX3fm
+Chq4z1w0M4qTYLuPVxEgufKnRuiZDuULMuUv2n7pvUB/J0kFnEFy26nWhT/j9HR
l8gY3y+MlSiihcToNv2LX0qrqvFFieqD4aEJm1rkWI/V/cwl2irJmTVVgCTTP9fU
bzpUHEnqLf6JxL2tc44mYS9glRlodTyr1L96qgaZnz6xyKYjphJKTqHcoiG41GOF
/R3uIR7lFDUo4wg+rD8ii1uaD/gPxVEpY5z0p5fZuLkMqJYQLSqALeDuW+TnLPxN
FAFHidaXzvN3OchiMNC1uN4oPJD270S7LAkcQ5GNMfrvgU3KzOHTolz8O3JPXg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org