Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/PCq0KlvaPgusGbLiLuwmYsqMZNM.roa
File: PCq0KlvaPgusGbLiLuwmYsqMZNM.roa (raw, json)
Hash identifier: Y++kskxltpCvsZVXvZ6EByAjIsHZO2gpg9DikbuR81U=
Subject key identifier: 3C:2A:B4:2A:5B:DA:3E:0B:AC:19:B2:E2:2E:EC:26:62:CA:8C:64:D3
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018B658327DB2A897849E0F4006EEC9ECD46
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/PCq0KlvaPgusGbLiLuwmYsqMZNM.roa
Signing time: Wed 25 Oct 2023 06:26:16 +0000
ROA not before: Wed 25 Oct 2023 06:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.192.0/21 maxlen: 22
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 22
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
77.121.12.0/24 maxlen: 24
109.201.232.0/22 maxlen: 23
109.201.228.0/22 maxlen: 23
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.236.0/23 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
109.201.240.0/20 maxlen: 21
93.74.0.0/17 maxlen: 18
93.74.0.0/16 maxlen: 17
77.121.64.0/21 maxlen: 22
77.120.216.0/22 maxlen: 23
77.120.224.0/20 maxlen: 21
77.120.220.0/22 maxlen: 23
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
109.201.226.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.224.0/24 maxlen: 24
77.121.8.0/22 maxlen: 23
77.120.52.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.60.0/22 maxlen: 23
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.0.0/20 maxlen: 21
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
93.73.0.0/16 maxlen: 17
93.72.0.0/16 maxlen: 17
93.72.0.0/15 maxlen: 16
93.77.192.0/19 maxlen: 20
93.77.224.0/19 maxlen: 20
93.77.128.0/19 maxlen: 20
93.77.0.0/19 maxlen: 20
93.76.160.0/19 maxlen: 20
95.69.232.0/24 maxlen: 24
141.170.244.0/22 maxlen: 23
141.170.250.0/23 maxlen: 24
141.170.248.0/23 maxlen: 24
141.170.248.0/21 maxlen: 22
95.69.240.0/21 maxlen: 22
95.69.253.0/24 maxlen: 24
95.69.252.0/24 maxlen: 24
95.69.255.0/24 maxlen: 24
95.69.254.0/24 maxlen: 24
93.76.192.0/18 maxlen: 19
93.77.64.0/18 maxlen: 19
82.144.192.0/19 maxlen: 20
93.77.32.0/20 maxlen: 21
93.77.48.0/21 maxlen: 22
93.77.56.0/21 maxlen: 22
93.76.0.0/19 maxlen: 20
77.123.64.0/19 maxlen: 20
93.76.32.0/20 maxlen: 21
77.123.0.0/18 maxlen: 19
93.75.224.0/19 maxlen: 20
77.123.32.0/19 maxlen: 20
93.76.112.0/20 maxlen: 21
77.123.160.0/19 maxlen: 20
95.69.192.0/20 maxlen: 21
93.76.128.0/19 maxlen: 20
141.170.226.0/23 maxlen: 24
141.170.224.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
95.69.208.0/20 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.228.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.239.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.237.0/24 maxlen: 24
95.69.224.0/21 maxlen: 22
141.170.236.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
77.123.96.0/21 maxlen: 22
77.123.104.0/21 maxlen: 22
95.69.128.0/20 maxlen: 21
93.76.64.0/20 maxlen: 21
95.69.144.0/21 maxlen: 22
77.123.112.0/21 maxlen: 22
95.69.152.0/22 maxlen: 23
77.123.120.0/21 maxlen: 22
77.123.128.0/19 maxlen: 20
95.69.156.0/22 maxlen: 23
95.69.160.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
188.230.28.0/22 maxlen: 23
188.230.26.0/23 maxlen: 24
188.230.32.0/21 maxlen: 22
188.230.40.0/21 maxlen: 22
93.75.64.0/21 maxlen: 22
188.230.48.0/21 maxlen: 22
188.230.56.0/21 maxlen: 22
93.75.72.0/21 maxlen: 22
188.230.64.0/21 maxlen: 22
93.75.80.0/21 maxlen: 22
188.230.71.0/24 maxlen: 24
188.230.78.0/23 maxlen: 24
77.122.128.0/17 maxlen: 18
188.230.74.0/23 maxlen: 24
188.230.77.0/24 maxlen: 24
188.230.76.0/24 maxlen: 24
188.230.73.0/24 maxlen: 24
188.230.72.0/24 maxlen: 24
93.75.0.0/19 maxlen: 20
188.230.0.0/21 maxlen: 22
188.230.0.0/22 maxlen: 23
188.230.4.0/23 maxlen: 24
188.230.8.0/21 maxlen: 22
188.230.7.0/24 maxlen: 24
188.230.16.0/21 maxlen: 22
93.75.32.0/19 maxlen: 20
188.230.24.0/23 maxlen: 24
