Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/n589LK9-FbfbAlNgQ4SmN-RkKrk.roa
File: n589LK9-FbfbAlNgQ4SmN-RkKrk.roa (raw, json)
Hash identifier: EzFAPs8PeHwXJfJwGmwHQR+7y4qI8t4jBo/Sh12WXik=
Subject key identifier: 9F:9F:3D:2C:AF:7E:15:B7:DB:02:53:60:43:84:A6:37:E4:64:2A:B9
Certificate issuer: /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial: 01846E115FABF6085668879CDA00F37C85C7
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/n589LK9-FbfbAlNgQ4SmN-RkKrk.roa
Signing time: Sat 12 Nov 2022 22:59:03 +0000
ROA not before: Sat 12 Nov 2022 22:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15685
IP address blocks: 82.208.56.0/24 maxlen: 24
82.208.58.0/24 maxlen: 24
82.208.60.0/24 maxlen: 24
82.208.60.0/22 maxlen: 22
109.123.202.0/23 maxlen: 23
109.123.205.0/24 maxlen: 24
109.123.206.0/23 maxlen: 23
82.208.4.0/22 maxlen: 22
82.208.8.0/22 maxlen: 22
109.123.209.0/24 maxlen: 24
109.123.208.0/22 maxlen: 22
82.208.14.0/24 maxlen: 24
109.123.216.0/21 maxlen: 21
82.208.16.0/23 maxlen: 23
82.208.17.0/24 maxlen: 24
82.208.16.0/24 maxlen: 24
109.123.214.0/23 maxlen: 23
82.208.12.0/24 maxlen: 24
82.208.18.0/24 maxlen: 24
109.123.221.0/24 maxlen: 24
82.208.28.0/23 maxlen: 23
82.208.26.0/23 maxlen: 23
82.208.32.0/22 maxlen: 22
82.208.44.0/24 maxlen: 24
82.208.39.0/24 maxlen: 24
82.208.40.0/23 maxlen: 23
82.208.50.0/24 maxlen: 24
82.208.46.0/23 maxlen: 23
82.208.48.0/23 maxlen: 23
217.11.254.0/24 maxlen: 24
217.11.224.0/23 maxlen: 23
217.11.230.0/24 maxlen: 24
217.11.232.0/23 maxlen: 23
217.11.227.0/24 maxlen: 24
217.11.228.0/23 maxlen: 23
217.11.236.0/24 maxlen: 24
217.11.235.0/24 maxlen: 24
217.11.245.0/24 maxlen: 24
217.11.246.0/23 maxlen: 23
217.11.242.0/23 maxlen: 23
217.11.251.0/24 maxlen: 24
217.11.248.0/23 maxlen: 23
217.11.249.0/24 maxlen: 24
109.123.192.0/21 maxlen: 21
81.0.217.0/24 maxlen: 24
81.0.214.0/24 maxlen: 24
81.0.226.0/24 maxlen: 24
81.0.225.0/24 maxlen: 24
81.0.230.0/23 maxlen: 23
77.78.96.0/20 maxlen: 20
81.0.232.0/21 maxlen: 21
77.78.94.0/23 maxlen: 23
81.0.228.0/24 maxlen: 24
81.0.240.0/22 maxlen: 22
77.78.112.0/21 maxlen: 21
81.0.250.0/24 maxlen: 24
77.78.123.0/24 maxlen: 24
77.78.124.0/22 maxlen: 22
81.0.254.0/23 maxlen: 23
77.78.120.0/23 maxlen: 23
85.239.227.0/24 maxlen: 24
81.0.192.0/22 maxlen: 22
81.0.199.0/24 maxlen: 24
81.0.206.0/23 maxlen: 23
77.78.76.0/22 maxlen: 22
85.239.252.0/23 maxlen: 23
81.0.208.0/23 maxlen: 23
81.0.212.0/23 maxlen: 23
2001:1528::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6e:11:5f:ab:f6:08:56:68:87:9c:da:00:f3:7c:85:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Validity
Not Before: Nov 12 22:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f9f3d2caf7e15b7db0253604384a637e4642ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:d7:41:d9:1c:63:9a:75:ef:68:09:af:76:
