Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/UXE4k9kahxn7oIlSfT016GXIb1A.roa
File: UXE4k9kahxn7oIlSfT016GXIb1A.roa (raw, json)
Hash identifier: 8zvKKtUmcEez3qATWTVdeBxrSaKqLjgnEJ5XSJJA+OI=
Subject key identifier: 51:71:38:93:D9:1A:87:19:FB:A0:89:52:7D:3D:35:E8:65:C8:6F:50
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 018DC5B6FB9CD90F61BE278FCC691BA01BC1
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/UXE4k9kahxn7oIlSfT016GXIb1A.roa
Signing time: Tue 20 Feb 2024 08:51:59 +0000
ROA not before: Tue 20 Feb 2024 08:51:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8851
IP address blocks: 62.164.128.0/18 maxlen: 18
62.164.144.0/21 maxlen: 21
62.164.192.0/21 maxlen: 21
62.169.150.0/24 maxlen: 24
62.169.154.0/24 maxlen: 24
62.169.156.0/24 maxlen: 24
86.54.0.0/16 maxlen: 16
193.108.169.0/24 maxlen: 24
194.62.44.0/22 maxlen: 22
194.164.2.0/24 maxlen: 24
194.164.12.0/24 maxlen: 24
194.164.38.0/24 maxlen: 24
194.164.80.0/22 maxlen: 22
194.164.85.0/24 maxlen: 24
194.164.86.0/24 maxlen: 24
194.164.97.0/24 maxlen: 24
194.164.100.0/24 maxlen: 24
194.164.104.0/24 maxlen: 24
194.164.106.0/24 maxlen: 24
194.164.114.0/24 maxlen: 24
194.164.140.0/22 maxlen: 22
194.164.144.0/24 maxlen: 24
194.164.181.0/24 maxlen: 24
194.164.223.0/24 maxlen: 24
194.164.231.0/24 maxlen: 24
194.164.232.0/24 maxlen: 24
194.164.238.0/24 maxlen: 24
194.164.241.0/24 maxlen: 24
194.164.242.0/23 maxlen: 23
194.164.247.0/24 maxlen: 24
195.26.224.0/19 maxlen: 19
195.26.228.0/24 maxlen: 24
195.26.236.0/24 maxlen: 24
195.184.228.0/23 maxlen: 23
195.184.236.0/24 maxlen: 24
195.184.245.0/24 maxlen: 24
195.200.0.0/19 maxlen: 19
195.200.22.0/24 maxlen: 24
195.200.27.0/24 maxlen: 24
212.32.28.0/24 maxlen: 24
212.32.42.0/24 maxlen: 24
212.32.44.0/23 maxlen: 23
212.32.44.0/24 maxlen: 24
212.32.55.0/24 maxlen: 24
212.32.66.0/24 maxlen: 24
212.47.80.0/23 maxlen: 23
212.47.84.0/24 maxlen: 24
212.56.57.0/24 maxlen: 24
213.254.171.0/24 maxlen: 24
213.254.178.0/24 maxlen: 24
213.254.185.0/24 maxlen: 24
217.154.0.0/16 maxlen: 16
217.154.12.0/24 maxlen: 24
217.154.25.0/24 maxlen: 24
217.154.28.0/24 maxlen: 24
217.154.30.0/24 maxlen: 24
217.154.31.0/24 maxlen: 24
217.154.39.0/24 maxlen: 24
217.154.46.0/24 maxlen: 24
217.154.49.0/24 maxlen: 24
217.154.72.0/23 maxlen: 23
217.154.90.0/24 maxlen: 24
217.154.96.0/24 maxlen: 24
217.154.103.0/24 maxlen: 24
217.154.104.0/24 maxlen: 24
217.154.109.0/24 maxlen: 24
217.154.110.0/23 maxlen: 23
217.154.122.0/23 maxlen: 23
217.154.127.0/24 maxlen: 24
217.154.131.0/24 maxlen: 24
217.154.132.0/22 maxlen: 22
217.154.137.0/24 maxlen: 24
217.154.138.0/24 maxlen: 24
217.154.141.0/24 maxlen: 24
217.154.151.0/24 maxlen: 24
217.154.157.0/24 maxlen: 24
217.154.158.0/24 maxlen: 24
217.154.176.0/24 maxlen: 24
217.154.187.0/24 maxlen: 24
217.154.209.0/24 maxlen: 24
217.154.219.0/24 maxlen: 24
217.154.221.0/24 maxlen: 24
217.154.230.0/24 maxlen: 24
