Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/CqGKn3kwZqZwJ3aS7ABZPTAL5vk.roa
File: CqGKn3kwZqZwJ3aS7ABZPTAL5vk.roa (raw, json)
Hash identifier: g00S/5arh3Pt/LwOfA22xQLpdV7fZsHfKnZgCV0O2I4=
Subject key identifier: 0A:A1:8A:9F:79:30:66:A6:70:27:76:92:EC:00:59:3D:30:0B:E6:F9
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 018C59C0F1D5CC0FF9826BE95A7A736394C4
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/CqGKn3kwZqZwJ3aS7ABZPTAL5vk.roa
Signing time: Mon 11 Dec 2023 16:41:06 +0000
ROA not before: Mon 11 Dec 2023 16:41:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 194.164.114.0/24 maxlen: 24
217.29.192.0/22 maxlen: 22
62.164.128.0/17 maxlen: 17
62.164.144.0/21 maxlen: 21
194.164.144.0/24 maxlen: 24
194.164.140.0/22 maxlen: 22
194.164.80.0/22 maxlen: 22
194.164.85.0/24 maxlen: 24
194.164.86.0/24 maxlen: 24
194.164.97.0/24 maxlen: 24
194.164.223.0/24 maxlen: 24
194.164.232.0/24 maxlen: 24
194.164.231.0/24 maxlen: 24
194.164.238.0/24 maxlen: 24
194.164.241.0/24 maxlen: 24
194.164.242.0/23 maxlen: 23
194.164.247.0/24 maxlen: 24
195.26.224.0/19 maxlen: 19
195.184.224.0/19 maxlen: 19
195.184.228.0/23 maxlen: 23
194.164.181.0/24 maxlen: 24
195.184.236.0/24 maxlen: 24
195.184.245.0/24 maxlen: 24
212.32.56.0/21 maxlen: 21
212.32.54.0/23 maxlen: 23
212.32.64.0/18 maxlen: 18
213.254.160.0/19 maxlen: 19
212.32.0.0/17 maxlen: 17
212.32.0.0/20 maxlen: 20
212.32.16.0/21 maxlen: 21
212.32.24.0/22 maxlen: 22
212.32.28.0/23 maxlen: 23
212.32.32.0/21 maxlen: 21
212.32.42.0/23 maxlen: 23
212.32.44.0/23 maxlen: 23
212.32.48.0/22 maxlen: 22
212.56.57.0/24 maxlen: 24
194.164.2.0/24 maxlen: 24
212.56.56.0/23 maxlen: 23
212.56.60.0/22 maxlen: 22
194.164.12.0/24 maxlen: 24
194.164.38.0/24 maxlen: 24
217.154.0.0/16 maxlen: 16
212.56.48.0/21 maxlen: 21
62.169.128.0/20 maxlen: 20
62.169.144.0/22 maxlen: 22
62.169.148.0/23 maxlen: 23
62.169.150.0/24 maxlen: 24
62.169.152.0/22 maxlen: 22
62.169.156.0/24 maxlen: 24
62.169.158.0/23 maxlen: 23
193.108.168.0/23 maxlen: 23
194.62.44.0/22 maxlen: 22
195.200.0.0/19 maxlen: 19
86.54.0.0/16 maxlen: 16
212.47.80.0/23 maxlen: 23
212.47.84.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:c0:f1:d5:cc:0f:f9:82:6b:e9:5a:7a:73:63:94:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Dec 11 16:41:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aa18a9f793066a670277692ec00593d300be6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:b3:d2:2c:eb:e8:cf:55:d8:91:b7:68:5e:
