Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/3C_IKxZs28ogKSI14hyQhfvBwsI.roa
File: 3C_IKxZs28ogKSI14hyQhfvBwsI.roa (raw, json)
Hash identifier: RyNIIbDtiw08Vs0/r5+oIy2rRSbBCu0ZHR3lisnv7Ho=
Subject key identifier: DC:2F:C8:2B:16:6C:DB:CA:20:29:22:35:E2:1C:90:85:FB:C1:C2:C2
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 0189D91A2AC6A8D331EBD5809F61B9615D74
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/3C_IKxZs28ogKSI14hyQhfvBwsI.roa
Signing time: Wed 09 Aug 2023 07:01:57 +0000
ROA not before: Wed 09 Aug 2023 07:01:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25229
IP address blocks: 77.121.17.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
77.121.12.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
93.74.0.0/17 maxlen: 18
93.74.0.0/16 maxlen: 17
109.201.226.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.224.0/24 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
93.73.0.0/16 maxlen: 17
93.72.0.0/16 maxlen: 17
93.72.0.0/15 maxlen: 16
95.69.240.0/21 maxlen: 22
77.123.64.0/19 maxlen: 20
77.123.0.0/18 maxlen: 19
77.123.32.0/19 maxlen: 20
77.123.160.0/19 maxlen: 20
95.69.192.0/19 maxlen: 20
141.170.226.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
95.69.224.0/21 maxlen: 22
141.170.236.0/24 maxlen: 24
77.123.96.0/21 maxlen: 22
77.123.104.0/21 maxlen: 22
95.69.128.0/20 maxlen: 21
95.69.144.0/21 maxlen: 22
77.123.112.0/21 maxlen: 22
95.69.152.0/22 maxlen: 23
77.123.120.0/21 maxlen: 22
77.123.128.0/19 maxlen: 20
95.69.156.0/22 maxlen: 23
95.69.160.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
188.230.28.0/22 maxlen: 23
188.230.26.0/23 maxlen: 24
188.230.32.0/21 maxlen: 22
188.230.40.0/21 maxlen: 22
188.230.48.0/21 maxlen: 22
188.230.56.0/21 maxlen: 22
188.230.64.0/21 maxlen: 22
188.230.78.0/23 maxlen: 24
77.122.128.0/17 maxlen: 18
188.230.74.0/23 maxlen: 24
188.230.0.0/21 maxlen: 22
188.230.0.0/22 maxlen: 23
188.230.4.0/23 maxlen: 24
188.230.8.0/21 maxlen: 22
188.230.16.0/21 maxlen: 22
188.230.24.0/23 maxlen: 24
77.244.32.0/20 maxlen: 21
188.230.80.0/21 maxlen: 22
188.230.88.0/22 maxlen: 23
188.230.96.0/23 maxlen: 24
188.230.92.0/23 maxlen: 24
188.230.116.0/23 maxlen: 24
77.121.128.0/20 maxlen: 21
77.121.144.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.112.0/20 maxlen: 21
77.122.0.0/17 maxlen: 18
77.122.0.0/16 maxlen: 17
77.121.192.0/20 maxlen: 21
77.121.192.0/19 maxlen: 20
77.121.208.0/21 maxlen: 22
77.121.216.0/21 maxlen: 22
77.121.224.0/19 maxlen: 20
77.120.192.0/21 maxlen: 22
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 22
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
109.201.232.0/22 maxlen: 23
109.201.228.0/22 maxlen: 23
109.201.238.0/23 maxlen: 24
