Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/9kTCjLf_esiYBgrBTbeIYtBdSrA.roa
File: 9kTCjLf_esiYBgrBTbeIYtBdSrA.roa (raw, json)
Hash identifier: /GksU26fQVeE2v38xtlUPnFNZ3BovSQr8WafCPier4M=
Subject key identifier: F6:44:C2:8C:B7:FF:7A:C8:98:06:0A:C1:4D:B7:88:62:D0:5D:4A:B0
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 01852FE220569933FB9BDE24613D7A8B19EE
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/9kTCjLf_esiYBgrBTbeIYtBdSrA.roa
Signing time: Tue 20 Dec 2022 14:13:46 +0000
ROA not before: Tue 20 Dec 2022 14:13:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48314
IP address blocks: 185.245.96.0/24 maxlen: 24
185.245.97.0/24 maxlen: 24
185.245.98.0/24 maxlen: 24
185.245.99.0/24 maxlen: 24
185.194.238.0/24 maxlen: 24
185.194.239.0/24 maxlen: 24
185.194.236.0/24 maxlen: 24
185.194.237.0/24 maxlen: 24
193.32.221.0/24 maxlen: 24
193.32.222.0/24 maxlen: 24
193.32.220.0/24 maxlen: 24
193.32.223.0/24 maxlen: 24
185.248.141.0/24 maxlen: 24
185.248.142.0/24 maxlen: 24
185.248.140.0/24 maxlen: 24
185.248.143.0/24 maxlen: 24
46.251.251.0/24 maxlen: 24
185.242.112.0/24 maxlen: 24
185.242.113.0/24 maxlen: 24
88.218.224.0/24 maxlen: 24
88.218.225.0/24 maxlen: 24
185.242.114.0/24 maxlen: 24
185.242.115.0/24 maxlen: 24
88.218.226.0/24 maxlen: 24
88.218.227.0/24 maxlen: 24
134.255.244.0/24 maxlen: 24
45.10.24.0/24 maxlen: 24
134.255.247.0/24 maxlen: 24
194.26.182.0/24 maxlen: 24
194.26.183.0/24 maxlen: 24
194.26.180.0/24 maxlen: 24
194.26.181.0/24 maxlen: 24
194.45.196.0/23 maxlen: 24
91.210.224.0/24 maxlen: 24
91.210.225.0/24 maxlen: 24
91.210.226.0/24 maxlen: 24
91.210.227.0/24 maxlen: 24
185.250.248.0/24 maxlen: 24
185.250.249.0/24 maxlen: 24
5.180.64.0/24 maxlen: 24
185.250.250.0/24 maxlen: 24
185.250.251.0/24 maxlen: 24
5.180.67.0/24 maxlen: 24
5.180.65.0/24 maxlen: 24
5.180.66.0/24 maxlen: 24
109.230.219.0/24 maxlen: 24
152.89.236.0/24 maxlen: 24
152.89.237.0/24 maxlen: 24
152.89.238.0/24 maxlen: 24
31.214.144.0/24 maxlen: 24
152.89.239.0/24 maxlen: 24
94.199.213.0/24 maxlen: 24
94.199.212.0/24 maxlen: 24
94.199.214.0/24 maxlen: 24
94.199.215.0/24 maxlen: 24
213.190.28.0/24 maxlen: 24
213.190.31.0/24 maxlen: 24
213.190.29.0/24 maxlen: 24
213.190.30.0/24 maxlen: 24
194.48.171.0/24 maxlen: 24
194.48.169.0/24 maxlen: 24
194.48.170.0/24 maxlen: 24
194.48.168.0/24 maxlen: 24
45.133.9.0/24 maxlen: 24
45.133.8.0/24 maxlen: 24
45.133.10.0/23 maxlen: 24
194.45.37.0/24 maxlen: 24
194.45.36.0/24 maxlen: 24
91.216.245.0/24 maxlen: 24
193.135.8.0/24 maxlen: 24
193.135.9.0/24 maxlen: 24
193.135.11.0/24 maxlen: 24
193.135.10.0/24 maxlen: 24
45.10.26.0/24 maxlen: 24
45.10.25.0/24 maxlen: 24
45.10.27.0/24 maxlen: 24
193.142.41.0/24 maxlen: 24
193.142.42.0/24 maxlen: 24
193.142.40.0/24 maxlen: 24
193.142.43.0/24 maxlen: 24
45.91.100.0/24 maxlen: 24
45.91.101.0/24 maxlen: 24
45.91.103.0/24 maxlen: 24
