Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/1wWdGNmSbhGhxNFqdgdWXdrIIVc.roa
File: 1wWdGNmSbhGhxNFqdgdWXdrIIVc.roa (raw, json)
Hash identifier: hrOQli1VSdQ3MYrCjQw5G80kFSuRY1HHez+4lJaL0KY=
Subject key identifier: D7:05:9D:18:D9:92:6E:11:A1:C4:D1:6A:76:07:56:5D:DA:C8:21:57
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 0183AB2E7BC65D4FCB70AD37D7D6116973A5
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/1wWdGNmSbhGhxNFqdgdWXdrIIVc.roa
Signing time: Thu 06 Oct 2022 02:44:53 +0000
ROA not before: Thu 06 Oct 2022 02:44:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8492
IP address blocks: 37.221.206.0/24 maxlen: 24
37.221.203.0/24 maxlen: 24
37.221.204.0/23 maxlen: 23
37.221.200.0/23 maxlen: 23
85.114.0.0/19 maxlen: 19
92.255.44.0/24 maxlen: 24
92.255.41.0/24 maxlen: 24
185.241.176.0/22 maxlen: 22
92.255.40.0/24 maxlen: 24
92.255.45.0/24 maxlen: 24
92.255.46.0/24 maxlen: 24
92.255.47.0/24 maxlen: 24
95.161.144.0/21 maxlen: 21
145.255.232.0/24 maxlen: 24
145.255.233.0/24 maxlen: 24
95.161.152.0/22 maxlen: 24
95.161.156.0/22 maxlen: 22
145.255.236.0/22 maxlen: 22
145.255.234.0/23 maxlen: 23
95.161.164.0/22 maxlen: 22
95.161.160.0/19 maxlen: 19
87.249.55.0/24 maxlen: 24
62.32.64.0/24 maxlen: 24
62.32.66.0/23 maxlen: 23
62.32.70.0/24 maxlen: 24
62.32.68.0/23 maxlen: 23
62.32.75.0/24 maxlen: 24
62.32.76.0/24 maxlen: 24
62.32.73.0/24 maxlen: 24
62.32.74.0/24 maxlen: 24
62.32.84.0/23 maxlen: 23
62.32.83.0/24 maxlen: 24
62.32.91.0/24 maxlen: 24
62.32.89.0/24 maxlen: 24
62.32.90.0/24 maxlen: 24
62.32.88.0/24 maxlen: 24
62.32.94.0/24 maxlen: 24
80.79.64.0/21 maxlen: 21
80.79.76.0/24 maxlen: 24
80.79.72.0/22 maxlen: 22
80.79.79.0/24 maxlen: 24
185.119.0.0/22 maxlen: 22
217.79.4.0/23 maxlen: 23
217.79.0.0/22 maxlen: 22
217.79.10.0/23 maxlen: 23
217.79.8.0/24 maxlen: 24
217.79.9.0/24 maxlen: 24
217.79.6.0/23 maxlen: 23
217.79.15.0/24 maxlen: 24
217.79.14.0/24 maxlen: 24
217.79.12.0/23 maxlen: 23
149.126.16.0/22 maxlen: 22
149.126.22.0/24 maxlen: 24
149.126.23.0/24 maxlen: 24
149.126.20.0/23 maxlen: 23
37.77.132.0/24 maxlen: 24
37.77.130.0/23 maxlen: 23
89.104.118.0/24 maxlen: 24
89.104.115.0/24 maxlen: 24
37.77.129.0/24 maxlen: 24
37.77.133.0/24 maxlen: 24
37.77.134.0/23 maxlen: 23
46.231.208.0/24 maxlen: 24
46.231.209.0/24 maxlen: 24
46.231.212.0/23 maxlen: 23
46.231.210.0/23 maxlen: 23
46.231.215.0/24 maxlen: 24
