Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/FCrACTpRX3lbpWZz8Qk5uScieU8.roa
File: FCrACTpRX3lbpWZz8Qk5uScieU8.roa (raw, json)
Hash identifier: i/1DE5Np/KvXhZy7/kx1hwHh0ytpbbEb2zDQA3LKD+U=
Subject key identifier: 14:2A:C0:09:3A:51:5F:79:5B:A5:66:73:F1:09:39:B9:27:22:79:4F
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018ECC4487145DF27B92662DC71FFCFE7732
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/FCrACTpRX3lbpWZz8Qk5uScieU8.roa
Signing time: Thu 11 Apr 2024 08:27:06 +0000
ROA not before: Thu 11 Apr 2024 08:27:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 21
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 24
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 24
77.120.211.0/24 maxlen: 24
77.120.212.0/23 maxlen: 24
77.120.214.0/23 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 23
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 22
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.112.0/20 maxlen: 21
77.121.128.0/20 maxlen: 21
77.121.144.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
77.121.192.0/19 maxlen: 20
77.121.192.0/20 maxlen: 21
77.121.208.0/21 maxlen: 22
77.121.216.0/21 maxlen: 22
77.121.224.0/19 maxlen: 20
77.122.128.0/17 maxlen: 18
77.123.0.0/18 maxlen: 19
77.123.32.0/19 maxlen: 20
77.123.64.0/19 maxlen: 20
77.123.96.0/21 maxlen: 22
77.123.104.0/21 maxlen: 22
77.123.112.0/21 maxlen: 22
77.123.120.0/21 maxlen: 22
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.123.160.0/19 maxlen: 20
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
95.69.128.0/20 maxlen: 21
95.69.144.0/21 maxlen: 22
95.69.152.0/22 maxlen: 23
95.69.156.0/22 maxlen: 23
95.69.160.0/19 maxlen: 20
95.69.192.0/20 maxlen: 21
95.69.208.0/20 maxlen: 24
95.69.224.0/21 maxlen: 22
95.69.232.0/24 maxlen: 24
95.69.240.0/21 maxlen: 22
95.69.252.0/24 maxlen: 24
95.69.253.0/24 maxlen: 24
95.69.254.0/24 maxlen: 24
95.69.255.0/24 maxlen: 24
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
141.170.224.0/23 maxlen: 24
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.228.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.237.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.239.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.244.0/22 maxlen: 23
141.170.248.0/21 maxlen: 22
141.170.248.0/23 maxlen: 24
141.170.250.0/23 maxlen: 24
188.230.0.0/21 maxlen: 22
188.230.0.0/22 maxlen: 23
188.230.4.0/23 maxlen: 24
188.230.7.0/24 maxlen: 24
188.230.8.0/21 maxlen: 22
188.230.16.0/21 maxlen: 22
188.230.24.0/23 maxlen: 24
188.230.26.0/23 maxlen: 24
