Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/afSKYSoLczjs89wywgElYjYyR7E.roa
File: afSKYSoLczjs89wywgElYjYyR7E.roa (raw, json)
Hash identifier: 8xHmUuWJr05R/3h/4Fif0qsrz2CJJfaveQpHaGcodKc=
Subject key identifier: 69:F4:8A:61:2A:0B:73:38:EC:F3:DC:32:C2:01:25:62:36:32:47:B1
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 0B459737
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/afSKYSoLczjs89wywgElYjYyR7E.roa
Signing time: Sat 30 Apr 2022 08:03:32 +0000
ROA not before: Sat 30 Apr 2022 08:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44285
IP address blocks: 45.140.224.0/22 maxlen: 22
45.87.4.0/22 maxlen: 22
185.18.213.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
37.32.32.0/24 maxlen: 24
37.32.32.0/21 maxlen: 21
37.32.33.0/24 maxlen: 24
37.32.32.0/22 maxlen: 22
37.32.36.0/22 maxlen: 22
37.32.37.0/24 maxlen: 24
37.32.38.0/24 maxlen: 24
37.32.36.0/24 maxlen: 24
37.32.35.0/24 maxlen: 24
37.32.34.0/24 maxlen: 24
37.32.39.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
86.57.120.0/23 maxlen: 23
86.57.122.0/23 maxlen: 23
86.57.96.0/20 maxlen: 20
86.57.112.0/23 maxlen: 23
86.57.114.0/23 maxlen: 23
86.57.116.0/22 maxlen: 22
217.172.124.0/23 maxlen: 23
217.172.120.0/24 maxlen: 24
217.172.120.0/21 maxlen: 21
217.172.127.0/24 maxlen: 24
217.172.126.0/23 maxlen: 23
85.198.48.0/20 maxlen: 20
45.9.253.0/24 maxlen: 24
45.9.252.0/24 maxlen: 24
45.9.254.0/24 maxlen: 24
37.75.246.0/24 maxlen: 24
37.75.245.0/24 maxlen: 24
37.75.244.0/24 maxlen: 24
37.75.244.0/22 maxlen: 22
37.75.243.0/24 maxlen: 24
37.75.247.0/24 maxlen: 24
195.110.38.0/24 maxlen: 24
195.110.38.0/23 maxlen: 23
195.110.39.0/24 maxlen: 24
185.182.248.0/22 maxlen: 22
95.82.0.0/21 maxlen: 21
95.82.0.0/20 maxlen: 20
95.82.0.0/18 maxlen: 18
95.82.8.0/21 maxlen: 21
95.82.16.0/21 maxlen: 21
95.82.16.0/20 maxlen: 20
95.82.24.0/21 maxlen: 21
91.236.168.0/23 maxlen: 23
91.236.169.0/24 maxlen: 24
91.236.168.0/24 maxlen: 24
95.82.32.0/21 maxlen: 21
95.82.40.0/21 maxlen: 21
46.28.74.0/24 maxlen: 24
95.82.48.0/21 maxlen: 21
46.28.73.0/24 maxlen: 24
46.28.72.0/24 maxlen: 24
46.28.72.0/21 maxlen: 24
95.82.56.0/21 maxlen: 21
185.121.128.0/22 maxlen: 24
185.121.128.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.121.130.0/24 maxlen: 24
185.121.129.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
84.47.226.0/24 maxlen: 24
84.47.224.0/22 maxlen: 22
84.47.225.0/24 maxlen: 24
84.47.224.0/21 maxlen: 21
84.47.224.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
84.47.231.0/24 maxlen: 24
84.47.227.0/24 maxlen: 24
84.47.230.0/24 maxlen: 24
84.47.229.0/24 maxlen: 24
84.47.228.0/24 maxlen: 24
84.47.228.0/22 maxlen: 22
88.135.39.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
2a02:828::/32 maxlen: 32
2a02:829::/32 maxlen: 32
2a02:82b::/32 maxlen: 32
