Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/HFGhREEN9u38jCldpE1P2EcUoh4.roa
File: HFGhREEN9u38jCldpE1P2EcUoh4.roa (raw, json)
Hash identifier: lCmfhwrUJp0xiqU8O36t634srKlnZlD8XPYVkSKxHRQ=
Subject key identifier: 1C:51:A1:44:41:0D:F6:ED:FC:8C:29:5D:A4:4D:4F:D8:47:14:A2:1E
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 2448DC6E
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/HFGhREEN9u38jCldpE1P2EcUoh4.roa
Signing time: Sun 16 Jan 2022 07:47:03 +0000
ROA not before: Sun 16 Jan 2022 07:47:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8492
IP address blocks: 37.221.206.0/24 maxlen: 24
37.221.203.0/24 maxlen: 24
37.221.204.0/23 maxlen: 23
37.221.200.0/23 maxlen: 23
85.114.0.0/19 maxlen: 19
185.241.176.0/22 maxlen: 22
95.161.144.0/21 maxlen: 21
145.255.232.0/24 maxlen: 24
95.161.152.0/22 maxlen: 22
145.255.233.0/24 maxlen: 24
95.161.156.0/22 maxlen: 22
145.255.236.0/22 maxlen: 22
145.255.234.0/23 maxlen: 23
95.161.164.0/22 maxlen: 22
95.161.160.0/19 maxlen: 19
62.32.64.0/24 maxlen: 24
62.32.66.0/23 maxlen: 23
62.32.70.0/24 maxlen: 24
62.32.68.0/23 maxlen: 23
62.32.75.0/24 maxlen: 24
62.32.76.0/24 maxlen: 24
62.32.73.0/24 maxlen: 24
62.32.74.0/24 maxlen: 24
62.32.84.0/23 maxlen: 23
62.32.83.0/24 maxlen: 24
62.32.91.0/24 maxlen: 24
62.32.89.0/24 maxlen: 24
62.32.90.0/24 maxlen: 24
62.32.88.0/24 maxlen: 24
62.32.94.0/24 maxlen: 24
80.79.64.0/21 maxlen: 21
80.79.76.0/24 maxlen: 24
80.79.72.0/22 maxlen: 22
80.79.79.0/24 maxlen: 24
185.119.0.0/22 maxlen: 22
217.79.4.0/23 maxlen: 23
217.79.0.0/22 maxlen: 22
217.79.10.0/23 maxlen: 23
217.79.8.0/24 maxlen: 24
217.79.9.0/24 maxlen: 24
217.79.6.0/23 maxlen: 23
217.79.15.0/24 maxlen: 24
217.79.14.0/24 maxlen: 24
217.79.12.0/23 maxlen: 23
149.126.16.0/22 maxlen: 22
149.126.22.0/24 maxlen: 24
149.126.23.0/24 maxlen: 24
149.126.20.0/23 maxlen: 23
37.77.132.0/24 maxlen: 24
37.77.130.0/23 maxlen: 23
37.77.129.0/24 maxlen: 24
37.77.133.0/24 maxlen: 24
37.77.134.0/23 maxlen: 23
46.231.208.0/24 maxlen: 24
46.231.209.0/24 maxlen: 24
46.231.212.0/23 maxlen: 23
46.231.210.0/23 maxlen: 23
46.231.215.0/24 maxlen: 24
46.231.214.0/24 maxlen: 24
93.191.58.0/24 maxlen: 24
93.191.63.0/24 maxlen: 24
93.191.60.0/24 maxlen: 24
185.171.192.0/22 maxlen: 22
178.16.144.0/22 maxlen: 22
178.16.152.0/22 maxlen: 22
178.16.150.0/24 maxlen: 24
178.16.151.0/24 maxlen: 24
178.16.148.0/23 maxlen: 23
178.16.158.0/23 maxlen: 23
178.16.156.0/24 maxlen: 24
185.244.132.0/22 maxlen: 22
80.250.88.0/21 maxlen: 21
80.250.87.0/24 maxlen: 24
185.7.232.0/22 maxlen: 22
46.34.136.0/21 maxlen: 21
79.142.80.0/21 maxlen: 21
46.34.134.0/24 maxlen: 24
79.142.88.0/22 maxlen: 22
46.34.148.0/22 maxlen: 22
79.142.92.0/24 maxlen: 24
185.102.10.0/24 maxlen: 24
185.102.8.0/22 maxlen: 22
185.81.220.0/22 maxlen: 22
95.161.232.0/22 maxlen: 22
95.161.228.0/22 maxlen: 22
95.161.236.0/22 maxlen: 22
79.134.192.0/24 maxlen: 24
79.134.198.0/23 maxlen: 23
79.134.196.0/23 maxlen: 23
79.134.194.0/23 maxlen: 23
95.161.180.0/22 maxlen: 22
79.134.193.0/24 maxlen: 24
79.134.200.0/21 maxlen: 21
95.161.192.0/22 maxlen: 22
95.161.192.0/19 maxlen: 19
95.161.188.0/22 maxlen: 22
79.134.213.0/24 maxlen: 24
79.134.212.0/24 maxlen: 24
79.134.208.0/22 maxlen: 22
79.134.214.0/23 maxlen: 23
79.134.216.0/22 maxlen: 22
95.161.213.0/24 maxlen: 24
