Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/BoIgW3Ai8tmNtkqyE9mfRIOmqp8.roa
File: BoIgW3Ai8tmNtkqyE9mfRIOmqp8.roa (raw, json)
Hash identifier: zgHThoI5DjE4BTAjc3OnD6AiRfVgFZk2PzJpOh+1SKE=
Subject key identifier: 06:82:20:5B:70:22:F2:D9:8D:B6:4A:B2:13:D9:9F:44:83:A6:AA:9F
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 0187A7D363F829363A680AD7E427592C8500
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/BoIgW3Ai8tmNtkqyE9mfRIOmqp8.roa
Signing time: Sat 22 Apr 2023 07:17:41 +0000
ROA not before: Sat 22 Apr 2023 07:17:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8492
IP address blocks: 37.221.206.0/24 maxlen: 24
37.221.203.0/24 maxlen: 24
37.221.204.0/23 maxlen: 23
37.221.200.0/23 maxlen: 23
85.114.0.0/19 maxlen: 19
92.255.44.0/24 maxlen: 24
92.255.41.0/24 maxlen: 24
185.241.176.0/22 maxlen: 22
92.255.40.0/24 maxlen: 24
92.255.45.0/24 maxlen: 24
92.255.51.0/24 maxlen: 24
92.255.46.0/24 maxlen: 24
92.255.47.0/24 maxlen: 24
95.161.144.0/21 maxlen: 21
145.255.232.0/24 maxlen: 24
145.255.233.0/24 maxlen: 24
95.161.152.0/22 maxlen: 24
95.161.156.0/22 maxlen: 22
145.255.236.0/22 maxlen: 22
145.255.234.0/23 maxlen: 23
95.161.164.0/22 maxlen: 22
95.161.160.0/19 maxlen: 19
87.249.55.0/24 maxlen: 24
62.32.64.0/24 maxlen: 24
62.32.66.0/23 maxlen: 23
62.32.70.0/24 maxlen: 24
62.32.68.0/23 maxlen: 23
62.32.75.0/24 maxlen: 24
62.32.76.0/24 maxlen: 24
62.32.73.0/24 maxlen: 24
62.32.74.0/24 maxlen: 24
62.32.84.0/23 maxlen: 23
62.32.83.0/24 maxlen: 24
62.32.91.0/24 maxlen: 24
62.32.89.0/24 maxlen: 24
62.32.90.0/24 maxlen: 24
62.32.88.0/24 maxlen: 24
62.32.94.0/24 maxlen: 24
80.79.64.0/21 maxlen: 21
80.79.76.0/24 maxlen: 24
80.79.72.0/22 maxlen: 22
80.79.79.0/24 maxlen: 24
185.119.0.0/22 maxlen: 22
217.79.4.0/23 maxlen: 23
217.79.0.0/22 maxlen: 22
217.79.10.0/23 maxlen: 23
217.79.8.0/24 maxlen: 24
217.79.9.0/24 maxlen: 24
217.79.6.0/23 maxlen: 23
217.79.15.0/24 maxlen: 24
217.79.14.0/24 maxlen: 24
217.79.12.0/23 maxlen: 23
149.126.16.0/22 maxlen: 22
149.126.22.0/24 maxlen: 24
149.126.23.0/24 maxlen: 24
149.126.20.0/23 maxlen: 23
37.77.132.0/24 maxlen: 24
37.77.130.0/23 maxlen: 23
89.104.118.0/24 maxlen: 24
89.104.115.0/24 maxlen: 24
37.77.129.0/24 maxlen: 24
37.77.133.0/24 maxlen: 24
37.77.134.0/23 maxlen: 23
46.231.208.0/24 maxlen: 24
46.231.209.0/24 maxlen: 24
46.231.212.0/23 maxlen: 23
46.231.210.0/23 maxlen: 23
46.231.215.0/24 maxlen: 24
