Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/1-r6pubnO1SanfRW1KFHY5slGKbY.roa
File: 1-r6pubnO1SanfRW1KFHY5slGKbY.roa (raw, json)
Hash identifier: 2GUKqL9Cn5y+p0ZsjdNngPTUOGrjfoAfeAhGOgOGYpQ=
Subject key identifier: FA:BE:A9:B9:B9:CE:D5:26:A7:7D:15:B5:28:51:D8:E6:C9:46:29:B6
Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial: 018D3AEE4AB4F4D40DCDFA4E0E5E97B5611D
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/1-r6pubnO1SanfRW1KFHY5slGKbY.roa
Signing time: Wed 24 Jan 2024 10:05:11 +0000
ROA not before: Wed 24 Jan 2024 10:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12479
IP address blocks: 1.178.224.0/19 maxlen: 19
1.178.224.0/21 maxlen: 21
1.178.232.0/21 maxlen: 21
1.178.240.0/21 maxlen: 21
1.178.248.0/21 maxlen: 21
37.19.224.0/19 maxlen: 24
46.102.160.0/21 maxlen: 24
46.251.160.0/19 maxlen: 24
62.36.0.0/16 maxlen: 24
62.36.21.0/24 maxlen: 24
64.225.144.0/21 maxlen: 24
64.226.160.0/19 maxlen: 24
77.81.168.0/21 maxlen: 24
81.24.168.0/21 maxlen: 24
85.48.0.0/12 maxlen: 24
85.48.188.0/24 maxlen: 24
85.204.152.0/21 maxlen: 24
86.104.112.0/21 maxlen: 24
86.104.168.0/21 maxlen: 24
86.104.186.0/23 maxlen: 24
89.44.16.0/20 maxlen: 24
89.44.48.0/20 maxlen: 24
89.44.184.0/22 maxlen: 24
89.47.16.0/20 maxlen: 24
89.200.184.0/21 maxlen: 24
90.160.0.0/12 maxlen: 24
91.243.128.0/19 maxlen: 24
93.117.80.0/20 maxlen: 24
93.117.88.0/21 maxlen: 21
93.117.88.0/22 maxlen: 22
93.117.92.0/22 maxlen: 22
93.118.64.0/20 maxlen: 24
95.214.36.0/23 maxlen: 24
107.183.128.0/17 maxlen: 17
109.205.128.0/21 maxlen: 21
109.205.128.0/22 maxlen: 22
109.205.128.0/23 maxlen: 23
109.205.130.0/23 maxlen: 23
109.205.132.0/22 maxlen: 22
109.205.132.0/23 maxlen: 23
109.205.134.0/23 maxlen: 23
113.203.128.0/18 maxlen: 18
145.1.128.0/17 maxlen: 17
145.1.128.0/19 maxlen: 19
145.1.160.0/19 maxlen: 19
145.1.192.0/20 maxlen: 20
145.1.208.0/20 maxlen: 20
145.1.224.0/22 maxlen: 22
145.1.228.0/22 maxlen: 22
145.1.232.0/21 maxlen: 21
145.1.240.0/20 maxlen: 20
149.74.0.0/16 maxlen: 16
149.74.0.0/22 maxlen: 22
149.74.0.0/24 maxlen: 24
149.74.1.0/24 maxlen: 24
149.74.2.0/23 maxlen: 23
149.74.4.0/22 maxlen: 22
149.74.4.0/23 maxlen: 23
149.74.6.0/23 maxlen: 23
149.74.8.0/22 maxlen: 22
149.74.16.0/22 maxlen: 22
149.74.20.0/22 maxlen: 22
149.74.24.0/22 maxlen: 22
149.74.28.0/22 maxlen: 22
149.74.30.0/24 maxlen: 24
149.74.32.0/20 maxlen: 20
149.74.48.0/21 maxlen: 21
149.74.56.0/22 maxlen: 22
149.74.60.0/22 maxlen: 22
149.74.64.0/21 maxlen: 21
149.74.72.0/21 maxlen: 21
