Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/CLJE0nkLoIykWEHlB74MlnpjK_Q.roa
File: CLJE0nkLoIykWEHlB74MlnpjK_Q.roa (raw, json)
Hash identifier: mdRJG7vaH61SIyhmtDB3Quyn1cmXlBotZ6dnRoJfrmg=
Subject key identifier: 08:B2:44:D2:79:0B:A0:8C:A4:58:41:E5:07:BE:0C:96:7A:63:2B:F4
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 019039FAC6A31725B86C11BF27394654DED2
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/CLJE0nkLoIykWEHlB74MlnpjK_Q.roa
Signing time: Fri 21 Jun 2024 08:47:34 +0000
ROA not before: Fri 21 Jun 2024 08:47:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 24
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 24
77.120.211.0/24 maxlen: 24
77.120.212.0/23 maxlen: 24
77.120.214.0/23 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 24
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 22
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.112.0/20 maxlen: 21
77.121.128.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
77.122.128.0/17 maxlen: 18
77.123.0.0/18 maxlen: 19
77.123.32.0/19 maxlen: 20
77.123.64.0/19 maxlen: 20
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.123.160.0/20 maxlen: 24
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
141.170.224.0/23 maxlen: 24
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.244.0/22 maxlen: 23
141.170.248.0/21 maxlen: 22
141.170.248.0/23 maxlen: 24
141.170.250.0/23 maxlen: 24
188.230.78.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:fa:c6:a3:17:25:b8:6c:11:bf:27:39:46:54:de:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jun 21 08:47:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08b244d2790ba08ca45841e507be0c967a632bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:f6:43:80:96:05:49:97:7f:a0:f1:c5:1f:
a6:93:2d:0d:11:51:58:66:f7:1a:a6:bb:17:f8:15:
68:08:5b:a6:89:8a:fb:b6:22:a3:40:bf:9d:0d:59:
5e:3a:e2:25:a2:02:09:01:18:2e:ec:16:e6:ca:96:
65:1b:94:0c:28:09:08:5e:55:6b:0d:03:65:03:69:
d5:69:5c:64:a3:06:6a:ce:d5:9f:a4:82:f4:8b:5c:
80:62:78:8d:46:3f:1d:d3:eb:f8:0e:56:56:b5:5d:
8d:32:8a:8f:59:71:7d:31:c1:40:a1:92:eb:14:29:
ac:57:33:6a:41:05:47:8b:65:cc:2b:e6:2a:a7:e4:
4f:db:ad:6e:46:3b:21:69:46:eb:4d:ab:d0:a5:5a:
a1:e1:5f:b3:38:29:45:a7:59:e5:72:d0:92:2a:96:
16:41:57:89:cf:8e:a0:0a:d1:68:ba:63:d3:12:f9:
fa:a4:b1:6e:bf:34:1c:79:20:99:33:f2:ec:ed:e8:
e8:e9:2b:ee:e6:43:38:14:ab:7d:fd:37:6d:d6:bb:
36:61:0d:4a:2a:d8:3c:de:c8:e3:13:cf:56:eb:bc:
dc:64:d6:e9:f9:fd:77:b6:2c:6c:68:1a:1d:9d:c8:
46:61:84:b3:0f:45:6a:68:44:35:01:d4:ce:8e:e6:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B2:44:D2:79:0B:A0:8C:A4:58:41:E5:07:BE:0C:96:7A:63:2B:F4
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/CLJE0nkLoIykWEHlB74MlnpjK_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0-77.121.143.255
77.121.160.0/19
77.122.128.0-77.123.95.255
77.123.128.0-77.123.175.255
77.244.32.0/20
82.144.192.0/19
109.201.224.0/19
141.170.224.0/22
141.170.229.0-141.170.236.255
141.170.238.0/24
141.170.240.0/20
188.230.78.0/23
Signature Algorithm: sha256WithRSAEncryption
af:c5:7e:fe:22:f9:68:d5:c6:09:d1:88:37:71:6b:97:76:7e:
f6:96:7d:d6:a2:60:93:41:35:13:2c:8d:9d:eb:a2:7d:41:36:
2e:1b:77:51:39:c0:4a:7b:17:c8:20:cd:bd:91:a4:d7:b0:22:
30:2d:f1:c4:89:87:3e:2f:3a:f5:29:37:49:ee:72:93:24:66:
b5:5f:4e:2c:90:80:38:dc:9d:81:94:e5:ba:12:27:ca:d7:f9:
da:59:d1:68:c7:7f:10:53:1c:36:ec:00:19:5d:b6:f5:c7:87:
b9:62:76:88:cb:50:cb:87:13:85:cb:19:b9:86:e3:50:9d:0f:
a2:17:07:ab:ed:62:eb:ea:f7:a6:37:0f:56:48:db:e2:17:d3:
e7:7a:6f:47:f9:72:61:64:d4:20:68:d5:dc:0b:d1:c5:9f:63:
c1:84:06:2a:61:e1:63:1c:21:47:a6:88:6f:95:be:d1:b0:05:
00:c0:36:8b:f8:5b:b7:2e:e6:9c:73:a2:98:e5:c1:d8:c3:2b:
95:03:ab:59:9e:b1:e1:d0:51:be:7e:e7:1c:03:5f:ba:70:dd:
d9:a9:1b:22:a7:70:27:2e:a3:0c:87:34:8b:b2:74:53:cf:8e:
19:69:24:69:c5:1d:77:d5:bf:d0:b0:7d:0b:3b:23:4f:95:77:
73:ff:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:48:45 2025 by rpki-client