e5:1a:d2:28:43:ec:f6:b6:75:c4:55:4e:8c:74:65:
03:3d:d6:37:25:76:14:6d:c3:b2:d8:a1:59:07:c8:
e7:ee:5a:7d:bc:9f:d0:18:6a:49:a7:4b:5b:cd:8d:
b0:ce:be:9d:df:58:57:c0:b1:bd:be:05:3f:af:cc:
11:8d:11:8e:ac:2d:7c:e1:9e:1d:d6:be:d9:23:13:
1e:a0:05:bd:c7:b6:7b:e7:8f:44:ea:7e:82:cc:93:
21:af:b1:18:b4:e5:96:9a:e9:d9:80:a8:2e:a0:98:
c0:86:d1:9d:61:fb:93:ce:70:93:a4:75:7a:7e:8d:
d8:ce:cf:16:8a:a6:00:d8:f7:e4:37:73:ea:ff:a3:
66:36:83:ee:8f:06:56:6f:2d:a5:9c:3b:8c:c5:8c:
3e:e4:35:e0:e0:1b:12:3c:9c:b3:ea:80:c1:a4:74:
2a:bd:20:dd:b4:3c:52:80:10:e0:f2:46:69:0e:cf:
b5:e9:1b:e0:5d:a1:15:75:47:63:e7:01:0e:99:91:
48:31:84:b1:49:5d:be:03:e4:07:73:67:cb:09:4e:
31:a9:59:86:4b:74:aa:a2:6b:59:67:a9:3e:6d:dc:
1c:7f:70:68:8f:76:9e:fd:ba:96:33:f6:eb:03:9b:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A1:8A:9F:79:30:66:A6:70:27:76:92:EC:00:59:3D:30:0B:E6:F9
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/CqGKn3kwZqZwJ3aS7ABZPTAL5vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.128.0/17
62.169.128.0-62.169.150.255
62.169.152.0-62.169.156.255
62.169.158.0/23
86.54.0.0/16
193.108.168.0/23
194.62.44.0/22
194.164.2.0/24
194.164.12.0/24
194.164.38.0/24
194.164.80.0/22
194.164.85.0-194.164.86.255
194.164.97.0/24
194.164.114.0/24
194.164.140.0-194.164.144.255
194.164.181.0/24
194.164.223.0/24
194.164.231.0-194.164.232.255
194.164.238.0/24
194.164.241.0-194.164.243.255
194.164.247.0/24
195.26.224.0/19
195.184.224.0/19
195.200.0.0/19
212.32.0.0/17
212.47.80.0/23
212.47.84.0/24
212.56.48.0-212.56.57.255
212.56.60.0/22
213.254.160.0/19
217.29.192.0/22
217.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:a8:a9:ee:3b:91:72:22:9c:8d:40:57:8d:08:bd:a5:2d:18:
a6:48:23:44:46:9d:6f:97:59:51:6f:0d:23:bd:84:c9:1b:5c:
6a:d5:fd:85:88:d5:f0:1f:a1:21:73:23:bb:ef:dd:af:62:3e:
ca:9a:14:35:56:d3:95:85:c8:d5:a0:a4:33:bd:16:59:0f:b7:
f0:f1:e9:f5:8a:0e:47:15:26:9f:96:87:e5:bd:d1:4a:88:b1:
a6:fb:84:eb:bc:5c:cc:e9:89:9c:60:bf:09:53:69:73:78:92:
1a:62:e4:bd:47:35:1d:1a:05:57:0a:66:84:ea:9f:79:6b:47:
88:64:04:94:3e:6d:d7:a7:1d:f7:5e:a4:e8:c1:76:66:5a:f3:
42:15:17:b6:01:58:08:d3:c7:aa:38:aa:7f:2f:ec:12:58:a7:
49:12:79:55:68:92:5a:39:70:a8:a5:41:99:72:f1:14:97:c0:
61:ad:6d:24:c7:1a:14:cf:69:60:d8:95:27:50:5b:05:da:f5:
6d:d5:1f:09:63:69:65:b8:ee:e9:db:6a:b2:d4:7b:dd:e1:07:
ec:22:74:a5:8b:fb:84:3c:2f:51:db:e7:39:65:52:4d:74:38:
33:92:b5:7e:2a:f0:e7:16:92:58:c0:34:4e:42:38:24:5b:59:
2e:d7:9d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:02:34 2025 by rpki-client