Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/6kQSVAsnGLA36swJeYEtr2cqlrw.roa
File: 6kQSVAsnGLA36swJeYEtr2cqlrw.roa (raw, json)
Hash identifier: PsYGBTKwVgozaU/FyML/UYDHIzgvDdIspe5SOsZC6HA=
Subject key identifier: EA:44:12:54:0B:27:18:B0:37:EA:CC:09:79:81:2D:AF:67:2A:96:BC
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 24BFBA92
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/6kQSVAsnGLA36swJeYEtr2cqlrw.roa
Signing time: Fri 11 Mar 2022 06:38:05 +0000
ROA not before: Fri 11 Mar 2022 06:38:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8492
IP address blocks: 37.221.206.0/24 maxlen: 24
37.221.203.0/24 maxlen: 24
37.221.204.0/23 maxlen: 23
37.221.200.0/23 maxlen: 23
85.114.0.0/19 maxlen: 19
185.241.176.0/22 maxlen: 22
95.161.144.0/21 maxlen: 21
145.255.232.0/24 maxlen: 24
145.255.233.0/24 maxlen: 24
95.161.152.0/22 maxlen: 24
95.161.156.0/22 maxlen: 22
145.255.236.0/22 maxlen: 22
145.255.234.0/23 maxlen: 23
95.161.164.0/22 maxlen: 22
95.161.160.0/19 maxlen: 19
62.32.64.0/24 maxlen: 24
62.32.66.0/23 maxlen: 23
62.32.70.0/24 maxlen: 24
62.32.68.0/23 maxlen: 23
62.32.75.0/24 maxlen: 24
62.32.76.0/24 maxlen: 24
62.32.73.0/24 maxlen: 24
62.32.74.0/24 maxlen: 24
62.32.84.0/23 maxlen: 23
62.32.83.0/24 maxlen: 24
62.32.91.0/24 maxlen: 24
62.32.89.0/24 maxlen: 24
62.32.90.0/24 maxlen: 24
62.32.88.0/24 maxlen: 24
62.32.94.0/24 maxlen: 24
80.79.64.0/21 maxlen: 21
80.79.76.0/24 maxlen: 24
80.79.72.0/22 maxlen: 22
80.79.79.0/24 maxlen: 24
185.119.0.0/22 maxlen: 22
217.79.4.0/23 maxlen: 23
217.79.0.0/22 maxlen: 22
217.79.10.0/23 maxlen: 23
217.79.8.0/24 maxlen: 24
217.79.9.0/24 maxlen: 24
217.79.6.0/23 maxlen: 23
217.79.15.0/24 maxlen: 24
217.79.14.0/24 maxlen: 24
217.79.12.0/23 maxlen: 23
149.126.16.0/22 maxlen: 22
149.126.22.0/24 maxlen: 24
149.126.23.0/24 maxlen: 24
149.126.20.0/23 maxlen: 23
37.77.132.0/24 maxlen: 24
37.77.130.0/23 maxlen: 23
37.77.129.0/24 maxlen: 24
37.77.133.0/24 maxlen: 24
37.77.134.0/23 maxlen: 23
46.231.208.0/24 maxlen: 24
46.231.209.0/24 maxlen: 24
46.231.212.0/23 maxlen: 23
46.231.210.0/23 maxlen: 23
46.231.215.0/24 maxlen: 24
46.231.214.0/24 maxlen: 24
93.191.58.0/24 maxlen: 24
93.191.63.0/24 maxlen: 24
93.191.60.0/24 maxlen: 24
185.171.192.0/22 maxlen: 22
178.16.144.0/22 maxlen: 22
178.16.152.0/22 maxlen: 22
178.16.150.0/24 maxlen: 24
178.16.151.0/24 maxlen: 24
178.16.148.0/23 maxlen: 23
178.16.158.0/23 maxlen: 23
178.16.156.0/24 maxlen: 24
185.244.132.0/22 maxlen: 22
80.250.88.0/21 maxlen: 21
80.250.87.0/24 maxlen: 24
185.7.232.0/22 maxlen: 22
46.34.136.0/21 maxlen: 21
79.142.80.0/21 maxlen: 21
46.34.134.0/24 maxlen: 24
79.142.88.0/22 maxlen: 22
46.34.148.0/22 maxlen: 22
79.142.92.0/24 maxlen: 24
185.102.10.0/24 maxlen: 24
185.102.8.0/22 maxlen: 22
185.81.220.0/22 maxlen: 22
95.161.232.0/22 maxlen: 22
95.161.228.0/22 maxlen: 22
95.161.236.0/22 maxlen: 22
79.134.192.0/24 maxlen: 24
