
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/fr-ySinj4c0cDVxO9LWQMWQd-OM.roa
File: fr-ySinj4c0cDVxO9LWQMWQd-OM.roa (raw, json)
Hash identifier: t235diZapXrBo6kpqWpJOrK5COVeAijth4CSxpL4nr0=
Subject key identifier: 7E:BF:B2:4A:29:E3:E1:CD:1C:0D:5C:4E:F4:B5:90:31:64:1D:F8:E3
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 0189730EF34EB37D94CE525546458F772942
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/fr-ySinj4c0cDVxO9LWQMWQd-OM.roa
Signing time: Thu 20 Jul 2023 11:28:26 +0000
ROA not before: Thu 20 Jul 2023 11:28:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25229
IP address blocks: 77.121.17.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
77.121.12.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
93.74.0.0/17 maxlen: 18
93.74.0.0/16 maxlen: 17
109.201.226.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.224.0/24 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
93.73.0.0/16 maxlen: 17
93.72.0.0/16 maxlen: 17
93.72.0.0/15 maxlen: 16
95.69.240.0/21 maxlen: 22
77.123.64.0/19 maxlen: 20
77.123.0.0/18 maxlen: 19
77.123.32.0/19 maxlen: 20
77.123.160.0/19 maxlen: 20
95.69.192.0/19 maxlen: 20
141.170.226.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
95.69.224.0/21 maxlen: 22
141.170.236.0/24 maxlen: 24
77.123.96.0/21 maxlen: 22
77.123.104.0/21 maxlen: 22
95.69.128.0/20 maxlen: 21
95.69.144.0/21 maxlen: 22
77.123.112.0/21 maxlen: 22
95.69.152.0/22 maxlen: 23
77.123.120.0/21 maxlen: 22
77.123.128.0/19 maxlen: 20
95.69.156.0/22 maxlen: 23
95.69.160.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
188.230.28.0/22 maxlen: 23
188.230.26.0/23 maxlen: 24
188.230.32.0/21 maxlen: 22
188.230.40.0/21 maxlen: 22
188.230.48.0/21 maxlen: 22
188.230.56.0/21 maxlen: 22
188.230.64.0/21 maxlen: 22
188.230.78.0/23 maxlen: 24
77.122.128.0/17 maxlen: 18
188.230.74.0/23 maxlen: 24
188.230.0.0/21 maxlen: 22
188.230.0.0/22 maxlen: 23
188.230.4.0/23 maxlen: 24
188.230.8.0/21 maxlen: 22
188.230.16.0/21 maxlen: 22
188.230.24.0/23 maxlen: 24
77.244.32.0/20 maxlen: 21
188.230.80.0/21 maxlen: 22
188.230.88.0/22 maxlen: 23
188.230.96.0/23 maxlen: 24
188.230.116.0/23 maxlen: 24
77.121.128.0/20 maxlen: 21
77.121.144.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.112.0/20 maxlen: 21
77.122.0.0/17 maxlen: 18
77.122.0.0/16 maxlen: 17
77.121.192.0/20 maxlen: 21
77.121.192.0/19 maxlen: 20
77.121.208.0/21 maxlen: 22
77.121.216.0/21 maxlen: 22
77.121.224.0/19 maxlen: 20
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 22