149.74.80.0/22 maxlen: 22
149.74.84.0/22 maxlen: 22
149.74.88.0/22 maxlen: 22
149.74.92.0/22 maxlen: 22
149.74.96.0/20 maxlen: 20
149.74.96.0/23 maxlen: 23
149.74.98.0/23 maxlen: 23
149.74.100.0/23 maxlen: 23
149.74.102.0/23 maxlen: 23
149.74.104.0/23 maxlen: 23
149.74.106.0/23 maxlen: 23
149.74.108.0/23 maxlen: 23
149.74.110.0/23 maxlen: 23
149.74.112.0/21 maxlen: 21
149.74.120.0/21 maxlen: 21
149.74.128.0/22 maxlen: 22
149.74.132.0/22 maxlen: 22
149.74.134.0/24 maxlen: 24
149.74.136.0/22 maxlen: 22
149.74.140.0/22 maxlen: 22
149.74.144.0/22 maxlen: 22
149.74.148.0/22 maxlen: 22
149.74.152.0/21 maxlen: 21
149.74.160.0/22 maxlen: 22
149.74.160.0/23 maxlen: 23
149.74.164.0/22 maxlen: 22
149.74.168.0/22 maxlen: 22
149.74.170.0/24 maxlen: 24
149.74.172.0/22 maxlen: 22
149.74.176.0/22 maxlen: 22
149.74.178.0/24 maxlen: 24
149.74.180.0/22 maxlen: 22
149.74.184.0/22 maxlen: 22
149.74.187.0/24 maxlen: 24
149.74.188.0/22 maxlen: 22
149.74.192.0/22 maxlen: 22
149.74.196.0/22 maxlen: 22
149.74.197.0/24 maxlen: 24
149.74.199.0/24 maxlen: 24
149.74.200.0/22 maxlen: 22
149.74.204.0/22 maxlen: 22
149.74.208.0/22 maxlen: 22
149.74.208.0/23 maxlen: 23
149.74.210.0/23 maxlen: 23
149.74.212.0/22 maxlen: 22
149.74.216.0/22 maxlen: 22
149.74.220.0/22 maxlen: 22
149.74.224.0/22 maxlen: 22
149.74.232.0/22 maxlen: 22
149.74.236.0/22 maxlen: 22
149.74.240.0/22 maxlen: 22
149.74.244.0/22 maxlen: 22
149.74.248.0/22 maxlen: 22
149.74.251.0/24 maxlen: 24
149.74.252.0/22 maxlen: 22
149.74.252.0/23 maxlen: 23
151.252.16.0/21 maxlen: 21
152.41.0.0/17 maxlen: 17
161.199.192.0/22 maxlen: 22
176.10.16.0/21 maxlen: 21
176.10.24.0/21 maxlen: 21
176.104.64.0/19 maxlen: 19
185.124.36.0/22 maxlen: 22
185.132.192.0/22 maxlen: 22
185.147.93.0/24 maxlen: 24
188.93.32.0/22 maxlen: 22
188.126.128.0/19 maxlen: 19
188.126.128.0/22 maxlen: 22
188.126.132.0/22 maxlen: 22
188.126.136.0/22 maxlen: 22
188.126.140.0/22 maxlen: 22
188.126.144.0/22 maxlen: 22
188.126.148.0/22 maxlen: 22
188.126.152.0/22 maxlen: 22
188.126.156.0/23 maxlen: 23
188.126.158.0/23 maxlen: 23
188.126.158.0/24 maxlen: 24
188.208.0.0/20 maxlen: 20
188.208.0.0/22 maxlen: 22
188.208.4.0/22 maxlen: 22
188.208.8.0/22 maxlen: 22
188.208.8.0/24 maxlen: 24
188.208.9.0/24 maxlen: 24
188.208.12.0/22 maxlen: 22
188.208.12.0/24 maxlen: 24
188.208.13.0/24 maxlen: 24
188.208.14.0/24 maxlen: 24
188.208.40.0/21 maxlen: 21
188.239.128.0/19 maxlen: 19
188.239.128.0/21 maxlen: 21
188.239.136.0/21 maxlen: 24
188.239.144.0/22 maxlen: 22
