Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/RftdFvKgVTQqoeF6UiC3GpaYt9c.roa
File: RftdFvKgVTQqoeF6UiC3GpaYt9c.roa (raw, json)
Hash identifier: PbPQ8GC89SdTndkTOB0QEcNtBGRYfO6WBjB1FKqmPPs=
Subject key identifier: 45:FB:5D:16:F2:A0:55:34:2A:A1:E1:7A:52:20:B7:1A:96:98:B7:D7
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D4DBA77EC096B921D2B4DEE047D11
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/RftdFvKgVTQqoeF6UiC3GpaYt9c.roa
Signing time: Mon 01 Jan 2024 00:29:52 +0000
ROA not before: Mon 01 Jan 2024 00:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8866
IP address blocks: 90.154.128.0/17 maxlen: 24
62.73.64.0/18 maxlen: 24
83.228.61.0/24 maxlen: 24
84.40.64.0/18 maxlen: 24
84.40.89.0/24 maxlen: 24
46.249.64.0/19 maxlen: 24
85.187.46.0/23 maxlen: 24
85.187.64.0/18 maxlen: 24
212.72.199.0/24 maxlen: 24
212.72.198.0/24 maxlen: 24
212.72.202.0/23 maxlen: 24
212.72.212.0/24 maxlen: 24
89.25.72.0/22 maxlen: 24
85.187.22.0/23 maxlen: 24
85.187.24.0/21 maxlen: 24
85.187.32.0/21 maxlen: 24
83.228.0.0/17 maxlen: 24
79.100.0.0/16 maxlen: 24
78.154.0.0/19 maxlen: 24
212.72.214.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
212.5.128.0/19 maxlen: 24
212.39.64.0/19 maxlen: 24
82.146.0.0/22 maxlen: 24
82.146.6.0/23 maxlen: 24
82.146.11.0/24 maxlen: 24
82.146.24.0/23 maxlen: 24
77.85.176.0/20 maxlen: 24
77.85.174.0/24 maxlen: 24
77.85.196.0/24 maxlen: 24
77.85.198.0/24 maxlen: 24
89.25.64.0/21 maxlen: 24
82.146.28.0/23 maxlen: 24
82.146.31.0/24 maxlen: 24
77.85.128.0/19 maxlen: 24
87.126.0.0/16 maxlen: 24
77.85.160.0/21 maxlen: 24
77.85.168.0/22 maxlen: 24
77.85.172.0/23 maxlen: 24
95.43.206.0/24 maxlen: 24
95.43.220.0/22 maxlen: 24
213.91.154.0/24 maxlen: 24
46.10.193.0/24 maxlen: 24
77.85.0.0/16 maxlen: 24
213.91.128.0/17 maxlen: 24
46.10.166.0/23 maxlen: 24
84.238.134.0/23 maxlen: 24
84.238.136.0/22 maxlen: 24
84.238.140.0/23 maxlen: 24
84.238.144.0/21 maxlen: 24
84.238.142.0/23 maxlen: 24
84.238.152.0/22 maxlen: 24
84.238.156.0/22 maxlen: 24
84.238.165.0/24 maxlen: 24
84.238.168.0/21 maxlen: 24
84.238.167.0/24 maxlen: 24
84.238.178.0/23 maxlen: 24
62.176.124.54/32 maxlen: 32
84.238.180.0/22 maxlen: 24
82.137.64.0/18 maxlen: 24
95.43.0.0/17 maxlen: 24
37.157.136.0/21 maxlen: 24
213.16.32.0/19 maxlen: 24
37.157.160.0/19 maxlen: 24
84.238.128.0/22 maxlen: 24
46.10.0.0/16 maxlen: 24
84.238.192.0/22 maxlen: 24
84.238.204.0/22 maxlen: 24
87.116.64.0/22 maxlen: 24
87.116.72.0/21 maxlen: 24
151.237.140.0/23 maxlen: 24