93.75.160.0/21 maxlen: 22
93.75.168.0/21 maxlen: 22
93.75.176.0/21 maxlen: 22
93.75.184.0/21 maxlen: 22
77.244.32.0/20 maxlen: 21
188.230.80.0/21 maxlen: 22
93.75.96.0/19 maxlen: 20
188.230.88.0/22 maxlen: 23
188.230.96.0/23 maxlen: 24
188.230.92.0/23 maxlen: 24
188.230.98.0/24 maxlen: 24
188.230.95.0/24 maxlen: 24
188.230.94.0/24 maxlen: 24
188.230.105.0/24 maxlen: 24
188.230.104.0/24 maxlen: 24
188.230.103.0/24 maxlen: 24
188.230.102.0/24 maxlen: 24
188.230.100.0/24 maxlen: 24
188.230.99.0/24 maxlen: 24
188.230.112.0/24 maxlen: 24
188.230.111.0/24 maxlen: 24
188.230.109.0/24 maxlen: 24
188.230.108.0/24 maxlen: 24
188.230.107.0/24 maxlen: 24
188.230.106.0/24 maxlen: 24
188.230.116.0/23 maxlen: 24
93.75.128.0/19 maxlen: 20
188.230.115.0/24 maxlen: 24
188.230.113.0/24 maxlen: 24
77.121.128.0/20 maxlen: 21
77.121.144.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
93.74.128.0/17 maxlen: 18
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.112.0/20 maxlen: 21
77.122.0.0/17 maxlen: 18
77.122.0.0/16 maxlen: 17
77.121.192.0/20 maxlen: 21
77.121.192.0/19 maxlen: 20
77.121.208.0/21 maxlen: 22
77.121.216.0/21 maxlen: 22
77.121.224.0/19 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:83:27:db:2a:89:78:49:e0:f4:00:6e:ec:9e:cd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Oct 25 06:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c2ab42a5bda3e0bac19b2e22eec2662ca8c64d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6d:1a:9c:36:89:29:95:aa:6b:7a:2c:bf:8d:
8d:3c:3a:6e:f2:3f:6f:94:4e:f3:dd:21:db:bb:98:
f2:53:f7:67:fb:4c:51:97:ed:5c:7d:67:dc:68:14:
1e:4b:91:70:f4:4c:b3:24:ae:02:69:21:d3:44:d8:
12:ac:05:fc:36:ee:a5:98:a8:91:0d:be:b3:09:2c:
b9:c0:56:19:23:b3:a6:d7:e5:f6:62:f4:e6:2f:fe:
1c:36:0e:2e:3a:27:35:ce:dd:47:a6:8b:e6:9b:4d:
f2:b9:17:8e:7b:ef:b1:fe:9c:43:be:a0:ee:2d:cb:
b0:77:fc:74:d1:5e:6e:0c:15:45:98:80:47:af:1d:
df:d6:4d:5b:31:c2:12:99:58:47:7c:89:d0:d5:6e:
b2:01:ef:76:77:c0:ee:32:ca:e8:82:fa:48:e8:ff:
fa:27:40:1e:c3:3b:ca:8b:f3:cc:ca:0a:e7:a1:a2:
bc:fb:8c:65:11:94:ee:56:f6:21:81:5e:5c:3b:cc:
b1:eb:67:e1:db:0e:99:d5:8c:30:3a:35:c9:f6:40:
84:5d:c4:a4:c6:ba:74:7d:5f:41:11:ef:59:60:fb:
56:0c:2f:08:92:fa:a6:f0:47:2f:a9:7f:93:47:d1:
e8:6e:bc:fd:80:b0:86:3d:5c:79:f9:73:e1:75:0e:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2A:B4:2A:5B:DA:3E:0B:AC:19:B2:E2:2E:EC:26:62:CA:8C:64:D3
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/PCq0KlvaPgusGbLiLuwmYsqMZNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.26.255
77.121.28.0-77.121.30.255
77.121.64.0-77.123.191.255
77.244.32.0/20
82.144.192.0/19
93.72.0.0-93.75.87.255
93.75.96.0-93.75.191.255
93.75.224.0-93.76.47.255
93.76.64.0/20
93.76.112.0-93.77.159.255
93.77.192.0/18
95.69.128.0-95.69.232.255
95.69.240.0/21
95.69.252.0/22
109.201.224.0/19
141.170.224.0/19
188.230.0.0-188.230.100.255
188.230.102.0-188.230.109.255
188.230.111.0-188.230.113.255
188.230.115.0-188.230.117.255
Signature Algorithm: sha256WithRSAEncryption
bd:b8:01:eb:e4:85:e8:fa:96:3c:a8:cb:0c:70:8a:f4:e4:53:
ff:c5:35:7a:20:63:ca:76:34:80:a5:11:4e:2d:31:3a:50:49:
83:04:21:cd:0b:65:4c:a0:42:d1:d5:49:da:6c:f3:4f:cb:d1:
65:69:68:80:5d:8f:5e:a4:92:1d:72:ca:e4:10:4d:0c:bc:0f:
a3:19:86:4f:b6:77:a3:8a:df:c4:58:5d:7e:bd:9b:5a:51:86:
33:72:11:1f:3a:c6:4a:4a:5a:31:25:73:17:75:67:d9:97:b4:
12:aa:86:c6:80:09:82:7d:83:b9:4b:b6:24:44:32:65:37:19:
a8:3e:04:f8:71:2a:be:f8:d4:48:bb:86:8a:40:01:56:08:2e:
e3:96:e0:c7:c7:8a:6b:8b:ee:45:50:a9:96:ca:ba:e7:9f:49:
f5:aa:29:d9:2f:ab:a5:9f:9b:e0:72:95:16:fe:8b:c3:c8:78:
3a:cd:58:b1:4f:20:44:3d:e9:6d:1f:26:6b:e9:d9:81:ca:df:
92:9a:bf:21:e9:8e:55:4d:a4:3c:7c:c1:19:e3:d2:df:86:d1:
b1:5f:fe:f7:c8:50:4a:bf:c9:87:e8:66:12:5e:fb:20:f5:63:
55:05:19:48:b8:48:17:2e:92:99:40:c2:cd:36:10:75:40:36:
6c:29:b0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org