Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/Qo1VADbmgMXgH7FuRIL38m3fKhE.roa
File: Qo1VADbmgMXgH7FuRIL38m3fKhE.roa (raw, json)
Hash identifier: 8xfApa8hDjrndDluLAjWKQHY2n9mrdic74RX+ySRW04=
Subject key identifier: 42:8D:55:00:36:E6:80:C5:E0:1F:B1:6E:44:82:F7:F2:6D:DF:2A:11
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 018C6D24EF447C87F6E2A277469FD5A966A9
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/Qo1VADbmgMXgH7FuRIL38m3fKhE.roa
Signing time: Fri 15 Dec 2023 11:03:06 +0000
ROA not before: Fri 15 Dec 2023 11:03:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204601
IP address blocks: 45.12.215.0/24 maxlen: 24
45.12.214.0/24 maxlen: 24
45.87.0.0/22 maxlen: 22
45.147.197.0/24 maxlen: 24
45.147.196.0/24 maxlen: 24
45.147.198.0/24 maxlen: 24
45.147.199.0/24 maxlen: 24
91.228.56.0/24 maxlen: 24
45.12.212.0/24 maxlen: 24
45.12.213.0/24 maxlen: 24
91.208.127.0/24 maxlen: 24
185.235.128.0/24 maxlen: 24
185.235.131.0/24 maxlen: 24
185.235.129.0/24 maxlen: 24
185.235.130.0/24 maxlen: 24
77.220.215.0/24 maxlen: 24
77.220.214.0/24 maxlen: 24
45.66.8.0/24 maxlen: 24
45.66.11.0/24 maxlen: 24
45.66.9.0/24 maxlen: 24
45.66.10.0/24 maxlen: 24
185.241.52.0/24 maxlen: 24
185.241.55.0/24 maxlen: 24
185.241.53.0/24 maxlen: 24
185.241.54.0/24 maxlen: 24
185.241.61.0/24 maxlen: 24
77.220.212.0/24 maxlen: 24
77.220.213.0/24 maxlen: 24
77.220.212.0/22 maxlen: 22
91.201.25.0/24 maxlen: 24
185.154.12.0/24 maxlen: 24
185.154.14.0/24 maxlen: 24
185.154.15.0/24 maxlen: 24
185.154.13.0/24 maxlen: 24
212.86.101.0/24 maxlen: 24
212.86.102.0/24 maxlen: 24
212.86.108.0/24 maxlen: 24
212.86.109.0/24 maxlen: 24
212.86.114.0/24 maxlen: 24
212.86.115.0/24 maxlen: 24
45.132.107.0/24 maxlen: 24
45.132.106.0/24 maxlen: 24
213.166.68.0/24 maxlen: 24
213.166.69.0/24 maxlen: 24
213.166.70.0/24 maxlen: 24
213.166.71.0/24 maxlen: 24
45.91.200.0/24 maxlen: 24
178.159.39.0/24 maxlen: 24
45.91.201.0/24 maxlen: 24
178.159.42.0/24 maxlen: 24
178.159.43.0/24 maxlen: 24
45.91.202.0/24 maxlen: 24
45.91.203.0/24 maxlen: 24
45.132.104.0/24 maxlen: 24
45.132.105.0/24 maxlen: 24
92.119.112.0/24 maxlen: 24
92.119.115.0/24 maxlen: 24
92.119.113.0/24 maxlen: 24
92.119.114.0/24 maxlen: 24
185.213.210.0/24 maxlen: 24
185.213.208.0/22 maxlen: 22
185.213.208.0/24 maxlen: 24
185.213.209.0/24 maxlen: 24
185.213.211.0/24 maxlen: 24
80.85.136.0/21 maxlen: 21
185.206.213.0/24 maxlen: 24
185.206.212.0/24 maxlen: 24
185.206.214.0/24 maxlen: 24
185.206.215.0/24 maxlen: 24
185.51.246.0/24 maxlen: 24
185.51.247.0/24 maxlen: 24
185.219.82.0/24 maxlen: 24
185.219.80.0/22 maxlen: 22
185.219.83.0/24 maxlen: 24
