Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9AA-NfkGjoCsSVGOEByaq3ZuF-o.roa
File: 9AA-NfkGjoCsSVGOEByaq3ZuF-o.roa (raw, json)
Hash identifier: dP23SFGLWpX3Reshb+yIQK5fssuotOp5zift3H00MZ8=
Subject key identifier: F4:00:3E:35:F9:06:8E:80:AC:49:51:8E:10:1C:9A:AB:76:6E:17:EA
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0185954540AC188C71CB49A48635F01248DD
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9AA-NfkGjoCsSVGOEByaq3ZuF-o.roa
Signing time: Mon 09 Jan 2023 06:43:41 +0000
ROA not before: Mon 09 Jan 2023 06:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.24.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.9.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.0.0/23 maxlen: 23
46.161.26.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
46.161.30.0/24 maxlen: 24
46.161.28.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
46.161.29.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.42.0/24 maxlen: 24
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 24
46.161.11.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
37.139.51.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.244.0/23 maxlen: 23
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
185.238.152.0/22 maxlen: 22
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
31.184.200.0/22 maxlen: 22
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.232.0/22 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
37.9.52.0/22 maxlen: 22
91.243.93.0/24 maxlen: 24
5.8.52.0/23 maxlen: 23
5.8.54.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.56.0/24 maxlen: 24
5.8.57.0/24 maxlen: 24
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.189.248.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/22 maxlen: 22
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.220.0/23 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.222.0/24 maxlen: 24
5.101.80.0/22 maxlen: 22
5.188.233.0/24 maxlen: 24
5.101.84.0/22 maxlen: 22
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.188.164.0/24 maxlen: 24
5.188.165.0/24 maxlen: 24
5.101.36.0/22 maxlen: 22
5.101.32.0/22 maxlen: 24
5.188.204.0/23 maxlen: 23
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.44.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.56.0/22 maxlen: 22
91.243.52.0/22 maxlen: 22
91.243.62.0/23 maxlen: 23
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:45:40:ac:18:8c:71:cb:49:a4:86:35:f0:12:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 9 06:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4003e35f9068e80ac49518e101c9aab766e17ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:59:fd:bc:0f:cf:56:3f:4f:f7:43:a3:79:
cc:63:37:3e:0d:32:40:b2:7e:f5:d1:91:84:f8:ec:
ba:4d:b9:80:29:5b:56:f3:db:6a:88:8e:9d:8b:03:
4a:ea:f6:7e:3d:f6:e8:4a:fa:ec:94:98:43:0d:7e:
30:9d:26:6f:9f:e1:a0:ff:75:c5:5d:1c:2b:68:8b:
9b:a8:e8:50:c7:a3:4b:fc:07:1f:13:63:18:5b:02:
a0:61:66:e3:90:62:8a:e7:46:37:68:53:01:6a:47:
bf:c4:a2:f9:61:c7:a4:ea:7f:e3:ed:26:a7:1e:4b:
d3:77:30:2d:09:17:6b:59:a7:c8:05:ff:72:fb:af:
2a:f7:be:a0:60:fd:6e:32:c8:e3:97:9a:54:80:aa:
13:30:12:8d:38:a3:46:70:5f:dd:18:82:23:b1:b1:
a6:f4:36:36:c2:ae:55:6a:0c:76:be:e8:81:29:ec:
de:eb:24:cd:ee:85:a1:92:eb:51:36:b8:ce:18:9b:
e4:3b:e6:04:a9:b7:74:eb:eb:2c:be:45:33:93:fe:
da:ba:49:f4:45:ad:9d:37:77:58:8b:67:c0:de:23:
29:eb:96:90:8b:bd:f1:df:3a:7d:9a:dd:e9:ad:8e:
28:a1:28:2e:15:77:e8:ac:15:55:92:d8:da:f8:8d:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:00:3E:35:F9:06:8E:80:AC:49:51:8E:10:1C:9A:AB:76:6E:17:EA
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9AA-NfkGjoCsSVGOEByaq3ZuF-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0-5.8.57.255
5.8.59.0-5.8.61.255
5.8.65.0/24
5.101.0.0/21
5.101.32.0/21
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.9.0-5.188.11.255
5.188.44.0-5.188.49.255
5.188.60.0-5.188.62.255
5.188.164.0-5.188.166.255
5.188.204.0/23
5.188.207.0-5.188.211.255
5.188.220.0/22
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.184.0/24
31.44.188.0/22
31.184.192.0-31.184.203.255
31.184.228.0/23
31.184.231.0-31.184.235.255
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.9.52.0/22
37.139.49.0/24
37.139.51.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/23
46.161.14.0/23
46.161.20.0-46.161.26.255
46.161.28.0-46.161.30.255
46.161.32.0/22
46.161.42.0/24
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.44.0-91.243.63.255
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
146.185.244.0/23
185.238.152.0/22
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
c4:02:7d:15:ff:68:1b:92:aa:00:46:30:8d:17:42:f2:3b:25:
bd:5c:0f:41:f6:42:91:c7:95:ce:79:9c:8a:bc:bd:f6:d1:11:
9e:1c:84:1a:9b:af:c5:8b:cc:29:84:e3:72:ff:27:00:86:44:
82:ec:1e:bb:93:0d:b1:79:bc:8f:17:07:ee:08:f6:49:a8:f2:
d1:69:3e:45:75:fd:1a:2c:28:96:92:da:29:b5:30:2a:d7:99:
ff:81:22:b8:9e:e6:48:3c:2d:0a:cc:c4:71:00:f2:72:24:50:
63:80:9d:80:ba:df:41:72:74:52:6d:c4:d3:0a:0a:75:72:31:
8d:36:99:92:06:f1:0f:7d:09:4a:e4:38:bf:5a:6a:1f:04:d5:
d9:15:cf:d5:12:6d:53:3f:fc:b9:62:7f:af:9e:ca:25:b0:fe:
34:73:7a:9e:06:2f:02:e8:7c:64:37:b1:73:87:a4:6c:44:ef:
be:b4:e1:de:ed:b6:e3:89:45:31:a3:4a:1e:d6:48:2d:f8:52:
a0:be:e3:97:65:6a:98:57:ab:1d:d7:ce:53:c6:cf:6f:0b:e9:
29:e9:7f:3a:06:95:ff:93:4f:8e:dd:46:82:13:13:c7:c9:af:
1c:c0:64:4d:49:19:0c:a4:c1:36:29:1e:b4:9f:81:11:d1:cc:
87:99:67:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:42 2023 by rpki-client on console.sobornost.net