Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MALE1KbdA9IEn3ZK1UUycKanoCY.roa
File: MALE1KbdA9IEn3ZK1UUycKanoCY.roa (raw, json)
Hash identifier: 7+yNA/AE3HOgV1cILXDadijU85cw3A1c/pzXWH01JVo=
Subject key identifier: 30:02:C4:D4:A6:DD:03:D2:04:9F:76:4A:D5:45:32:70:A6:A7:A0:26
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01874BF49C080F409A0E4B23C8F61095F330
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MALE1KbdA9IEn3ZK1UUycKanoCY.roa
Signing time: Tue 04 Apr 2023 11:08:54 +0000
ROA not before: Tue 04 Apr 2023 11:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 89.213.64.0/18 maxlen: 24
37.252.24.0/21 maxlen: 24
80.240.80.0/20 maxlen: 20
77.107.64.0/18 maxlen: 24
213.210.0.0/18 maxlen: 24
85.159.128.0/21 maxlen: 24
212.38.64.0/19 maxlen: 24
37.98.144.0/22 maxlen: 24
37.98.144.0/21 maxlen: 24
109.176.0.0/16 maxlen: 16
89.213.40.0/21 maxlen: 24
89.213.48.0/20 maxlen: 24
213.218.208.0/20 maxlen: 24
89.31.232.0/21 maxlen: 24
79.99.72.0/21 maxlen: 24
185.20.32.0/22 maxlen: 24
185.20.34.0/24 maxlen: 24
185.20.35.0/24 maxlen: 24
213.218.224.0/19 maxlen: 24
81.168.0.0/17 maxlen: 17
89.213.128.0/17 maxlen: 24
82.163.0.0/19 maxlen: 24
217.144.144.0/20 maxlen: 24
217.145.64.0/20 maxlen: 24
185.49.124.0/22 maxlen: 24
185.24.84.0/22 maxlen: 24
89.213.0.0/21 maxlen: 24
213.130.128.0/19 maxlen: 24
194.105.64.0/19 maxlen: 24
81.5.128.0/18 maxlen: 18
82.152.0.0/15 maxlen: 15
195.128.138.0/24 maxlen: 24
2a02:21f8::/32 maxlen: 32
2a00:c60::/32 maxlen: 32
2001:1a90::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:f4:9c:08:0f:40:9a:0e:4b:23:c8:f6:10:95:f3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 4 11:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3002c4d4a6dd03d2049f764ad5453270a6a7a026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7c:e7:43:ff:db:b7:a8:2f:fb:80:3c:4b:4f:
a5:d9:23:23:6b:af:47:44:a0:15:27:57:ad:94:39:
ce:5e:73:e3:8f:be:99:7d:96:05:5e:7c:21:d6:c7:
10:e8:28:da:df:6f:c2:3d:65:8c:34:0f:dd:b0:86:
1f:32:65:33:16:18:36:45:4a:d5:6b:7f:60:1a:a4:
e5:f7:33:d1:5f:4f:81:5c:db:ad:68:f1:de:bf:be:
1a:f8:b4:ce:82:64:fc:9a:f8:76:a8:03:53:4c:b5:
94:97:a2:b0:d3:2e:2d:03:9a:57:4a:db:9b:09:a4:
56:42:97:d4:82:55:6b:7f:58:4b:f6:f2:53:ca:d5:
6a:44:4a:6e:98:09:e0:85:ff:b5:5a:48:20:be:37:
00:ec:8a:11:cc:41:ba:29:ee:d6:fe:60:2b:1f:43:
7d:91:94:d6:c1:a1:b9:ab:fc:a5:31:29:a9:7e:7c:
5d:4b:ee:34:6f:b9:e8:7b:71:96:71:16:da:ed:66:
7d:1a:0d:fc:f3:b5:38:09:8d:17:a6:45:ba:81:51:
f2:27:2d:d6:bc:19:2c:9b:43:e3:60:2a:ed:00:eb:
de:8e:52:b0:f1:a2:65:c1:f8:81:62:cf:41:40:56:
d4:e4:37:9a:47:81:54:f1:98:ed:2b:25:61:06:12:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:02:C4:D4:A6:DD:03:D2:04:9F:76:4A:D5:45:32:70:A6:A7:A0:26
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MALE1KbdA9IEn3ZK1UUycKanoCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.107.64.0/18
79.99.72.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.31.232.0/21
89.213.0.0/21
89.213.40.0-89.213.255.255
109.176.0.0/16
185.20.32.0/22
185.24.84.0/22
185.49.124.0/22
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a02:21f8::/32
Signature Algorithm: sha256WithRSAEncryption
a0:7c:93:4b:ef:30:f7:18:e4:a2:41:68:3e:3b:6b:c7:41:5c:
4e:d9:79:c8:a7:dc:66:54:33:1b:48:aa:6a:48:58:91:75:34:
4a:f5:e9:81:e6:2c:14:20:c7:15:68:f6:4e:8a:6b:f5:8f:28:
8f:6b:f8:06:04:f4:bc:9d:35:d6:eb:48:37:11:a1:9b:db:12:
85:ce:69:c4:c9:be:82:dc:18:6c:93:ce:4a:77:00:cf:51:51:
91:fd:53:25:c6:47:cc:93:ec:11:ab:36:55:ad:01:27:0c:b3:
f1:6e:b1:ed:e3:6f:dd:96:b3:21:30:fc:e7:5b:8e:1c:c6:a9:
f8:52:e4:b1:9f:b7:3b:d9:ed:ef:0d:61:81:d4:f4:8b:5a:80:
23:2c:a1:90:eb:d9:f2:d7:93:a7:e8:67:9e:7b:69:c3:95:bb:
19:c6:d9:ca:08:5b:5a:6b:21:36:7d:9e:3f:b4:ba:45:2c:77:
21:97:a5:cc:b1:b3:b6:0f:7e:e3:9d:79:37:5f:8b:89:6c:d2:
87:26:f0:0d:a5:8b:8a:97:1b:74:d7:bd:0c:7e:99:60:93:44:
74:11:c6:3b:aa:ed:1a:cf:16:2e:5b:2e:3f:68:eb:d2:68:c7:
5b:4e:9e:d7:2c:ba:a0:e8:46:fa:51:fb:5b:26:87:46:97:cd:
95:67:d5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:23:02 2025 by rpki-client