188.239.148.0/22 maxlen: 22
188.239.152.0/23 maxlen: 23
188.239.154.0/23 maxlen: 23
188.239.156.0/23 maxlen: 23
188.239.158.0/23 maxlen: 23
188.240.128.0/20 maxlen: 20
188.240.128.0/21 maxlen: 21
188.240.136.0/22 maxlen: 22
188.240.140.0/22 maxlen: 22
192.157.192.0/18 maxlen: 24
192.157.192.0/22 maxlen: 22
192.157.196.0/22 maxlen: 22
192.157.200.0/21 maxlen: 21
192.157.208.0/21 maxlen: 21
192.157.216.0/21 maxlen: 21
193.124.1.0/24 maxlen: 24
193.124.25.0/24 maxlen: 24
193.124.31.0/24 maxlen: 24
193.124.32.0/24 maxlen: 24
193.124.37.0/24 maxlen: 24
193.124.43.0/24 maxlen: 24
193.124.51.0/24 maxlen: 24
193.124.61.0/24 maxlen: 24
193.124.70.0/23 maxlen: 24
193.124.81.0/24 maxlen: 24
193.124.85.0/24 maxlen: 24
193.124.120.0/24 maxlen: 24
193.124.132.0/24 maxlen: 24
193.124.135.0/24 maxlen: 24
193.124.255.0/24 maxlen: 24
194.58.28.0/23 maxlen: 24
194.58.30.0/24 maxlen: 24
194.58.35.0/24 maxlen: 24
194.58.80.0/23 maxlen: 24
194.58.84.0/22 maxlen: 24
194.135.0.0/24 maxlen: 24
194.135.3.0/24 maxlen: 24
194.135.19.0/24 maxlen: 24
194.135.28.0/23 maxlen: 24
194.135.31.0/24 maxlen: 24
194.135.56.0/22 maxlen: 24
194.135.76.0/22 maxlen: 24
194.135.101.0/24 maxlen: 24
194.135.102.0/24 maxlen: 24
194.135.125.0/24 maxlen: 24
194.135.126.0/23 maxlen: 24
194.135.134.0/24 maxlen: 24
194.135.196.0/22 maxlen: 24
195.190.192.0/19 maxlen: 24
195.254.182.0/23 maxlen: 24
206.204.160.0/19 maxlen: 24
212.12.96.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:ee:4a:b4:f4:d4:0d:cd:fa:4e:0e:5e:97:b5:61:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Validity
Not Before: Jan 24 10:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fabea9b9b9ced526a77d15b52851d8e6c94629b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:94:a2:be:4b:04:68:26:67:61:f9:4c:00:bd:
94:97:b4:fb:b1:0e:88:df:39:45:e3:ba:d2:38:2e:
b6:64:4b:41:36:bb:06:62:04:53:b2:7b:65:b3:35:
d3:58:eb:bd:21:e6:a8:cc:68:27:09:59:09:c2:36:
78:37:22:ae:5a:ee:56:d9:d2:2c:62:12:76:72:6b:
2c:4f:2e:5a:24:41:c1:d5:5d:c9:1f:1e:a2:ce:59:
a7:00:2f:bb:ac:ff:7a:57:30:7f:d7:cf:06:c5:5d:
ae:52:fa:5b:63:97:c0:26:63:3c:91:16:d7:34:e0:
07:e6:6a:20:bc:1f:7e:4d:de:38:9d:d1:56:27:70:
99:9c:c5:3e:c3:57:a3:7e:fd:70:f1:98:17:7a:2c:
e7:c3:2c:28:a9:90:a4:d3:c2:89:77:fb:4c:5b:0b:
b8:35:22:c6:0b:9c:60:69:79:5e:0f:90:df:ca:8a:
28:98:43:13:3a:09:0e:6c:2f:ce:ab:e1:76:12:dc:
d7:28:0f:3f:d2:57:2f:b4:28:c8:5d:90:ed:ff:19:
70:ff:2c:5b:0c:4a:32:7d:78:68:ec:85:5e:b0:4b:
c5:94:f5:73:67:ba:01:16:40:91:8a:f4:53:27:80:
95:dd:41:4f:75:ad:5e:5f:6b:59:dc:f2:2e:22:10:
df:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:A9:B9:B9:CE:D5:26:A7:7D:15:B5:28:51:D8:E6:C9:46:29:B6
X509v3 Authority Key Identifier:
keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/1-r6pubnO1SanfRW1KFHY5slGKbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.224.0/19
37.19.224.0/19
46.102.160.0/21
46.251.160.0/19
62.36.0.0/16
64.225.144.0/21
64.226.160.0/19
77.81.168.0/21
81.24.168.0/21
85.48.0.0/12
85.204.152.0/21
86.104.112.0/21
86.104.168.0/21
86.104.186.0/23
89.44.16.0/20
89.44.48.0/20
89.44.184.0/22
89.47.16.0/20
89.200.184.0/21
90.160.0.0/12
91.243.128.0/19
93.117.80.0/20
93.118.64.0/20
95.214.36.0/23
107.183.128.0/17
109.205.128.0/21
113.203.128.0/18
145.1.128.0/17
149.74.0.0/16
151.252.16.0/21
152.41.0.0/17
161.199.192.0/22
176.10.16.0/20
176.104.64.0/19
185.124.36.0/22
185.132.192.0/22
185.147.93.0/24
188.93.32.0/22
188.126.128.0/19
188.208.0.0/20
188.208.40.0/21
188.239.128.0/19
188.240.128.0/20
192.157.192.0/18
193.124.1.0/24
193.124.25.0/24
193.124.31.0-193.124.32.255
193.124.37.0/24
193.124.43.0/24
193.124.51.0/24
193.124.61.0/24
193.124.70.0/23
193.124.81.0/24
193.124.85.0/24
193.124.120.0/24
193.124.132.0/24
193.124.135.0/24
193.124.255.0/24
194.58.28.0-194.58.30.255
194.58.35.0/24
194.58.80.0/23
194.58.84.0/22
194.135.0.0/24
194.135.3.0/24
194.135.19.0/24
194.135.28.0/23
194.135.31.0/24
194.135.56.0/22
194.135.76.0/22
194.135.101.0-194.135.102.255
194.135.125.0-194.135.127.255
194.135.134.0/24
194.135.196.0/22
195.190.192.0/19
195.254.182.0/23
206.204.160.0/19
212.12.96.0/19
Signature Algorithm: sha256WithRSAEncryption
58:dc:4a:d5:46:0d:08:64:0b:f6:35:1c:54:ea:3f:31:aa:9c:
0f:33:44:8c:c9:49:2f:de:c9:44:a7:ca:54:99:6b:7f:78:f2:
44:6e:31:e1:65:af:a6:e2:1f:a9:ec:7f:dc:fe:46:e2:56:db:
7a:6b:c1:12:9b:ca:d4:a5:81:00:6e:28:01:65:7b:89:c2:4c:
f2:ec:f9:2c:9c:79:f7:bd:6c:e7:f6:92:af:93:b3:6e:2b:af:
cf:7c:42:d8:95:f4:ad:0f:dc:c0:9e:3e:ff:93:38:8f:a5:68:
2b:d0:21:c9:df:ee:fe:c8:fb:45:6b:5b:86:70:76:29:c2:54:
fa:60:ae:e0:9b:d5:d0:a0:60:de:c4:29:39:7e:0f:ad:ba:54:
fe:4c:81:ba:6c:81:9c:e4:13:30:98:de:73:ac:c2:7b:a7:63:
13:17:14:fd:6f:2f:df:ca:44:fe:28:40:8b:60:c8:3a:de:12:
be:a1:77:43:dd:fe:ea:f9:35:b5:21:12:73:16:91:71:4d:e3:
20:c0:3d:2f:54:c4:0b:7f:5f:e2:10:30:9b:56:b2:59:02:17:
fe:a3:b3:d5:3b:ed:80:92:ab:2f:82:79:0c:15:2f:96:36:94:
f9:86:f3:2e:82:57:f5:78:a5:37:4b:ff:45:4b:cb:74:17:f8:
13:8d:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:24:41 2025 by rpki-client