Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/znodrURR3FzeJBwa48Wa40wzZNY.roa
File: znodrURR3FzeJBwa48Wa40wzZNY.roa (raw, json)
Hash identifier: x6SkfVzEF6U4RksJV30qAG338tt6L/UCQhBoskrbLrU=
Subject key identifier: CE:7A:1D:AD:44:51:DC:5C:DE:24:1C:1A:E3:C5:9A:E3:4C:33:64:D6
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018AF5522F537B9E96C084DE33912BEF8F8D
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/znodrURR3FzeJBwa48Wa40wzZNY.roa
Signing time: Tue 03 Oct 2023 11:35:18 +0000
ROA not before: Tue 03 Oct 2023 11:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.192.0/21 maxlen: 22
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 22
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
77.121.12.0/24 maxlen: 24
109.201.232.0/22 maxlen: 23
109.201.228.0/22 maxlen: 23
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.236.0/23 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
109.201.240.0/20 maxlen: 21
93.74.0.0/17 maxlen: 18
93.74.0.0/16 maxlen: 17
77.121.64.0/21 maxlen: 22
77.120.216.0/22 maxlen: 23
77.120.224.0/20 maxlen: 21
77.120.220.0/22 maxlen: 23
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
109.201.226.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.224.0/24 maxlen: 24
77.121.8.0/22 maxlen: 23
77.120.52.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.60.0/22 maxlen: 23
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.0.0/20 maxlen: 21
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
93.73.0.0/16 maxlen: 17
93.78.128.0/17 maxlen: 18
93.78.128.0/18 maxlen: 19
93.78.192.0/18 maxlen: 19
93.72.0.0/16 maxlen: 17
93.72.0.0/15 maxlen: 16
93.77.192.0/19 maxlen: 20
93.77.224.0/19 maxlen: 20
93.77.128.0/19 maxlen: 20
93.77.0.0/19 maxlen: 20
93.76.160.0/19 maxlen: 20
95.69.232.0/24 maxlen: 24
141.170.244.0/22 maxlen: 23
141.170.250.0/23 maxlen: 24
141.170.248.0/23 maxlen: 24
141.170.248.0/21 maxlen: 22
95.69.240.0/21 maxlen: 22
95.69.253.0/24 maxlen: 24
95.69.252.0/24 maxlen: 24
95.69.255.0/24 maxlen: 24
95.69.254.0/24 maxlen: 24
93.76.192.0/18 maxlen: 19
93.77.64.0/18 maxlen: 19
82.144.192.0/19 maxlen: 20
93.77.32.0/20 maxlen: 21
93.77.48.0/21 maxlen: 22
93.77.56.0/21 maxlen: 22
93.76.0.0/19 maxlen: 20
77.123.64.0/19 maxlen: 20
93.76.32.0/20 maxlen: 21
77.123.0.0/18 maxlen: 19
93.75.224.0/19 maxlen: 20
77.123.32.0/19 maxlen: 20
93.76.112.0/20 maxlen: 21
77.123.160.0/19 maxlen: 20
95.69.192.0/20 maxlen: 21
93.76.128.0/19 maxlen: 20
141.170.226.0/23 maxlen: 24
141.170.224.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.238.0/24 maxlen: 24
95.69.224.0/21 maxlen: 22
141.170.236.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
77.123.96.0/21 maxlen: 22
77.123.104.0/21 maxlen: 22
95.69.128.0/20 maxlen: 21
93.76.64.0/20 maxlen: 21
95.69.144.0/21 maxlen: 22
77.123.112.0/21 maxlen: 22
95.69.152.0/22 maxlen: 23
77.123.120.0/21 maxlen: 22
77.123.128.0/19 maxlen: 20
95.69.156.0/22 maxlen: 23
95.69.160.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
188.230.28.0/22 maxlen: 23
188.230.26.0/23 maxlen: 24
188.230.32.0/21 maxlen: 22
188.230.40.0/21 maxlen: 22
93.75.64.0/21 maxlen: 22
188.230.48.0/21 maxlen: 22