217.154.246.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:b6:fb:9c:d9:0f:61:be:27:8f:cc:69:1b:a0:1b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Feb 20 08:51:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51713893d91a8719fba089527d3d35e865c86f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:dd:46:d8:5d:64:20:4f:60:eb:09:b9:a7:
fb:ad:5c:cd:b9:5e:a1:43:66:9f:60:bb:4b:5e:03:
eb:76:f4:76:06:0d:ac:7e:7c:87:ef:bd:eb:e3:68:
88:73:6f:01:80:16:ee:44:b7:01:ef:fb:62:42:32:
97:8e:2f:99:8a:66:93:b6:82:af:12:3f:9c:5e:76:
cc:9a:d3:b9:13:01:21:d0:d2:02:92:aa:ec:c9:e6:
df:d0:f8:a1:82:65:e8:e3:8c:58:40:f8:3e:f7:c7:
1b:ec:19:73:e8:e8:a2:86:22:84:0f:d7:ac:e5:56:
a0:8a:d2:42:df:6d:99:d6:dc:a9:07:5b:c6:f1:93:
cc:30:3e:c7:e8:72:cc:a1:6e:bb:58:41:76:2a:11:
bb:a7:6a:af:32:25:d1:ba:d8:91:6a:82:6b:8a:6c:
7d:73:c3:50:97:b1:b6:42:81:71:1a:a2:36:7f:2b:
61:bd:6c:1b:64:55:e7:7f:74:cf:12:e8:c9:a5:85:
36:da:00:24:cc:fe:d0:43:0f:01:97:fc:0f:d2:4f:
8f:f4:28:5d:86:b1:ce:e5:73:9f:b2:cf:ba:8e:e4:
d1:2b:28:99:42:eb:2b:94:72:4a:a7:43:33:ca:92:
1c:a1:88:96:aa:98:79:c3:6c:39:a7:18:9d:4c:0c:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:71:38:93:D9:1A:87:19:FB:A0:89:52:7D:3D:35:E8:65:C8:6F:50
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/UXE4k9kahxn7oIlSfT016GXIb1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.128.0-62.164.199.255
62.169.150.0/24
62.169.154.0/24
62.169.156.0/24
86.54.0.0/16
193.108.169.0/24
194.62.44.0/22
194.164.2.0/24
194.164.12.0/24
194.164.38.0/24
194.164.80.0/22
194.164.85.0-194.164.86.255
194.164.97.0/24
194.164.100.0/24
194.164.104.0/24
194.164.106.0/24
194.164.114.0/24
194.164.140.0-194.164.144.255
194.164.181.0/24
194.164.223.0/24
194.164.231.0-194.164.232.255
194.164.238.0/24
194.164.241.0-194.164.243.255
194.164.247.0/24
195.26.224.0/19
195.184.228.0/23
195.184.236.0/24
195.184.245.0/24
195.200.0.0/19
212.32.28.0/24
212.32.42.0/24
212.32.44.0/23
212.32.55.0/24
212.32.66.0/24
212.47.80.0/23
212.47.84.0/24
212.56.57.0/24
213.254.171.0/24
213.254.178.0/24
213.254.185.0/24
217.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:91:4e:b4:c2:47:2d:43:e6:ce:a1:42:4c:a2:7e:13:df:e2:
a4:4e:8d:68:b8:5e:e2:f2:93:68:89:de:8a:2f:52:7f:39:f1:
8d:c1:fc:93:76:e6:38:6a:d6:dc:97:53:e1:bd:08:9a:21:51:
96:60:38:90:b2:f4:ec:a9:d7:36:ac:94:bc:14:bd:14:bc:6e:
37:a5:3e:72:08:72:db:9c:1f:80:dc:2a:ba:c2:9e:8b:94:46:
47:a8:8c:c6:43:3e:9a:e3:f0:14:fe:51:5e:95:0f:2f:41:7c:
4f:a5:02:ed:56:a8:03:3a:96:ff:76:4d:2d:fd:77:ff:41:e4:
59:20:28:7c:00:7c:73:2c:92:e6:de:68:6c:13:52:0c:9e:e2:
b8:ac:d4:50:d3:d4:4c:8d:48:62:31:de:77:86:f5:05:ac:b6:
fd:3d:17:31:5a:75:9c:69:1f:d8:f2:d4:b1:fe:6e:e1:3f:93:
61:38:fa:e9:c3:2c:03:20:9b:53:41:d7:14:bf:bc:62:81:06:
d6:65:7d:84:1f:96:44:3e:25:68:c5:1b:e7:d0:96:2a:fb:e5:
18:e2:25:62:d9:6e:d4:3a:7b:39:18:95:ae:11:89:92:b7:44:
53:90:42:15:a3:ff:04:28:a8:5d:d6:37:d9:e0:db:72:ce:6b:
3f:7f:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:38:01 2025 by rpki-client