45.91.102.0/24 maxlen: 24
2a0a:51c3::/32 maxlen: 32
2a0a:51c1::/32 maxlen: 48
2a0a:51c4::/32 maxlen: 48
2a0a:51c0::/32 maxlen: 32
2a0a:51c2::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:e2:20:56:99:33:fb:9b:de:24:61:3d:7a:8b:19:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Dec 20 14:13:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f644c28cb7ff7ac898060ac14db78862d05d4ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:62:e4:c9:61:ec:7a:7f:86:3f:a9:28:a2:
4c:04:13:ad:03:0b:a6:8a:5f:7e:42:e1:98:03:b4:
83:1a:46:ff:51:60:86:e0:c4:03:09:a9:ab:ca:8d:
21:0b:2a:93:64:a6:e3:d4:cc:6c:99:e6:f7:c1:ee:
dc:0e:e6:0a:69:7d:a1:53:79:da:d3:e4:60:9b:d0:
77:fb:a7:75:50:e5:a4:cc:90:f1:ef:b4:84:84:c4:
53:0c:0c:0b:7a:70:78:2a:21:10:bc:be:27:69:61:
2d:6d:a6:d4:bf:21:e3:fa:f1:26:4d:e3:92:df:89:
0e:2e:87:80:e2:3a:8e:16:d0:0a:4e:08:be:d3:37:
04:59:44:66:a3:5c:38:17:f1:77:b9:d0:6e:62:fa:
1c:9e:b7:b6:86:9f:f2:6f:fa:3f:87:18:77:62:09:
c0:35:e4:ee:15:fd:3f:db:49:6a:fa:c2:56:61:64:
af:1d:ac:62:41:e5:a8:d8:a9:f3:86:c7:47:39:f7:
99:f3:cb:5b:01:ad:60:0d:7d:29:2f:aa:c9:b0:3c:
85:de:fc:33:8f:d3:a7:8a:0b:cc:03:44:31:45:14:
a5:53:f1:7d:59:26:81:b6:8d:ca:eb:58:c9:3a:89:
91:8d:7d:35:dd:38:2e:96:7c:30:c1:86:8a:99:e8:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:44:C2:8C:B7:FF:7A:C8:98:06:0A:C1:4D:B7:88:62:D0:5D:4A:B0
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/9kTCjLf_esiYBgrBTbeIYtBdSrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.64.0/22
31.214.144.0/24
45.10.24.0/22
45.91.100.0/22
45.133.8.0/22
46.251.251.0/24
88.218.224.0/22
91.210.224.0/22
91.216.245.0/24
94.199.212.0/22
109.230.219.0/24
134.255.244.0/24
134.255.247.0/24
152.89.236.0/22
185.194.236.0/22
185.242.112.0/22
185.245.96.0/22
185.248.140.0/22
185.250.248.0/22
193.32.220.0/22
193.135.8.0/22
193.142.40.0/22
194.26.180.0/22
194.45.36.0/23
194.45.196.0/23
194.48.168.0/22
213.190.28.0/22
IPv6:
2a0a:51c0::-2a0a:51c4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
78:af:27:16:80:87:0a:52:70:79:4b:d6:e4:9e:0c:da:39:bd:
35:88:37:3e:33:9f:ad:e1:d9:5a:72:b2:05:a5:ad:e7:7b:75:
8a:9f:90:32:75:34:a8:bd:c6:de:6a:de:91:05:52:dd:6a:21:
c4:c3:25:8a:4b:3d:7a:f4:c0:f8:90:22:ba:fb:9b:85:d9:90:
25:ab:0c:00:cf:2a:f8:35:a9:a0:be:4f:9d:4c:c7:1f:20:bd:
e4:d2:c0:19:9c:36:2a:b4:0f:db:de:14:ca:70:81:b4:e2:6d:
2e:d0:ad:90:d8:f3:7e:5d:9e:59:a9:90:b9:7c:b5:21:76:9b:
25:82:af:08:c0:37:a9:53:a5:f3:20:c9:28:83:ac:85:35:36:
c9:61:78:86:2f:0b:38:cf:25:d2:30:2b:56:19:e3:71:4b:79:
dc:a1:00:8a:83:51:61:62:f4:0a:f6:26:a8:fa:cd:6f:05:bd:
5e:be:4a:5d:5d:40:df:3f:51:b0:2c:7d:e1:28:ae:ab:b6:a7:
fe:36:ce:7c:b2:e6:1a:52:c4:13:7d:e8:1c:62:3f:60:78:0f:
ca:dc:f8:d0:f4:1f:a3:07:26:76:53:44:9a:5a:37:97:27:08:
35:4b:b7:ba:01:2b:c2:24:e5:48:46:b8:91:a6:d0:3a:74:60:
39:38:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:51 2024 by rpki-client on console-fra.rpki-client.org