2a02:82f::/32 maxlen: 32
2a02:828:1::/48 maxlen: 48
2a02:82a::/32 maxlen: 32
2a02:828::/29 maxlen: 29
2a02:828::/64 maxlen: 64
2a02:828::/48 maxlen: 48
2a02:82e::/32 maxlen: 32
2a02:82c::/32 maxlen: 32
2a02:82d::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189110071 (0xb459737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Apr 30 08:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69f48a612a0b7338ecf3dc32c2012562363247b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:6f:ee:d9:df:8a:64:c4:69:d3:49:e6:79:
97:28:49:ad:f8:f6:66:bc:09:fd:68:66:91:f7:31:
30:52:4f:ca:a3:c6:47:c4:ac:9c:1a:b5:42:75:15:
21:f6:6c:67:06:00:e2:bd:32:dc:6a:89:e9:77:18:
7d:f7:c3:32:dd:46:4a:bb:1e:0b:57:9a:f2:d0:5e:
3e:90:71:96:41:cb:ea:27:c4:6b:0a:a1:d5:c6:cb:
a9:aa:b9:62:36:53:c3:3c:fc:d4:9d:6e:39:36:9c:
92:45:6b:0f:5b:4a:80:0d:e4:b0:6b:56:82:d0:2c:
09:98:4e:80:23:2f:71:5c:2b:d5:07:cb:27:0b:b8:
22:ab:55:f8:dc:04:3c:96:42:f6:03:4f:9f:09:f5:
45:e1:4f:02:86:64:22:0c:53:f5:89:ab:9b:62:d3:
2a:e4:da:22:f5:6c:62:46:11:77:10:12:5f:69:ab:
5b:77:d6:07:f4:10:22:55:ee:45:13:4a:0b:a9:04:
5f:b4:b9:f7:43:73:ba:ed:68:8c:cf:53:2c:b0:8b:
20:be:f8:00:5c:54:30:ab:5a:1c:ea:c8:40:c1:fd:
b4:41:62:d6:2c:4f:40:d6:f3:73:61:a7:e7:a7:d3:
49:16:5a:f8:53:f1:d3:94:2b:71:76:4e:82:34:a0:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F4:8A:61:2A:0B:73:38:EC:F3:DC:32:C2:01:25:62:36:32:47:B1
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/afSKYSoLczjs89wywgElYjYyR7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.32.0/21
37.75.243.0-37.75.247.255
45.9.252.0-45.9.254.255
45.87.4.0/22
45.140.224.0/22
46.28.72.0/21
84.47.224.0/21
85.198.48.0/20
86.57.96.0-86.57.123.255
88.135.37.0-88.135.39.255
91.236.168.0/23
95.82.0.0/18
185.18.212.0/22
185.51.200.0/22
185.121.128.0/22
185.128.136.0/22
185.141.132.0/22
185.182.248.0/22
188.209.152.0/23
195.110.38.0/23
217.172.120.0/21
IPv6:
2a02:828::/29
Signature Algorithm: sha256WithRSAEncryption
5a:fe:6b:e7:f9:37:1e:54:d0:9f:12:87:84:4a:93:ba:75:9b:
3e:fd:fd:25:95:90:dd:1b:11:57:9e:ad:b2:7c:bb:9e:06:3b:
38:94:2d:83:79:a4:b1:2f:08:a1:83:fe:08:ea:43:c5:d0:0f:
b3:f3:33:bc:4c:74:3a:90:f2:5f:8e:f8:54:13:46:01:e5:2c:
a2:27:f4:65:d5:df:3d:d0:73:47:4a:d1:44:ee:3f:05:cb:61:
b4:db:6e:83:1a:8f:8a:ea:1d:cd:ba:a1:4a:74:6a:a7:ee:9f:
4a:86:4a:34:26:04:39:dd:7e:db:09:7d:80:e6:42:f5:fd:d1:
da:eb:3f:ad:59:be:30:85:bc:38:95:a6:6d:46:80:8b:85:28:
7c:e1:57:9e:55:91:da:ec:12:ca:37:19:31:0e:a4:cb:76:af:
f3:60:a0:f0:b6:1b:70:31:fa:3e:19:d5:c5:8d:36:00:28:92:
46:be:7a:bd:f4:b8:db:66:cc:69:2d:cf:53:98:41:ee:0c:67:
39:02:58:3c:ed:b5:21:e4:28:58:cf:42:56:d8:9a:55:29:17:
75:64:3c:b6:32:6b:d8:52:42:14:e3:bb:9d:c5:55:a0:ad:c5:
5a:d0:cf:d9:b0:b6:60:bb:98:6e:42:00:42:aa:27:f5:dc:68:
c0:92:38:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org