Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/1-M7Bbuf60zgA4xVk1hN9hAu88GQ.roa
File: 1-M7Bbuf60zgA4xVk1hN9hAu88GQ.roa (raw, json)
Hash identifier: kES+yj6SNxN0JS6NfE13cLcAKf4fUB8jE6p0bzmVGJk=
Subject key identifier: F8:CE:C1:6E:E7:FA:D3:38:00:E3:15:64:D6:13:7D:84:0B:BC:F0:64
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018AFF04EBA587176F1E7D4E7FA51D58683C
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/1-M7Bbuf60zgA4xVk1hN9hAu88GQ.roa
Signing time: Thu 05 Oct 2023 08:47:07 +0000
ROA not before: Thu 05 Oct 2023 08:47:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.192.0/21 maxlen: 22
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 22
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
77.121.12.0/24 maxlen: 24
109.201.232.0/22 maxlen: 23
109.201.228.0/22 maxlen: 23
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.236.0/23 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
109.201.240.0/20 maxlen: 21
93.74.0.0/17 maxlen: 18
93.74.0.0/16 maxlen: 17
77.121.64.0/21 maxlen: 22
77.120.216.0/22 maxlen: 23
77.120.224.0/20 maxlen: 21
77.120.220.0/22 maxlen: 23
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
109.201.226.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.224.0/24 maxlen: 24
77.121.8.0/22 maxlen: 23
77.120.52.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.60.0/22 maxlen: 23
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.0.0/20 maxlen: 21
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
93.73.0.0/16 maxlen: 17
93.72.0.0/16 maxlen: 17
93.72.0.0/15 maxlen: 16
93.77.192.0/19 maxlen: 20
93.77.224.0/19 maxlen: 20
93.77.128.0/19 maxlen: 20
93.77.0.0/19 maxlen: 20
93.76.160.0/19 maxlen: 20
95.69.232.0/24 maxlen: 24
141.170.244.0/22 maxlen: 23
141.170.250.0/23 maxlen: 24
141.170.248.0/23 maxlen: 24
141.170.248.0/21 maxlen: 22
95.69.240.0/21 maxlen: 22
95.69.253.0/24 maxlen: 24
95.69.252.0/24 maxlen: 24
95.69.255.0/24 maxlen: 24
95.69.254.0/24 maxlen: 24
93.76.192.0/18 maxlen: 19
93.77.64.0/18 maxlen: 19
82.144.192.0/19 maxlen: 20
93.77.32.0/20 maxlen: 21
93.77.48.0/21 maxlen: 22
93.77.56.0/21 maxlen: 22
93.76.0.0/19 maxlen: 20
77.123.64.0/19 maxlen: 20
93.76.32.0/20 maxlen: 21
77.123.0.0/18 maxlen: 19
93.75.224.0/19 maxlen: 20
77.123.32.0/19 maxlen: 20
93.76.112.0/20 maxlen: 21
77.123.160.0/19 maxlen: 20
95.69.192.0/20 maxlen: 21
93.76.128.0/19 maxlen: 20
141.170.226.0/23 maxlen: 24
141.170.224.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.228.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.239.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.237.0/24 maxlen: 24
95.69.224.0/21 maxlen: 22
141.170.236.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
77.123.96.0/21 maxlen: 22
77.123.104.0/21 maxlen: 22
95.69.128.0/20 maxlen: 21
93.76.64.0/20 maxlen: 21
95.69.144.0/21 maxlen: 22
77.123.112.0/21 maxlen: 22
95.69.152.0/22 maxlen: 23
77.123.120.0/21 maxlen: 22
77.123.128.0/19 maxlen: 20
95.69.156.0/22 maxlen: 23
95.69.160.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
188.230.28.0/22 maxlen: 23
188.230.26.0/23 maxlen: 24
188.230.32.0/21 maxlen: 22
188.230.40.0/21 maxlen: 22
93.75.64.0/21 maxlen: 22
188.230.48.0/21 maxlen: 22
188.230.56.0/21 maxlen: 22
93.75.72.0/21 maxlen: 22
188.230.64.0/21 maxlen: 22
93.75.80.0/21 maxlen: 22
188.230.71.0/24 maxlen: 24
188.230.78.0/23 maxlen: 24
77.122.128.0/17 maxlen: 18
188.230.74.0/23 maxlen: 24
188.230.77.0/24 maxlen: 24
188.230.76.0/24 maxlen: 24
188.230.73.0/24 maxlen: 24
188.230.72.0/24 maxlen: 24
93.75.0.0/19 maxlen: 20
188.230.0.0/21 maxlen: 22
188.230.0.0/22 maxlen: 23
188.230.4.0/23 maxlen: 24
188.230.8.0/21 maxlen: 22
188.230.7.0/24 maxlen: 24
188.230.16.0/21 maxlen: 22
93.75.32.0/19 maxlen: 20
188.230.24.0/23 maxlen: 24
93.75.160.0/21 maxlen: 22
93.75.168.0/21 maxlen: 22