109.201.236.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
77.121.64.0/21 maxlen: 22
77.120.216.0/22 maxlen: 23
77.120.224.0/20 maxlen: 21
77.120.220.0/22 maxlen: 23
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
93.79.96.0/21 maxlen: 22
93.79.104.0/21 maxlen: 22
93.79.112.0/21 maxlen: 22
93.79.120.0/21 maxlen: 22
93.79.64.0/19 maxlen: 20
77.120.52.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.60.0/22 maxlen: 23
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.0.0/20 maxlen: 21
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
93.78.128.0/17 maxlen: 18
93.78.128.0/18 maxlen: 19
93.79.0.0/18 maxlen: 19
93.79.0.0/19 maxlen: 20
93.79.32.0/19 maxlen: 20
93.78.192.0/18 maxlen: 19
93.77.192.0/19 maxlen: 20
93.77.224.0/19 maxlen: 20
93.77.128.0/19 maxlen: 20
93.78.32.0/20 maxlen: 21
93.78.48.0/21 maxlen: 22
93.78.56.0/21 maxlen: 22
93.78.0.0/19 maxlen: 20
93.77.0.0/19 maxlen: 20
93.76.160.0/19 maxlen: 20
95.69.232.0/24 maxlen: 24
141.170.244.0/22 maxlen: 23
141.170.250.0/23 maxlen: 24
141.170.248.0/23 maxlen: 24
141.170.248.0/21 maxlen: 22
95.69.253.0/24 maxlen: 24
95.69.252.0/24 maxlen: 24
95.69.255.0/24 maxlen: 24
95.69.254.0/24 maxlen: 24
93.76.192.0/18 maxlen: 19
93.77.64.0/18 maxlen: 19
82.144.192.0/19 maxlen: 20
93.77.32.0/20 maxlen: 21
93.77.48.0/21 maxlen: 22
93.77.56.0/21 maxlen: 22
93.76.0.0/19 maxlen: 20
93.76.32.0/20 maxlen: 21
93.76.48.0/20 maxlen: 21
93.75.224.0/19 maxlen: 20
93.76.112.0/20 maxlen: 21
93.76.128.0/19 maxlen: 20
141.170.226.0/23 maxlen: 24
141.170.224.0/23 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.240.0/22 maxlen: 23
93.76.64.0/20 maxlen: 21
93.76.80.0/21 maxlen: 22
93.76.88.0/21 maxlen: 22
93.76.96.0/21 maxlen: 22
93.76.104.0/21 maxlen: 22
93.75.64.0/21 maxlen: 22
93.75.72.0/21 maxlen: 22
93.75.80.0/21 maxlen: 22
188.230.71.0/24 maxlen: 24
188.230.77.0/24 maxlen: 24
188.230.76.0/24 maxlen: 24
93.75.88.0/21 maxlen: 22
188.230.73.0/24 maxlen: 24
188.230.72.0/24 maxlen: 24
93.75.0.0/19 maxlen: 20
188.230.7.0/24 maxlen: 24
93.75.32.0/19 maxlen: 20
93.75.160.0/21 maxlen: 22
93.75.168.0/21 maxlen: 22
93.75.176.0/21 maxlen: 22
93.75.184.0/21 maxlen: 22
93.75.192.0/19 maxlen: 20
93.75.192.0/18 maxlen: 19
93.75.96.0/19 maxlen: 20
188.230.98.0/24 maxlen: 24
188.230.95.0/24 maxlen: 24
188.230.94.0/24 maxlen: 24
188.230.105.0/24 maxlen: 24
188.230.104.0/24 maxlen: 24
188.230.103.0/24 maxlen: 24
188.230.102.0/24 maxlen: 24
188.230.100.0/24 maxlen: 24
188.230.99.0/24 maxlen: 24
188.230.112.0/24 maxlen: 24
188.230.111.0/24 maxlen: 24
188.230.109.0/24 maxlen: 24
188.230.108.0/24 maxlen: 24
188.230.107.0/24 maxlen: 24
188.230.106.0/24 maxlen: 24
93.75.128.0/19 maxlen: 20
188.230.115.0/24 maxlen: 24