79.134.222.0/23 maxlen: 23
79.134.220.0/23 maxlen: 23
95.161.214.0/23 maxlen: 23
95.161.218.0/23 maxlen: 23
95.161.216.0/23 maxlen: 23
95.161.220.0/24 maxlen: 24
46.229.210.0/23 maxlen: 23
46.229.210.0/24 maxlen: 24
46.229.211.0/24 maxlen: 24
46.229.208.0/23 maxlen: 23
46.229.208.0/22 maxlen: 22
2a01:590::/32 maxlen: 32
2a05:a400::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608754798 (0x2448dc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 16 07:47:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c51a144410df6edfc8c295da44d4fd84714a21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:7b:ae:cb:84:3a:34:d0:ec:c9:45:cf:cb:
7c:8d:eb:94:95:84:b1:0f:67:db:00:85:81:a5:85:
10:fa:79:c8:3a:bf:de:e8:77:6f:86:45:8c:3f:09:
ab:47:62:69:4e:b5:97:ea:d5:6e:dc:fa:02:ce:15:
6a:02:b6:f6:34:ea:ea:e0:ad:35:dc:80:f5:78:81:
3a:fb:2d:2a:58:64:bf:67:c1:82:a3:88:47:08:a8:
3b:73:c1:5f:61:e2:8c:a8:7f:4a:dc:a7:be:12:b3:
e3:68:bb:13:9f:1a:d1:c7:d7:d5:d5:c1:5a:72:4a:
c1:c6:26:8a:40:95:a0:56:eb:d5:7a:62:07:d7:d0:
77:4f:86:3f:5d:36:1b:db:ef:dd:4f:4b:f0:0b:82:
fe:8a:2b:2e:53:0f:fc:ee:46:4c:94:2b:7c:2a:79:
64:a7:3d:43:41:e0:2f:48:14:9c:64:86:ee:02:7a:
8d:99:3b:75:54:02:e4:f7:bd:db:ff:9c:b4:a1:23:
5d:d4:3e:8a:05:d1:7c:c6:9a:bd:64:3c:b5:c9:03:
d2:9d:de:65:b2:5b:2c:37:98:d1:36:93:8f:98:e9:
a6:d2:d4:50:b3:d0:be:16:1b:b7:5d:a0:12:d8:4c:
4e:b0:da:2e:3c:f7:9d:97:81:69:03:4b:14:ce:f7:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:51:A1:44:41:0D:F6:ED:FC:8C:29:5D:A4:4D:4F:D8:47:14:A2:1E
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/HFGhREEN9u38jCldpE1P2EcUoh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.129.0-37.77.135.255
37.221.200.0/23
37.221.203.0-37.221.206.255
46.34.134.0/24
46.34.136.0/21
46.34.148.0/22
46.229.208.0/22
46.231.208.0/21
62.32.64.0/24
62.32.66.0-62.32.70.255
62.32.73.0-62.32.76.255
62.32.83.0-62.32.85.255
62.32.88.0/22
62.32.94.0/24
79.134.192.0/19
79.142.80.0-79.142.92.255
80.79.64.0-80.79.76.255
80.79.79.0/24
80.250.87.0-80.250.95.255
85.114.0.0/19
93.191.58.0/24
93.191.60.0/24
93.191.63.0/24
95.161.144.0-95.161.223.255
95.161.228.0-95.161.239.255
145.255.232.0/21
149.126.16.0/21
178.16.144.0-178.16.156.255
178.16.158.0/23
185.7.232.0/22
185.81.220.0/22
185.102.8.0/22
185.119.0.0/22
185.171.192.0/22
185.241.176.0/22
185.244.132.0/22
217.79.0.0/20
IPv6:
2a01:590::/32
2a05:a400::/29
Signature Algorithm: sha256WithRSAEncryption
20:04:7b:ce:97:6f:04:52:58:b8:61:56:35:29:f5:81:29:c7:
88:29:68:70:e6:0b:72:6f:5b:ec:cb:ef:df:21:a1:4d:bf:4e:
0a:c8:56:6b:0b:59:25:ac:0b:d7:3a:1d:34:0d:bd:3f:a4:12:
82:8b:fb:eb:95:fb:ff:1f:59:51:5b:b8:b5:67:1f:29:62:11:
8f:c4:27:eb:34:fa:e3:a2:c5:1d:04:64:13:b4:80:cb:7b:f6:
ac:2f:fb:09:5c:f9:07:93:1a:7b:9f:7e:ef:3f:70:a1:31:32:
75:12:bb:cc:51:03:e3:a6:d5:b0:f4:e2:d4:86:cf:47:2d:c2:
53:62:cf:2a:40:d9:a6:73:72:a7:6b:53:7a:ff:a6:68:4a:ae:
66:1a:34:1c:48:a7:45:57:06:6f:b6:8c:77:4c:5c:fc:a4:85:
34:4a:0f:ac:7a:80:0c:10:44:ab:07:87:96:51:a0:c2:34:38:
08:b3:f2:45:53:10:ee:f9:cc:e5:b6:0f:7b:c9:66:e5:cf:3f:
20:a1:75:cc:c9:07:d5:72:66:48:56:9c:24:12:2f:6e:03:55:
9f:4e:ac:3b:43:af:0c:a3:0c:ba:fc:42:d6:72:19:b1:29:f3:
5e:ef:79:39:50:23:de:6f:3d:ba:3d:3d:33:d3:f8:3e:91:8d:
f6:d6:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:19 2024 by rpki-client on console-ams.rpki-client.org