Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/eizGsKNYiQ-kbrdBTk7aLGT7uns.roa
File: eizGsKNYiQ-kbrdBTk7aLGT7uns.roa (raw, json)
Hash identifier: 8Wz5DkGs19OyaLa1YlA1ajIc8AKg8W7Hb9w0Tvn7Syo=
Subject key identifier: 7A:2C:C6:B0:A3:58:89:0F:A4:6E:B7:41:4E:4E:DA:2C:64:FB:BA:7B
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018F70C039C0737A07D4C1B10F89199EEB38
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/eizGsKNYiQ-kbrdBTk7aLGT7uns.roa
Signing time: Mon 13 May 2024 06:59:56 +0000
ROA not before: Mon 13 May 2024 06:59:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 24
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 24
77.120.211.0/24 maxlen: 24
77.120.212.0/23 maxlen: 24
77.120.214.0/23 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 24
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 22
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.112.0/20 maxlen: 21
77.121.128.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
77.121.192.0/19 maxlen: 20
77.122.128.0/17 maxlen: 18
77.123.0.0/18 maxlen: 19
77.123.32.0/19 maxlen: 20
77.123.64.0/19 maxlen: 20
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.123.160.0/20 maxlen: 24
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
141.170.224.0/23 maxlen: 24
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.228.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.237.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.239.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.244.0/22 maxlen: 23
141.170.248.0/21 maxlen: 22
141.170.248.0/23 maxlen: 24
141.170.250.0/23 maxlen: 24
188.230.0.0/21 maxlen: 22
188.230.0.0/22 maxlen: 23
188.230.4.0/23 maxlen: 24
188.230.7.0/24 maxlen: 24
188.230.8.0/21 maxlen: 22
188.230.16.0/21 maxlen: 22
188.230.24.0/23 maxlen: 24
188.230.26.0/23 maxlen: 24
188.230.28.0/22 maxlen: 23
188.230.32.0/21 maxlen: 22
188.230.40.0/21 maxlen: 22
188.230.48.0/21 maxlen: 22
188.230.56.0/21 maxlen: 22
188.230.64.0/21 maxlen: 22
188.230.71.0/24 maxlen: 24
188.230.72.0/24 maxlen: 24
188.230.73.0/24 maxlen: 24
188.230.74.0/23 maxlen: 24
188.230.76.0/24 maxlen: 24
188.230.77.0/24 maxlen: 24
188.230.78.0/23 maxlen: 24
188.230.80.0/21 maxlen: 22
188.230.88.0/22 maxlen: 23
188.230.92.0/23 maxlen: 24
188.230.94.0/24 maxlen: 24
188.230.95.0/24 maxlen: 24
188.230.96.0/23 maxlen: 24
188.230.98.0/24 maxlen: 24
188.230.99.0/24 maxlen: 24
188.230.100.0/24 maxlen: 24
188.230.102.0/24 maxlen: 24
188.230.103.0/24 maxlen: 24
188.230.104.0/24 maxlen: 24
188.230.105.0/24 maxlen: 24
188.230.106.0/24 maxlen: 24
188.230.107.0/24 maxlen: 24
188.230.108.0/24 maxlen: 24
188.230.109.0/24 maxlen: 24
188.230.111.0/24 maxlen: 24
188.230.112.0/24 maxlen: 24
188.230.113.0/24 maxlen: 24
188.230.115.0/24 maxlen: 24
188.230.116.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:70:c0:39:c0:73:7a:07:d4:c1:b1:0f:89:19:9e:eb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: May 13 06:59:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a2cc6b0a358890fa46eb7414e4eda2c64fbba7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:41:a7:ef:e9:b9:e1:1b:20:d0:f5:7e:50:
ba:cd:ba:c2:4b:c3:88:eb:cf:df:4c:ab:a8:38:bc:
7d:43:7e:33:aa:56:88:30:42:4b:e3:97:24:ca:6d:
29:a3:98:c4:8a:af:f1:0c:51:41:2b:d1:86:06:f4:
29:48:55:15:60:cd:c9:21:d1:4a:f8:d1:de:e0:bb:
0f:1a:96:5f:e1:c6:2a:01:f4:fd:92:19:25:38:95:
c0:a3:ba:32:fe:a6:fc:69:c1:36:6c:70:4c:28:7f:
3c:ff:f2:cf:c4:b6:d8:d0:f2:55:91:da:5b:14:ec:
7a:d1:44:d7:cb:ae:32:45:ad:bf:e0:c4:8c:ad:cd:
26:6b:6c:f0:17:65:0d:1c:56:6a:cc:df:32:1d:3d:
2a:11:84:b2:12:e3:c6:f2:11:be:e3:62:91:de:18:
22:59:08:ba:9c:fc:6b:6a:e4:f8:88:58:16:76:89:
f5:80:ab:44:6c:b1:46:9a:a2:1c:4b:0b:7a:9f:d7:
13:33:49:29:31:81:d8:26:27:31:f4:5a:55:10:d0:
ac:a1:bc:64:0f:a6:ef:4f:8d:c2:06:af:49:ab:99:
b8:9c:2e:1f:0e:b2:11:f7:a1:0c:33:c0:de:4b:52:
4b:43:b5:a4:72:15:2a:db:cb:0d:f4:0a:49:da:45:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2C:C6:B0:A3:58:89:0F:A4:6E:B7:41:4E:4E:DA:2C:64:FB:BA:7B
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/eizGsKNYiQ-kbrdBTk7aLGT7uns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0-77.121.143.255
77.121.160.0-77.121.223.255
77.122.128.0-77.123.95.255
77.123.128.0-77.123.175.255
77.244.32.0/20
82.144.192.0/19
109.201.224.0/19
141.170.224.0/19
188.230.0.0-188.230.100.255
188.230.102.0-188.230.109.255
188.230.111.0-188.230.113.255
188.230.115.0-188.230.117.255
Signature Algorithm: sha256WithRSAEncryption
a5:a4:f4:1a:02:d8:f1:5c:ab:f4:c8:98:40:9c:1e:55:50:e6:
99:9a:25:fa:0e:ad:68:7e:23:cd:34:d4:40:0d:1a:2c:31:86:
d9:5f:8e:57:c0:af:2b:0b:12:e9:c8:aa:ff:b5:8f:04:2b:40:
b3:43:29:03:ce:06:a4:61:78:85:d7:ae:48:49:18:38:a5:5f:
ab:6c:1f:7e:71:89:f7:3f:57:aa:b4:93:d0:8e:91:e8:40:c5:
48:58:16:51:c8:8f:ba:26:4f:1c:8e:c9:e5:fd:d0:67:bc:c1:
7e:5a:b4:32:c6:db:83:4a:12:77:97:30:17:53:99:84:52:75:
90:2e:f0:bd:5a:9a:da:54:b4:09:0d:24:5f:e0:79:d2:b3:78:
4d:32:2e:b6:f2:f3:5e:87:05:82:6b:fe:95:1a:e9:2d:f7:0b:
85:b7:ff:6f:4a:fa:6c:2a:b1:cc:6e:2d:b0:ca:e2:f1:38:81:
9c:73:e1:c4:93:88:31:2a:5e:59:6c:d2:2e:09:29:1a:4d:9d:
67:4c:cd:26:ce:e3:ef:42:9f:3b:5b:b3:83:3f:b8:ee:af:e7:
ea:57:b9:ae:0d:c8:c5:e4:a3:e1:4a:5a:51:3c:e4:4b:03:60:
56:81:86:e7:36:06:b5:49:3a:77:44:b1:cb:04:63:88:8b:cf:
2d:71:2f:42
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAY9wwDnAc3oH1MGxD4kZnus4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz
YjY3YWEwHhcNMjQwNTEzMDY1OTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTJjYzZiMGEzNTg4OTBmYTQ2ZWI3NDE0ZTRlZGEyYzY0ZmJiYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHVBp+/pueEbIND1flC6zbrCS8OI
68/fTKuoOLx9Q34zqlaIMEJL45ckym0po5jEiq/xDFFBK9GGBvQpSFUVYM3JIdFK
+NHe4LsPGpZf4cYqAfT9khklOJXAo7oy/qb8acE2bHBMKH88//LPxLbY0PJVkdpb
FOx60UTXy64yRa2/4MSMrc0ma2zwF2UNHFZqzN8yHT0qEYSyEuPG8hG+42KR3hgi
WQi6nPxrauT4iFgWdon1gKtEbLFGmqIcSwt6n9cTM0kpMYHYJicx9FpVENCsobxk
D6bvT43CBq9Jq5m4nC4fDrIR96EMM8DeS1JLQ7WkchUq28sN9ApJ2kU7VwIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFHosxrCjWIkPpG63QU5O2ixk+7p7MB8GA1UdIwQY
MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt
OTQ0Y2U3ZWViMTU0LzEvZWl6R3NLTllpUS1rYnJkQlRrN2FMR1Q3dW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0
LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBvQQCAAEwgbYwCwMD
A014AwQETXggAwQCTXg0MAwDBAJNeDwDBAFNeQwwDAMEAE15DwMEAE15HjAMAwQG
TXlAAwQETXmAMAwDBAVNeaADBAVNecAwDAMEB016gAMEBU17QDAMAwQHTXuAAwQE
TXugAwQETfQgAwQFUpDAAwQFbcngAwQFjargMAsDAwG85gMEALzmZDAMAwQBvOZm
AwQBvOZsMAwDBAC85m8DBAG85nAwDAMEALzmcwMEAbzmdDANBgkqhkiG9w0BAQsF
AAOCAQEApaT0GgLY8Vyr9MiYQJweVVDmmZol+g6taH4jzTTUQA0aLDGG2V+OV8Cv
KwsS6ciq/7WPBCtAs0MpA84GpGF4hdeuSEkYOKVfq2wffnGJ9z9XqrST0I6R6EDF
SFgWUciPuiZPHI7J5f3QZ7zBflq0Msbbg0oSd5cwF1OZhFJ1kC7wvVqa2lS0CQ0k
X+B50rN4TTIutvLzXocFgmv+lRrpLfcLhbf/b0r6bCqxzG4tsMri8TiBnHPhxJOI
MSpeWWzSLgkpGk2dZ0zNJs7j70KfO1uzgz+47q/n6le5rg3IxeSj4UpaUTzkSwNg
VoGG5zYGtUk6d0SxywRjiIvPLXEvQg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:53:25 2025 by rpki-client