Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/BtNOKO7bxYK2uYLNfy65Hlbss5o.roa
File: BtNOKO7bxYK2uYLNfy65Hlbss5o.roa (raw, json)
Hash identifier: UlwS6ePu9FsWR2SU7eOrKgYayNSGdmo0KUs+83Vx+fw=
Subject key identifier: 06:D3:4E:28:EE:DB:C5:82:B6:B9:82:CD:7F:2E:B9:1E:56:EC:B3:9A
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018BA4E99F64F8C77AB919664F3B05EE245B
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/BtNOKO7bxYK2uYLNfy65Hlbss5o.roa
Signing time: Mon 06 Nov 2023 13:54:15 +0000
ROA not before: Mon 06 Nov 2023 13:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.192.0/21 maxlen: 22
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 22
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
109.201.232.0/22 maxlen: 23
77.121.17.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
77.121.13.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
77.121.12.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
109.201.238.0/23 maxlen: 24
77.121.21.0/24 maxlen: 24
109.201.236.0/23 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
109.201.240.0/20 maxlen: 21
77.121.26.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
93.74.0.0/17 maxlen: 18
93.74.0.0/16 maxlen: 17
77.121.64.0/21 maxlen: 22
77.120.216.0/22 maxlen: 23
77.120.224.0/20 maxlen: 21
77.120.220.0/22 maxlen: 23
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
109.201.226.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.224.0/24 maxlen: 24
77.121.8.0/22 maxlen: 23
77.120.52.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.60.0/22 maxlen: 23
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.4.0/24 maxlen: 24
77.120.0.0/20 maxlen: 21
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
93.73.0.0/16 maxlen: 17
93.72.0.0/16 maxlen: 17
93.72.0.0/15 maxlen: 16
95.69.232.0/24 maxlen: 24
141.170.244.0/22 maxlen: 23
141.170.250.0/23 maxlen: 24
141.170.248.0/23 maxlen: 24
141.170.248.0/21 maxlen: 22
95.69.240.0/21 maxlen: 22
95.69.253.0/24 maxlen: 24
95.69.252.0/24 maxlen: 24
95.69.255.0/24 maxlen: 24
95.69.254.0/24 maxlen: 24
82.144.192.0/19 maxlen: 20
77.123.64.0/19 maxlen: 20
77.123.0.0/18 maxlen: 19
77.123.32.0/19 maxlen: 20
77.123.160.0/19 maxlen: 20
95.69.192.0/20 maxlen: 21
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.224.0/23 maxlen: 24
95.69.208.0/20 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.228.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.239.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.237.0/24 maxlen: 24
95.69.224.0/21 maxlen: 22
77.123.96.0/21 maxlen: 22
77.123.104.0/21 maxlen: 22
95.69.128.0/20 maxlen: 21
95.69.144.0/21 maxlen: 22
77.123.112.0/21 maxlen: 22
95.69.152.0/22 maxlen: 23
77.123.120.0/21 maxlen: 22
77.123.128.0/19 maxlen: 20
95.69.156.0/22 maxlen: 23
95.69.160.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
188.230.28.0/22 maxlen: 23
188.230.26.0/23 maxlen: 24
188.230.32.0/21 maxlen: 22
188.230.40.0/21 maxlen: 22
188.230.48.0/21 maxlen: 22
188.230.56.0/21 maxlen: 22
188.230.64.0/21 maxlen: 22
188.230.71.0/24 maxlen: 24
188.230.78.0/23 maxlen: 24
188.230.77.0/24 maxlen: 24
77.122.128.0/17 maxlen: 18
188.230.76.0/24 maxlen: 24
188.230.74.0/23 maxlen: 24
188.230.73.0/24 maxlen: 24
188.230.72.0/24 maxlen: 24
188.230.0.0/21 maxlen: 22
188.230.0.0/22 maxlen: 23
188.230.4.0/23 maxlen: 24
188.230.8.0/21 maxlen: 22
188.230.7.0/24 maxlen: 24
188.230.16.0/21 maxlen: 22
188.230.24.0/23 maxlen: 24
77.244.32.0/20 maxlen: 21
188.230.80.0/21 maxlen: 22
188.230.88.0/22 maxlen: 23
