Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QGmFwg90pQINDJ61Elsg_ELazJQ.roa
File: QGmFwg90pQINDJ61Elsg_ELazJQ.roa (raw, json)
Hash identifier: 9Pr6b3VYROnUvA6wtqgd6VxtKeIvTVGuU3UGzLpTHn8=
Subject key identifier: 40:69:85:C2:0F:74:A5:02:0D:0C:9E:B5:12:5B:20:FC:42:DA:CC:94
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018571FA230C84DCE9C0F251CDE49538ECF9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QGmFwg90pQINDJ61Elsg_ELazJQ.roa
Signing time: Mon 02 Jan 2023 10:14:56 +0000
ROA not before: Mon 02 Jan 2023 10:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 89.213.64.0/18 maxlen: 24
37.252.24.0/21 maxlen: 24
80.240.80.0/20 maxlen: 20
213.210.0.0/18 maxlen: 24
77.107.64.0/18 maxlen: 24
85.159.128.0/21 maxlen: 24
212.38.64.0/19 maxlen: 24
37.98.144.0/21 maxlen: 24
37.98.144.0/22 maxlen: 24
89.213.40.0/21 maxlen: 24
89.213.48.0/20 maxlen: 24
213.218.208.0/20 maxlen: 24
89.31.232.0/21 maxlen: 24
79.99.72.0/21 maxlen: 24
185.20.32.0/22 maxlen: 24
185.20.34.0/24 maxlen: 24
185.20.35.0/24 maxlen: 24
213.218.224.0/19 maxlen: 24
89.213.128.0/17 maxlen: 24
82.163.0.0/19 maxlen: 24
217.144.144.0/20 maxlen: 24
217.145.64.0/20 maxlen: 24
185.49.124.0/22 maxlen: 24
185.24.84.0/22 maxlen: 24
89.213.0.0/21 maxlen: 24
194.105.64.0/19 maxlen: 24
213.130.128.0/19 maxlen: 24
195.128.138.0/24 maxlen: 24
2a02:21f8::/32 maxlen: 32
2a00:c60::/32 maxlen: 32
2001:1a90::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:23:0c:84:dc:e9:c0:f2:51:cd:e4:95:38:ec:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 2 10:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=406985c20f74a5020d0c9eb5125b20fc42dacc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:29:cc:a8:75:92:6d:b5:04:d7:cf:dc:6d:ec:
1a:81:a1:ae:f9:72:b4:37:2c:fa:9c:18:b5:3a:d0:
b1:b9:8e:f9:b6:7c:98:bc:f0:db:ff:18:5e:7a:e6:
1f:af:7a:ab:db:8b:c2:6c:1d:12:b8:c5:7a:6b:99:
3a:62:fe:03:0b:63:e5:c2:18:89:3e:b6:36:58:4e:
ee:77:87:c6:41:3d:b8:14:4d:98:a4:64:2b:94:70:
f3:89:1e:91:8f:ed:15:bf:2b:85:4d:75:c5:d6:80:
02:e7:b0:ed:2a:0f:6d:75:d5:ba:57:01:e8:92:87:
31:a4:d8:03:f6:04:d2:e0:da:21:fb:c3:6a:4f:39:
f0:b1:50:e2:5e:db:20:d1:75:61:d0:57:30:bf:81:
72:6f:54:39:47:85:b8:09:fa:19:f7:76:82:d6:84:
57:76:06:af:08:f0:fe:92:69:6e:94:26:19:ab:d8:
c7:2c:04:1e:3c:f2:ad:1b:7f:68:16:0f:8b:49:a2:
66:bb:9f:a6:32:2b:80:c8:9a:b1:45:13:46:85:c0:
67:d7:fc:94:d6:e0:47:11:51:9b:22:93:08:0c:36:
33:0b:ae:01:e2:86:25:b9:db:9b:76:eb:3b:bb:6e:
c7:63:7e:39:3c:8f:30:ea:65:10:39:1e:4b:94:41:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:85:C2:0F:74:A5:02:0D:0C:9E:B5:12:5B:20:FC:42:DA:CC:94
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QGmFwg90pQINDJ61Elsg_ELazJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.107.64.0/18