188.230.56.0/21 maxlen: 22
93.75.72.0/21 maxlen: 22
188.230.64.0/21 maxlen: 22
93.75.80.0/21 maxlen: 22
188.230.71.0/24 maxlen: 24
188.230.78.0/23 maxlen: 24
77.122.128.0/17 maxlen: 18
188.230.74.0/23 maxlen: 24
188.230.77.0/24 maxlen: 24
188.230.76.0/24 maxlen: 24
188.230.73.0/24 maxlen: 24
188.230.72.0/24 maxlen: 24
93.75.0.0/19 maxlen: 20
188.230.0.0/21 maxlen: 22
188.230.0.0/22 maxlen: 23
188.230.4.0/23 maxlen: 24
188.230.8.0/21 maxlen: 22
188.230.7.0/24 maxlen: 24
188.230.16.0/21 maxlen: 22
93.75.32.0/19 maxlen: 20
188.230.24.0/23 maxlen: 24
93.75.160.0/21 maxlen: 22
93.75.168.0/21 maxlen: 22
93.75.176.0/21 maxlen: 22
93.75.184.0/21 maxlen: 22
77.244.32.0/20 maxlen: 21
188.230.80.0/21 maxlen: 22
93.75.96.0/19 maxlen: 20
188.230.88.0/22 maxlen: 23
188.230.96.0/23 maxlen: 24
188.230.92.0/23 maxlen: 24
188.230.98.0/24 maxlen: 24
188.230.95.0/24 maxlen: 24
188.230.94.0/24 maxlen: 24
188.230.105.0/24 maxlen: 24
188.230.104.0/24 maxlen: 24
188.230.103.0/24 maxlen: 24
188.230.102.0/24 maxlen: 24
188.230.100.0/24 maxlen: 24
188.230.99.0/24 maxlen: 24
188.230.112.0/24 maxlen: 24
188.230.111.0/24 maxlen: 24
188.230.109.0/24 maxlen: 24
188.230.108.0/24 maxlen: 24
188.230.107.0/24 maxlen: 24
188.230.106.0/24 maxlen: 24
188.230.116.0/23 maxlen: 24
93.75.128.0/19 maxlen: 20
188.230.115.0/24 maxlen: 24
188.230.113.0/24 maxlen: 24
77.121.128.0/20 maxlen: 21
77.121.144.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
93.74.128.0/17 maxlen: 18
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.112.0/20 maxlen: 21
77.122.0.0/17 maxlen: 18
77.122.0.0/16 maxlen: 17
77.121.192.0/20 maxlen: 21
77.121.192.0/19 maxlen: 20
77.121.208.0/21 maxlen: 22
77.121.216.0/21 maxlen: 22
77.121.224.0/19 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:52:2f:53:7b:9e:96:c0:84:de:33:91:2b:ef:8f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Oct 3 11:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce7a1dad4451dc5cde241c1ae3c59ae34c3364d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:0d:4a:d9:32:4a:e1:03:cd:40:c6:20:0f:
2f:a3:2a:60:05:29:77:a8:e7:4e:20:98:ff:8d:ef:
9c:05:15:c6:12:aa:de:eb:20:0e:73:8a:8d:99:08:
d8:fa:96:3c:3b:34:5c:2c:48:54:09:d5:f5:1e:99:
3a:f1:65:c5:3b:ca:72:5a:ab:b5:a5:ae:3b:f3:d0:
db:8e:d3:4f:78:4f:63:6d:ae:c5:51:10:06:5a:a8:
22:55:8a:98:52:1e:11:b6:1f:a8:04:f2:40:15:ab:
89:4d:71:0e:2c:4d:2c:32:43:aa:a8:68:a8:bd:4f:
07:2b:00:fe:ca:f9:36:91:0a:cf:f7:84:42:69:4c:
92:01:f7:64:ad:40:b8:9d:b2:49:b4:fc:4d:79:9f:
6e:3b:03:88:47:a8:ab:53:bb:d4:23:40:4c:3e:fc:
cf:b2:be:d5:5f:77:47:90:58:62:1d:7c:b3:53:48:
60:ee:b4:b7:6c:e1:9f:86:d0:5d:95:34:e8:d2:8b:
f7:ce:c4:f4:a6:70:1f:d4:74:07:aa:2e:02:6f:3d:
f4:48:40:a0:fc:0b:9e:62:52:f8:39:e9:dc:2d:39:
84:76:5e:84:c1:2e:c3:00:3a:e6:4f:05:c1:cf:d6:
a7:4e:2f:11:34:5e:e3:cd:df:2b:ad:e0:20:20:ae:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7A:1D:AD:44:51:DC:5C:DE:24:1C:1A:E3:C5:9A:E3:4C:33:64:D6
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/znodrURR3FzeJBwa48Wa40wzZNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.26.255
77.121.28.0-77.121.30.255
77.121.64.0-77.123.191.255
77.244.32.0/20
82.144.192.0/19
