Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/u-vGkONhR1YaU_BPeiRfjkNXdjw.roa
File: u-vGkONhR1YaU_BPeiRfjkNXdjw.roa (raw, json)
Hash identifier: SVTpebT3N1ore0CykYku+kNzH1Ngypfn5R5mHd+vwRo=
Subject key identifier: BB:EB:C6:90:E3:61:47:56:1A:53:F0:4F:7A:24:5F:8E:43:57:76:3C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187E149CF5452CDAA7AA46BD1DD396E3D99
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/u-vGkONhR1YaU_BPeiRfjkNXdjw.roa
Signing time: Wed 03 May 2023 11:05:23 +0000
ROA not before: Wed 03 May 2023 11:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.15.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.25.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.100.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.84.0/24 maxlen: 24
195.133.91.0/24 maxlen: 24
195.133.90.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.64.0/22 maxlen: 22
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.56.0/23 maxlen: 23
195.58.53.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.35.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.209.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.173.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.87.255.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:49:cf:54:52:cd:aa:7a:a4:6b:d1:dd:39:6e:3d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 3 11:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbebc690e36147561a53f04f7a245f8e4357763c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:30:00:b0:d2:84:fc:36:4c:60:39:e5:7b:71:
fc:6d:2d:d6:8a:22:86:1c:f0:30:5a:ec:7d:c3:d9:
4b:10:a1:0b:d4:ae:33:c0:3d:69:8a:d0:90:5a:cc:
c6:61:18:a1:cf:00:22:49:45:09:3b:e0:52:ad:04:
9e:94:5d:51:59:3c:5b:16:3b:13:ca:9c:6b:b4:6e:
15:cc:5f:59:e6:6e:24:f2:ce:4e:a0:dc:9c:3e:04:
b6:b7:7b:ad:f5:26:79:11:ad:f9:9f:1d:1d:75:f7:
e5:24:3b:d0:7c:6f:8e:8d:41:d9:79:9e:f8:ca:d5:
8d:04:29:3a:fb:43:28:72:5c:bc:26:56:6f:58:f8:
c7:a9:15:4a:be:55:72:f6:16:3d:af:11:57:00:2c:
e7:f3:2b:ae:b6:cc:d1:bc:7d:4c:21:29:ea:f0:21:
e6:9d:1a:e1:f8:34:77:22:b7:f4:31:ba:14:fa:f1:
c4:7c:bf:64:78:4d:70:cc:7f:ef:03:75:60:14:90:
98:40:1b:d9:b5:b7:21:c6:81:ad:42:48:cb:77:fb:
fa:25:30:ec:8a:06:b1:41:a9:4a:45:0c:2f:0b:55:
fa:f4:1a:69:c1:ea:7d:a3:ae:ae:6b:3e:c7:a9:16:
6e:97:26:b4:89:b4:1f:f6:f5:1c:b4:41:41:89:9e:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:C6:90:E3:61:47:56:1A:53:F0:4F:7A:24:5F:8E:43:57:76:3C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/u-vGkONhR1YaU_BPeiRfjkNXdjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0-192.124.191.255
193.108.115.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.35.0-193.124.36.255
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.124.0/24
193.124.133.0/24
193.124.201.0-193.124.202.255
193.124.204.0/24
193.124.226.0/24
194.58.40.0/24
194.58.42.0/24
194.58.47.0/24
194.58.56.0/23
194.58.59.0/24
194.58.154.0/24
194.58.223.0/24
194.85.251.0/24
194.87.1.0-194.87.3.255
194.87.6.0/23
194.87.10.0-194.87.12.255
194.87.15.0-194.87.18.255
194.87.22.0-194.87.27.255
194.87.37.0/24
194.87.43.0-194.87.44.255
194.87.51.0/24
194.87.56.0/24
194.87.67.0/24
194.87.73.0/24
194.87.77.0-194.87.78.255
194.87.83.0/24
194.87.100.0/24
194.87.104.0/23
194.87.114.0/23
194.87.119.0/24
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.173.255
194.87.176.0/23
194.87.179.0/24
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.209.0/24
194.87.221.0-194.87.222.255
194.87.227.0/24
194.87.240.0/24
194.87.243.0/24
194.87.255.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.51.0/24
195.58.53.0-195.58.54.255
195.58.56.0/24
195.58.58.0/23
195.58.61.0-195.58.63.255
195.133.0.0/24
195.133.19.0-195.133.20.255
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.40.0/23
195.133.64.0/22
195.133.74.0/24
195.133.76.0/24
195.133.79.0/24
195.133.84.0/23
195.133.90.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
72:92:18:b5:14:7a:f5:e4:dc:53:3e:b8:d0:84:fb:d9:37:ec:
62:cd:bc:cd:ed:eb:c8:b3:88:9c:7d:8c:80:60:e6:aa:19:5d:
00:54:d2:42:f3:08:59:b8:37:eb:19:5e:2f:f8:e9:23:7d:51:
9f:94:68:d3:bb:62:6f:0f:ae:ab:6e:c1:08:7e:59:78:85:54:
a9:28:ed:d9:66:af:5a:6e:9e:65:75:10:64:66:ca:b6:38:4d:
f2:a7:1f:7d:46:7b:ec:47:3c:ff:94:e3:99:f6:b0:32:2b:5b:
bc:a0:19:29:9e:1f:dc:30:4a:89:c0:5d:d4:2e:67:7b:e5:a9:
bc:c1:f6:94:53:3e:4c:04:a0:72:aa:4d:4a:48:95:bd:fa:2d:
a1:8b:3c:1b:02:4f:c1:7c:0c:9e:54:2d:db:4c:c3:3d:7a:64:
de:ac:ba:05:69:f7:22:49:a2:31:fd:af:7e:3d:08:42:75:f1:
2f:38:80:ea:23:fd:7d:bb:2e:05:0c:ed:a1:a1:65:2f:b8:19:
46:b8:38:6f:a4:46:9f:fe:56:5d:48:86:48:d9:5c:19:86:34:
f1:d5:f5:48:10:67:45:c9:52:c4:89:45:ea:26:37:14:62:3c:
be:5b:b3:11:43:bd:52:8f:38:7d:96:ff:35:bd:37:ae:0f:66:
4f:d1:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:30 2025 by rpki-client