46.231.214.0/23 maxlen: 23
46.231.214.0/24 maxlen: 24
93.191.58.0/24 maxlen: 24
93.191.63.0/24 maxlen: 24
93.191.60.0/24 maxlen: 24
185.171.192.0/22 maxlen: 22
89.104.97.0/24 maxlen: 24
178.16.144.0/22 maxlen: 22
178.16.152.0/22 maxlen: 22
178.16.150.0/24 maxlen: 24
178.16.151.0/24 maxlen: 24
178.16.148.0/23 maxlen: 23
178.16.158.0/23 maxlen: 23
178.16.156.0/24 maxlen: 24
185.244.132.0/22 maxlen: 22
80.250.80.0/24 maxlen: 24
80.250.88.0/21 maxlen: 21
80.250.87.0/24 maxlen: 24
185.7.232.0/22 maxlen: 22
46.34.136.0/21 maxlen: 21
79.142.80.0/21 maxlen: 21
46.34.134.0/24 maxlen: 24
79.142.88.0/22 maxlen: 22
46.34.148.0/22 maxlen: 22
79.142.92.0/24 maxlen: 24
185.102.10.0/24 maxlen: 24
185.102.8.0/22 maxlen: 22
185.81.220.0/22 maxlen: 22
95.161.232.0/22 maxlen: 22
95.161.228.0/22 maxlen: 22
95.161.236.0/22 maxlen: 22
79.134.192.0/24 maxlen: 24
79.134.196.0/23 maxlen: 23
79.134.198.0/23 maxlen: 23
79.134.194.0/23 maxlen: 23
79.134.193.0/24 maxlen: 24
95.161.180.0/22 maxlen: 22
79.134.200.0/21 maxlen: 21
95.161.192.0/22 maxlen: 22
95.161.192.0/19 maxlen: 19
95.161.188.0/22 maxlen: 22
79.134.213.0/24 maxlen: 24
79.134.212.0/24 maxlen: 24
79.134.208.0/22 maxlen: 22
79.134.214.0/23 maxlen: 23
79.134.216.0/22 maxlen: 22
95.161.213.0/24 maxlen: 24
79.134.222.0/23 maxlen: 23
79.134.220.0/23 maxlen: 23
95.161.214.0/23 maxlen: 23
95.161.218.0/23 maxlen: 23
95.161.216.0/23 maxlen: 23
95.161.220.0/24 maxlen: 24
89.223.1.0/24 maxlen: 24
89.223.12.0/24 maxlen: 24
46.229.210.0/23 maxlen: 23
46.229.210.0/24 maxlen: 24
46.229.211.0/24 maxlen: 24
46.229.208.0/23 maxlen: 23
46.229.208.0/22 maxlen: 22
2a05:a407::/32 maxlen: 32
2a05:a406::/32 maxlen: 32
2a01:590::/32 maxlen: 32
2a05:a400::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a7:d3:63:f8:29:36:3a:68:0a:d7:e4:27:59:2c:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Apr 22 07:17:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0682205b7022f2d98db64ab213d99f4483a6aa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:d2:06:ca:ef:cf:16:8a:00:63:ee:6d:6b:
1c:71:b1:17:24:9b:f5:02:b7:50:c2:f7:ad:7a:ee:
bb:da:19:72:1e:74:a8:f7:78:fd:51:53:82:d0:c3:
59:f2:43:36:3b:ec:e0:e6:3e:62:f3:51:41:ff:4a:
c6:cd:4e:a2:7c:73:86:05:7e:44:9b:7b:24:83:67:
29:c8:eb:17:79:2e:fb:ac:6d:3d:7f:d4:fc:c7:4c:
ae:b8:e0:24:44:2d:60:b2:57:46:3d:ef:33:ea:50:
3c:77:cb:99:b1:26:99:6d:06:1f:45:4c:0a:78:c9:
6c:82:35:35:44:f4:28:dd:d9:75:e9:e7:86:dc:fe:
27:a9:a5:69:61:d8:89:f9:91:04:fd:1d:fb:6a:55:
5f:83:28:2b:d5:41:06:b4:f7:9c:cf:af:49:de:b7:
1f:85:2c:69:cc:50:fd:88:17:21:63:34:93:f6:22:
89:96:8d:c7:d1:08:de:9f:f7:ab:02:10:95:7a:9c:
68:7d:da:23:1c:61:d3:d3:5f:10:dc:94:2a:29:9e:
b2:74:a8:5b:03:ac:1b:f7:ed:62:84:d3:f5:c8:0e:
89:b8:24:87:cb:47:dc:e2:c4:85:44:46:3f:16:74:
61:e4:c3:24:ff:c7:9d:f4:ab:93:88:2d:3a:e8:8c:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:82:20:5B:70:22:F2:D9:8D:B6:4A:B2:13:D9:9F:44:83:A6:AA:9F
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/BoIgW3Ai8tmNtkqyE9mfRIOmqp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.129.0-37.77.135.255
37.221.200.0/23
37.221.203.0-37.221.206.255
46.34.134.0/24
46.34.136.0/21
46.34.148.0/22
46.229.208.0/22
46.231.208.0/21
62.32.64.0/24
62.32.66.0-62.32.70.255
62.32.73.0-62.32.76.255
62.32.83.0-62.32.85.255
62.32.88.0/22
62.32.94.0/24
79.134.192.0/19
79.142.80.0-79.142.92.255
80.79.64.0-80.79.76.255
80.79.79.0/24
80.250.80.0/24
80.250.87.0-80.250.95.255
85.114.0.0/19
87.249.55.0/24
89.104.97.0/24
89.104.115.0/24
89.104.118.0/24
89.223.1.0/24
89.223.12.0/24
92.255.40.0/23
92.255.44.0/22
92.255.51.0/24
93.191.58.0/24
93.191.60.0/24
93.191.63.0/24
95.161.144.0-95.161.223.255
95.161.228.0-95.161.239.255
145.255.232.0/21
149.126.16.0/21
178.16.144.0-178.16.156.255
178.16.158.0/23
185.7.232.0/22
185.81.220.0/22
185.102.8.0/22
185.119.0.0/22
185.171.192.0/22
185.241.176.0/22
185.244.132.0/22
217.79.0.0/20
IPv6:
2a01:590::/32
2a05:a400::/29
Signature Algorithm: sha256WithRSAEncryption
99:c9:0e:b6:ed:3e:d2:e0:8c:43:91:07:10:89:4c:2d:db:52:
c5:39:de:2c:72:b6:8a:d9:51:c0:f3:3b:80:d8:8a:f0:b5:87:
29:93:8f:57:7a:e8:a9:58:bb:10:26:08:88:99:8a:e9:85:53:
e4:d9:12:5f:9b:4f:76:9e:da:ec:80:65:1d:99:47:ff:95:ac:
9a:59:5a:a9:5f:f5:e5:d7:ab:1d:2d:6f:b0:14:cb:9f:aa:04:
89:79:14:94:67:e1:0e:f9:64:f1:d5:e7:55:a1:cf:86:5f:c0:
ce:10:a0:93:53:68:bf:8b:e0:59:59:62:25:72:c8:00:ca:93:
22:75:71:6a:f2:40:e4:60:48:5d:0e:60:ad:31:3e:26:c1:22:
59:f6:9c:89:28:83:e6:66:ad:7d:b3:22:69:5e:33:f1:7d:1c:
bd:22:a8:f1:6f:78:8e:e0:8a:ac:7c:6f:95:12:99:23:fa:46:
75:ce:af:95:23:79:46:43:c7:00:75:47:fd:33:cb:46:60:ff:
be:87:2b:f5:72:3d:cc:3b:f9:02:fd:c3:90:05:3f:fc:23:a0:
75:d9:41:e4:62:ac:2b:59:02:3b:9f:d3:38:9c:ab:34:90:72:
95:ad:f2:fa:63:41:eb:df:6f:0e:59:40:f2:d8:8a:86:21:a8:
ca:2d:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org