79.99.72.0/21
80.240.80.0/20
82.163.0.0/19
85.159.128.0/21
89.31.232.0/21
89.213.0.0/21
89.213.40.0-89.213.255.255
185.20.32.0/22
185.24.84.0/22
185.49.124.0/22
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a02:21f8::/32
Signature Algorithm: sha256WithRSAEncryption
2f:67:0f:e9:94:00:18:51:48:c9:6f:25:8d:8f:24:d4:93:5c:
ad:3b:d6:6f:75:c6:57:0e:f1:51:92:bf:90:3e:56:96:3e:57:
3f:6d:e2:25:11:9a:9e:28:3c:e7:6f:90:7b:2a:10:9d:ea:7c:
83:34:a5:4f:06:13:3b:39:6a:78:2c:61:c3:9e:91:0b:85:c4:
43:3e:fb:1e:08:84:71:b2:32:8d:95:32:2b:22:8a:da:16:58:
75:6e:b4:9a:b2:07:3e:9f:4e:f4:fa:4f:fd:af:99:fc:5d:a0:
e7:a9:87:6f:b7:9a:6d:12:49:4e:5b:4a:34:43:53:ae:1b:cc:
86:22:92:c3:64:ae:93:b3:9a:06:fb:0b:4f:97:25:02:8f:01:
01:eb:17:b6:e9:35:73:40:03:8e:7e:f9:27:ee:11:52:29:3e:
2f:e0:4a:69:89:a4:16:30:35:cf:25:a9:f2:64:d1:48:72:b5:
46:da:6b:40:5b:bb:5f:37:a0:55:5f:b5:1b:32:e0:2d:10:21:
c1:79:35:0c:0b:d1:a1:bb:52:66:30:c5:b0:b4:56:36:43:26:
9e:83:c7:06:04:3c:08:14:14:79:36:9a:b3:49:e9:98:14:fa:
ac:cc:c6:bc:ef:bc:31:53:bd:65:ab:5a:4b:dd:b8:e5:13:64:
aa:fe:83:1d
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAYVx+iMMhNzpwPJRzeSVOOz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwMTAyMTAxNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDY5ODVjMjBmNzRhNTAyMGQwYzllYjUxMjViMjBmYzQyZGFjYzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ynMqHWSbbUE18/cbewagaGu+XK0
Nyz6nBi1OtCxuY75tnyYvPDb/xheeuYfr3qr24vCbB0SuMV6a5k6Yv4DC2PlwhiJ
PrY2WE7ud4fGQT24FE2YpGQrlHDziR6Rj+0VvyuFTXXF1oAC57DtKg9tddW6VwHo
kocxpNgD9gTS4Noh+8NqTznwsVDiXtsg0XVh0Fcwv4Fyb1Q5R4W4CfoZ93aC1oRX
dgavCPD+kmlulCYZq9jHLAQePPKtG39oFg+LSaJmu5+mMiuAyJqxRRNGhcBn1/yU
1uBHEVGbIpMIDDYzC64B4oYludubdus7u27HY345PI8w6mUQOR5LlEG1EwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFEBphcIPdKUCDQyetRJbIPxC2syUMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUUdtRndnOTBwUUlOREo2MUVsc2dfRUxhekpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHGBggrBgEFBQcBBwEB/wSBtjCBszCBkwQCAAEwgYwDBAMl
YpADBAMl/BgDBAZNa0ADBANPY0gDBARQ8FADBAVSowADBANVn4ADBANZH+gDBANZ
1QAwCwMEA1nVKAMDAVnUAwQCuRQgAwQCuRhUAwQCuTF8AwQFwmlAAwQAw4CKAwQF
1CZAAwQF1YKAAwQG1dIAMAsDBATV2tADAwDV2gMEBNmQkAMEBNmRQDAbBAIAAjAV
AwUAIAEakAMFACoADGADBQAqAiH4MA0GCSqGSIb3DQEBCwUAA4IBAQAvZw/plAAY
UUjJbyWNjyTUk1ytO9ZvdcZXDvFRkr+QPlaWPlc/beIlEZqeKDznb5B7KhCd6nyD
NKVPBhM7OWp4LGHDnpELhcRDPvseCIRxsjKNlTIrIoraFlh1brSasgc+n070+k/9
r5n8XaDnqYdvt5ptEklOW0o0Q1OuG8yGIpLDZK6Ts5oG+wtPlyUCjwEB6xe26TVz
QAOOfvkn7hFSKT4v4EppiaQWMDXPJanyZNFIcrVG2mtAW7tfN6BVX7UbMuAtECHB
eTUMC9Ghu1JmMMWwtFY2Qyaeg8cGBDwIFBR5NpqzSemYFPqszMa877wxU71lq1pL
3bjlE2Sq/oMd
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:07:19 2025 by rpki-client