Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/sitPRtimcrCnNv1anM3DLvjSAGo.roa
File: sitPRtimcrCnNv1anM3DLvjSAGo.roa (raw, json)
Hash identifier: KtHMIwYWaor8Wedp4HdGgJiUCH+kkIixU2uo3Ov7Ey0=
Subject key identifier: B2:2B:4F:46:D8:A6:72:B0:A7:36:FD:5A:9C:CD:C3:2E:F8:D2:00:6A
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018750E7B21C0783A44B24C0E4C0CA703BF0
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/sitPRtimcrCnNv1anM3DLvjSAGo.roa
Signing time: Wed 05 Apr 2023 10:12:54 +0000
ROA not before: Wed 05 Apr 2023 10:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8641
IP address blocks: 213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.186.0/23 maxlen: 23
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.155.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
77.94.162.0/24 maxlen: 24
77.94.160.0/19 maxlen: 19
84.47.128.0/23 maxlen: 23
84.47.128.0/22 maxlen: 22
84.47.131.0/24 maxlen: 24
77.94.175.0/24 maxlen: 24
84.47.135.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.144.0/23 maxlen: 23
84.47.152.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
84.47.147.0/24 maxlen: 24
77.94.189.0/24 maxlen: 24
84.47.148.0/22 maxlen: 22
84.47.156.0/22 maxlen: 22
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
84.47.160.0/22 maxlen: 22
85.91.112.0/22 maxlen: 22
84.47.164.0/23 maxlen: 23
84.47.168.0/21 maxlen: 21
85.91.118.0/23 maxlen: 23
213.135.64.0/23 maxlen: 23
213.135.64.0/22 maxlen: 22
213.135.67.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
85.91.122.0/24 maxlen: 24
84.47.176.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.176.0/23 maxlen: 23
85.91.120.0/23 maxlen: 23
84.47.181.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.80.0/24 maxlen: 24
84.47.190.0/23 maxlen: 23
213.135.82.0/23 maxlen: 23
213.135.79.0/24 maxlen: 24
213.135.80.0/21 maxlen: 21
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:e7:b2:1c:07:83:a4:4b:24:c0:e4:c0:ca:70:3b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Apr 5 10:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b22b4f46d8a672b0a736fd5a9ccdc32ef8d2006a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:8d:56:d4:d5:5c:b5:80:de:95:be:4a:c1:
ad:0a:e2:ea:89:3d:ca:1c:d5:e8:f2:92:73:0e:41:
ba:a9:92:fc:d3:2d:ca:6a:2a:83:73:05:04:13:04:
7f:39:bf:8a:0c:ad:3e:f4:24:97:ae:e6:f8:9a:01:
cf:e6:ba:f2:bd:3a:fd:60:05:ac:2c:f7:8c:34:e3:
1d:ca:50:d3:90:2f:84:dc:ab:a2:eb:1b:a9:dc:fd:
3d:aa:81:3f:e4:b2:73:56:00:b9:e9:8a:f4:98:6c:
c7:65:24:30:31:da:5c:43:fb:5b:ed:30:de:2d:10:
45:a3:cc:3c:73:35:f2:f9:00:c1:cf:62:58:7d:e7:
cb:2c:81:85:7a:44:4e:04:08:11:66:93:0e:19:9f:
9c:45:1f:fc:6e:39:3b:f0:ec:6f:61:b5:99:c8:0e:
6f:a8:05:91:28:50:f1:be:e5:01:4d:e5:c5:0a:8c:
49:56:25:84:15:7d:cb:fe:5e:01:a6:26:78:23:bc:
84:5a:df:6e:c2:65:90:80:f6:bc:10:e9:3b:35:53:
f7:46:3e:eb:bb:cc:29:8f:b7:1c:a2:9a:28:77:78:
6f:02:08:53:21:32:38:ab:93:eb:01:c3:0b:6d:b7:
da:09:c2:ce:1f:7c:92:19:8a:01:b3:fd:e9:e2:5b:
f7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2B:4F:46:D8:A6:72:B0:A7:36:FD:5A:9C:CD:C3:2E:F8:D2:00:6A
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/sitPRtimcrCnNv1anM3DLvjSAGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/22
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
185.106.107.0/24
213.135.64.0/22
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.79.0-213.135.91.255
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.186.0-213.208.191.255
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
1e:28:a9:d5:08:82:dc:78:6c:d0:84:65:2b:02:94:74:13:28:
96:a3:4e:a7:80:49:b4:22:51:b9:4b:ad:95:2a:91:c0:de:5d:
09:73:36:d4:20:c0:84:c4:0d:8c:e2:c3:e1:59:87:55:69:dd:
0a:be:4c:c1:c8:c9:ed:25:b3:38:cd:fd:a9:d4:04:cc:f6:a3:
fe:57:f4:d7:a6:48:0a:4f:13:09:e1:a1:87:38:86:cd:52:74:
a6:ce:45:04:57:b9:ac:95:eb:ac:d4:b9:1b:4a:68:ea:ac:04:
83:9c:4f:95:76:55:3c:87:fe:08:80:bd:1e:11:ae:f0:3b:29:
91:bf:9b:c5:b3:35:9e:d7:ea:c7:e8:cd:97:23:7c:bf:57:d8:
59:c9:37:db:17:1f:0e:4a:b4:a1:54:ba:8a:53:73:d8:2e:c9:
3b:ad:09:3e:53:c5:5e:d6:81:65:ce:99:be:6b:9d:94:62:90:
79:7f:5f:5b:e5:75:90:60:a8:a6:a2:52:1b:52:65:de:ce:b2:
d1:7d:01:e3:a9:be:59:0a:9d:da:32:32:17:2d:9d:da:e8:ff:
df:a6:22:dc:cc:e3:39:22:c2:ba:04:ab:ec:79:a4:62:09:00:
34:7b:45:57:0f:c4:d5:ac:f7:5b:08:61:0b:df:ef:86:92:88:
be:fc:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:51:30 2025 by rpki-client