46.231.214.0/23 maxlen: 23
46.231.214.0/24 maxlen: 24
93.191.58.0/24 maxlen: 24
93.191.63.0/24 maxlen: 24
93.191.60.0/24 maxlen: 24
185.171.192.0/22 maxlen: 22
89.104.97.0/24 maxlen: 24
178.16.144.0/22 maxlen: 22
178.16.152.0/22 maxlen: 22
178.16.150.0/24 maxlen: 24
178.16.151.0/24 maxlen: 24
178.16.148.0/23 maxlen: 23
178.16.158.0/23 maxlen: 23
178.16.156.0/24 maxlen: 24
185.244.132.0/22 maxlen: 22
80.250.80.0/24 maxlen: 24
80.250.88.0/21 maxlen: 21
80.250.87.0/24 maxlen: 24
185.7.232.0/22 maxlen: 22
46.34.136.0/21 maxlen: 21
79.142.80.0/21 maxlen: 21
46.34.134.0/24 maxlen: 24
79.142.88.0/22 maxlen: 22
46.34.148.0/22 maxlen: 22
79.142.92.0/24 maxlen: 24
185.102.10.0/24 maxlen: 24
185.102.8.0/22 maxlen: 22
185.81.220.0/22 maxlen: 22
95.161.232.0/22 maxlen: 22
95.161.228.0/22 maxlen: 22
95.161.236.0/22 maxlen: 22
79.134.192.0/24 maxlen: 24
79.134.196.0/23 maxlen: 23
79.134.198.0/23 maxlen: 23
79.134.194.0/23 maxlen: 23
79.134.193.0/24 maxlen: 24
95.161.180.0/22 maxlen: 22
79.134.200.0/21 maxlen: 21
95.161.192.0/22 maxlen: 22
95.161.192.0/19 maxlen: 19
95.161.188.0/22 maxlen: 22
79.134.213.0/24 maxlen: 24
79.134.212.0/24 maxlen: 24
79.134.208.0/22 maxlen: 22
79.134.214.0/23 maxlen: 23
79.134.216.0/22 maxlen: 22
95.161.213.0/24 maxlen: 24
79.134.222.0/23 maxlen: 23
79.134.220.0/23 maxlen: 23
95.161.214.0/23 maxlen: 23
95.161.218.0/23 maxlen: 23
95.161.216.0/23 maxlen: 23
95.161.220.0/24 maxlen: 24
89.223.1.0/24 maxlen: 24
46.229.210.0/23 maxlen: 23
46.229.210.0/24 maxlen: 24
46.229.211.0/24 maxlen: 24
46.229.208.0/23 maxlen: 23
46.229.208.0/22 maxlen: 22
2a01:590::/32 maxlen: 32
2a05:a400::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:2e:7b:c6:5d:4f:cb:70:ad:37:d7:d6:11:69:73:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Oct 6 02:44:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7059d18d9926e11a1c4d16a7607565ddac82157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:19:e8:04:63:26:71:0c:bc:65:23:91:ba:
3c:de:53:63:e7:ed:33:bf:f9:49:79:5f:ce:79:14:
83:09:97:46:d2:6f:69:8c:de:ba:cc:3c:63:03:d0:
3f:51:7d:f1:58:20:3f:77:b1:45:7a:b0:79:8e:95:
77:1d:92:4f:f1:9e:50:96:fb:e7:cb:e6:46:bc:20:
56:f4:97:3b:56:bd:66:e1:26:78:3c:1b:a0:52:31:
40:62:76:e3:19:c7:57:ea:ca:de:23:aa:f9:b1:a1:
5f:85:f7:8f:e4:c5:7f:eb:3d:5d:85:e4:3b:43:ba:
54:85:e0:27:a5:df:5f:85:4d:b6:3c:0b:aa:88:22:
ea:65:44:40:65:da:27:5b:7f:0f:28:b0:30:c6:f3:
f4:47:7c:ce:78:25:cb:ed:4f:43:42:ff:63:24:d2:
51:3e:78:5c:f5:d2:2f:3f:88:ad:81:1a:21:cf:64:
66:0e:a8:b2:ab:fa:5a:57:8a:92:f2:a8:a1:8f:e7:
ff:ef:ed:a0:a3:bf:53:f2:ea:ca:43:1a:c5:4d:42:
71:3b:3a:bd:1b:f9:96:0b:df:05:75:18:ba:af:45:
ca:33:a6:cf:54:47:b4:d3:cd:5d:e0:dd:a5:dd:22:
1d:3a:73:5b:fe:a6:5e:c1:73:59:4e:e4:89:af:c7:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:05:9D:18:D9:92:6E:11:A1:C4:D1:6A:76:07:56:5D:DA:C8:21:57
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/1wWdGNmSbhGhxNFqdgdWXdrIIVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.129.0-37.77.135.255
37.221.200.0/23
37.221.203.0-37.221.206.255
46.34.134.0/24
46.34.136.0/21
46.34.148.0/22
46.229.208.0/22
46.231.208.0/21
62.32.64.0/24
62.32.66.0-62.32.70.255
62.32.73.0-62.32.76.255
62.32.83.0-62.32.85.255
62.32.88.0/22
62.32.94.0/24
79.134.192.0/19
79.142.80.0-79.142.92.255
80.79.64.0-80.79.76.255
80.79.79.0/24
80.250.80.0/24
80.250.87.0-80.250.95.255
85.114.0.0/19
87.249.55.0/24
89.104.97.0/24
89.104.115.0/24
89.104.118.0/24
89.223.1.0/24
92.255.40.0/23
92.255.44.0/22
93.191.58.0/24
93.191.60.0/24
93.191.63.0/24
95.161.144.0-95.161.223.255
95.161.228.0-95.161.239.255
145.255.232.0/21
149.126.16.0/21
178.16.144.0-178.16.156.255
178.16.158.0/23
185.7.232.0/22
185.81.220.0/22
185.102.8.0/22
185.119.0.0/22
185.171.192.0/22
185.241.176.0/22
185.244.132.0/22
217.79.0.0/20
IPv6:
2a01:590::/32
2a05:a400::/29
Signature Algorithm: sha256WithRSAEncryption
0a:0f:5d:ee:d4:8c:3c:06:35:e3:d4:a7:89:37:3e:49:cd:e1:
d4:b1:9e:e7:e1:c3:1e:aa:af:38:45:b9:61:e4:ce:f3:a7:ec:
75:70:f0:66:0b:4b:52:4a:db:da:76:81:07:a7:fd:69:5f:48:
e9:13:11:2b:23:3d:2e:13:52:0d:45:b2:ff:2e:d1:18:c0:fd:
c0:ce:0b:d8:56:c4:b2:7d:88:36:e7:4f:06:90:15:3d:30:28:
a0:16:c9:b2:49:d0:bb:e3:d2:5b:34:59:f2:65:c8:04:0e:c9:
09:5e:01:ba:4b:bc:d8:4b:72:2d:38:4d:2d:62:b7:44:26:4a:
a8:c1:ca:4e:00:51:b5:a7:ee:0d:c0:0e:2b:ff:99:35:12:d8:
2a:42:4e:c0:a7:60:87:60:e0:b7:1e:82:09:0f:1b:c7:b1:bb:
7f:48:68:4d:c0:3b:4d:1c:8e:d5:32:bf:26:04:59:02:e4:cd:
16:b6:bf:f6:3c:be:3a:5a:ef:69:58:b0:f5:64:d6:c4:4a:e0:
09:bd:f0:f8:d4:6e:68:ea:93:31:41:82:d6:30:f1:5f:dd:b8:
56:7c:58:5a:e1:d0:65:e1:98:58:b4:96:3d:3a:6a:5b:00:18:
42:a3:35:14:55:55:b6:52:1a:9b:89:0d:47:c4:36:ca:4d:69:
b6:e2:84:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:19 2024 by rpki-client on console-ams.rpki-client.org