188.230.98.0/24 maxlen: 24
188.230.96.0/23 maxlen: 24
188.230.95.0/24 maxlen: 24
188.230.94.0/24 maxlen: 24
188.230.92.0/23 maxlen: 24
188.230.105.0/24 maxlen: 24
188.230.104.0/24 maxlen: 24
188.230.103.0/24 maxlen: 24
188.230.102.0/24 maxlen: 24
188.230.100.0/24 maxlen: 24
188.230.99.0/24 maxlen: 24
188.230.112.0/24 maxlen: 24
188.230.111.0/24 maxlen: 24
188.230.109.0/24 maxlen: 24
188.230.108.0/24 maxlen: 24
188.230.107.0/24 maxlen: 24
188.230.106.0/24 maxlen: 24
188.230.116.0/23 maxlen: 24
188.230.115.0/24 maxlen: 24
188.230.113.0/24 maxlen: 24
77.121.128.0/20 maxlen: 21
77.121.144.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
93.74.128.0/17 maxlen: 18
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.112.0/20 maxlen: 21
77.122.0.0/17 maxlen: 18
77.122.0.0/16 maxlen: 17
77.121.192.0/20 maxlen: 21
77.121.192.0/19 maxlen: 20
77.121.208.0/21 maxlen: 22
77.121.216.0/21 maxlen: 22
77.121.224.0/19 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:e9:9f:64:f8:c7:7a:b9:19:66:4f:3b:05:ee:24:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Nov 6 13:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06d34e28eedbc582b6b982cd7f2eb91e56ecb39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:e8:e4:e2:6c:ee:b3:fa:91:30:a1:9f:39:
93:2c:88:a0:2a:38:40:0d:28:6a:53:40:a4:47:47:
05:f5:31:d9:fe:6e:2b:26:16:d6:1e:55:0e:5a:4e:
3d:29:4e:45:71:ce:83:05:2d:ba:60:45:36:bd:18:
84:b4:56:0a:50:82:83:c0:ed:d1:af:b8:f9:d6:24:
46:8b:21:c3:c0:e9:7f:4d:e7:73:b7:4d:91:bd:49:
3f:26:27:de:55:53:05:95:fd:a7:f6:5b:7f:ed:97:
72:10:9a:ce:00:0b:a0:55:c7:98:82:c3:dd:da:de:
ed:67:c6:5e:ae:e1:0c:fe:4e:28:c3:8d:06:ac:1e:
0e:e1:c6:d9:33:43:38:8c:36:ac:89:17:fb:5c:03:
b5:b8:a3:8b:60:94:21:41:88:2c:b8:0a:48:4c:b7:
9f:dc:5f:1a:b7:b6:18:92:71:aa:1f:7d:2b:0f:59:
e8:76:a2:76:c1:4f:5f:d2:a6:04:15:6f:ac:e3:22:
35:b9:4f:be:2d:aa:a1:81:06:f1:5a:4d:41:2a:a9:
e0:bf:1e:72:85:77:3f:8d:5c:dd:00:f6:3f:96:8e:
7e:02:60:c7:59:bb:06:e8:7a:93:f5:0e:03:62:48:
cd:9a:45:96:19:d4:f3:8c:dc:b6:57:b9:1a:2c:9b:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D3:4E:28:EE:DB:C5:82:B6:B9:82:CD:7F:2E:B9:1E:56:EC:B3:9A
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/BtNOKO7bxYK2uYLNfy65Hlbss5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.26.255
77.121.28.0-77.121.30.255
77.121.64.0-77.123.191.255
77.244.32.0/20
82.144.192.0/19
93.72.0.0-93.74.255.255
95.69.128.0-95.69.232.255
95.69.240.0/21
95.69.252.0/22
109.201.224.0/19
141.170.224.0/19
188.230.0.0-188.230.100.255
188.230.102.0-188.230.109.255
188.230.111.0-188.230.113.255
188.230.115.0-188.230.117.255
Signature Algorithm: sha256WithRSAEncryption
cb:e5:0f:53:5a:fc:74:1c:5d:39:c8:fa:e7:f8:14:65:16:a1:
32:4f:ad:2c:78:e1:ce:75:86:b0:84:14:70:c4:48:d5:59:56:
80:e7:0b:74:75:38:13:f4:d9:93:57:ce:61:ad:09:17:26:95:
b8:e4:d1:d0:27:82:d7:7a:53:20:18:ea:ca:5e:e2:bc:95:88:
f2:5d:7a:6e:d2:63:e0:3b:a5:0c:19:20:5a:db:e6:1b:31:65:
08:cc:bf:8b:85:a6:e6:7f:16:e2:78:68:be:8a:90:04:46:a5:
c1:30:48:3b:f4:a9:49:0a:b6:43:8c:7f:f1:0a:ca:5f:b2:f3:
42:52:10:77:02:56:f2:9b:a3:9c:00:2b:0b:9b:24:c7:b6:91:
7b:9e:e1:25:48:14:a1:40:c0:3b:24:69:78:a1:1f:51:da:08:
26:70:16:60:25:f5:81:b6:d7:7a:06:cb:3b:1e:06:f1:22:5c:
d4:2e:73:0f:74:14:5b:01:02:2f:37:d8:52:83:fa:be:35:86:
89:c1:01:03:0d:57:b3:cd:5e:29:7b:0b:17:90:ce:b8:6e:38:
98:8b:73:cb:02:3e:1f:fb:8f:6f:48:fc:80:a8:5c:a4:99:f8:
73:52:f6:19:3e:be:06:8d:c5:dc:90:24:11:9f:65:57:e8:3e:
ea:3e:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:17 2024 by rpki-client on console-ams.rpki-client.org