188.230.28.0/22 maxlen: 23
188.230.32.0/21 maxlen: 22
188.230.40.0/21 maxlen: 22
188.230.48.0/21 maxlen: 22
188.230.56.0/21 maxlen: 22
188.230.64.0/21 maxlen: 22
188.230.71.0/24 maxlen: 24
188.230.72.0/24 maxlen: 24
188.230.73.0/24 maxlen: 24
188.230.74.0/23 maxlen: 24
188.230.76.0/24 maxlen: 24
188.230.77.0/24 maxlen: 24
188.230.78.0/23 maxlen: 24
188.230.80.0/21 maxlen: 22
188.230.88.0/22 maxlen: 23
188.230.92.0/23 maxlen: 24
188.230.94.0/24 maxlen: 24
188.230.95.0/24 maxlen: 24
188.230.96.0/23 maxlen: 24
188.230.98.0/24 maxlen: 24
188.230.99.0/24 maxlen: 24
188.230.100.0/24 maxlen: 24
188.230.102.0/24 maxlen: 24
188.230.103.0/24 maxlen: 24
188.230.104.0/24 maxlen: 24
188.230.105.0/24 maxlen: 24
188.230.106.0/24 maxlen: 24
188.230.107.0/24 maxlen: 24
188.230.108.0/24 maxlen: 24
188.230.109.0/24 maxlen: 24
188.230.111.0/24 maxlen: 24
188.230.112.0/24 maxlen: 24
188.230.113.0/24 maxlen: 24
188.230.115.0/24 maxlen: 24
188.230.116.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:44:87:14:5d:f2:7b:92:66:2d:c7:1f:fc:fe:77:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Apr 11 08:27:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=142ac0093a515f795ba56673f10939b92722794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:9e:b6:c6:11:4d:60:7d:e5:bc:82:1b:63:
28:58:25:0b:15:63:03:cf:38:43:75:d6:c1:b3:46:
99:ea:8e:3a:21:2e:77:58:c0:0c:7e:4a:5f:f2:54:
2e:7a:49:27:63:21:63:4f:87:8e:8a:28:6b:27:87:
62:f2:be:51:67:e1:2f:aa:15:96:c8:67:7a:a6:e4:
0d:28:7e:f1:07:06:ab:6f:8d:96:ef:b6:84:b0:3c:
52:57:89:66:1f:2d:ce:57:64:ab:ef:ef:e4:1d:83:
8f:1b:1a:9b:59:09:10:0c:84:d4:01:3d:72:f2:aa:
84:e0:93:a7:1a:84:4c:d0:55:f8:e1:62:87:bc:a9:
d1:1f:ec:78:08:0a:04:28:88:87:fe:6b:6b:ae:87:
b5:3e:e1:3a:50:93:f6:91:d3:68:28:dd:b5:b1:bd:
e5:d7:57:6a:c1:27:f3:57:3e:18:ec:f7:11:5d:e2:
16:f9:3b:73:3f:8f:84:29:70:8d:74:79:31:2d:eb:
42:b2:3d:e7:88:96:26:6d:2d:43:e7:dd:56:9e:7f:
5a:de:ff:df:17:03:78:78:f3:cf:77:fc:2b:ff:4e:
22:20:63:2f:94:2e:61:5f:69:a7:e4:03:e0:83:67:
cb:be:79:c2:6b:71:00:9f:3a:6a:1a:4c:15:b8:8e:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2A:C0:09:3A:51:5F:79:5B:A5:66:73:F1:09:39:B9:27:22:79:4F
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/FCrACTpRX3lbpWZz8Qk5uScieU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0-77.121.255.255
77.122.128.0-77.123.191.255
77.244.32.0/20
82.144.192.0/19
95.69.128.0-95.69.232.255
95.69.240.0/21
95.69.252.0/22
109.201.224.0/19
141.170.224.0/19
188.230.0.0-188.230.100.255
188.230.102.0-188.230.109.255
188.230.111.0-188.230.113.255
188.230.115.0-188.230.117.255