16:fa:6f:d9:9a:57:8a:06:b1:9f:73:b3:7a:16:6d:
93:1f:24:21:09:2c:99:41:60:e1:00:73:4d:1d:66:
01:90:bb:0c:79:b3:02:08:17:d7:e0:06:a3:8a:c3:
73:cf:76:b5:e4:be:4e:7c:a6:36:5c:b2:b5:62:c3:
79:4b:27:74:bd:46:5a:5c:a1:35:7a:48:d9:cb:50:
4a:4c:82:44:da:b0:a1:45:18:68:bf:f3:a1:4f:d6:
80:72:d5:4c:f4:e0:3d:3b:07:67:46:34:da:e9:ef:
61:74:7c:04:61:d3:a9:6b:da:10:c3:52:56:38:cc:
a8:cf:58:64:6a:a0:32:c9:75:4b:c8:49:b7:e3:e2:
f6:16:9d:fa:f2:1d:59:b0:44:b7:3c:95:b2:fe:77:
aa:87:d8:a3:9b:dd:7c:29:3d:c8:0f:ae:64:1e:c6:
ea:9b:86:c8:41:58:d3:a7:e7:fd:74:75:84:f4:3c:
23:12:1b:bf:c1:da:25:df:58:9a:f8:72:1d:68:ca:
84:4e:cd:03:a6:4d:28:d0:53:59:63:31:9b:ed:9c:
65:85:4e:bf:a1:83:41:a5:26:27:69:56:19:1b:eb:
b1:f3:26:35:3a:98:fd:da:95:bd:bc:85:58:3d:c9:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9F:3D:2C:AF:7E:15:B7:DB:02:53:60:43:84:A6:37:E4:64:2A:B9
X509v3 Authority Key Identifier:
keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/n589LK9-FbfbAlNgQ4SmN-RkKrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.76.0/22
77.78.94.0-77.78.121.255
77.78.123.0-77.78.127.255
81.0.192.0/22
81.0.199.0/24
81.0.206.0-81.0.209.255
81.0.212.0-81.0.214.255
81.0.217.0/24
81.0.225.0-81.0.226.255
81.0.228.0/24
81.0.230.0-81.0.243.255
81.0.250.0/24
81.0.254.0/23
82.208.4.0-82.208.12.255
82.208.14.0/24
82.208.16.0-82.208.18.255
82.208.26.0-82.208.29.255
82.208.32.0/22
82.208.39.0-82.208.41.255
82.208.44.0/24
82.208.46.0-82.208.50.255
82.208.56.0/24
82.208.58.0/24
82.208.60.0/22
85.239.227.0/24
85.239.252.0/23
109.123.192.0/21
109.123.202.0/23
109.123.205.0-109.123.211.255
109.123.214.0-109.123.223.255
217.11.224.0/23
217.11.227.0-217.11.230.255
217.11.232.0/23
217.11.235.0-217.11.236.255
217.11.242.0/23
217.11.245.0-217.11.249.255
217.11.251.0/24
217.11.254.0/24
IPv6:
2001:1528::/32
Signature Algorithm: sha256WithRSAEncryption
51:d8:d8:ee:c5:71:6a:09:98:6e:46:08:f8:26:e3:78:95:73:
f9:05:4b:3e:6c:83:3e:54:a3:6a:18:6a:76:87:86:70:b9:00:
d8:ed:41:68:4d:2f:a2:ad:71:43:85:eb:8e:be:91:26:a6:05:
5d:ce:3a:97:24:8b:4b:d5:ef:94:5e:57:4a:f1:2a:1b:23:30:
da:92:76:18:02:63:6e:1d:d7:bb:98:a7:81:75:e4:ab:72:d1:
5a:46:8d:7d:91:97:63:b4:70:5d:4b:92:c7:4d:71:ff:8a:c6:
2c:77:67:56:49:06:f1:03:57:69:dc:1f:22:10:59:a5:e3:19:
55:99:d8:45:2f:44:ff:2a:a0:de:58:39:9e:9a:03:c2:0a:8a:
83:a9:e3:76:17:1f:06:f3:92:26:d9:be:03:de:39:c4:5d:c1:
c5:77:dc:d2:3d:5e:25:81:63:44:3c:ec:85:37:ba:8c:3c:aa:
3c:f5:ae:d0:7d:12:52:59:3b:13:91:95:4b:c0:88:bc:cd:94:
c7:f1:16:1e:db:db:30:bb:22:dc:0e:50:f9:07:36:d1:2e:34:
b2:3c:16:4c:cb:58:ac:33:64:05:99:b8:6c:7e:d9:e6:19:2a:
50:18:13:10:27:52:36:de:7c:44:7d:a0:26:b4:61:99:4a:df:
25:42:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:50 2025 by rpki-client