Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OP4z3l0HLGJ6TKSC8fdzVUKPZcw.roa
File: OP4z3l0HLGJ6TKSC8fdzVUKPZcw.roa (raw, json)
Hash identifier: oOXJiEdxFtOAP7ZAFafUBLC0xxkhWclrgosr0MQMfDg=
Subject key identifier: 38:FE:33:DE:5D:07:2C:62:7A:4C:A4:82:F1:F7:73:55:42:8F:65:CC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC34949108EB4DEA7448D53F6DCD2942E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OP4z3l0HLGJ6TKSC8fdzVUKPZcw.roa
Signing time: Mon 01 Jan 2024 04:30:08 +0000
ROA not before: Mon 01 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8851
IP address blocks: 89.213.64.0/18 maxlen: 24
37.252.24.0/21 maxlen: 24
80.240.80.0/20 maxlen: 20
77.107.64.0/18 maxlen: 24
213.210.0.0/18 maxlen: 24
85.159.128.0/21 maxlen: 24
212.38.64.0/19 maxlen: 24
37.98.144.0/22 maxlen: 24
37.98.144.0/21 maxlen: 24
109.176.0.0/16 maxlen: 16
89.213.48.0/20 maxlen: 24
89.213.192.0/24 maxlen: 24
89.213.192.0/18 maxlen: 24
213.218.208.0/20 maxlen: 24
89.31.232.0/21 maxlen: 24
185.20.34.0/24 maxlen: 24
185.20.35.0/24 maxlen: 24
79.99.72.0/21 maxlen: 24
185.20.32.0/22 maxlen: 24
213.218.224.0/19 maxlen: 24
81.168.0.0/17 maxlen: 17
82.163.0.0/19 maxlen: 24
217.144.144.0/20 maxlen: 24
217.145.64.0/20 maxlen: 24
185.24.84.0/22 maxlen: 24
194.105.64.0/19 maxlen: 24
213.130.128.0/19 maxlen: 24
82.152.0.0/16 maxlen: 16
81.5.128.0/18 maxlen: 18
82.152.0.0/15 maxlen: 15
195.128.138.0/24 maxlen: 24
213.152.32.0/19 maxlen: 19
2a02:21f8::/32 maxlen: 32
2a00:c60::/32 maxlen: 32
2001:1a90::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:49:10:8e:b4:de:a7:44:8d:53:f6:dc:d2:94:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38fe33de5d072c627a4ca482f1f77355428f65cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:cd:c0:e2:99:b1:db:dd:9f:3a:9e:2c:02:
7d:b1:6b:ee:6f:3b:d7:f5:52:e3:e8:33:26:56:16:
16:b2:9e:3b:52:34:01:ae:b2:ef:17:f9:a2:5c:7d:
1b:18:43:b5:0a:3f:2b:00:43:ad:e2:e9:88:3f:1f:
af:eb:78:57:dc:6e:23:85:65:d0:84:f6:92:3d:09:
61:30:56:f2:38:f4:5e:42:4c:8f:66:30:0b:12:ae:
4c:54:d1:ab:73:30:7c:a5:48:0d:ec:38:e9:b2:66:
7c:78:1e:5f:78:c1:b1:55:f3:2c:04:6c:0f:b1:15:
c4:43:26:af:91:4f:36:80:94:37:53:4a:50:20:94:
8a:89:68:20:bb:10:12:6d:76:a9:f0:8c:1f:57:0b:
56:d6:c3:a5:ce:f3:dd:b6:3a:4c:89:75:59:c2:6e:
bc:f0:8a:68:b7:30:e0:9d:e2:45:aa:60:a0:19:55:
d5:7d:07:1a:ab:a2:3c:ed:08:f2:64:28:12:e8:84:
8b:2f:9c:41:ca:17:5e:b7:48:4c:f3:18:75:1e:aa:
ae:f3:2d:33:ef:36:1a:c8:38:41:ab:ce:4d:e8:27:
a7:8a:d8:23:81:e9:0f:50:5a:8e:89:31:83:58:41:
43:0b:77:6f:72:37:ae:b0:f3:4e:59:42:28:82:81:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FE:33:DE:5D:07:2C:62:7A:4C:A4:82:F1:F7:73:55:42:8F:65:CC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OP4z3l0HLGJ6TKSC8fdzVUKPZcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.107.64.0/18
79.99.72.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.31.232.0/21
89.213.48.0-89.213.127.255
89.213.192.0/18
109.176.0.0/16
185.20.32.0/22
185.24.84.0/22
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a02:21f8::/32
Signature Algorithm: sha256WithRSAEncryption
40:30:71:4a:bf:22:65:74:c3:81:5f:0c:5b:26:d8:b1:b9:91:
29:dc:b1:d7:98:a7:85:a5:30:5f:59:7f:d3:14:0b:fa:e3:40:
80:f3:cd:9d:7a:f9:72:ba:92:4b:7f:47:66:42:6a:ce:4f:cd:
fc:ee:96:b3:4f:3e:58:5f:f8:40:fc:89:61:71:7a:c6:9b:93:
60:11:11:45:02:05:63:61:8d:b1:f7:98:4d:44:c7:3c:81:51:
e7:d1:f4:3a:2e:e4:10:ff:54:b0:5a:87:8d:eb:1a:de:a7:22:
82:35:60:50:97:1f:b8:7c:70:3b:d0:cb:17:23:8c:b3:d9:23:
d0:d3:8b:6b:45:5d:d8:80:e7:0a:3b:b3:f6:35:77:f2:3a:bf:
68:e4:ea:4b:55:3a:0e:7a:42:84:1c:ce:06:7a:5d:47:73:aa:
54:62:51:08:5c:42:56:dc:ce:d0:75:3f:cf:4a:87:18:d1:be:
7c:83:50:9c:98:53:ad:b1:cb:b4:06:a9:f9:8f:9f:59:59:6d:
a5:3b:91:55:e1:37:83:bd:e2:ff:30:c4:de:ed:09:8f:5c:b7:
4c:2a:90:08:6e:93:71:08:f6:25:6b:7d:f3:0f:fa:2d:06:dc:
c4:c0:d6:2b:ce:4a:76:93:5e:66:4f:74:b2:8f:c5:a5:95:e1:
99:11:98:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:13:14 2025 by rpki-client