Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/o4mqZLQ_Zc9TXfzXTxQC8bSn-qA.roa
File: o4mqZLQ_Zc9TXfzXTxQC8bSn-qA.roa (raw, json)
Hash identifier: p5yvHbZp84HLUaoSQjlHwi80wAdwNsix77oQW0gguQ0=
Subject key identifier: A3:89:AA:64:B4:3F:65:CF:53:5D:FC:D7:4F:14:02:F1:B4:A7:FA:A0
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 018DD565649D756AF44670808A12119EFECB
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/o4mqZLQ_Zc9TXfzXTxQC8bSn-qA.roa
Signing time: Fri 23 Feb 2024 09:56:48 +0000
ROA not before: Fri 23 Feb 2024 09:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8851
IP address blocks: 62.164.128.0/18 maxlen: 18
62.164.131.0/24 maxlen: 24
62.164.132.0/22 maxlen: 22
62.164.136.0/22 maxlen: 22
62.164.140.0/24 maxlen: 24
62.164.144.0/21 maxlen: 21
62.164.145.0/24 maxlen: 24
62.164.146.0/24 maxlen: 24
62.164.147.0/24 maxlen: 24
62.164.152.0/24 maxlen: 24
62.164.168.0/24 maxlen: 24
62.164.169.0/24 maxlen: 24
62.164.171.0/24 maxlen: 24
62.164.176.0/24 maxlen: 24
62.164.178.0/24 maxlen: 24
62.164.179.0/24 maxlen: 24
62.164.180.0/24 maxlen: 24
62.164.183.0/24 maxlen: 24
62.164.184.0/24 maxlen: 24
62.164.186.0/24 maxlen: 24
62.164.187.0/24 maxlen: 24
62.164.188.0/24 maxlen: 24
62.164.189.0/24 maxlen: 24
62.164.190.0/24 maxlen: 24
62.164.191.0/24 maxlen: 24
62.164.192.0/21 maxlen: 21
62.164.196.0/24 maxlen: 24
62.164.199.0/24 maxlen: 24
62.169.150.0/24 maxlen: 24
62.169.154.0/24 maxlen: 24
86.54.6.0/24 maxlen: 24
86.54.7.0/24 maxlen: 24
86.54.10.0/24 maxlen: 24
86.54.27.0/24 maxlen: 24
86.54.43.0/24 maxlen: 24
86.54.44.0/24 maxlen: 24
86.54.45.0/24 maxlen: 24
86.54.80.0/24 maxlen: 24
86.54.87.0/24 maxlen: 24
86.54.96.0/24 maxlen: 24
86.54.97.0/24 maxlen: 24
86.54.98.0/24 maxlen: 24
86.54.100.0/23 maxlen: 23
86.54.102.0/24 maxlen: 24
86.54.103.0/24 maxlen: 24
86.54.104.0/24 maxlen: 24
86.54.106.0/24 maxlen: 24
86.54.108.0/24 maxlen: 24
86.54.109.0/24 maxlen: 24
86.54.111.0/24 maxlen: 24
86.54.112.0/24 maxlen: 24
86.54.113.0/24 maxlen: 24
86.54.114.0/24 maxlen: 24
86.54.115.0/24 maxlen: 24
86.54.116.0/24 maxlen: 24
86.54.117.0/24 maxlen: 24
86.54.118.0/24 maxlen: 24
86.54.119.0/24 maxlen: 24
86.54.120.0/24 maxlen: 24
86.54.121.0/24 maxlen: 24
86.54.122.0/24 maxlen: 24
86.54.124.0/24 maxlen: 24
86.54.127.0/24 maxlen: 24
86.54.128.0/24 maxlen: 24
86.54.129.0/24 maxlen: 24
86.54.130.0/24 maxlen: 24
86.54.131.0/24 maxlen: 24
86.54.134.0/24 maxlen: 24
86.54.142.0/24 maxlen: 24
86.54.143.0/24 maxlen: 24
86.54.148.0/24 maxlen: 24
86.54.149.0/24 maxlen: 24
86.54.150.0/24 maxlen: 24
86.54.161.0/24 maxlen: 24
86.54.162.0/24 maxlen: 24
86.54.164.0/24 maxlen: 24
86.54.173.0/24 maxlen: 24
86.54.174.0/24 maxlen: 24
86.54.177.0/24 maxlen: 24
86.54.178.0/24 maxlen: 24
86.54.180.0/24 maxlen: 24
86.54.183.0/24 maxlen: 24
86.54.185.0/24 maxlen: 24
86.54.200.0/24 maxlen: 24
86.54.210.0/24 maxlen: 24
86.54.212.0/24 maxlen: 24
86.54.224.0/24 maxlen: 24
86.54.230.0/24 maxlen: 24
86.54.234.0/24 maxlen: 24
86.54.248.0/24 maxlen: 24