93.72.0.0-93.75.87.255
93.75.96.0-93.75.191.255
93.75.224.0-93.76.47.255
93.76.64.0/20
93.76.112.0-93.77.159.255
93.77.192.0/18
93.78.128.0/17
95.69.128.0-95.69.207.255
95.69.224.0-95.69.232.255
95.69.240.0/21
95.69.252.0/22
109.201.224.0/19
141.170.224.0/22
141.170.229.0-141.170.236.255
141.170.238.0/24
141.170.240.0/20
188.230.0.0-188.230.100.255
188.230.102.0-188.230.109.255
188.230.111.0-188.230.113.255
188.230.115.0-188.230.117.255
Signature Algorithm: sha256WithRSAEncryption
6d:6f:08:3c:3f:2c:89:1d:02:7a:d9:b0:81:0c:a7:74:b0:e8:
73:e9:92:03:3d:9e:95:e3:b5:a1:6c:48:5a:e4:73:6e:c0:94:
44:36:6f:2d:7d:eb:46:c7:46:02:6d:f6:b2:23:1f:4f:4f:45:
d4:bc:23:9c:ad:fe:1d:53:f3:08:b0:99:6f:c1:8b:cd:67:36:
13:ff:82:79:ae:cd:67:18:c3:00:f1:a6:b8:9e:cf:ee:5e:2c:
8e:84:2f:ae:1f:80:5b:bc:dc:10:c0:d0:10:82:1f:e7:e2:3c:
bf:5d:76:5d:53:07:e0:86:bb:14:56:3a:c7:84:86:0e:63:11:
a2:75:16:ba:db:cb:f1:10:8b:b3:a8:1e:59:8f:1f:af:df:f8:
f8:62:dd:80:85:1c:ae:9a:96:0c:8a:f6:03:d0:de:9e:a8:28:
77:f1:37:ba:be:fb:d6:b9:88:7f:0f:d4:bd:1b:c2:d8:53:b1:
e1:df:73:32:97:10:06:1c:da:f2:89:1d:67:7a:68:15:35:92:
fe:41:d5:28:8a:92:69:25:bb:25:db:39:b9:d2:6e:f8:a0:6b:
c9:a0:d7:3a:e3:eb:97:ed:28:31:92:34:84:47:a1:09:99:81:
27:43:ef:88:3a:16:62:b4:9f:c0:8e:1f:b0:4b:f6:34:96:0c:
05:05:ef:0a
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgISAYr1Ui9Te56WwITeM5Er74+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz
YjY3YWEwHhcNMjMxMDAzMTEzNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTdhMWRhZDQ0NTFkYzVjZGUyNDFjMWFlM2M1OWFlMzRjMzM2NGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHwNStkySuEDzUDGIA8voypgBSl3
qOdOIJj/je+cBRXGEqre6yAOc4qNmQjY+pY8OzRcLEhUCdX1Hpk68WXFO8pyWqu1
pa4789DbjtNPeE9jba7FURAGWqgiVYqYUh4Rth+oBPJAFauJTXEOLE0sMkOqqGio
vU8HKwD+yvk2kQrP94RCaUySAfdkrUC4nbJJtPxNeZ9uOwOIR6irU7vUI0BMPvzP
sr7VX3dHkFhiHXyzU0hg7rS3bOGfhtBdlTTo0ov3zsT0pnAf1HQHqi4Cbz30SECg
/AueYlL4OencLTmEdl6EwS7DADrmTwXBz9anTi8RNF7jzd8rreAgIK7JpwIDAQAB
o4IDMjCCAy4wHQYDVR0OBBYEFM56Ha1EUdxc3iQcGuPFmuNMM2TWMB8GA1UdIwQY
MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt
OTQ0Y2U3ZWViMTU0LzEvem5vZHJVUlIzRnplSkJ3YTQ4V2E0MHd6Wk5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0
LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRgYIKwYBBQUHAQcBAf8EggE1MIIBMTCCAS0EAgABMIIB
JTALAwMDTXgDBARNeCADBAJNeDQwDAMEAk14PAMEAU15DDAMAwQATXkPAwQATXka
MAwDBAJNeRwDBABNeR4wDAMEBk15QAMEBk17gAMEBE30IAMEBVKQwDALAwMDXUgD
BANdS1AwDAMEBV1LYAMEBl1LgDAMAwQFXUvgAwQEXUwgAwQEXUxAMAwDBARdTHAD
BAVdTYADBAZdTcADBAddToAwDAMEB19FgAMEBF9FwDAMAwQFX0XgAwQAX0XoAwQD
X0XwAwQCX0X8AwQFbcngAwQCjargMAwDBACNquUDBACNquwDBACNqu4DBASNqvAw
CwMDAbzmAwQAvOZkMAwDBAG85mYDBAG85mwwDAMEALzmbwMEAbzmcDAMAwQAvOZz
AwQBvOZ0MA0GCSqGSIb3DQEBCwUAA4IBAQBtbwg8PyyJHQJ62bCBDKd0sOhz6ZID
PZ6V47WhbEha5HNuwJRENm8tfetGx0YCbfayIx9PT0XUvCOcrf4dU/MIsJlvwYvN
ZzYT/4J5rs1nGMMA8aa4ns/uXiyOhC+uH4BbvNwQwNAQgh/n4jy/XXZdUwfghrsU
VjrHhIYOYxGidRa628vxEIuzqB5Zjx+v3/j4Yt2AhRyumpYMivYD0N6eqCh38Te6
vvvWuYh/D9S9G8LYU7Hh33MylxAGHNryiR1nemgVNZL+QdUoipJpJbsl2zm50m74
oGvJoNc64+uX7SgxkjSER6EJmYEnQ++IOhZitJ/Ajh+wS/Y0lgwFBe8K
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:48:04 2025 by rpki-client