Signature Algorithm: sha256WithRSAEncryption
53:19:c4:93:70:1a:e3:8b:08:fe:c4:8e:bf:1f:7f:a0:2b:80:
a6:c2:f2:fb:9d:7d:ca:9e:b6:39:fc:95:7b:55:cd:dd:7c:cc:
a6:3f:de:b7:78:d2:43:4f:9e:dd:46:21:9a:3a:1e:2c:46:6d:
d4:18:64:be:4d:db:01:3c:37:7b:e2:c8:c1:e0:17:7f:e1:73:
f6:48:10:36:61:85:14:2f:fb:44:05:10:0a:66:f5:d6:d0:f8:
70:50:70:ac:74:a1:43:18:66:17:92:b1:2f:c2:80:8d:05:21:
6d:81:4f:f3:d8:a8:f2:f4:00:24:02:fa:09:de:40:f0:a5:32:
16:92:13:16:f9:bf:08:e9:06:a2:b8:09:57:46:5f:5c:2a:c5:
5b:c9:67:fb:ba:08:9f:8a:c6:7d:5e:bd:b9:33:f3:8f:6e:46:
c7:50:05:de:88:dc:21:a0:73:4b:74:5d:e0:49:7f:1b:e1:e4:
ef:7d:d1:8f:3b:89:9d:cc:74:94:eb:17:ca:62:c3:bd:d7:56:
3a:8c:2a:f1:0b:ba:aa:dd:da:a6:50:d2:ab:bd:c7:ff:48:c3:
8d:58:aa:90:5c:0f:00:4b:78:c7:e3:53:7f:0b:92:5a:16:ef:
76:66:50:7c:e9:4d:c2:b7:76:a4:9a:45:43:37:bd:1b:57:d0:
63:8a:6c:5a
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAY7MRIcUXfJ7kmYtxx/8/ncyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz
YjY3YWEwHhcNMjQwNDExMDgyNzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDJhYzAwOTNhNTE1Zjc5NWJhNTY2NzNmMTA5MzliOTI3MjI3OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIuetsYRTWB95byCG2MoWCULFWMD
zzhDddbBs0aZ6o46IS53WMAMfkpf8lQuekknYyFjT4eOiihrJ4di8r5RZ+EvqhWW
yGd6puQNKH7xBwarb42W77aEsDxSV4lmHy3OV2Sr7+/kHYOPGxqbWQkQDITUAT1y
8qqE4JOnGoRM0FX44WKHvKnRH+x4CAoEKIiH/mtrroe1PuE6UJP2kdNoKN21sb3l
11dqwSfzVz4Y7PcRXeIW+TtzP4+EKXCNdHkxLetCsj3niJYmbS1D591Wnn9a3v/f
FwN4ePPPd/wr/04iIGMvlC5hX2mn5APgg2fLvnnCa3EAnzpqGkwVuI4cvQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFBQqwAk6UV95W6Vmc/EJObknInlPMB8GA1UdIwQY
MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt
OTQ0Y2U3ZWViMTU0LzEvRkNyQUNUcFJYM2xicFdaejhRazV1U2NpZVU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0
LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHQBggrBgEFBQcBBwEB/wSBwDCBvTCBugQCAAEwgbMwCwMD
A014AwQETXggAwQCTXg0MAwDBAJNeDwDBAFNeQwwDAMEAE15DwMEAE15HjALAwQG
TXlAAwMBTXgwDAMEB016gAMEBk17gAMEBE30IAMEBVKQwDAMAwQHX0WAAwQAX0Xo
AwQDX0XwAwQCX0X8AwQFbcngAwQFjargMAsDAwG85gMEALzmZDAMAwQBvOZmAwQB
vOZsMAwDBAC85m8DBAG85nAwDAMEALzmcwMEAbzmdDANBgkqhkiG9w0BAQsFAAOC
AQEAUxnEk3Aa44sI/sSOvx9/oCuApsLy+519yp62OfyVe1XN3XzMpj/et3jSQ0+e
3UYhmjoeLEZt1Bhkvk3bATw3e+LIweAXf+Fz9kgQNmGFFC/7RAUQCmb11tD4cFBw
rHShQxhmF5KxL8KAjQUhbYFP89io8vQAJAL6Cd5A8KUyFpITFvm/COkGorgJV0Zf
XCrFW8ln+7oIn4rGfV69uTPzj25Gx1AF3ojcIaBzS3Rd4El/G+Hk733RjzuJncx0
lOsXymLDvddWOowq8Qu6qt3aplDSq73H/0jDjViqkFwPAEt4x+NTfwuSWhbvdmZQ
fOlNwrd2pJpFQze9G1fQY4psWg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:44:14 2025 by rpki-client