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
109.201.232.0/22 maxlen: 23
109.201.228.0/22 maxlen: 23
109.201.238.0/23 maxlen: 24
109.201.236.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
77.121.64.0/21 maxlen: 22
77.120.216.0/22 maxlen: 23
77.120.224.0/20 maxlen: 21
77.120.220.0/22 maxlen: 23
77.120.240.0/20 maxlen: 21
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
93.79.96.0/21 maxlen: 22
93.79.104.0/21 maxlen: 22
93.79.112.0/21 maxlen: 22
93.79.120.0/21 maxlen: 22
93.79.64.0/19 maxlen: 20
77.120.52.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.60.0/22 maxlen: 23
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.0.0/20 maxlen: 21
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
93.78.128.0/17 maxlen: 18
93.78.128.0/18 maxlen: 19
93.79.0.0/18 maxlen: 19
93.79.0.0/19 maxlen: 20
93.79.32.0/19 maxlen: 20
93.78.192.0/18 maxlen: 19
93.77.192.0/19 maxlen: 20
93.77.224.0/19 maxlen: 20
93.77.128.0/19 maxlen: 20
93.78.32.0/20 maxlen: 21
93.78.48.0/21 maxlen: 22
93.78.56.0/21 maxlen: 22
93.78.0.0/19 maxlen: 20
93.77.0.0/19 maxlen: 20
93.76.160.0/19 maxlen: 20
95.69.232.0/24 maxlen: 24
141.170.244.0/22 maxlen: 23
141.170.250.0/23 maxlen: 24
141.170.248.0/23 maxlen: 24
95.69.253.0/24 maxlen: 24
95.69.252.0/24 maxlen: 24
95.69.255.0/24 maxlen: 24
95.69.254.0/24 maxlen: 24
93.76.192.0/18 maxlen: 19
93.77.64.0/18 maxlen: 19
82.144.192.0/19 maxlen: 20
93.77.32.0/20 maxlen: 21
93.77.48.0/21 maxlen: 22
93.77.56.0/21 maxlen: 22
93.76.0.0/19 maxlen: 20
93.76.32.0/20 maxlen: 21
93.76.48.0/20 maxlen: 21
93.75.224.0/19 maxlen: 20
93.76.112.0/20 maxlen: 21
93.76.128.0/19 maxlen: 20
141.170.226.0/23 maxlen: 24
141.170.224.0/23 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.240.0/22 maxlen: 23
93.76.64.0/20 maxlen: 21
93.76.80.0/21 maxlen: 22
93.76.88.0/21 maxlen: 22
93.76.96.0/21 maxlen: 22
93.76.104.0/21 maxlen: 22
93.75.64.0/21 maxlen: 22
93.75.72.0/21 maxlen: 22
93.75.80.0/21 maxlen: 22
188.230.71.0/24 maxlen: 24
188.230.77.0/24 maxlen: 24
93.75.88.0/21 maxlen: 22
188.230.76.0/24 maxlen: 24
188.230.73.0/24 maxlen: 24
188.230.72.0/24 maxlen: 24
93.75.0.0/19 maxlen: 20
188.230.7.0/24 maxlen: 24
93.75.32.0/19 maxlen: 20
93.75.160.0/21 maxlen: 22
93.75.168.0/21 maxlen: 22
93.75.176.0/21 maxlen: 22
93.75.184.0/21 maxlen: 22
93.75.192.0/19 maxlen: 20
93.75.192.0/18 maxlen: 19
93.75.96.0/19 maxlen: 20
188.230.98.0/24 maxlen: 24
188.230.95.0/24 maxlen: 24
188.230.94.0/24 maxlen: 24
