Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/RphuATYYGnLqOCVgwVHaas7QMXw.roa
File: RphuATYYGnLqOCVgwVHaas7QMXw.roa (raw, json)
Hash identifier: q9bYfIKh0qze8n+jzC099Ls6UynPWv6TsvaorwSVfDI=
Subject key identifier: 46:98:6E:01:36:18:1A:72:EA:38:25:60:C1:51:DA:6A:CE:D0:31:7C
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 018EA5905BAD5ECDDAB288A7BDCC64D51199
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/RphuATYYGnLqOCVgwVHaas7QMXw.roa
Signing time: Wed 03 Apr 2024 20:04:45 +0000
ROA not before: Wed 03 Apr 2024 20:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1680
IP address blocks: 37.26.146.0/24 maxlen: 24
37.26.148.0/24 maxlen: 24
37.26.150.0/24 maxlen: 24
46.116.0.0/16 maxlen: 16
46.117.0.0/16 maxlen: 16
46.210.0.0/16 maxlen: 24
62.0.0.0/16 maxlen: 24
62.0.87.0/24 maxlen: 24
62.0.88.0/22 maxlen: 24
62.0.92.0/23 maxlen: 24
62.0.94.0/24 maxlen: 24
62.0.114.0/23 maxlen: 24
62.0.116.0/22 maxlen: 24
62.0.120.0/21 maxlen: 24
62.0.128.0/23 maxlen: 24
62.90.0.0/16 maxlen: 24
62.90.135.0/24 maxlen: 24
80.250.144.0/20 maxlen: 24
82.166.0.0/16 maxlen: 24
82.166.100.0/22 maxlen: 24
82.166.112.0/21 maxlen: 24
82.166.201.128/25 maxlen: 25
85.64.0.0/16 maxlen: 16
85.65.0.0/16 maxlen: 16
85.250.0.0/16 maxlen: 16
89.138.0.0/16 maxlen: 16
89.139.0.0/16 maxlen: 16
93.172.0.0/16 maxlen: 16
93.173.0.0/16 maxlen: 16
95.35.0.0/16 maxlen: 24
109.186.0.0/16 maxlen: 16
109.253.0.0/16 maxlen: 24
141.226.132.0/24 maxlen: 24
141.226.134.0/24 maxlen: 24
147.161.8.0/21 maxlen: 24
147.234.17.0/24 maxlen: 24
147.234.22.0/24 maxlen: 24
147.234.26.0/24 maxlen: 24
147.234.27.0/24 maxlen: 24
147.234.27.0/25 maxlen: 25
147.234.27.128/25 maxlen: 25
147.234.28.0/24 maxlen: 24
147.234.43.0/24 maxlen: 24
147.234.83.0/24 maxlen: 24
147.234.84.0/24 maxlen: 24
147.234.86.0/24 maxlen: 24
176.12.128.0/17 maxlen: 24
176.13.0.0/16 maxlen: 24
192.118.28.0/22 maxlen: 22
192.118.28.0/23 maxlen: 23
192.118.30.0/23 maxlen: 23
194.90.0.0/16 maxlen: 24
194.90.1.0/24 maxlen: 24
199.203.0.0/16 maxlen: 16
199.203.1.0/24 maxlen: 24
199.203.21.0/24 maxlen: 24
199.203.191.0/24 maxlen: 24
207.232.0.0/18 maxlen: 18
212.29.192.0/18 maxlen: 18
212.29.244.0/24 maxlen: 24
212.143.0.0/16 maxlen: 24
212.143.194.0/24 maxlen: 24
212.150.0.0/16 maxlen: 24
212.235.0.0/17 maxlen: 24
217.132.0.0/16 maxlen: 16
2001:4df0::/29 maxlen: 32
2001:4df0::/32 maxlen: 32
2001:4df1::/32 maxlen: 32
2001:4df2::/32 maxlen: 32
2001:4df3::/32 maxlen: 32
2001:4df4::/32 maxlen: 32
2001:4df5::/32 maxlen: 32
2001:4df6::/32 maxlen: 32
2001:4df7::/32 maxlen: 32
2a02:148::/29 maxlen: 32
2a02:148::/32 maxlen: 32
2a02:149::/32 maxlen: 32
2a02:14a::/32 maxlen: 32
2a02:14b::/32 maxlen: 32
2a02:14c::/32 maxlen: 32
2a02:14d::/32 maxlen: 32
2a02:14e::/32 maxlen: 32
2a02:14f::/32 maxlen: 32
