Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/0UFK8dTQl6A-X5zdWUyKW9p9T28.roa
File: 0UFK8dTQl6A-X5zdWUyKW9p9T28.roa (raw, json)
Hash identifier: 4Tl9MfEngMHGGB5RZJrJEBkGG5JinhTiwDAj84302C0=
Subject key identifier: D1:41:4A:F1:D4:D0:97:A0:3E:5F:9C:DD:59:4C:8A:5B:DA:7D:4F:6F
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01862C7CEB0DC96BD1F9F17B72CE1341F5CE
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/0UFK8dTQl6A-X5zdWUyKW9p9T28.roa
Signing time: Tue 07 Feb 2023 15:27:09 +0000
ROA not before: Tue 07 Feb 2023 15:27:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8866
IP address blocks: 90.154.128.0/17 maxlen: 24
62.73.64.0/18 maxlen: 24
83.228.61.0/24 maxlen: 24
84.40.64.0/18 maxlen: 18
46.249.64.0/19 maxlen: 19
89.25.124.0/22 maxlen: 22
85.187.46.0/23 maxlen: 24
85.187.64.0/18 maxlen: 18
212.72.199.0/24 maxlen: 24
212.72.198.0/24 maxlen: 24
212.72.202.0/23 maxlen: 24
212.72.212.0/24 maxlen: 24
89.25.72.0/22 maxlen: 22
85.187.22.0/23 maxlen: 24
85.187.24.0/21 maxlen: 24
89.25.100.0/22 maxlen: 22
85.187.32.0/21 maxlen: 24
83.228.0.0/17 maxlen: 24
79.100.0.0/16 maxlen: 24
78.154.0.0/19 maxlen: 24
212.72.214.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
212.5.128.0/19 maxlen: 24
212.39.64.0/19 maxlen: 24
82.146.0.0/22 maxlen: 22
82.146.6.0/23 maxlen: 24
82.146.11.0/24 maxlen: 24
82.146.24.0/23 maxlen: 24
77.85.176.0/20 maxlen: 24
77.85.174.0/24 maxlen: 24
77.85.198.0/24 maxlen: 24
89.25.40.0/21 maxlen: 21
89.25.52.0/22 maxlen: 22
89.25.56.0/21 maxlen: 21
89.25.64.0/21 maxlen: 21
82.146.28.0/23 maxlen: 24
82.146.31.0/24 maxlen: 24
77.85.128.0/19 maxlen: 24
87.126.0.0/16 maxlen: 24
77.85.160.0/21 maxlen: 24
77.85.168.0/22 maxlen: 24
77.85.172.0/23 maxlen: 24
95.43.206.0/24 maxlen: 24
95.43.220.0/22 maxlen: 22
87.118.144.0/22 maxlen: 22
87.118.144.0/23 maxlen: 23
213.91.154.0/24 maxlen: 24
46.10.193.0/24 maxlen: 24
87.118.164.0/22 maxlen: 22
77.85.0.0/16 maxlen: 24
213.91.128.0/17 maxlen: 24
46.10.166.0/23 maxlen: 23
84.238.136.0/22 maxlen: 22
84.238.134.0/23 maxlen: 24
84.238.140.0/23 maxlen: 23
84.238.142.0/23 maxlen: 23
84.238.144.0/21 maxlen: 21
84.238.152.0/22 maxlen: 24
84.238.156.0/22 maxlen: 22
84.238.165.0/24 maxlen: 24
84.238.168.0/21 maxlen: 21
84.238.167.0/24 maxlen: 24
84.238.178.0/23 maxlen: 24
84.238.180.0/22 maxlen: 22
82.137.64.0/18 maxlen: 24
95.43.0.0/17 maxlen: 24
37.157.136.0/21 maxlen: 21
213.16.32.0/19 maxlen: 24
37.157.160.0/19 maxlen: 19
84.238.128.0/22 maxlen: 22
46.10.0.0/16 maxlen: 24
84.238.192.0/22 maxlen: 24
84.238.204.0/22 maxlen: 22
87.116.64.0/22 maxlen: 22
87.116.68.0/22 maxlen: 22
87.116.72.0/21 maxlen: 21
151.237.140.0/23 maxlen: 24