93.75.176.0/21 maxlen: 22
93.75.184.0/21 maxlen: 22
77.244.32.0/20 maxlen: 21
188.230.80.0/21 maxlen: 22
93.75.96.0/19 maxlen: 20
188.230.88.0/22 maxlen: 23
188.230.96.0/23 maxlen: 24
188.230.92.0/23 maxlen: 24
188.230.98.0/24 maxlen: 24
188.230.95.0/24 maxlen: 24
188.230.94.0/24 maxlen: 24
188.230.105.0/24 maxlen: 24
188.230.104.0/24 maxlen: 24
188.230.103.0/24 maxlen: 24
188.230.102.0/24 maxlen: 24
188.230.100.0/24 maxlen: 24
188.230.99.0/24 maxlen: 24
188.230.112.0/24 maxlen: 24
188.230.111.0/24 maxlen: 24
188.230.109.0/24 maxlen: 24
188.230.108.0/24 maxlen: 24
188.230.107.0/24 maxlen: 24
188.230.106.0/24 maxlen: 24
188.230.116.0/23 maxlen: 24
93.75.128.0/19 maxlen: 20
188.230.115.0/24 maxlen: 24
188.230.113.0/24 maxlen: 24
77.121.128.0/20 maxlen: 21
77.121.144.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
93.74.128.0/17 maxlen: 18
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.112.0/20 maxlen: 21
77.122.0.0/17 maxlen: 18
77.122.0.0/16 maxlen: 17
77.121.192.0/20 maxlen: 21
77.121.192.0/19 maxlen: 20
77.121.208.0/21 maxlen: 22
77.121.216.0/21 maxlen: 22
77.121.224.0/19 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:04:eb:a5:87:17:6f:1e:7d:4e:7f:a5:1d:58:68:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Oct 5 08:47:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8cec16ee7fad33800e31564d6137d840bbcf064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e1:92:f3:2c:51:28:68:d9:92:82:c4:eb:92:
6a:de:62:04:cb:16:e4:d4:78:ec:a1:1c:c4:2a:3c:
7e:86:e2:27:ff:21:82:47:85:a8:af:68:0a:ed:e7:
1c:01:47:e8:3d:41:e8:37:57:b0:4d:42:09:36:b0:
fd:09:b2:cb:78:a3:2a:54:39:63:03:21:3c:8c:09:
a2:83:a6:20:c4:20:15:59:90:c9:c8:e0:f8:fe:e9:
f0:5d:e8:cf:b7:a5:5f:c4:e8:2c:5f:10:02:41:b5:
38:be:57:cc:ef:f5:a5:7a:c7:5d:e2:93:74:f7:18:
53:d8:5b:71:ba:28:bf:d7:b4:6c:86:f5:bd:7f:31:
0f:e3:15:23:d5:cb:dc:3d:32:02:2a:42:12:7e:70:
9d:9c:7d:a4:df:9e:c0:d8:3b:bb:e5:45:e8:64:0a:
75:28:c7:eb:7f:96:88:57:a1:de:c4:eb:2e:4b:2c:
26:75:0e:2a:35:a3:9b:e1:c0:d8:5e:c0:9d:1b:3e:
66:19:ec:e0:ea:a8:a2:1a:9b:ef:75:f0:06:38:09:
47:86:61:eb:ec:f0:1a:79:14:f6:de:92:ad:ae:80:
4e:10:62:93:f5:91:6a:14:61:8e:81:50:44:10:11:
e0:d9:4f:7f:db:d7:ec:28:23:ff:34:a7:c4:b5:30:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CE:C1:6E:E7:FA:D3:38:00:E3:15:64:D6:13:7D:84:0B:BC:F0:64
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/1-M7Bbuf60zgA4xVk1hN9hAu88GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.26.255
77.121.28.0-77.121.30.255
77.121.64.0-77.123.191.255
77.244.32.0/20
82.144.192.0/19
93.72.0.0-93.75.87.255
93.75.96.0-93.75.191.255
93.75.224.0-93.76.47.255
93.76.64.0/20
93.76.112.0-93.77.159.255
93.77.192.0/18
95.69.128.0-95.69.207.255
95.69.224.0-95.69.232.255
95.69.240.0/21
95.69.252.0/22
109.201.224.0/19
141.170.224.0/19
188.230.0.0-188.230.100.255
188.230.102.0-188.230.109.255
188.230.111.0-188.230.113.255
188.230.115.0-188.230.117.255
Signature Algorithm: sha256WithRSAEncryption
14:a6:0c:7f:ea:a0:3b:27:52:68:8c:bd:a0:8b:27:30:92:9b:
c5:6e:05:17:e5:a8:6c:99:61:f6:fc:00:45:19:4e:eb:19:10:
9a:38:17:bc:0b:11:a7:ba:aa:df:2b:42:54:1b:7b:7d:fb:93:
9a:e9:f0:09:08:1c:ef:0e:c3:e1:f0:14:84:c2:db:b0:01:27:
83:af:03:73:83:48:aa:2e:33:cd:6f:b0:28:bf:07:cf:bc:3f:
29:16:14:bb:09:fa:66:0a:af:c3:bf:33:6e:44:b9:d7:89:eb:
37:60:70:e1:bf:1d:cc:b5:82:d7:eb:8f:06:28:2d:bb:ed:ca:
12:c9:66:52:1a:f7:5e:e9:5e:3f:ab:eb:eb:f6:8c:2e:93:29:
5f:ca:89:25:3c:86:63:e7:c1:b4:c3:4c:dc:4f:d0:67:55:37:
b1:6e:21:d1:a3:27:51:cd:67:9f:64:81:c8:7a:2c:f7:f2:36:
63:3d:e8:5c:59:15:79:41:d9:75:b5:47:a1:44:3b:c1:bd:38:
e3:05:a5:de:e3:17:3c:05:a6:5f:70:fe:22:6d:b7:81:ad:d6:
94:ef:52:c2:a7:ed:5d:00:00:37:69:ab:6e:7e:0c:fe:96:6a:
a6:94:5d:44:ab:99:80:ec:af:a5:1e:2c:5b:85:d7:99:9c:4d:
86:4f:90:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:52:08 2025 by rpki-client