188.230.113.0/24 maxlen: 24
93.74.128.0/17 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:1a:2a:c6:a8:d3:31:eb:d5:80:9f:61:b9:61:5d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Aug 9 07:01:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc2fc82b166cdbca20292235e21c9085fbc1c2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:40:08:14:59:d6:c5:de:d6:00:5a:17:90:
55:35:25:7f:26:58:2b:1d:9c:be:80:76:b7:1c:aa:
39:d5:4c:6f:3e:72:8b:93:05:1d:42:2a:0b:0b:c6:
f4:2a:7a:ce:bd:5c:33:a4:16:b4:99:1b:19:06:61:
2d:36:1e:fd:ac:7e:cc:ff:87:87:cf:88:f0:70:42:
7e:5a:91:dc:f3:87:69:c1:ca:bb:9b:31:82:cf:41:
94:87:1b:ae:39:66:77:7e:01:ec:60:c3:45:26:90:
22:7d:1d:56:be:38:35:f9:66:71:5a:05:60:ba:53:
c4:1a:47:a3:3c:fd:d1:ca:55:10:a8:8d:4c:48:ca:
1c:e3:98:03:c7:ac:08:06:36:b7:64:04:7e:4d:8a:
64:98:95:55:0c:8f:7a:d6:35:4c:c1:6c:f3:a5:5f:
b1:e4:fe:4d:ce:5d:2a:03:05:a6:52:8c:58:24:b1:
f8:ab:ce:b8:0a:89:2b:c8:e2:ab:b9:08:93:d5:0b:
94:9e:cc:07:34:50:2a:82:6a:ed:eb:4f:46:5a:34:
44:c6:a4:dc:7d:a6:ec:4c:14:6b:2a:cc:c0:2f:63:
d0:7e:2a:7b:eb:4c:ee:5e:96:65:69:c8:cc:d2:2c:
9b:85:0e:b4:8a:9c:4d:9f:e9:e1:c4:cf:9c:de:66:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2F:C8:2B:16:6C:DB:CA:20:29:22:35:E2:1C:90:85:FB:C1:C2:C2
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/3C_IKxZs28ogKSI14hyQhfvBwsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.26.255
77.121.28.0-77.121.30.255
77.121.64.0-77.123.191.255
77.244.32.0/20
82.144.192.0/19
93.72.0.0-93.77.159.255
93.77.192.0-93.78.63.255
93.78.128.0-93.79.127.255
95.69.128.0-95.69.232.255
95.69.240.0/21
95.69.252.0/22
109.201.224.0/19
141.170.224.0/22
141.170.229.0-141.170.236.255
141.170.238.0/24
141.170.240.0/20
188.230.0.0-188.230.100.255
188.230.102.0-188.230.109.255
188.230.111.0-188.230.113.255
188.230.115.0-188.230.117.255
Signature Algorithm: sha256WithRSAEncryption
92:06:11:45:e5:7a:60:8c:72:62:e8:77:c5:53:70:84:27:11:
b6:7e:49:da:b3:a9:35:88:76:38:c3:fa:6b:91:fe:f9:dc:60:
49:63:19:5e:90:a3:8b:d2:a0:0a:73:bb:32:ae:f6:f3:5c:f6:
68:33:47:60:f6:59:4b:58:46:50:39:59:dd:c4:7d:6e:50:ee:
67:46:7d:73:90:e6:b3:e7:0c:ab:45:56:b0:00:33:1d:73:29:
57:75:4e:2d:5c:e8:e5:1f:ab:98:8c:1f:71:95:c7:0e:98:dd:
02:22:2c:f1:f1:e0:24:7d:e6:58:4a:66:eb:f7:17:d3:10:cb:
60:7d:53:40:10:7f:4a:8f:86:c5:a3:c9:be:c7:b5:19:4a:51:
15:a2:de:48:6b:0e:81:48:2d:ce:b8:27:3c:2f:b8:21:d5:4a:
25:d1:7c:f9:27:4e:73:0b:45:a7:b0:47:8e:76:d3:10:fd:b5:
c6:78:10:4d:66:ee:86:a2:9c:4d:e7:66:a2:f0:86:9f:8d:c6:
f2:bf:ac:44:31:6f:a7:4b:21:e0:60:08:0d:8f:75:a5:43:4e:
32:7b:f6:b5:fe:bf:cf:f0:9d:6d:81:ba:10:ea:9c:4c:57:36:
82:32:26:99:0f:80:7b:b8:34:ec:bf:a7:bf:ff:9d:6b:0a:68:
27:f6:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org