87.116.82.0/24 maxlen: 24
87.116.84.0/22 maxlen: 22
213.130.92.0/23 maxlen: 24
213.130.95.0/24 maxlen: 24
213.130.64.0/22 maxlen: 22
213.130.78.0/23 maxlen: 23
213.130.76.0/23 maxlen: 24
213.130.77.0/24 maxlen: 24
62.176.64.0/19 maxlen: 24
94.236.229.0/24 maxlen: 24
94.236.231.0/24 maxlen: 24
94.236.228.0/24 maxlen: 24
94.236.234.0/24 maxlen: 24
94.236.235.0/24 maxlen: 24
94.236.238.0/24 maxlen: 24
94.236.240.0/20 maxlen: 20
62.176.96.0/19 maxlen: 24
94.236.163.0/24 maxlen: 24
94.236.164.0/24 maxlen: 24
94.236.160.0/24 maxlen: 24
87.243.96.0/21 maxlen: 21
94.236.161.0/24 maxlen: 24
94.155.204.0/22 maxlen: 24
94.236.160.0/19 maxlen: 24
94.236.172.0/24 maxlen: 24
87.243.104.0/21 maxlen: 21
94.236.170.0/23 maxlen: 23
94.236.179.0/24 maxlen: 24
87.243.112.0/22 maxlen: 22
94.236.173.0/24 maxlen: 24
94.236.174.0/24 maxlen: 24
94.236.175.0/24 maxlen: 24
94.236.176.0/23 maxlen: 23
87.243.116.0/22 maxlen: 22
94.236.180.0/22 maxlen: 22
94.236.184.0/21 maxlen: 21
87.243.120.0/21 maxlen: 21
94.236.204.0/24 maxlen: 24
94.236.205.0/24 maxlen: 24
217.75.152.0/21 maxlen: 21
84.21.192.0/22 maxlen: 22
95.42.0.0/15 maxlen: 24
84.21.216.0/21 maxlen: 21
62.176.117.0/24 maxlen: 24
217.75.139.0/24 maxlen: 24
217.75.143.0/24 maxlen: 24
94.155.64.0/20 maxlen: 24
94.155.80.0/22 maxlen: 24
185.20.156.0/22 maxlen: 22
83.148.64.0/18 maxlen: 24
95.87.192.0/18 maxlen: 18
94.236.144.0/24 maxlen: 24
94.236.144.0/21 maxlen: 24
87.243.80.0/20 maxlen: 20
94.236.149.0/24 maxlen: 24
94.236.151.0/24 maxlen: 24
94.236.146.0/24 maxlen: 24
94.236.152.0/24 maxlen: 24
94.236.152.0/21 maxlen: 24
94.236.153.0/24 maxlen: 24
94.236.154.0/24 maxlen: 24
94.155.104.0/21 maxlen: 24
94.155.112.0/21 maxlen: 24
94.155.120.0/22 maxlen: 24
2a01:5a8:2:5::/64 maxlen: 64
2a01:5a8:1:ffff::/64 maxlen: 64
2a01:5a8:2:4::/64 maxlen: 64
2a01:5a8::/32 maxlen: 128
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:7c:eb:0d:c9:6b:d1:f9:f1:7b:72:ce:13:41:f5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Feb 7 15:27:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1414af1d4d097a03e5f9cdd594c8a5bda7d4f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:b4:8e:f0:27:fe:3a:36:1f:53:5f:78:e3:
38:fd:08:f9:28:0f:32:81:d3:1f:e5:ba:17:7a:47:
ba:e3:de:b1:30:8e:15:63:1e:a8:7c:bb:4e:8d:73:
14:b3:44:56:c4:7f:d8:c5:62:62:07:29:39:a3:65:
d5:f3:a9:56:f0:9f:ec:a6:08:54:40:8d:f3:dc:5b:
e9:28:c7:c3:bc:db:96:21:43:af:70:d7:f0:a5:89:
f4:67:90:a9:0a:c5:28:88:e9:99:87:1b:17:bf:86:
03:3d:1e:31:3a:8f:cf:69:b3:4d:55:71:2e:f3:05:
e0:22:35:e2:f5:a2:44:ef:e0:02:65:f9:9b:d4:44:
b4:ee:17:67:2b:8d:d0:1c:c8:8f:a8:84:12:6f:7e:
f6:a7:2d:31:08:f2:a7:bf:a5:6f:3f:5f:45:a3:47:
99:b1:04:2e:55:91:de:14:0d:a6:f2:17:b4:83:c9:
bf:10:4f:59:e5:67:8a:2c:c1:41:36:a1:89:42:df:
6f:7b:e6:98:57:74:be:c0:06:4a:91:ba:2e:d4:5f:
9d:4e:cb:f9:08:05:56:48:6b:b5:ab:3e:ac:2a:1f:
5a:7f:b2:6c:b9:8f:47:d4:3b:e6:9a:6f:ec:ee:83:
84:a9:79:4b:86:ff:65:42:df:27:a6:fb:8b:c2:04:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:41:4A:F1:D4:D0:97:A0:3E:5F:9C:DD:59:4C:8A:5B:DA:7D:4F:6F
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/0UFK8dTQl6A-X5zdWUyKW9p9T28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.136.0/21
37.157.160.0/19
46.10.0.0/16
46.249.64.0/19
62.73.64.0/18
62.176.64.0/18
77.85.0.0/16
78.154.0.0/19
79.100.0.0/16
82.137.64.0/18
82.146.0.0/22
82.146.6.0/23
82.146.11.0/24
82.146.24.0/23
82.146.28.0/23
82.146.31.0/24
83.148.64.0/18
83.228.0.0/17
84.21.192.0/22
84.21.216.0/21
84.40.64.0/18
84.238.128.0/22
84.238.134.0-84.238.159.255
84.238.165.0/24
84.238.167.0-84.238.175.255
84.238.178.0-84.238.183.255
84.238.192.0/22
84.238.204.0/22
85.187.22.0-85.187.39.255
85.187.46.0/23
85.187.64.0/18
87.116.64.0/20
87.116.82.0/24
87.116.84.0/22
87.118.144.0/22
87.118.164.0/22
87.126.0.0/16
87.243.80.0-87.243.127.255
89.25.40.0/21
89.25.52.0-89.25.75.255
89.25.100.0/22
89.25.124.0/22
90.154.128.0/17
94.155.64.0-94.155.83.255
94.155.104.0-94.155.123.255
94.155.204.0/22
94.236.144.0-94.236.191.255
94.236.204.0/23
94.236.228.0/23
94.236.231.0/24
94.236.234.0/23
94.236.238.0/24
94.236.240.0/20
95.42.0.0/15
95.87.192.0/18
151.237.140.0/23
185.20.156.0/22
212.5.128.0/19
212.39.64.0/19
212.72.198.0/23
212.72.202.0/23
212.72.212.0/24
212.72.214.0/24
212.72.221.0/24
213.16.32.0/19
213.91.128.0/17
213.130.64.0/22
213.130.76.0/22
213.130.92.0/23
213.130.95.0/24
217.75.139.0/24
217.75.143.0/24
217.75.152.0/21
IPv6:
2a01:5a8::/32
Signature Algorithm: sha256WithRSAEncryption
58:60:72:3d:5c:ad:25:52:07:a9:95:f3:3b:42:34:3a:cb:79:
e5:5e:e3:b1:bb:da:92:a3:f8:37:33:4f:5b:dc:c0:24:5a:02:
96:ba:bc:d3:c7:43:08:0d:57:41:5a:ce:92:4f:1a:b8:b9:ce:
4d:b6:10:e1:fd:78:c3:6d:5b:dd:76:97:41:5c:21:29:97:b8:
d0:d2:ab:57:e8:f0:da:b8:df:8c:46:e2:66:b4:1f:ee:4e:c4:
eb:39:aa:d4:4c:25:60:d0:61:4e:aa:ff:e8:29:54:32:e5:ac:
8d:bc:14:6d:9f:54:3d:d5:a9:ef:9c:68:97:91:f9:a3:9a:00:
82:81:3e:45:2d:52:97:e7:be:f2:0e:4d:2f:0b:34:67:3f:5d:
60:8d:a4:e3:70:40:c3:a6:98:72:d3:38:3a:10:15:ec:78:a7:
2b:97:c7:96:6d:32:da:22:c4:87:75:24:a7:48:65:26:c0:3d:
d8:1f:bc:77:95:4e:75:c2:02:3c:56:7d:62:99:0a:de:07:9f:
02:48:5b:75:95:40:fb:65:50:06:cc:01:a9:13:76:e0:02:67:
4f:86:0b:12:6b:b7:b5:55:23:1d:59:cd:32:0c:f2:7d:be:1e:
18:7e:ae:66:43:5f:43:7e:8b:a1:d2:d0:0b:6e:32:05:34:96:
dc:1f:f9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:09 2025 by rpki-client