Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/DslPmoyPRqxvH05ZMtE93ILdIwM.roa
File: DslPmoyPRqxvH05ZMtE93ILdIwM.roa (raw, json)
Hash identifier: 0UZKwDDzSmLQrsdQ1OfxWRz3CNLMbb2Ga68hXSqYHyU=
Subject key identifier: 0E:C9:4F:9A:8C:8F:46:AC:6F:1F:4E:59:32:D1:3D:DC:82:DD:23:03
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 018A5F85FABB24C7CB414D2BCF402D62D07B
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/DslPmoyPRqxvH05ZMtE93ILdIwM.roa
Signing time: Mon 04 Sep 2023 09:28:50 +0000
ROA not before: Mon 04 Sep 2023 09:28:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48314
IP address blocks: 185.245.97.0/24 maxlen: 24
185.245.98.0/24 maxlen: 24
185.245.99.0/24 maxlen: 24
185.194.238.0/24 maxlen: 24
185.194.239.0/24 maxlen: 24
185.194.236.0/24 maxlen: 24
185.194.237.0/24 maxlen: 24
193.32.221.0/24 maxlen: 24
193.32.222.0/24 maxlen: 24
193.32.220.0/24 maxlen: 24
193.32.223.0/24 maxlen: 24
185.248.141.0/24 maxlen: 24
185.248.142.0/24 maxlen: 24
185.248.143.0/24 maxlen: 24
46.251.251.0/24 maxlen: 24
185.242.112.0/24 maxlen: 24
185.242.113.0/24 maxlen: 24
88.218.224.0/24 maxlen: 24
88.218.225.0/24 maxlen: 24
185.242.114.0/24 maxlen: 24
185.242.115.0/24 maxlen: 24
88.218.226.0/24 maxlen: 24
134.255.244.0/24 maxlen: 24
45.10.24.0/24 maxlen: 24
134.255.247.0/24 maxlen: 24
194.26.182.0/24 maxlen: 24
194.26.183.0/24 maxlen: 24
194.26.180.0/24 maxlen: 24
194.26.181.0/24 maxlen: 24
194.45.196.0/23 maxlen: 24
91.210.225.0/24 maxlen: 24
91.210.226.0/24 maxlen: 24
91.210.227.0/24 maxlen: 24
185.250.248.0/24 maxlen: 24
185.250.249.0/24 maxlen: 24
5.180.64.0/24 maxlen: 24
185.250.250.0/24 maxlen: 24
185.250.251.0/24 maxlen: 24
5.180.67.0/24 maxlen: 24
5.180.65.0/24 maxlen: 24
5.180.66.0/24 maxlen: 24
109.230.219.0/24 maxlen: 24
152.89.236.0/24 maxlen: 24
152.89.237.0/24 maxlen: 24
152.89.238.0/24 maxlen: 24
31.214.144.0/24 maxlen: 24
152.89.239.0/24 maxlen: 24
94.199.213.0/24 maxlen: 24
94.199.212.0/24 maxlen: 24
94.199.214.0/24 maxlen: 24
94.199.215.0/24 maxlen: 24
213.190.28.0/24 maxlen: 24
213.190.31.0/24 maxlen: 24
213.190.29.0/24 maxlen: 24
213.190.30.0/24 maxlen: 24
194.48.171.0/24 maxlen: 24
194.48.169.0/24 maxlen: 24
194.48.170.0/24 maxlen: 24
194.48.168.0/24 maxlen: 24
45.133.9.0/24 maxlen: 24
45.133.8.0/24 maxlen: 24
45.133.10.0/23 maxlen: 24
194.45.37.0/24 maxlen: 24
194.45.36.0/24 maxlen: 24
91.216.245.0/24 maxlen: 24
193.135.8.0/24 maxlen: 24
193.135.9.0/24 maxlen: 24
193.135.11.0/24 maxlen: 24
45.10.26.0/24 maxlen: 24
45.10.25.0/24 maxlen: 24
45.10.27.0/24 maxlen: 24
193.142.41.0/24 maxlen: 24
193.142.42.0/24 maxlen: 24
193.142.40.0/24 maxlen: 24
193.142.43.0/24 maxlen: 24
45.91.100.0/24 maxlen: 24
45.91.101.0/24 maxlen: 24
45.91.103.0/24 maxlen: 24
45.91.102.0/24 maxlen: 24
2a0a:51c3::/32 maxlen: 32
2a0a:51c1::/32 maxlen: 48
2a0a:51c4::/32 maxlen: 48
