Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/8W0qQlJn2NyYbgXSvMm-jBXyWHQ.roa
File: 8W0qQlJn2NyYbgXSvMm-jBXyWHQ.roa (raw, json)
Hash identifier: nKFamkHD+LpTvHLvPEMmsW7v4+Jnm4cAAjVxOAJBGXI=
Subject key identifier: F1:6D:2A:42:52:67:D8:DC:98:6E:05:D2:BC:C9:BE:8C:15:F2:58:74
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 038775AA
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/8W0qQlJn2NyYbgXSvMm-jBXyWHQ.roa
Signing time: Tue 05 Apr 2022 01:44:23 +0000
ROA not before: Tue 05 Apr 2022 01:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.124.20.0/23 maxlen: 24
85.204.160.0/22 maxlen: 24
93.113.184.0/21 maxlen: 24
89.39.172.0/23 maxlen: 24
89.36.231.0/24 maxlen: 24
89.36.236.0/22 maxlen: 24
86.107.108.0/23 maxlen: 24
89.40.43.0/24 maxlen: 24
188.211.249.0/24 maxlen: 24
188.211.250.0/23 maxlen: 24
188.211.252.0/22 maxlen: 24
94.177.27.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
212.237.224.0/22 maxlen: 24
89.42.29.0/24 maxlen: 24
94.190.248.0/22 maxlen: 24
89.42.215.0/24 maxlen: 24
195.133.202.0/23 maxlen: 24
89.36.32.0/22 maxlen: 24
195.133.208.0/23 maxlen: 24
85.204.148.0/22 maxlen: 24
94.177.65.0/24 maxlen: 24
217.19.1.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
93.115.155.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
62.112.0.0/21 maxlen: 24
89.37.228.0/22 maxlen: 24
194.88.112.0/20 maxlen: 24
89.37.236.0/22 maxlen: 24
93.115.111.0/24 maxlen: 24
62.112.12.0/23 maxlen: 24
86.105.104.0/22 maxlen: 24
194.58.64.0/23 maxlen: 24
89.34.171.0/24 maxlen: 24
188.240.40.0/23 maxlen: 24
89.44.210.0/24 maxlen: 24
84.234.16.0/20 maxlen: 24
46.102.174.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
89.40.166.0/24 maxlen: 24
89.40.176.0/22 maxlen: 24
185.172.20.0/22 maxlen: 24
89.37.106.0/24 maxlen: 24
194.135.26.0/23 maxlen: 24
185.64.100.0/22 maxlen: 24
86.104.209.0/24 maxlen: 24
91.232.136.0/22 maxlen: 24
77.81.1.0/24 maxlen: 24
188.212.104.0/22 maxlen: 24
77.81.124.0/22 maxlen: 24
89.37.188.0/22 maxlen: 24
213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
64.239.236.0/22 maxlen: 24
194.135.132.0/23 maxlen: 24
89.37.216.0/23 maxlen: 24
89.34.124.0/23 maxlen: 24
194.88.96.0/21 maxlen: 24
77.81.160.0/22 maxlen: 24
185.77.250.0/23 maxlen: 24
185.77.249.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59209130 (0x38775aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 5 01:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f16d2a425267d8dc986e05d2bcc9be8c15f25874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:a3:d9:41:c4:e4:14:98:73:cc:e6:63:21:
be:93:03:2e:4e:e1:8f:67:03:96:d5:c6:c8:95:44:
90:44:67:2b:17:d9:90:4b:bb:fe:e4:bf:f2:d7:c5:
b2:89:9b:3c:85:4d:93:7e:fc:86:1d:db:85:af:86:
da:57:ae:14:1f:79:cb:54:15:03:d0:97:74:5c:b6:
0f:07:69:0e:1c:d2:e8:a8:0d:58:19:d4:9d:f1:43:
ea:3f:37:2b:c0:98:a9:dc:95:d9:f9:84:c0:22:89:
34:c6:08:75:86:5f:5f:bf:a7:4e:fe:6a:0b:b0:4c:
1d:b3:73:32:ff:43:f1:34:bc:36:4c:aa:fa:e2:c5:
d6:6b:6f:58:ea:13:e3:7a:83:57:87:3f:9d:d2:3e:
65:74:fc:06:e3:c3:57:f4:40:b5:0a:bf:e5:1b:94:
ab:de:c0:37:c3:bb:26:86:bd:01:3d:a1:a3:5e:7d:
93:31:b2:69:de:c7:c1:41:33:17:38:98:bc:af:24:
00:b4:f0:65:c8:ce:c8:54:af:28:f6:76:d9:d1:71:
76:a4:ef:eb:c0:69:1a:4f:74:a8:dd:d3:57:6e:c5:
84:52:6f:27:8f:72:f4:dd:f2:0a:ad:b3:c9:b4:e6:
f3:a0:b9:26:bd:f6:c9:7e:4b:06:7f:ea:e4:55:dd:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6D:2A:42:52:67:D8:DC:98:6E:05:D2:BC:C9:BE:8C:15:F2:58:74
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/8W0qQlJn2NyYbgXSvMm-jBXyWHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
46.102.174.0/24
62.112.0.0/21
62.112.12.0/23
64.239.236.0/22
77.81.1.0/24
77.81.124.0/22
77.81.160.0/22
84.234.16.0/20
84.247.20.0/24
84.247.59.0/24
85.204.148.0/22
85.204.160.0/22
86.104.209.0/24
86.105.104.0/22
86.107.108.0/23
89.34.124.0/23
89.34.171.0/24
89.36.32.0/22
89.36.231.0/24
89.36.236.0/22
89.37.106.0/24
89.37.188.0/22
89.37.216.0/23
89.37.228.0/22
89.37.236.0/22
89.39.172.0/23
89.40.43.0/24
89.40.166.0/24
89.40.176.0/22
89.42.29.0/24
89.42.215.0/24
89.44.210.0/24
91.232.136.0/22
93.113.184.0/21
93.115.111.0/24
93.115.155.0/24
94.177.27.0/24
94.177.65.0/24
94.177.118.0/24
94.190.248.0/22
176.223.181.0/24
185.64.100.0/22
185.77.249.0-185.77.251.255
185.172.20.0/22
188.211.249.0-188.211.255.255
188.212.104.0/22
188.240.40.0/23
193.124.20.0/23
194.58.64.0/23
194.88.96.0/21
194.88.112.0/20
194.135.26.0/23
194.135.132.0/23
195.133.202.0/23
195.133.208.0/23
212.237.224.0/22
213.159.10.0-213.159.13.255
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
89:66:20:76:b7:fb:26:d0:e1:ae:fe:40:6c:39:ce:6b:11:9e:
23:12:c0:d4:4d:7c:69:7e:76:e3:bf:0a:73:23:3f:16:1c:06:
c7:57:0f:b1:7a:42:a5:77:b1:2d:05:8e:ea:a3:00:29:37:db:
00:d4:22:e9:90:b7:a3:c6:5a:57:fe:d0:b3:af:f7:52:d5:79:
19:0a:9e:5d:41:b1:f2:0f:cb:24:06:3a:6d:6f:4c:b2:1e:12:
81:65:bd:bb:e7:bb:e5:4c:15:cf:8d:fb:17:f0:f9:8b:03:4b:
1f:18:79:e8:11:b1:51:45:a4:6c:c3:76:d3:11:35:7f:76:93:
61:76:ea:ad:86:0d:96:2c:51:d5:94:50:3d:97:20:19:a7:a0:
2d:8f:0b:58:60:2c:f3:88:48:c5:7f:b9:39:e4:1f:55:59:b4:
b0:4b:53:7b:3f:c9:5f:88:af:87:04:c2:52:9e:ea:fd:01:be:
ce:1b:f6:d9:92:fb:97:28:d1:91:50:d7:ea:10:59:f9:ac:e3:
44:7b:9e:68:fc:7a:c9:05:47:8d:da:52:3c:5a:b3:c6:6d:4a:
7d:95:ec:f4:de:27:90:f4:1d:ad:d8:55:47:7f:0c:4f:91:4c:
e9:35:f0:36:13:5c:9c:eb:81:b1:2b:77:0d:a0:ed:5c:a0:4b:
f2:73:02:a2
-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgIEA4d1qjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YTAwZTk4MTk1MzA2MTk3MmM4OTZiZDZkMjc3MzhkMDgzYWFkYjBlMB4XDTIyMDQw
NTAxNDQyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjE2ZDJhNDI1MjY3
ZDhkYzk4NmUwNWQyYmNjOWJlOGMxNWYyNTg3NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALUGo9lBxOQUmHPM5mMhvpMDLk7hj2cDltXGyJVEkERnKxfZ
kEu7/uS/8tfFsombPIVNk378hh3bha+G2leuFB95y1QVA9CXdFy2DwdpDhzS6KgN
WBnUnfFD6j83K8CYqdyV2fmEwCKJNMYIdYZfX7+nTv5qC7BMHbNzMv9D8TS8Nkyq
+uLF1mtvWOoT43qDV4c/ndI+ZXT8BuPDV/RAtQq/5RuUq97AN8O7Joa9AT2ho159
kzGyad7HwUEzFziYvK8kALTwZcjOyFSvKPZ22dFxdqTv68BpGk90qN3TV27FhFJv
J49y9N3yCq2zybTm86C5Jr32yX5LBn/q5FXdKEMCAwEAAaOCA4YwggOCMB0GA1Ud
DgQWBBTxbSpCUmfY3JhuBdK8yb6MFfJYdDAfBgNVHSMEGDAWgBTaAOmBlTBhlyyJ
a9bSdzjQg6rbDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJnRHBnWlV3WVpjc2lXdlcwbmM0MElPcTJ3NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmYvODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8x
LzhXMHFRbEpuMk55WWJnWFN2TW0takJYeVdIUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYv
ODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8xLzJnRHBnWlV3WVpj
c2lXdlcwbmM0MElPcTJ3NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AZoGCCsGAQUFBwEHAQH/BIIBiTCCAYUwggGBBAIAATCCAXkDBAMFI8ADBAAuZq4D
BAM+cAADBAE+cAwDBAJA7+wDBABNUQEDBAJNUXwDBAJNUaADBARU6hADBABU9xQD
BABU9zsDBAJVzJQDBAJVzKADBABWaNEDBAJWaWgDBAFWa2wDBAFZInwDBABZIqsD
BAJZJCADBABZJOcDBAJZJOwDBABZJWoDBAJZJbwDBAFZJdgDBAJZJeQDBAJZJewD
BAFZJ6wDBABZKCsDBABZKKYDBAJZKLADBABZKh0DBABZKtcDBABZLNIDBAJb6IgD
BANdcbgDBABdc28DBABdc5sDBABesRsDBABesUEDBABesXYDBAJevvgDBACw37UD
BAK5QGQwDAMEALlN+QMEArlN+AMEArmsFDALAwQAvNP5AwMCvNADBAK81GgDBAG8
8CgDBAHBfBQDBAHCOkADBAPCWGADBATCWHADBAHChxoDBAHCh4QDBAHDhcoDBAHD
hdADBALU7eAwDAMEAdWfCgMEAdWfDAMEANkTATANBgkqhkiG9w0BAQsFAAOCAQEA
iWYgdrf7JtDhrv5AbDnOaxGeIxLA1E18aX52478KcyM/FhwGx1cPsXpCpXexLQWO
6qMAKTfbANQi6ZC3o8ZaV/7Qs6/3UtV5GQqeXUGx8g/LJAY6bW9Msh4SgWW9u+e7
5UwVz437F/D5iwNLHxh56BGxUUWkbMN20xE1f3aTYXbqrYYNlixR1ZRQPZcgGaeg
LY8LWGAs84hIxX+5OeQfVVm0sEtTez/JX4ivhwTCUp7q/QG+zhv22ZL7lyjRkVDX
6hBZ+azjRHueaPx6yQVHjdpSPFqzxm1KfZXs9N4nkPQdrdhVR38MT5FM6TXwNhNc
nOuBsSt3DaDtXKBL8nMCog==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org