2a03:c5c0::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a5:90:5b:ad:5e:cd:da:b2:88:a7:bd:cc:64:d5:11:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Apr 3 20:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46986e0136181a72ea382560c151da6aced0317c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a3:b5:79:75:72:af:4a:28:92:75:cd:83:00:
4f:7f:83:9c:f4:ab:67:98:c0:2e:01:3e:bb:44:1c:
55:db:4b:fe:bd:d7:83:f8:5a:43:7c:09:46:7d:01:
6e:2d:a0:bf:3e:1b:c5:cc:d4:ea:4b:48:74:e9:ff:
a3:77:b2:e7:19:05:46:4f:d4:40:ad:b1:cb:94:0b:
6a:1a:6c:25:47:2c:ba:1f:e3:87:03:c8:04:43:da:
be:32:7a:73:89:b9:a5:d1:e8:4e:db:32:d0:b2:ee:
87:92:6a:7c:c7:ae:cb:0f:cd:ea:0b:dd:76:1e:94:
0d:c2:fc:85:73:78:e5:df:0a:2f:bd:c4:b3:31:53:
7b:85:0b:ca:b1:7b:05:df:a5:0a:ce:b1:59:65:cd:
4a:82:29:d4:9a:a0:eb:d3:fb:73:19:0b:19:be:a7:
f4:3f:0e:e2:9d:15:0d:41:90:fb:74:24:d6:22:54:
be:a9:ef:ac:b6:0f:56:2c:e0:a6:27:c8:83:e4:1c:
36:7f:81:f1:6f:ca:a3:34:ed:2b:1d:de:93:3e:59:
b6:a5:8b:a4:14:87:6d:97:ec:42:25:27:53:0a:fa:
60:6e:1c:5b:9f:06:85:94:c3:f7:d1:54:53:ce:7f:
f6:21:94:67:17:1e:28:f6:75:26:db:ed:be:ac:f7:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:98:6E:01:36:18:1A:72:EA:38:25:60:C1:51:DA:6A:CE:D0:31:7C
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/RphuATYYGnLqOCVgwVHaas7QMXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.146.0/24
37.26.148.0/24
37.26.150.0/24
46.116.0.0/15
46.210.0.0/16
62.0.0.0/16
62.90.0.0/16
80.250.144.0/20
82.166.0.0/16
85.64.0.0/15
85.250.0.0/16
89.138.0.0/15
93.172.0.0/15
95.35.0.0/16
109.186.0.0/16
109.253.0.0/16
141.226.132.0/24
141.226.134.0/24
147.161.8.0/21
147.234.17.0/24
147.234.22.0/24
147.234.26.0-147.234.28.255
147.234.43.0/24
147.234.83.0-147.234.84.255
147.234.86.0/24
176.12.128.0-176.13.255.255
192.118.28.0/22
194.90.0.0/16
199.203.0.0/16
207.232.0.0/18
212.29.192.0/18
212.143.0.0/16
212.150.0.0/16
212.235.0.0/17
217.132.0.0/16
IPv6:
2001:4df0::/29
2a02:148::/29
2a03:c5c0::/32
Signature Algorithm: sha256WithRSAEncryption
9e:ee:26:99:62:0b:43:1e:a4:b9:43:86:43:73:b2:1b:46:8e:
76:4f:8a:28:5a:2c:01:dc:bf:f9:a7:5a:97:3a:d3:e9:d0:ad:
fb:c5:3d:67:d7:e6:4f:40:eb:79:f6:4e:01:34:d7:cb:88:90:
fa:82:6c:3e:d2:98:18:fc:0a:72:57:65:ad:83:11:c4:92:56:
5f:60:f1:2c:6a:b3:04:ae:60:cb:d0:7b:5d:70:4c:01:33:f2:
1e:ae:f5:ea:62:2d:69:fd:a9:4e:e9:5f:c4:21:ac:de:26:93:
ac:f0:e3:86:2b:1e:df:fe:25:d7:06:ab:55:dd:30:65:76:d9:
29:b2:5e:30:30:a5:7c:4b:3b:8c:68:98:b8:cf:4d:a2:07:66:
49:cd:18:df:28:ea:89:f2:18:72:c3:f5:e1:2f:b9:36:3a:44:
fa:62:96:c3:2f:a7:e2:ca:9d:fd:40:39:1d:0a:f4:90:88:d9:
5e:d7:ab:4c:8a:01:30:e1:3f:5a:71:a1:29:4f:34:0c:d7:c8:
39:cc:0a:a6:ec:b0:12:ee:cb:e1:41:a8:c0:02:7d:f8:04:8b:
e1:9d:8e:9f:24:0f:61:e5:57:e2:2d:e6:3b:4b:92:da:9c:7d:
4f:d6:4c:d7:60:8d:cb:80:80:22:d5:2f:9b:a9:6e:10:a6:42:
86:08:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:52 2025 by rpki-client