2a0a:51c0::/32 maxlen: 32
2a0a:51c2::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:85:fa:bb:24:c7:cb:41:4d:2b:cf:40:2d:62:d0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Sep 4 09:28:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ec94f9a8c8f46ac6f1f4e5932d13ddc82dd2303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:03:4e:5a:8c:ba:51:ed:da:20:db:67:6d:ad:
d0:53:36:7f:6a:1a:51:af:bf:a1:f9:3f:6f:bb:ae:
6a:3f:f5:f1:a6:eb:1b:2b:7a:40:5b:80:5f:a4:40:
6f:70:2f:59:b7:78:e5:69:80:87:54:48:b1:07:52:
58:16:a6:45:a2:5e:3d:bd:61:94:e3:e6:e8:21:d7:
0b:c1:c2:1e:31:ef:fc:77:d0:66:53:5e:92:f6:46:
8e:b5:81:05:88:16:38:ff:d5:ab:4e:d2:6f:07:12:
da:47:48:30:20:36:d5:d6:38:ab:eb:8b:a4:94:1a:
67:5d:ce:c9:23:ae:89:ea:e0:c7:d9:65:48:a3:7c:
85:c8:85:f7:a2:f5:09:2f:d1:6a:18:b8:8c:0c:bb:
48:a1:4b:f6:fb:0e:74:60:0f:a8:2a:f3:98:2e:55:
7f:8d:a9:c7:c2:94:d7:1f:5a:16:34:8e:be:f5:15:
fa:1d:cc:72:62:57:43:ac:9d:b5:2d:c1:69:2b:ae:
58:07:b7:37:af:f2:6a:b7:43:61:98:f1:a7:8a:dc:
9b:33:05:aa:bf:38:59:23:ed:21:83:18:26:60:19:
2d:b8:b6:dd:0c:34:1a:cc:bd:57:2f:e8:17:6b:14:
77:9d:82:11:69:38:25:01:91:4d:54:a7:47:c0:24:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C9:4F:9A:8C:8F:46:AC:6F:1F:4E:59:32:D1:3D:DC:82:DD:23:03
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/DslPmoyPRqxvH05ZMtE93ILdIwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.64.0/22
31.214.144.0/24
45.10.24.0/22
45.91.100.0/22
45.133.8.0/22
46.251.251.0/24
88.218.224.0-88.218.226.255
91.210.225.0-91.210.227.255
91.216.245.0/24
94.199.212.0/22
109.230.219.0/24
134.255.244.0/24
134.255.247.0/24
152.89.236.0/22
185.194.236.0/22
185.242.112.0/22
185.245.97.0-185.245.99.255
185.248.141.0-185.248.143.255
185.250.248.0/22
193.32.220.0/22
193.135.8.0/23
193.135.11.0/24
193.142.40.0/22
194.26.180.0/22
194.45.36.0/23
194.45.196.0/23
194.48.168.0/22
213.190.28.0/22
IPv6:
2a0a:51c0::-2a0a:51c4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:b3:f9:f7:d1:5d:fb:9d:5d:3b:1d:95:f9:1e:ec:17:ec:76:
9a:9b:63:40:a6:c1:b2:da:c7:a9:61:26:81:58:66:26:f2:2a:
23:58:73:57:71:20:d7:27:be:bf:84:26:4f:4e:ed:62:94:bb:
35:3c:4d:1c:24:ee:71:31:ae:41:26:43:40:ed:11:3e:de:2d:
a9:ad:63:1d:90:ad:09:2c:de:74:23:1f:57:be:87:d1:ae:8d:
d1:6b:a4:fa:50:da:51:44:0b:2d:60:06:bf:b6:44:3b:9e:0f:
f2:5d:34:7e:ec:e2:f7:e3:b9:7e:40:45:42:af:60:b1:73:b9:
ed:57:7a:b4:cd:d1:25:84:4e:2f:11:a8:bb:e9:2f:3b:9e:07:
18:b3:06:a8:c2:f9:1e:1f:02:bf:f4:67:03:ae:2e:78:c1:65:
96:80:26:1a:ec:8d:95:49:f2:69:94:19:16:5d:62:2a:ee:02:
f6:7e:18:52:ef:14:97:e9:2d:79:3f:17:cd:51:a0:26:30:9e:
87:a5:1c:56:c9:83:6d:e5:1f:c4:d1:5a:cd:a6:81:4f:16:01:
83:4a:e5:a7:d1:16:47:5a:76:82:70:0f:c4:3c:32:01:a6:49:
d8:88:e2:73:ac:7a:ab:5a:04:47:89:75:17:05:4a:62:79:26:
01:e8:13:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:51 2024 by rpki-client on console-fra.rpki-client.org