Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/FaMwnk2zDARrAmUlS7z-qCwBGn8.roa
File: FaMwnk2zDARrAmUlS7z-qCwBGn8.roa (raw, json)
Hash identifier: HiPZvCDCdSt3jU0qfofuV/t1oNpqpEZNfjPj0qbRj9M=
Subject key identifier: 15:A3:30:9E:4D:B3:0C:04:6B:02:65:25:4B:BC:FE:A8:2C:01:1A:7F
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 0192E8020DEE32DFB6205F8864B679920680
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/FaMwnk2zDARrAmUlS7z-qCwBGn8.roa
Signing time: Fri 01 Nov 2024 13:55:01 +0000
ROA not before: Fri 01 Nov 2024 13:55:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8641
IP address blocks: 77.73.24.0/21 maxlen: 21
77.94.160.0/19 maxlen: 19
77.94.175.0/24 maxlen: 24
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.154.0/24 maxlen: 24
81.26.155.0/24 maxlen: 24
84.47.128.0/23 maxlen: 23
84.47.131.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.135.0/24 maxlen: 24
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.143.0/24 maxlen: 24
84.47.144.0/23 maxlen: 23
84.47.147.0/24 maxlen: 24
84.47.150.0/23 maxlen: 32
84.47.152.0/23 maxlen: 23
84.47.156.0/22 maxlen: 22
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
84.47.164.0/23 maxlen: 23
84.47.164.0/24 maxlen: 24
84.47.168.0/22 maxlen: 22
84.47.172.0/24 maxlen: 24
84.47.174.0/23 maxlen: 23
84.47.176.0/23 maxlen: 23
84.47.176.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
84.47.181.0/24 maxlen: 24
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
84.47.190.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
85.91.112.0/22 maxlen: 22
85.91.118.0/23 maxlen: 23
85.91.120.0/23 maxlen: 23
85.91.122.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
213.135.64.0/23 maxlen: 23
213.135.67.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.79.0/24 maxlen: 24
213.135.80.0/24 maxlen: 24
213.135.82.0/23 maxlen: 23
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.184.0/24 maxlen: 24
213.208.186.0/23 maxlen: 23
213.208.188.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e8:02:0d:ee:32:df:b6:20:5f:88:64:b6:79:92:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Nov 1 13:55:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15a3309e4db30c046b0265254bbcfea82c011a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:c1:49:9e:a9:96:2f:b1:39:ae:87:61:b7:
9b:57:17:e7:79:34:b8:02:21:68:01:ee:69:84:93:
10:ca:6e:95:0e:b2:44:a8:a1:e0:6d:88:aa:c5:d1:
35:0e:a9:e2:92:dc:3a:c0:26:08:22:c9:87:42:17:
97:96:8e:75:1a:6b:58:b3:3f:19:fb:56:35:ca:76:
40:19:e9:05:59:66:19:77:e0:bc:d2:26:8e:30:34:
74:dd:16:11:9c:14:88:fa:1b:86:2d:b0:df:ff:80:
c5:2c:e4:da:5a:4e:bb:d0:5b:08:1a:c5:bf:e3:f1:
db:e2:3b:b5:19:2e:a6:a5:d3:b0:fa:67:0f:d9:5a:
5b:56:d1:e5:46:5d:cf:f4:47:65:58:39:18:f9:bd:
f6:db:10:c4:b2:db:cd:ad:70:f0:ad:6b:d1:dc:72:
cb:c2:08:46:21:ac:3d:59:1b:a4:37:42:f1:0b:6d:
07:13:28:74:4a:8d:bc:44:8b:85:c6:ce:5f:cd:cc:
fb:06:46:bf:6f:bc:69:61:57:e5:0f:85:d6:77:b7:
59:0d:52:de:dc:9f:c9:bb:4a:60:64:61:5b:2a:1c:
b0:8d:5b:3f:81:2a:02:fb:1b:91:67:70:f8:0f:eb:
d2:30:54:f7:53:8f:8b:a1:02:65:54:0d:8b:60:d0:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A3:30:9E:4D:B3:0C:04:6B:02:65:25:4B:BC:FE:A8:2C:01:1A:7F
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/FaMwnk2zDARrAmUlS7z-qCwBGn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.24.0/21
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/23
84.47.131.0/24
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0/24
84.47.150.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.172.255
84.47.174.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
185.106.107.0/24
213.135.64.0/23
213.135.67.0/24
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.79.0-213.135.80.255
213.135.82.0-213.135.91.255
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.186.0-213.208.191.255
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
9a:6d:8a:9c:25:c1:46:d6:a5:d4:10:88:92:2b:89:00:82:55:
c5:95:ce:6f:7a:0e:fd:60:d8:10:26:c9:7a:ac:99:4b:14:38:
0e:1c:81:cf:8f:07:b4:1a:ab:b3:68:20:83:ae:e2:4c:d3:e8:
8f:36:2c:27:16:82:da:e7:fe:9e:26:55:a7:84:b4:4c:02:a5:
b8:94:da:1e:fc:11:cb:a9:ba:95:57:04:78:04:41:c1:0d:b5:
8d:95:e7:06:74:55:f5:49:c1:f0:37:67:de:2d:28:42:b6:b8:
4a:2a:f5:88:22:2b:93:e2:12:63:57:ac:8e:e1:73:0c:44:c2:
ec:5c:bc:eb:55:47:7f:a4:53:81:ae:c7:55:9a:b0:50:7f:c8:
22:2e:77:0f:f7:1b:dc:86:ee:c1:90:a4:c3:81:0e:38:79:7e:
b8:3b:a9:fb:dd:44:88:e3:65:77:67:9f:0c:0c:28:68:92:73:
7e:04:b2:4d:58:e6:15:73:56:8e:2d:0f:f5:56:3a:df:29:d2:
c0:a4:54:1d:76:93:3b:68:dc:66:44:fa:62:1c:84:26:84:15:
60:31:1f:cf:58:05:aa:c7:d5:5b:66:91:91:ce:80:75:a1:69:
18:8a:13:79:5d:e2:aa:3c:5c:5b:ce:70:7b:f1:82:48:6b:a0:
20:72:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:12 2025 by rpki-client