Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8M3s50VeJ9KQ__tTuMXze61AZ6A.roa
File: 8M3s50VeJ9KQ__tTuMXze61AZ6A.roa (raw, json)
Hash identifier: IwcdMduuZVXl7v5XMSDocoWZzG28wLplkybaF33Nh0w=
Subject key identifier: F0:CD:EC:E7:45:5E:27:D2:90:FF:FB:53:B8:C5:F3:7B:AD:40:67:A0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018AAFF8C3281BADBB31D79A25C092AFFDF3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8M3s50VeJ9KQ__tTuMXze61AZ6A.roa
Signing time: Wed 20 Sep 2023 00:23:50 +0000
ROA not before: Wed 20 Sep 2023 00:23:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 89.213.64.0/18 maxlen: 24
37.252.24.0/21 maxlen: 24
80.240.80.0/20 maxlen: 20
77.107.64.0/18 maxlen: 24
213.210.0.0/18 maxlen: 24
85.159.128.0/21 maxlen: 24
212.38.64.0/19 maxlen: 24
37.98.144.0/22 maxlen: 24
37.98.144.0/21 maxlen: 24
109.176.0.0/16 maxlen: 16
89.213.48.0/20 maxlen: 24
89.213.192.0/18 maxlen: 24
213.218.208.0/20 maxlen: 24
89.31.232.0/21 maxlen: 24
185.20.34.0/24 maxlen: 24
185.20.35.0/24 maxlen: 24
79.99.72.0/21 maxlen: 24
185.20.32.0/22 maxlen: 24
213.218.224.0/19 maxlen: 24
81.168.0.0/17 maxlen: 17
82.163.0.0/19 maxlen: 24
217.144.144.0/20 maxlen: 24
217.145.64.0/20 maxlen: 24
185.24.84.0/22 maxlen: 24
194.105.64.0/19 maxlen: 24
213.130.128.0/19 maxlen: 24
82.152.0.0/16 maxlen: 16
81.5.128.0/18 maxlen: 18
82.152.0.0/15 maxlen: 15
195.128.138.0/24 maxlen: 24
213.152.32.0/19 maxlen: 19
2a02:21f8::/32 maxlen: 32
2a00:c60::/32 maxlen: 32
2001:1a90::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:af:f8:c3:28:1b:ad:bb:31:d7:9a:25:c0:92:af:fd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 20 00:23:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0cdece7455e27d290fffb53b8c5f37bad4067a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:ce:6c:cc:a4:12:e9:03:ff:ed:81:b6:20:
18:6c:c3:99:b7:62:8d:e9:fb:a0:7e:ad:30:a8:00:
4e:87:7d:7e:9d:d9:9f:15:28:19:32:88:9d:ea:57:
55:25:43:c7:f6:43:80:9e:c2:b2:5f:2b:89:db:1c:
5a:f0:08:c3:05:85:99:a9:ac:5f:74:dd:79:3a:54:
e6:9b:61:cb:9b:9b:65:ff:8d:24:69:24:f1:65:2e:
40:46:2a:17:82:fd:3b:38:c0:9d:b4:2f:23:90:17:
fa:c3:9c:e5:72:62:1f:a7:f3:4f:1e:31:22:85:f2:
94:83:d8:e9:65:82:50:6a:63:c1:21:76:87:64:aa:
30:f2:1d:94:30:5a:be:c5:c2:e4:ac:04:2c:30:1d:
bb:a3:00:36:03:54:a2:45:0d:30:74:2f:90:36:6b:
8e:00:d5:06:cf:4d:9f:18:b2:0c:fa:e4:1c:c0:2f:
69:cd:b9:d8:73:91:0a:a7:ff:8c:5e:3c:26:21:d7:
82:57:0a:26:38:ea:49:c5:0a:95:f3:85:19:22:1e:
39:b6:0d:62:3b:ee:d0:a7:2c:54:5d:57:3f:19:d1:
64:5b:19:a5:82:b7:9f:b0:7f:6c:f6:21:53:2c:45:
3d:dd:58:87:fd:8c:5d:a8:60:f2:ee:22:58:67:ec:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CD:EC:E7:45:5E:27:D2:90:FF:FB:53:B8:C5:F3:7B:AD:40:67:A0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8M3s50VeJ9KQ__tTuMXze61AZ6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.107.64.0/18
79.99.72.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.31.232.0/21
89.213.48.0-89.213.127.255
89.213.192.0/18
109.176.0.0/16
185.20.32.0/22
185.24.84.0/22
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a02:21f8::/32
Signature Algorithm: sha256WithRSAEncryption
68:65:32:2a:2f:c5:8c:55:ca:8b:51:08:19:2f:c6:89:4e:82:
7c:e6:e9:d8:19:b9:a6:10:68:f4:f5:ca:de:f8:ea:9a:33:d5:
74:32:47:f3:85:c6:6b:94:81:ae:1d:ce:94:2b:d0:67:27:96:
d9:0e:c4:b6:12:ff:5b:20:7a:84:50:62:a1:a0:c5:1b:72:c9:
b3:08:4e:68:72:2f:20:6b:44:f5:1d:6f:65:93:3a:ac:bb:47:
3a:34:2e:4a:f0:f3:fb:76:17:9c:ec:52:60:87:ee:90:bb:4d:
a3:92:21:c7:50:f4:79:c6:f9:7b:44:cb:87:7f:7a:61:0f:9a:
b5:00:46:e2:ae:62:18:89:ba:d7:6f:78:24:af:e6:85:70:f5:
3a:f4:de:98:a8:91:02:01:d9:58:f5:34:6d:f8:30:df:7a:fa:
1a:12:a0:f6:ac:8f:8d:09:00:7b:52:5c:35:a2:2a:44:3d:d7:
e1:fe:5f:d4:60:6b:a4:8a:10:7d:be:73:13:22:07:a2:77:d3:
04:bd:33:f3:39:55:f2:15:af:b4:15:4a:36:32:bd:21:82:16:
ac:a5:a3:f3:6c:75:90:ca:17:18:91:1a:3f:22:f3:be:bb:7d:
e2:cb:62:ac:08:b3:36:b3:c0:15:b5:6c:47:7e:bf:ad:f6:7b:
f9:20:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:21:26 2025 by rpki-client