Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OP0yrj8UG4_OEeljg0F7IfeRpC4.roa
File: OP0yrj8UG4_OEeljg0F7IfeRpC4.roa (raw, json)
Hash identifier: wnrAWzidRoVQ1ABSNTkyCPVvv7au+0k/SMg3P4cFQYM=
Subject key identifier: 38:FD:32:AE:3F:14:1B:8F:CE:11:E9:63:83:41:7B:21:F7:91:A4:2E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193726742DA2B8D04D54EE568429699AC2B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OP0yrj8UG4_OEeljg0F7IfeRpC4.roa
Signing time: Thu 28 Nov 2024 10:53:10 +0000
ROA not before: Thu 28 Nov 2024 10:53:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8851
IP address blocks: 37.98.144.0/21 maxlen: 24
37.98.144.0/22 maxlen: 24
37.252.24.0/21 maxlen: 24
77.107.64.0/18 maxlen: 24
79.99.72.0/21 maxlen: 24
80.240.80.0/20 maxlen: 20
81.5.128.0/18 maxlen: 18
81.168.0.0/17 maxlen: 17
82.152.0.0/15 maxlen: 15
82.152.0.0/16 maxlen: 16
82.163.0.0/19 maxlen: 24
85.159.128.0/21 maxlen: 24
89.31.232.0/21 maxlen: 24
89.213.48.0/20 maxlen: 24
89.213.64.0/18 maxlen: 24
89.213.192.0/18 maxlen: 24
109.176.0.0/16 maxlen: 16
185.20.32.0/22 maxlen: 24
185.20.34.0/24 maxlen: 24
185.20.35.0/24 maxlen: 24
185.24.84.0/22 maxlen: 24
185.24.84.0/24 maxlen: 24
185.24.86.0/23 maxlen: 23
194.105.64.0/19 maxlen: 24
195.128.138.0/24 maxlen: 24
212.38.64.0/19 maxlen: 24
213.130.128.0/19 maxlen: 24
213.152.32.0/19 maxlen: 19
213.210.0.0/18 maxlen: 24
213.218.208.0/20 maxlen: 24
213.218.224.0/19 maxlen: 24
217.144.144.0/20 maxlen: 24
217.145.64.0/20 maxlen: 24
2001:1a90::/32 maxlen: 32
2a00:c60::/32 maxlen: 32
2a02:21f8::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:67:42:da:2b:8d:04:d5:4e:e5:68:42:96:99:ac:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 28 10:53:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38fd32ae3f141b8fce11e96383417b21f791a42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:09:5c:73:6b:c2:a9:7e:d5:4f:e1:9d:75:
ac:96:8a:11:f1:2f:2d:9f:73:06:51:8b:ec:00:33:
a4:b0:3d:2b:bc:1c:96:19:e0:43:ed:80:a2:04:c3:
7e:ec:33:af:82:08:57:96:93:6f:81:8e:c3:0a:b6:
20:0c:db:95:28:96:20:02:49:d7:45:a3:38:19:63:
d3:e2:0d:df:b9:44:78:9d:57:f1:f6:1b:7a:72:28:
d4:52:b4:72:d7:e6:80:8c:74:38:ab:74:b8:79:5f:
b9:03:67:a2:18:9e:31:40:e7:f1:bb:f2:26:39:73:
f0:38:5e:fc:c1:dc:28:72:1e:df:68:2c:c4:3c:ad:
69:23:de:fa:68:b9:cb:f9:2c:74:4e:64:2b:b2:9f:
39:80:7a:f7:ef:78:0f:a4:22:46:0a:57:09:38:ff:
47:79:43:19:bf:27:be:29:71:9e:6f:bf:49:4f:be:
bc:98:de:9e:48:f5:77:da:42:41:64:c1:f9:ee:88:
7b:0c:5a:7f:ff:a4:da:a0:c5:c5:6f:4e:59:ea:46:
8b:a3:23:ec:6c:2c:4a:ca:72:98:8d:b7:4b:36:47:
bb:57:88:9c:e4:aa:76:fa:2f:fd:8a:59:86:94:32:
a8:fb:2b:c0:b9:83:27:74:7c:6d:06:6e:9a:27:22:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FD:32:AE:3F:14:1B:8F:CE:11:E9:63:83:41:7B:21:F7:91:A4:2E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OP0yrj8UG4_OEeljg0F7IfeRpC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.107.64.0/18
79.99.72.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.31.232.0/21
89.213.48.0-89.213.127.255
89.213.192.0/18
109.176.0.0/16
185.20.32.0/22
185.24.84.0/22
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a02:21f8::/32
Signature Algorithm: sha256WithRSAEncryption
9f:51:f0:cc:6d:c1:70:3b:68:2b:a3:76:8e:e6:ef:3c:8c:64:
4b:82:7e:64:4a:c5:55:b7:86:f3:86:38:d8:ad:85:dd:2d:43:
94:5d:fb:c8:75:af:4f:81:77:5d:e7:be:0a:90:20:18:ad:dd:
53:e3:ca:7c:09:38:e7:76:3a:ec:d2:d8:cd:f2:d9:f1:09:08:
6c:e0:92:a9:21:11:ec:0b:1c:82:42:2f:40:9c:9a:47:89:1c:
1b:46:bb:bf:3f:44:5b:84:39:23:67:45:44:53:7d:42:8d:be:
96:32:1c:35:df:5b:56:bc:9a:70:25:9b:5d:62:75:7a:25:7e:
9e:b0:d4:f8:29:8c:d8:b6:1d:3c:27:72:cc:1c:e9:d4:5e:2f:
46:5a:a1:c4:65:a6:04:f1:71:a0:93:b0:66:c8:44:68:a1:7c:
a5:79:f5:fc:27:e3:1d:c5:7c:40:f5:91:2d:54:48:6f:31:83:
34:60:73:dd:5a:80:f0:0d:23:29:c3:f1:b5:f0:9a:d7:c2:e9:
57:b1:c4:5b:82:0c:06:04:e8:7e:76:12:f6:9d:4e:56:0b:ba:
f1:3a:a1:55:93:33:9e:45:5d:3b:39:74:67:97:70:f6:5d:d5:
7b:6e:af:48:9a:73:b8:ed:22:99:ee:12:d5:88:46:c7:63:33:
27:d6:ec:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:31 2025 by rpki-client