185.219.80.0/24 maxlen: 24
185.219.81.0/24 maxlen: 24
176.57.69.0/24 maxlen: 24
176.57.70.0/24 maxlen: 24
176.57.68.0/24 maxlen: 24
176.57.71.0/24 maxlen: 24
103.246.144.0/22 maxlen: 22
81.91.176.0/22 maxlen: 22
81.91.178.0/24 maxlen: 24
178.159.38.0/24 maxlen: 24
77.83.172.0/24 maxlen: 24
77.83.173.0/24 maxlen: 24
77.83.174.0/24 maxlen: 24
77.83.175.0/24 maxlen: 24
91.211.249.0/24 maxlen: 24
91.211.248.0/24 maxlen: 24
91.211.250.0/24 maxlen: 24
91.211.251.0/24 maxlen: 24
193.163.113.0/24 maxlen: 24
46.21.250.0/24 maxlen: 24
185.203.240.0/22 maxlen: 22
185.203.240.0/24 maxlen: 24
185.203.242.0/24 maxlen: 24
185.203.243.0/24 maxlen: 24
185.203.241.0/24 maxlen: 24
45.82.176.0/22 maxlen: 22
185.244.216.0/24 maxlen: 24
185.244.216.0/22 maxlen: 22
185.244.219.0/24 maxlen: 24
185.204.109.0/24 maxlen: 24
185.244.217.0/24 maxlen: 24
185.244.218.0/24 maxlen: 24
45.137.64.0/22 maxlen: 22
185.224.132.0/22 maxlen: 22
185.224.132.0/24 maxlen: 24
185.231.70.0/24 maxlen: 24
185.224.134.0/24 maxlen: 24
185.224.133.0/24 maxlen: 24
185.231.68.0/22 maxlen: 22
212.8.246.0/24 maxlen: 24
185.224.135.0/24 maxlen: 24
185.231.68.0/24 maxlen: 24
185.231.71.0/24 maxlen: 24
212.8.244.0/24 maxlen: 24
185.231.69.0/24 maxlen: 24
45.88.106.0/24 maxlen: 24
45.88.107.0/24 maxlen: 24
212.162.152.0/22 maxlen: 24
185.229.251.0/24 maxlen: 24
193.169.105.0/24 maxlen: 24
45.81.224.0/22 maxlen: 22
185.250.206.0/24 maxlen: 24
185.250.204.0/24 maxlen: 24
185.250.205.0/24 maxlen: 24
185.250.207.0/24 maxlen: 24
45.136.85.0/24 maxlen: 24
45.136.84.0/24 maxlen: 24
45.136.86.0/24 maxlen: 24
45.136.87.0/24 maxlen: 24
45.82.68.0/22 maxlen: 22
95.215.204.0/22 maxlen: 22
185.209.20.0/24 maxlen: 24
185.209.21.0/24 maxlen: 24
185.209.20.0/22 maxlen: 22
185.209.22.0/24 maxlen: 24
185.209.23.0/24 maxlen: 24
185.107.237.0/24 maxlen: 24
45.88.78.0/24 maxlen: 24
45.88.76.0/24 maxlen: 24
45.88.77.0/24 maxlen: 24
45.88.79.0/24 maxlen: 24
45.88.104.0/24 maxlen: 24
45.88.105.0/24 maxlen: 24
85.209.90.0/24 maxlen: 24
85.209.88.0/24 maxlen: 24
85.209.89.0/24 maxlen: 24
85.209.91.0/24 maxlen: 24
2a07:5980::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:24:ef:44:7c:87:f6:e2:a2:77:46:9f:d5:a9:66:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Dec 15 11:03:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=428d550036e680c5e01fb16e4482f7f26ddf2a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f2:7f:f7:96:43:5c:cf:48:d4:ed:35:ed:f2:
03:35:dc:81:7e:05:02:38:60:4a:f9:2a:e6:ce:14:
da:b3:1a:94:19:a9:88:91:44:59:61:a5:5d:10:aa:
3c:48:06:25:4c:fc:df:69:c7:32:cd:f6:4d:5d:36:
da:0e:56:0e:1a:0e:33:d1:e4:65:80:1a:c8:00:b7:
65:4e:64:11:59:85:d7:8c:83:9a:9e:58:48:71:7a:
f8:52:00:18:74:79:a9:00:05:7c:fa:3f:17:4e:bb:
0f:bd:4b:4e:1b:e6:bc:9a:ed:0a:a1:0f:01:e4:1f:
bd:a1:b2:c3:aa:8b:4d:50:0e:5d:f6:e7:d6:e9:6f:
82:0e:91:bb:ab:f3:16:c5:92:21:cf:8e:1e:97:b6:
92:4a:0c:6a:cf:cc:4a:fe:ee:7d:a7:62:93:dc:b7:
9d:5d:c1:80:e7:00:58:da:8c:66:21:3d:5b:cc:ff:
10:b7:01:07:8e:07:b8:5b:e2:3e:5e:24:77:45:dd:
a7:36:17:a9:bf:11:ac:27:bc:dc:3b:0a:76:84:af:
df:7d:e5:94:7b:5a:fa:bb:e8:4e:ae:be:b0:f9:0a:
d3:45:d3:63:4d:75:e7:b9:e6:fa:10:11:f3:aa:d5:
94:f7:0e:69:e0:78:60:b1:7a:13:a8:3e:8e:d7:5f:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8D:55:00:36:E6:80:C5:E0:1F:B1:6E:44:82:F7:F2:6D:DF:2A:11
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/Qo1VADbmgMXgH7FuRIL38m3fKhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.212.0/22
45.66.8.0/22
45.81.224.0/22
45.82.68.0/22
45.82.176.0/22
45.87.0.0/22
45.88.76.0/22
45.88.104.0/22
45.91.200.0/22
45.132.104.0/22
45.136.84.0/22
45.137.64.0/22
45.147.196.0/22
46.21.250.0/24
77.83.172.0/22
77.220.212.0/22
80.85.136.0/21
81.91.176.0/22
85.209.88.0/22
91.201.25.0/24
91.208.127.0/24
91.211.248.0/22
91.228.56.0/24
92.119.112.0/22
95.215.204.0/22
103.246.144.0/22
176.57.68.0/22
178.159.38.0/23
178.159.42.0/23
185.51.246.0/23
185.107.237.0/24
185.154.12.0/22
185.203.240.0/22
185.204.109.0/24
185.206.212.0/22
185.209.20.0/22
185.213.208.0/22
185.219.80.0/22
185.224.132.0/22
185.229.251.0/24
185.231.68.0/22
185.235.128.0/22
185.241.52.0/22
185.241.61.0/24
185.244.216.0/22
185.250.204.0/22
193.163.113.0/24
193.169.105.0/24
212.8.244.0/24
212.8.246.0/24
212.86.101.0-212.86.102.255
212.86.108.0/23
212.86.114.0/23
212.162.152.0/22
213.166.68.0/22
IPv6:
2a07:5980::/29
Signature Algorithm: sha256WithRSAEncryption
82:9e:7b:b7:af:4d:d2:8c:50:98:be:5e:29:30:cd:e7:f3:d7:
3f:ae:f4:0d:cb:50:71:23:e2:9b:28:72:5a:9c:85:39:fe:07:
22:cd:ed:fb:ce:a5:a4:84:43:c6:37:e0:3b:6e:76:f5:ee:12:
3f:2d:e1:3e:28:4b:e9:30:9e:49:08:37:a4:43:ab:5a:0a:29:
4a:e6:a9:bd:93:8e:d8:d5:10:21:47:d0:05:92:a8:ba:ab:bc:
f3:f1:6d:bb:48:b2:32:7a:59:db:90:16:77:09:41:43:14:11:
3c:e8:2f:ce:cc:e1:30:1e:3c:f1:3a:79:43:ff:41:a7:ab:4a:
02:fa:27:03:8b:f6:b3:9c:7a:1a:c5:08:06:b2:b7:d3:6b:c6:
56:b4:cb:00:58:72:16:13:ab:04:70:53:7d:65:f9:5e:d8:ec:
e8:2e:74:a7:02:7b:f1:3e:0f:54:67:14:c8:ae:20:2b:6d:33:
af:af:43:bd:8b:59:37:79:a3:ed:f5:af:b8:a0:80:6c:2c:d8:
18:ac:35:f4:66:30:92:45:1a:2a:07:17:40:0d:96:c6:4b:a4:
50:6d:4d:27:22:46:56:10:18:67:6a:d2:ad:81:f0:c7:2e:a7:
40:d1:d6:43:cb:82:8e:10:11:61:9d:19:56:be:e1:e4:34:16:
e7:4c:2d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:35:35 2025 by rpki-client