188.230.105.0/24 maxlen: 24
188.230.104.0/24 maxlen: 24
188.230.103.0/24 maxlen: 24
188.230.102.0/24 maxlen: 24
188.230.100.0/24 maxlen: 24
188.230.99.0/24 maxlen: 24
188.230.112.0/24 maxlen: 24
188.230.111.0/24 maxlen: 24
188.230.109.0/24 maxlen: 24
188.230.108.0/24 maxlen: 24
188.230.107.0/24 maxlen: 24
188.230.106.0/24 maxlen: 24
93.75.128.0/19 maxlen: 20
188.230.115.0/24 maxlen: 24
188.230.113.0/24 maxlen: 24
93.74.128.0/17 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:0e:f3:4e:b3:7d:94:ce:52:55:46:45:8f:77:29:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jul 20 11:28:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ebfb24a29e3e1cd1c0d5c4ef4b59031641df8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:a2:3a:d2:a5:f4:c1:c6:5d:34:fa:89:40:
1f:02:52:e8:52:42:dd:8c:1b:dd:b3:9c:ef:bc:68:
f6:21:6e:e5:ed:5e:80:e9:91:d1:c4:7c:4b:22:e4:
c8:d9:11:ed:02:f0:10:f1:c3:f0:21:dc:c3:0f:eb:
a3:8d:e3:1f:f5:41:31:71:9c:b1:3b:6f:70:c8:8c:
75:58:6c:b3:4e:f6:eb:69:e5:ac:08:7b:d2:12:85:
15:f1:61:c9:39:b3:2c:34:0e:fc:11:7b:27:23:2e:
c3:fa:e5:a6:30:0f:1e:c2:94:4d:a6:7f:b7:24:5b:
c7:67:77:76:9b:82:11:a5:f5:62:96:d2:3b:f8:06:
7b:60:13:7b:5d:79:10:9c:58:17:26:0c:ec:c3:3e:
49:ee:ea:c7:a9:b0:44:48:3d:af:89:b4:7d:35:2c:
96:b3:b0:36:2a:db:d2:b1:1f:89:97:3b:14:b3:21:
9e:d8:cd:81:36:05:84:03:42:67:d6:b9:63:e0:20:
c9:2b:06:1a:c7:43:14:4a:da:f7:8c:59:d7:24:dc:
cf:70:8c:d4:e5:12:e7:74:33:25:11:bf:35:7c:d0:
52:03:f0:6d:98:77:1b:b7:57:67:09:13:b7:36:d1:
34:31:05:aa:44:ca:c9:ad:aa:52:f1:58:4c:71:b3:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BF:B2:4A:29:E3:E1:CD:1C:0D:5C:4E:F4:B5:90:31:64:1D:F8:E3
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/fr-ySinj4c0cDVxO9LWQMWQd-OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.120.191.255
77.120.200.0-77.121.13.255
77.121.15.0-77.121.26.255
77.121.28.0-77.121.30.255
77.121.64.0-77.123.191.255
77.244.32.0/20
82.144.192.0/19
93.72.0.0-93.77.159.255
93.77.192.0-93.78.63.255
93.78.128.0-93.79.127.255
95.69.128.0-95.69.232.255
95.69.240.0/21
95.69.252.0/22
109.201.224.0/19
141.170.224.0/22
141.170.229.0-141.170.236.255
141.170.238.0/24
141.170.240.0-141.170.251.255
188.230.0.0-188.230.91.255
188.230.94.0-188.230.100.255
188.230.102.0-188.230.109.255
188.230.111.0-188.230.113.255
188.230.115.0-188.230.117.255
Signature Algorithm: sha256WithRSAEncryption
10:51:02:e8:ce:1e:e7:84:0a:32:d8:08:8f:ea:da:de:92:48:
3f:46:97:86:ef:8e:39:27:5d:39:e5:e5:8f:a7:5f:63:79:01:
ff:d1:f1:2c:5c:00:f7:e9:77:d7:56:f4:01:a7:c7:60:17:0d:
19:47:46:a6:33:94:ce:9e:54:ab:0a:b2:e1:db:50:3c:72:e5:
71:4d:29:bd:17:f4:1b:89:3f:25:64:1e:de:5c:16:92:b9:1a:
6a:cb:6e:dd:25:9d:2d:74:e5:d3:18:84:43:3f:7b:ba:10:f2:
42:b3:0c:44:a5:05:1e:cb:99:8d:cc:95:70:8f:34:8b:0c:10:
6e:34:2d:cd:41:7d:6d:94:87:e0:62:19:1a:1c:80:ab:fc:5a:
e9:9d:3f:66:90:08:ed:21:b5:0d:de:02:04:1b:04:88:93:5d:
55:54:81:00:3e:07:d3:9d:4c:20:d5:98:5d:8c:32:c1:aa:50:
5e:51:64:8a:01:d4:d0:8b:c1:bc:7e:c8:ea:5b:29:b3:eb:40:
42:18:e5:5c:8a:9c:ee:9e:c2:75:5e:4b:30:66:cb:a6:eb:b2:
c1:3e:4b:4f:83:1f:89:71:01:2a:b6:cf:f7:26:81:a7:4c:1f:
4e:07:a0:52:8e:01:c5:84:9d:7b:ba:50:0a:74:59:71:51:7e:
6d:c3:81:40
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgISAYlzDvNOs32UzlJVRkWPdylCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz
YjY3YWEwHhcNMjMwNzIwMTEyODI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWJmYjI0YTI5ZTNlMWNkMWMwZDVjNGVmNGI1OTAzMTY0MWRmOGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRGiOtKl9MHGXTT6iUAfAlLoUkLd
jBvds5zvvGj2IW7l7V6A6ZHRxHxLIuTI2RHtAvAQ8cPwIdzDD+ujjeMf9UExcZyx
O29wyIx1WGyzTvbraeWsCHvSEoUV8WHJObMsNA78EXsnIy7D+uWmMA8ewpRNpn+3
JFvHZ3d2m4IRpfViltI7+AZ7YBN7XXkQnFgXJgzswz5J7urHqbBESD2vibR9NSyW
s7A2KtvSsR+JlzsUsyGe2M2BNgWEA0Jn1rlj4CDJKwYax0MUStr3jFnXJNzPcIzU
5RLndDMlEb81fNBSA/BtmHcbt1dnCRO3NtE0MQWqRMrJrapS8VhMcbPllwIDAQAB
o4IDKDCCAyQwHQYDVR0OBBYEFH6/skop4+HNHA1cTvS1kDFkHfjjMB8GA1UdIwQY
MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt
OTQ0Y2U3ZWViMTU0LzEvZnIteVNpbmo0YzBjRFZ4TzlMV1FNV1FkLU9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0
LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPAYIKwYBBQUHAQcBAf8EggErMIIBJzCCASMEAgABMIIB
GzALAwMDTXgDBARNeCADBAJNeDQwDAMEAk14PAMEBk14gDAMAwQDTXjIAwQBTXkM
MAwDBABNeQ8DBABNeRowDAMEAk15HAMEAE15HjAMAwQGTXlAAwQGTXuAAwQETfQg
AwQFUpDAMAsDAwNdSAMEBV1NgDAMAwQGXU3AAwQGXU4AMAwDBAddToADBAddTwAw
DAMEB19FgAMEAF9F6AMEA19F8AMEAl9F/AMEBW3J4AMEAo2q4DAMAwQAjarlAwQA
jarsAwQAjaruMAwDBASNqvADBAKNqvgwCwMDAbzmAwQCvOZYMAwDBAG85l4DBAC8
5mQwDAMEAbzmZgMEAbzmbDAMAwQAvOZvAwQBvOZwMAwDBAC85nMDBAG85nQwDQYJ
KoZIhvcNAQELBQADggEBABBRAujOHueECjLYCI/q2t6SSD9Gl4bvjjknXTnl5Y+n
X2N5Af/R8SxcAPfpd9dW9AGnx2AXDRlHRqYzlM6eVKsKsuHbUDxy5XFNKb0X9BuJ
PyVkHt5cFpK5GmrLbt0lnS105dMYhEM/e7oQ8kKzDESlBR7LmY3MlXCPNIsMEG40
Lc1BfW2Uh+BiGRocgKv8WumdP2aQCO0htQ3eAgQbBIiTXVVUgQA+B9OdTCDVmF2M
MsGqUF5RZIoB1NCLwbx+yOpbKbPrQEIY5VyKnO6ewnVeSzBmy6brssE+S0+DH4lx
ASq2z/cmgadMH04HoFKOAcWEnXu6UAp0WXFRfm3DgUA=
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:50:37 2025 by rpki-client