Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/HcIU8wz0aQYh1etk2_DsC6Lj5Z4.roa
File: HcIU8wz0aQYh1etk2_DsC6Lj5Z4.roa (raw, json)
Hash identifier: K6jBRgze1WK9/niXHmsUp2R9X/R2KWhjBN1u92B+2/w=
Subject key identifier: 1D:C2:14:F3:0C:F4:69:06:21:D5:EB:64:DB:F0:EC:0B:A2:E3:E5:9E
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018571FA0539D78A2B4EE27CDF2B370BBC2C
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/HcIU8wz0aQYh1etk2_DsC6Lj5Z4.roa
Signing time: Mon 02 Jan 2023 10:14:48 +0000
ROA not before: Mon 02 Jan 2023 10:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8492
IP address blocks: 37.221.206.0/24 maxlen: 24
37.221.203.0/24 maxlen: 24
37.221.204.0/23 maxlen: 23
37.221.200.0/23 maxlen: 23
85.114.0.0/19 maxlen: 19
92.255.44.0/24 maxlen: 24
92.255.41.0/24 maxlen: 24
185.241.176.0/22 maxlen: 22
92.255.40.0/24 maxlen: 24
92.255.45.0/24 maxlen: 24
92.255.46.0/24 maxlen: 24
92.255.47.0/24 maxlen: 24
95.161.144.0/21 maxlen: 21
145.255.232.0/24 maxlen: 24
145.255.233.0/24 maxlen: 24
95.161.152.0/22 maxlen: 24
95.161.156.0/22 maxlen: 22
145.255.236.0/22 maxlen: 22
145.255.234.0/23 maxlen: 23
95.161.164.0/22 maxlen: 22
95.161.160.0/19 maxlen: 19
87.249.55.0/24 maxlen: 24
62.32.64.0/24 maxlen: 24
62.32.66.0/23 maxlen: 23
62.32.70.0/24 maxlen: 24
62.32.68.0/23 maxlen: 23
62.32.75.0/24 maxlen: 24
62.32.76.0/24 maxlen: 24
62.32.73.0/24 maxlen: 24
62.32.74.0/24 maxlen: 24
62.32.84.0/23 maxlen: 23
62.32.83.0/24 maxlen: 24
62.32.91.0/24 maxlen: 24
62.32.89.0/24 maxlen: 24
62.32.90.0/24 maxlen: 24
62.32.88.0/24 maxlen: 24
62.32.94.0/24 maxlen: 24
80.79.64.0/21 maxlen: 21
80.79.76.0/24 maxlen: 24
80.79.72.0/22 maxlen: 22
80.79.79.0/24 maxlen: 24
185.119.0.0/22 maxlen: 22
217.79.4.0/23 maxlen: 23
217.79.0.0/22 maxlen: 22
217.79.10.0/23 maxlen: 23
217.79.8.0/24 maxlen: 24
217.79.9.0/24 maxlen: 24
217.79.6.0/23 maxlen: 23
217.79.15.0/24 maxlen: 24
217.79.14.0/24 maxlen: 24
217.79.12.0/23 maxlen: 23
149.126.16.0/22 maxlen: 22
149.126.22.0/24 maxlen: 24
149.126.23.0/24 maxlen: 24
149.126.20.0/23 maxlen: 23
37.77.132.0/24 maxlen: 24
37.77.130.0/23 maxlen: 23
89.104.118.0/24 maxlen: 24
89.104.115.0/24 maxlen: 24
37.77.129.0/24 maxlen: 24
37.77.133.0/24 maxlen: 24
37.77.134.0/23 maxlen: 23
46.231.208.0/24 maxlen: 24
46.231.209.0/24 maxlen: 24
46.231.212.0/23 maxlen: 23
46.231.210.0/23 maxlen: 23
