Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/NZzPy2O8my3nABNKPbNLWCaw7mc.roa
File: NZzPy2O8my3nABNKPbNLWCaw7mc.roa (raw, json)
Hash identifier: 49IeCRtnDSOn1p8gFqD38NLB92GMHSpAsGxB+2YbVv8=
Subject key identifier: 35:9C:CF:CB:63:BC:9B:2D:E7:00:13:4A:3D:B3:4B:58:26:B0:EE:67
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018726F53504C2163C3507F892C49676CB8C
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/NZzPy2O8my3nABNKPbNLWCaw7mc.roa
Signing time: Tue 28 Mar 2023 06:43:36 +0000
ROA not before: Tue 28 Mar 2023 06:43:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8492
IP address blocks: 37.221.206.0/24 maxlen: 24
37.221.203.0/24 maxlen: 24
37.221.204.0/23 maxlen: 23
37.221.200.0/23 maxlen: 23
85.114.0.0/19 maxlen: 19
92.255.44.0/24 maxlen: 24
92.255.41.0/24 maxlen: 24
185.241.176.0/22 maxlen: 22
92.255.40.0/24 maxlen: 24
92.255.45.0/24 maxlen: 24
92.255.46.0/24 maxlen: 24
92.255.47.0/24 maxlen: 24
95.161.144.0/21 maxlen: 21
145.255.232.0/24 maxlen: 24
145.255.233.0/24 maxlen: 24
95.161.152.0/22 maxlen: 24
95.161.156.0/22 maxlen: 22
145.255.236.0/22 maxlen: 22
145.255.234.0/23 maxlen: 23
95.161.164.0/22 maxlen: 22
95.161.160.0/19 maxlen: 19
87.249.55.0/24 maxlen: 24
62.32.64.0/24 maxlen: 24
62.32.66.0/23 maxlen: 23
62.32.70.0/24 maxlen: 24
62.32.68.0/23 maxlen: 23
62.32.75.0/24 maxlen: 24
62.32.76.0/24 maxlen: 24
62.32.73.0/24 maxlen: 24
62.32.74.0/24 maxlen: 24
62.32.84.0/23 maxlen: 23
62.32.83.0/24 maxlen: 24
62.32.91.0/24 maxlen: 24
62.32.89.0/24 maxlen: 24
62.32.90.0/24 maxlen: 24
62.32.88.0/24 maxlen: 24
62.32.94.0/24 maxlen: 24
80.79.64.0/21 maxlen: 21
80.79.76.0/24 maxlen: 24
80.79.72.0/22 maxlen: 22
80.79.79.0/24 maxlen: 24
185.119.0.0/22 maxlen: 22
217.79.4.0/23 maxlen: 23
217.79.0.0/22 maxlen: 22
217.79.10.0/23 maxlen: 23
217.79.8.0/24 maxlen: 24
217.79.9.0/24 maxlen: 24
217.79.6.0/23 maxlen: 23
217.79.15.0/24 maxlen: 24
217.79.14.0/24 maxlen: 24
217.79.12.0/23 maxlen: 23
149.126.16.0/22 maxlen: 22
149.126.22.0/24 maxlen: 24
149.126.23.0/24 maxlen: 24
149.126.20.0/23 maxlen: 23
37.77.132.0/24 maxlen: 24
37.77.130.0/23 maxlen: 23
89.104.118.0/24 maxlen: 24
89.104.115.0/24 maxlen: 24
37.77.129.0/24 maxlen: 24
37.77.133.0/24 maxlen: 24
37.77.134.0/23 maxlen: 23
46.231.208.0/24 maxlen: 24
46.231.209.0/24 maxlen: 24
46.231.212.0/23 maxlen: 23
46.231.210.0/23 maxlen: 23
46.231.215.0/24 maxlen: 24
46.231.214.0/23 maxlen: 23
46.231.214.0/24 maxlen: 24
93.191.58.0/24 maxlen: 24
93.191.63.0/24 maxlen: 24
93.191.60.0/24 maxlen: 24
185.171.192.0/22 maxlen: 22
89.104.97.0/24 maxlen: 24
178.16.144.0/22 maxlen: 22
178.16.152.0/22 maxlen: 22
178.16.150.0/24 maxlen: 24
178.16.151.0/24 maxlen: 24
178.16.148.0/23 maxlen: 23
178.16.158.0/23 maxlen: 23
178.16.156.0/24 maxlen: 24
185.244.132.0/22 maxlen: 22
80.250.80.0/24 maxlen: 24
80.250.88.0/21 maxlen: 21
80.250.87.0/24 maxlen: 24
185.7.232.0/22 maxlen: 22
46.34.136.0/21 maxlen: 21
79.142.80.0/21 maxlen: 21
46.34.134.0/24 maxlen: 24
79.142.88.0/22 maxlen: 22
46.34.148.0/22 maxlen: 22
79.142.92.0/24 maxlen: 24
185.102.10.0/24 maxlen: 24
185.102.8.0/22 maxlen: 22
185.81.220.0/22 maxlen: 22
95.161.232.0/22 maxlen: 22
95.161.228.0/22 maxlen: 22
95.161.236.0/22 maxlen: 22
79.134.192.0/24 maxlen: 24
79.134.196.0/23 maxlen: 23
79.134.198.0/23 maxlen: 23
79.134.194.0/23 maxlen: 23
79.134.193.0/24 maxlen: 24
95.161.180.0/22 maxlen: 22
79.134.200.0/21 maxlen: 21
95.161.192.0/22 maxlen: 22
95.161.192.0/19 maxlen: 19
95.161.188.0/22 maxlen: 22
79.134.213.0/24 maxlen: 24
79.134.212.0/24 maxlen: 24
79.134.208.0/22 maxlen: 22
79.134.214.0/23 maxlen: 23
79.134.216.0/22 maxlen: 22
95.161.213.0/24 maxlen: 24
79.134.222.0/23 maxlen: 23
79.134.220.0/23 maxlen: 23
95.161.214.0/23 maxlen: 23
95.161.218.0/23 maxlen: 23
95.161.216.0/23 maxlen: 23
95.161.220.0/24 maxlen: 24
89.223.1.0/24 maxlen: 24
46.229.210.0/23 maxlen: 23
46.229.210.0/24 maxlen: 24
46.229.211.0/24 maxlen: 24
46.229.208.0/23 maxlen: 23
46.229.208.0/22 maxlen: 22
2a05:a407::/32 maxlen: 32
2a05:a406::/32 maxlen: 32
2a01:590::/32 maxlen: 32
2a05:a400::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:26:f5:35:04:c2:16:3c:35:07:f8:92:c4:96:76:cb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Mar 28 06:43:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=359ccfcb63bc9b2de700134a3db34b5826b0ee67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:83:0f:88:b3:6b:01:2a:93:b6:20:75:c3:
cc:a7:b6:61:63:4c:33:a5:b9:d5:3e:2a:5a:47:30:
5a:68:0a:c9:3b:92:9f:f4:19:a3:47:4d:db:97:7f:
38:e9:74:