193.108.169.0/24 maxlen: 24
194.164.2.0/24 maxlen: 24
194.164.12.0/24 maxlen: 24
194.164.38.0/24 maxlen: 24
194.164.80.0/22 maxlen: 22
194.164.85.0/24 maxlen: 24
194.164.86.0/24 maxlen: 24
194.164.97.0/24 maxlen: 24
194.164.100.0/24 maxlen: 24
194.164.104.0/24 maxlen: 24
194.164.106.0/24 maxlen: 24
194.164.114.0/24 maxlen: 24
194.164.140.0/22 maxlen: 22
194.164.144.0/24 maxlen: 24
194.164.181.0/24 maxlen: 24
194.164.223.0/24 maxlen: 24
194.164.231.0/24 maxlen: 24
194.164.232.0/24 maxlen: 24
194.164.238.0/24 maxlen: 24
194.164.241.0/24 maxlen: 24
194.164.242.0/23 maxlen: 23
194.164.247.0/24 maxlen: 24
195.26.228.0/24 maxlen: 24
195.26.236.0/24 maxlen: 24
195.184.228.0/23 maxlen: 23
195.184.236.0/24 maxlen: 24
195.184.245.0/24 maxlen: 24
195.200.0.0/19 maxlen: 19
195.200.22.0/24 maxlen: 24
195.200.27.0/24 maxlen: 24
212.32.28.0/24 maxlen: 24
212.32.42.0/24 maxlen: 24
212.32.44.0/24 maxlen: 24
212.32.55.0/24 maxlen: 24
212.32.66.0/24 maxlen: 24
212.47.80.0/23 maxlen: 23
212.47.84.0/24 maxlen: 24
212.56.57.0/24 maxlen: 24
213.254.171.0/24 maxlen: 24
213.254.178.0/24 maxlen: 24
213.254.185.0/24 maxlen: 24
217.154.12.0/24 maxlen: 24
217.154.25.0/24 maxlen: 24
217.154.28.0/24 maxlen: 24
217.154.30.0/24 maxlen: 24
217.154.31.0/24 maxlen: 24
217.154.39.0/24 maxlen: 24
217.154.46.0/24 maxlen: 24
217.154.49.0/24 maxlen: 24
217.154.72.0/23 maxlen: 23
217.154.90.0/24 maxlen: 24
217.154.96.0/24 maxlen: 24
217.154.103.0/24 maxlen: 24
217.154.104.0/24 maxlen: 24
217.154.109.0/24 maxlen: 24
217.154.110.0/23 maxlen: 23
217.154.122.0/23 maxlen: 23
217.154.127.0/24 maxlen: 24
217.154.131.0/24 maxlen: 24
217.154.132.0/22 maxlen: 22
217.154.137.0/24 maxlen: 24
217.154.138.0/24 maxlen: 24
217.154.141.0/24 maxlen: 24
217.154.151.0/24 maxlen: 24
217.154.157.0/24 maxlen: 24
217.154.158.0/24 maxlen: 24
217.154.176.0/24 maxlen: 24
217.154.187.0/24 maxlen: 24
217.154.209.0/24 maxlen: 24
217.154.219.0/24 maxlen: 24
217.154.221.0/24 maxlen: 24
217.154.230.0/24 maxlen: 24
217.154.236.0/24 maxlen: 24
217.154.246.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:65:64:9d:75:6a:f4:46:70:80:8a:12:11:9e:fe:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Feb 23 09:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a389aa64b43f65cf535dfcd74f1402f1b4a7faa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:1d:19:44:a5:a1:c3:8c:45:0c:76:46:4d:
db:14:0b:b3:1b:6e:07:10:77:25:ad:f4:59:08:a1:
d2:5c:e8:c1:58:3c:ca:b6:15:be:1e:75:12:07:17:
fa:04:78:dd:9c:89:4b:fb:54:90:56:e8:d6:7d:51:
fd:f9:cd:80:78:cd:30:c5:f7:5c:fd:a3:c8:88:0a:
91:9f:f6:ed:f1:3f:a8:0c:40:b9:24:d4:b8:f4:b2:
3e:c8:05:b8:a2:63:35:e5:21:5f:c2:b7:3c:32:c0:
e7:4d:5f:f8:ce:94:79:4a:20:a4:96:40:17:95:c3:
7e:e8:27:76:f4:fd:6b:d0:ff:0b:8e:a0:4e:d3:b8:
bf:98:13:09:61:a1:a0:bd:02:23:84:03:38:c1:a6:
0e:db:6f:c6:71:19:7b:2d:e3:b6:10:32:93:d1:76:
2e:16:85:70:d3:50:bc:1b:28:a7:21:56:56:ae:0c:
bd:b8:26:77:4b:d0:cd:7e:51:1b:39:57:59:6f:52:
64:49:95:fe:0c:ec:8d:34:4e:5e:96:5c:d4:77:4c:
eb:e8:68:30:01:40:de:19:ab:3e:6c:89:45:cf:2e:
1d:15:91:70:de:c7:38:4b:a6:96:c8:bc:f8:9e:5a:
ea:00:6e:c2:6c:bd:fb:fe:31:04:e0:cb:a9:8f:97:
4e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:AA:64:B4:3F:65:CF:53:5D:FC:D7:4F:14:02:F1:B4:A7:FA:A0
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/o4mqZLQ_Zc9TXfzXTxQC8bSn-qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.128.0-62.164.199.255
62.169.150.0/24
62.169.154.0/24
86.54.6.0/23
86.54.10.0/24
86.54.27.0/24
86.54.43.0-86.54.45.255
86.54.80.0/24
86.54.87.0/24
86.54.96.0-86.54.98.255
86.54.100.0-86.54.104.255
86.54.106.0/24
86.54.108.0/23
86.54.111.0-86.54.122.255
86.54.124.0/24
86.54.127.0-86.54.131.255
86.54.134.0/24
86.54.142.0/23
86.54.148.0-86.54.150.255
86.54.161.0-86.54.162.255
86.54.164.0/24
86.54.173.0-86.54.174.255
86.54.177.0-86.54.178.255
86.54.180.0/24
86.54.183.0/24
86.54.185.0/24
86.54.200.0/24
86.54.210.0/24
86.54.212.0/24
86.54.224.0/24
86.54.230.0/24
86.54.234.0/24
86.54.248.0/24
193.108.169.0/24
194.164.2.0/24
194.164.12.0/24
194.164.38.0/24
194.164.80.0/22
194.164.85.0-194.164.86.255
194.164.97.0/24
194.164.100.0/24
194.164.104.0/24
194.164.106.0/24
194.164.114.0/24
194.164.140.0-194.164.144.255
194.164.181.0/24
194.164.223.0/24
194.164.231.0-194.164.232.255
194.164.238.0/24
194.164.241.0-194.164.243.255
194.164.247.0/24
195.26.228.0/24
195.26.236.0/24
195.184.228.0/23
195.184.236.0/24
195.184.245.0/24
195.200.0.0/19
212.32.28.0/24
212.32.42.0/24
212.32.44.0/24
212.32.55.0/24
212.32.66.0/24
212.47.80.0/23
212.47.84.0/24
212.56.57.0/24
213.254.171.0/24
213.254.178.0/24
213.254.185.0/24
217.154.12.0/24
217.154.25.0/24
217.154.28.0/24
217.154.30.0/23
217.154.39.0/24
217.154.46.0/24
217.154.49.0/24
217.154.72.0/23
217.154.90.0/24
217.154.96.0/24
217.154.103.0-217.154.104.255
217.154.109.0-217.154.111.255
217.154.122.0/23
217.154.127.0/24
217.154.131.0-217.154.135.255
217.154.137.0-217.154.138.255
217.154.141.0/24
217.154.151.0/24
217.154.157.0-217.154.158.255
217.154.176.0/24
217.154.187.0/24
217.154.209.0/24
217.154.219.0/24
217.154.221.0/24
217.154.230.0/24
217.154.236.0/24
217.154.246.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d6:80:9c:51:1b:4e:e8:5f:8e:4b:8c:64:33:58:95:2d:bd:
cb:bb:01:93:52:5e:82:07:54:c6:30:e5:98:90:1e:76:52:22:
7e:8e:4e:8f:f3:8b:84:e2:48:fd:6c:d2:46:09:01:d9:1d:30:
b3:2b:b7:c9:ab:35:c0:c4:40:fc:74:4f:2e:ed:6c:7f:02:39:
8f:57:c1:4e:fe:d7:16:6e:ab:26:75:b6:f3:23:9f:18:37:9f:
e5:10:89:e5:05:f1:80:fa:42:f4:9e:aa:e7:6f:90:8b:3d:bc:
63:ae:d2:56:72:c3:e4:5e:5d:11:67:36:ee:ab:c4:27:67:71:
36:0c:73:90:cb:2b:73:ff:08:27:a3:f4:57:3f:b5:34:7f:71:
87:40:46:09:19:47:e7:da:5e:0a:69:da:c1:93:2c:37:e0:c1:
e6:71:19:68:6c:45:e2:b3:13:f5:69:67:2f:17:f2:89:9f:37:
f9:4e:0e:29:4b:3d:ea:70:4e:0a:4d:e8:91:4a:cd:7c:38:1d:
95:50:29:56:c2:f3:87:be:92:c7:70:33:75:6b:14:56:ff:1d:
1e:b1:84:16:ca:39:91:98:ce:57:ec:cf:a9:a6:e3:37:83:8f:
82:37:d3:58:bc:0c:d7:a5:a8:02:bf:a0:12:56:f3:cc:27:17:
09:5b:94:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:52 2025 by rpki-client