79.134.198.0/23 maxlen: 23
79.134.196.0/23 maxlen: 23
79.134.194.0/23 maxlen: 23
79.134.193.0/24 maxlen: 24
95.161.180.0/22 maxlen: 22
79.134.200.0/21 maxlen: 21
95.161.192.0/22 maxlen: 22
95.161.192.0/19 maxlen: 19
95.161.188.0/22 maxlen: 22
79.134.213.0/24 maxlen: 24
79.134.212.0/24 maxlen: 24
79.134.208.0/22 maxlen: 22
79.134.214.0/23 maxlen: 23
79.134.216.0/22 maxlen: 22
95.161.213.0/24 maxlen: 24
79.134.222.0/23 maxlen: 23
79.134.220.0/23 maxlen: 23
95.161.214.0/23 maxlen: 23
95.161.218.0/23 maxlen: 23
95.161.216.0/23 maxlen: 23
95.161.220.0/24 maxlen: 24
46.229.210.0/23 maxlen: 23
46.229.210.0/24 maxlen: 24
46.229.211.0/24 maxlen: 24
46.229.208.0/23 maxlen: 23
46.229.208.0/22 maxlen: 22
2a01:590::/32 maxlen: 32
2a05:a400::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616544914 (0x24bfba92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Mar 11 06:38:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea4412540b2718b037eacc0979812daf672a96bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:23:1f:e1:9a:cb:75:71:18:04:6d:90:b4:
cc:e7:ce:8a:e2:d9:1a:05:89:af:be:8f:45:0c:a9:
37:24:d9:a6:a9:fc:ad:3c:bd:93:25:04:7e:a3:45:
eb:78:d2:a9:a0:a6:1b:9a:1f:a5:41:a5:97:63:c3:
30:c7:2c:e3:56:bc:ad:9e:b1:73:5f:44:5d:52:50:
89:68:52:a9:24:d2:9b:8d:b1:f0:6c:7f:57:2c:47:
b0:fb:cf:14:02:b1:75:dc:73:cb:fc:49:2e:1e:1f:
9e:f5:f1:11:b2:3f:b6:59:62:95:c9:14:19:fd:b2:
d1:fa:1b:1b:a2:be:76:04:ad:dd:d5:42:bb:ca:cb:
cf:09:15:53:c3:a7:f9:2f:0f:37:18:46:56:ee:29:
7a:b8:22:d8:70:e4:43:2e:5a:09:f3:98:c7:13:b0:
42:33:4b:6c:6a:d1:11:16:9e:35:43:20:dd:0f:1a:
24:e1:b8:e6:6d:18:45:30:ef:e9:54:e9:bb:62:09:
d1:43:ee:03:19:50:6d:e9:73:86:98:4a:b5:df:c3:
53:d9:c8:fb:47:78:7c:24:48:b1:a2:7d:fa:5d:2f:
2a:ed:fe:74:25:dd:a9:45:95:ac:35:a2:cb:ec:ba:
1a:76:87:0c:4d:7c:b0:ca:07:11:9a:35:ce:94:12:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:44:12:54:0B:27:18:B0:37:EA:CC:09:79:81:2D:AF:67:2A:96:BC
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/6kQSVAsnGLA36swJeYEtr2cqlrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.129.0-37.77.135.255
37.221.200.0/23
37.221.203.0-37.221.206.255
46.34.134.0/24
46.34.136.0/21
46.34.148.0/22
46.229.208.0/22
46.231.208.0/21
62.32.64.0/24
62.32.66.0-62.32.70.255
62.32.73.0-62.32.76.255
62.32.83.0-62.32.85.255
62.32.88.0/22
62.32.94.0/24
79.134.192.0/19
79.142.80.0-79.142.92.255
80.79.64.0-80.79.76.255
80.79.79.0/24
80.250.87.0-80.250.95.255
85.114.0.0/19
93.191.58.0/24
93.191.60.0/24
93.191.63.0/24
95.161.144.0-95.161.223.255
95.161.228.0-95.161.239.255
145.255.232.0/21
149.126.16.0/21
178.16.144.0-178.16.156.255
178.16.158.0/23
185.7.232.0/22
185.81.220.0/22
185.102.8.0/22
185.119.0.0/22
185.171.192.0/22
185.241.176.0/22
185.244.132.0/22
217.79.0.0/20
IPv6:
2a01:590::/32
2a05:a400::/29
Signature Algorithm: sha256WithRSAEncryption
5d:b7:8c:8d:42:ef:68:38:e1:ec:c6:a0:0e:a1:bc:c9:be:ac:
53:2f:e4:16:cf:37:bc:5e:25:2a:c2:18:9a:da:4d:0e:3d:b2:
7c:df:b9:b0:07:7d:52:e0:07:fc:42:41:1d:b6:18:51:be:3f:
61:a1:33:bc:f7:b3:88:4d:dc:ac:77:e2:5f:88:97:3f:9f:e1:
64:73:ec:07:22:b5:c2:41:93:58:46:cb:9b:c9:66:8e:03:b5:
4d:01:fb:a6:2f:57:58:c8:9a:03:f4:c3:63:8e:42:c5:1b:35:
79:75:8b:bf:3b:11:79:f3:18:dd:d6:49:fe:77:d9:4c:cc:3a:
58:98:4b:06:11:4c:51:a0:bc:12:8e:be:84:71:c0:45:2a:00:
95:4f:6a:20:c9:52:04:b7:b9:93:36:87:5b:29:f6:92:94:6d:
ca:aa:7b:8d:7d:aa:6f:ff:4e:0b:a7:5f:98:b3:d3:71:f8:f9:
a0:d0:90:b0:39:d0:60:eb:d2:a5:24:73:18:47:9c:62:1a:d9:
0c:ab:f9:b6:ed:19:89:d5:da:fc:73:a5:eb:c8:78:07:ae:9b:
bc:34:c6:ad:f5:1d:f7:0a:53:57:25:18:c2:c9:7f:5e:21:cc:
05:0d:99:cf:dc:61:ee:90:3e:7c:de:6b:0d:25:15:43:83:e7:
0a:a4:df:51
-----BEGIN CERTIFICATE-----
MIIGPzCCBSegAwIBAgIEJL+6kjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
OTc5ODYzY2VhODJhZWI4ZTlkZjM4NGIzOWFhNTE3NmY0YmNmYTYxMB4XDTIyMDMx
MTA2MzgwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWE0NDEyNTQwYjI3
MThiMDM3ZWFjYzA5Nzk4MTJkYWY2NzJhOTZiYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMViIx/hmst1cRgEbZC0zOfOiuLZGgWJr76PRQypNyTZpqn8
rTy9kyUEfqNF63jSqaCmG5ofpUGll2PDMMcs41a8rZ6xc19EXVJQiWhSqSTSm42x
8Gx/VyxHsPvPFAKxddxzy/xJLh4fnvXxEbI/tllilckUGf2y0fobG6K+dgSt3dVC
u8rLzwkVU8On+S8PNxhGVu4pergi2HDkQy5aCfOYxxOwQjNLbGrRERaeNUMg3Q8a
JOG45m0YRTDv6VTpu2IJ0UPuAxlQbelzhphKtd/DU9nI+0d4fCRIsaJ9+l0vKu3+
dCXdqUWVrDWiy+y6GnaHDE18sMoHEZo1zpQSKDkCAwEAAaOCA1kwggNVMB0GA1Ud
DgQWBBTqRBJUCycYsDfqzAl5gS2vZyqWvDAfBgNVHSMEGDAWgBR5eYY86oKuuOnf
OEs5qlF29Lz6YTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VYbUdQT3FDcnJqcDN6aExPYXBSZHZTOC1tRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmQvMWNjZjI1LTIwZGUtNGIyZS1hMGUxLWRlNGFjZjQ0N2ZhZS8x
LzZrUVNWQXNuR0xBMzZzd0plWUV0cjJjcWxydy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQv
MWNjZjI1LTIwZGUtNGIyZS1hMGUxLWRlNGFjZjQ0N2ZhZS8xL2VYbUdQT3FDcnJq
cDN6aExPYXBSZHZTOC1tRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AW0GCCsGAQUFBwEHAQH/BIIBXDCCAVgwggE+BAIAATCCATYwDAMEACVNgQMEAyVN
gAMEASXdyDAMAwQAJd3LAwQAJd3OAwQALiKGAwQDLiKIAwQCLiKUAwQCLuXQAwQD
LufQAwQAPiBAMAwDBAE+IEIDBAA+IEYwDAMEAD4gSQMEAD4gTDAMAwQAPiBTAwQB
PiBUAwQCPiBYAwQAPiBeAwQFT4bAMAwDBARPjlADBABPjlwwDAMEBlBPQAMEAFBP
TAMEAFBPTzAMAwQAUPpXAwQFUPpAAwQFVXIAAwQAXb86AwQAXb88AwQAXb8/MAwD
BARfoZADBAVfocAwDAMEAl+h5AMEBF+h4AMEA5H/6AMEA5V+EDAMAwQEshCQAwQA
shCcAwQBshCeAwQCuQfoAwQCuVHcAwQCuWYIAwQCuXcAAwQCuavAAwQCufGwAwQC
ufSEAwQE2U8AMBQEAgACMA4DBQAqAQWQAwUDKgWkADANBgkqhkiG9w0BAQsFAAOC
AQEAXbeMjULvaDjh7MagDqG8yb6sUy/kFs83vF4lKsIYmtpNDj2yfN+5sAd9UuAH
/EJBHbYYUb4/YaEzvPeziE3crHfiX4iXP5/hZHPsByK1wkGTWEbLm8lmjgO1TQH7
pi9XWMiaA/TDY45CxRs1eXWLvzsRefMY3dZJ/nfZTMw6WJhLBhFMUaC8Eo6+hHHA
RSoAlU9qIMlSBLe5kzaHWyn2kpRtyqp7jX2qb/9OC6dfmLPTcfj5oNCQsDnQYOvS
pSRzGEecYhrZDKv5tu0ZidXa/HOl68h4B66bvDTGrfUd9wpTVyUYwsl/XiHMBQ2Z
z9xh7pA+fN5rDSUVQ4PnCqTfUQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:22 2025 by rpki-client