87.116.82.0/24 maxlen: 24
213.130.92.0/23 maxlen: 24
213.130.95.0/24 maxlen: 24
213.130.64.0/22 maxlen: 24
213.130.78.0/23 maxlen: 24
213.130.76.0/23 maxlen: 24
213.130.77.0/24 maxlen: 24
62.176.64.0/19 maxlen: 24
94.236.229.0/24 maxlen: 24
94.236.231.0/24 maxlen: 24
94.236.228.0/24 maxlen: 24
94.236.234.0/24 maxlen: 24
94.236.235.0/24 maxlen: 24
94.236.238.0/24 maxlen: 24
94.236.240.0/20 maxlen: 24
62.176.96.0/19 maxlen: 24
94.236.163.0/24 maxlen: 24
87.243.96.0/21 maxlen: 24
94.236.164.0/24 maxlen: 24
94.236.160.0/24 maxlen: 24
94.236.161.0/24 maxlen: 24
94.236.160.0/19 maxlen: 24
87.243.104.0/21 maxlen: 24
94.236.172.0/24 maxlen: 24
94.236.170.0/23 maxlen: 24
94.236.179.0/24 maxlen: 24
87.243.112.0/22 maxlen: 22
94.236.173.0/24 maxlen: 24
94.236.174.0/24 maxlen: 24
94.236.175.0/24 maxlen: 24
94.236.176.0/23 maxlen: 24
87.243.116.0/22 maxlen: 24
94.236.184.0/21 maxlen: 24
94.236.180.0/22 maxlen: 24
87.243.120.0/21 maxlen: 24
94.236.204.0/24 maxlen: 24
94.236.205.0/24 maxlen: 24
87.116.66.160/32 maxlen: 32
95.42.0.0/15 maxlen: 24
62.176.117.0/24 maxlen: 24
217.75.139.0/24 maxlen: 24
217.75.143.0/24 maxlen: 24
94.155.64.0/20 maxlen: 24
94.155.80.0/22 maxlen: 24
185.20.156.0/22 maxlen: 24
83.148.64.0/18 maxlen: 24
95.87.192.0/18 maxlen: 24
94.236.144.0/24 maxlen: 24
94.236.144.0/21 maxlen: 24
94.236.149.0/24 maxlen: 24
94.236.151.0/24 maxlen: 24
94.236.146.0/24 maxlen: 24
87.243.80.0/20 maxlen: 24
94.236.152.0/24 maxlen: 24
94.236.152.0/21 maxlen: 24
94.236.153.0/24 maxlen: 24
94.236.154.0/24 maxlen: 24
94.155.112.0/21 maxlen: 24
94.155.120.0/22 maxlen: 24
2a01:5a8:2:5::/64 maxlen: 64
2a01:5a8:1:ffff::/64 maxlen: 64
2a01:5a8:2:4::/64 maxlen: 64
2a00:e40::/32 maxlen: 64
2a01:5a8::/32 maxlen: 128
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4d:ba:77:ec:09:6b:92:1d:2b:4d:ee:04:7d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45fb5d16f2a055342aa1e17a5220b71a9698b7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:46:0f:e7:a4:13:92:6e:7d:33:a6:fe:a9:
c6:93:99:f3:29:09:2f:1d:8b:b7:43:3f:c7:5d:3f:
7d:0a:65:d2:13:86:94:6f:ee:b5:45:59:82:bb:e1:
63:b1:7b:2a:09:99:4d:2c:f8:8a:03:4a:fe:47:f8:
1d:1a:38:f3:6f:35:9b:c1:c2:5f:b9:71:ce:e9:10:
b1:51:ac:20:66:90:b1:94:e5:6d:e8:82:2a:c5:ee:
04:dd:f9:64:5c:c4:92:f3:ff:b6:d6:77:bc:8a:f2:
dd:c3:20:f5:e3:3d:f8:c6:4d:1c:3d:60:d4:b0:7b:
c1:50:65:ce:41:7a:75:e7:b2:54:92:c1:84:72:c0:
3a:77:18:83:2a:e8:41:ec:ab:0a:4a:cf:a2:74:fc:
b5:2c:bb:61:8a:e0:19:4e:ac:a1:65:35:2b:24:79:
e5:95:ea:f5:0d:16:4f:81:53:35:65:eb:27:4c:7b:
f7:c2:c2:be:f0:bb:a5:04:3d:8e:ac:68:16:40:f0:
a0:06:3a:38:c5:bc:35:db:cc:53:ab:c6:e6:3b:ec:
03:27:a5:e9:da:d2:88:f2:ea:de:23:d1:ba:0e:3c:
df:73:ff:30:93:21:c4:b5:f8:55:cc:4e:55:da:c2:
f8:e7:47:63:e6:8f:e4:35:0e:c1:f7:44:d5:c7:99:
18:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FB:5D:16:F2:A0:55:34:2A:A1:E1:7A:52:20:B7:1A:96:98:B7:D7
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/RftdFvKgVTQqoeF6UiC3GpaYt9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.136.0/21
37.157.160.0/19
46.10.0.0/16
46.249.64.0/19
62.73.64.0/18
62.176.64.0/18
77.85.0.0/16
78.154.0.0/19
79.100.0.0/16
82.137.64.0/18
82.146.0.0/22
82.146.6.0/23
82.146.11.0/24
82.146.24.0/23
82.146.28.0/23
82.146.31.0/24
83.148.64.0/18
83.228.0.0/17
84.40.64.0/18
84.238.128.0/22
84.238.134.0-84.238.159.255
84.238.165.0/24
84.238.167.0-84.238.175.255
84.238.178.0-84.238.183.255
84.238.192.0/22
84.238.204.0/22
85.187.22.0-85.187.39.255
85.187.46.0/23
85.187.64.0/18
87.116.64.0/22
87.116.72.0/21
87.116.82.0/24
87.126.0.0/16
87.243.80.0-87.243.127.255
89.25.64.0-89.25.75.255
90.154.128.0/17
94.155.64.0-94.155.83.255
94.155.112.0-94.155.123.255
94.236.144.0-94.236.191.255
94.236.204.0/23
94.236.228.0/23
94.236.231.0/24
94.236.234.0/23
94.236.238.0/24
94.236.240.0/20
95.42.0.0/15
95.87.192.0/18
151.237.140.0/23
185.20.156.0/22
212.5.128.0/19
212.39.64.0/19
212.72.198.0/23
212.72.202.0/23
212.72.212.0/24
212.72.214.0/24
212.72.221.0/24
213.16.32.0/19
213.91.128.0/17
213.130.64.0/22
213.130.76.0/22
213.130.92.0/23
213.130.95.0/24
217.75.139.0/24
217.75.143.0/24
IPv6:
2a00:e40::/32
2a01:5a8::/32
Signature Algorithm: sha256WithRSAEncryption
4d:59:f1:82:33:a2:5a:0c:19:07:21:35:c5:13:2b:65:8a:c6:
0b:43:27:bf:49:ed:d8:2d:fe:43:40:38:38:bc:f1:a2:03:a9:
07:59:6b:31:a5:bb:e4:3a:3d:9f:c8:6e:c5:c5:cf:6b:bf:a7:
21:f2:a3:1e:20:23:74:87:1d:eb:74:a9:4b:67:01:68:a9:e8:
4e:a6:1a:b6:57:60:fa:b1:21:31:af:bc:49:1f:f7:4b:20:47:
97:c9:0c:4c:47:a4:36:6a:ee:20:22:1a:7c:48:28:85:1e:b1:
fa:6d:00:83:ce:b3:f7:55:cc:74:40:6c:6f:3b:db:ff:b9:98:
4a:c1:13:1c:d8:e6:96:81:c3:fe:1e:ac:04:3f:79:5f:39:f3:
61:30:0b:36:dc:f1:b3:a6:97:e8:7c:44:08:9b:7e:de:87:46:
88:ad:cb:cb:83:2b:20:b9:6f:81:e2:83:62:f9:c9:56:08:05:
c9:68:c2:6e:e6:0c:8e:a7:4d:95:0e:9c:0b:cd:36:0b:c7:b2:
64:18:ce:28:10:83:ab:22:ec:62:50:05:e9:2c:d9:1f:fb:a1:
b8:a2:f0:f2:65:14:22:53:c3:98:44:f0:cf:d0:8e:23:93:44:
c5:7e:45:2f:0c:ea:cd:8d:35:7a:e5:1a:19:ac:4f:14:04:51:
71:bc:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org