46.231.215.0/24 maxlen: 24
46.231.214.0/23 maxlen: 23
46.231.214.0/24 maxlen: 24
93.191.58.0/24 maxlen: 24
93.191.63.0/24 maxlen: 24
93.191.60.0/24 maxlen: 24
185.171.192.0/22 maxlen: 22
89.104.97.0/24 maxlen: 24
178.16.144.0/22 maxlen: 22
178.16.152.0/22 maxlen: 22
178.16.150.0/24 maxlen: 24
178.16.151.0/24 maxlen: 24
178.16.148.0/23 maxlen: 23
178.16.158.0/23 maxlen: 23
178.16.156.0/24 maxlen: 24
185.244.132.0/22 maxlen: 22
80.250.80.0/24 maxlen: 24
80.250.88.0/21 maxlen: 21
80.250.87.0/24 maxlen: 24
185.7.232.0/22 maxlen: 22
46.34.136.0/21 maxlen: 21
79.142.80.0/21 maxlen: 21
46.34.134.0/24 maxlen: 24
79.142.88.0/22 maxlen: 22
46.34.148.0/22 maxlen: 22
79.142.92.0/24 maxlen: 24
185.102.10.0/24 maxlen: 24
185.102.8.0/22 maxlen: 22
185.81.220.0/22 maxlen: 22
95.161.232.0/22 maxlen: 22
95.161.228.0/22 maxlen: 22
95.161.236.0/22 maxlen: 22
79.134.192.0/24 maxlen: 24
79.134.196.0/23 maxlen: 23
79.134.198.0/23 maxlen: 23
79.134.194.0/23 maxlen: 23
79.134.193.0/24 maxlen: 24
95.161.180.0/22 maxlen: 22
79.134.200.0/21 maxlen: 21
95.161.192.0/22 maxlen: 22
95.161.192.0/19 maxlen: 19
95.161.188.0/22 maxlen: 22
79.134.213.0/24 maxlen: 24
79.134.212.0/24 maxlen: 24
79.134.208.0/22 maxlen: 22
79.134.214.0/23 maxlen: 23
79.134.216.0/22 maxlen: 22
95.161.213.0/24 maxlen: 24
79.134.222.0/23 maxlen: 23
79.134.220.0/23 maxlen: 23
95.161.214.0/23 maxlen: 23
95.161.218.0/23 maxlen: 23
95.161.216.0/23 maxlen: 23
95.161.220.0/24 maxlen: 24
89.223.1.0/24 maxlen: 24
46.229.210.0/23 maxlen: 23
46.229.210.0/24 maxlen: 24
46.229.211.0/24 maxlen: 24
46.229.208.0/23 maxlen: 23
46.229.208.0/22 maxlen: 22
2a01:590::/32 maxlen: 32
2a05:a400::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:05:39:d7:8a:2b:4e:e2:7c:df:2b:37:0b:bc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 2 10:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dc214f30cf4690621d5eb64dbf0ec0ba2e3e59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:5f:32:de:a5:8a:c0:dd:af:8b:ea:c2:8e:
77:88:9a:b4:d6:48:97:23:ae:3b:83:d7:58:bf:2e:
57:e4:41:2c:3c:55:ba:cf:37:de:00:45:86:66:98:
2b:00:2f:35:a4:6b:db:e4:19:5f:fc:25:06:72:a3:
2d:50:46:a1:22:12:99:a1:9d:fa:9a:92:f5:19:6c:
89:80:89:94:d9:27:1a:39:be:cc:a5:b5:87:77:08:
71:61:dc:67:3b:56:85:74:3b:0f:08:ea:6f:92:a0:
45:df:a6:a6:25:99:67:c3:57:0d:06:11:01:c0:2b:
a7:c2:fb:9f:b3:fb:10:2e:78:32:5e:b2:a4:b5:dd:
b2:29:8a:25:85:82:55:a2:ec:fe:c7:ca:12:ac:18:
fe:64:25:af:b7:27:e4:64:f4:ee:b8:ad:c3:0f:63:
63:fb:70:15:7e:4e:ee:e4:78:0e:26:fb:70:ba:cb:
e5:7e:8f:4c:13:96:c6:29:21:4e:8b:3d:9f:3e:61:
d8:74:fa:f2:ec:a6:ee:3d:6d:95:2c:e6:62:13:f9:
c3:7b:b5:a5:dc:6f:3f:37:69:91:e3:7c:e7:59:10:
eb:03:a5:56:70:0d:03:0b:5d:cb:55:c0:aa:d1:9d:
b0:b6:f2:2e:bd:a2:8b:00:c1:37:4d:39:4a:d3:78:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C2:14:F3:0C:F4:69:06:21:D5:EB:64:DB:F0:EC:0B:A2:E3:E5:9E
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/HcIU8wz0aQYh1etk2_DsC6Lj5Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.129.0-37.77.135.255
37.221.200.0/23
37.221.203.0-37.221.206.255
46.34.134.0/24
46.34.136.0/21
46.34.148.0/22
46.229.208.0/22
46.231.208.0/21
62.32.64.0/24
62.32.66.0-62.32.70.255
62.32.73.0-62.32.76.255
62.32.83.0-62.32.85.255
62.32.88.0/22
62.32.94.0/24
79.134.192.0/19
79.142.80.0-79.142.92.255
80.79.64.0-80.79.76.255
80.79.79.0/24
80.250.80.0/24
80.250.87.0-80.250.95.255
85.114.0.0/19
87.249.55.0/24
89.104.97.0/24
89.104.115.0/24
89.104.118.0/24
89.223.1.0/24
92.255.40.0/23
92.255.44.0/22
93.191.58.0/24
93.191.60.0/24
93.191.63.0/24
95.161.144.0-95.161.223.255
95.161.228.0-95.161.239.255
145.255.232.0/21
149.126.16.0/21
178.16.144.0-178.16.156.255
178.16.158.0/23
185.7.232.0/22
185.81.220.0/22
185.102.8.0/22
185.119.0.0/22
185.171.192.0/22
185.241.176.0/22
185.244.132.0/22
217.79.0.0/20
IPv6:
2a01:590::/32
2a05:a400::/29
Signature Algorithm: sha256WithRSAEncryption
83:db:12:d7:26:28:de:81:c4:45:cc:db:77:ec:03:aa:e6:7c:
a4:2e:fc:e8:50:e3:56:59:53:f8:dc:0d:3a:f8:ef:60:ed:50:
98:50:57:8f:e8:c5:c8:6c:03:97:a9:c1:0b:30:17:e5:74:55:
f0:8c:38:ea:13:89:ec:74:c0:f4:fb:b4:7b:71:4c:79:f3:78:
cd:84:f0:ac:fb:28:0c:35:e0:a3:2e:39:c6:32:5a:d9:6e:70:
21:1c:87:c7:18:55:f3:75:59:42:cc:fb:c3:f5:62:39:f5:1b:
19:ae:d9:2a:35:fe:0a:b9:54:12:f0:7b:cc:3d:07:8e:78:aa:
33:72:f1:c3:15:bb:fe:1f:58:f7:cf:29:38:64:e7:7e:82:1e:
7b:0e:c4:78:38:42:49:0e:a4:1b:6f:e9:bb:d0:d8:04:d9:12:
a4:aa:22:ef:3b:4a:76:45:41:98:eb:02:85:ad:ce:ea:6f:4b:
74:e9:28:6b:9e:e4:8c:fd:6f:d2:c2:d2:fb:b7:59:7b:29:e4:
fb:13:65:35:5e:d1:df:24:62:47:af:61:2c:db:e8:c3:0c:ff:
3f:5b:60:8e:cc:13:00:96:df:60:40:76:43:27:ed:cd:11:22:
6b:aa:fa:08:73:02:c5:f0:2f:61:2a:2d:9d:48:2c:03:2a:21:
73:19:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org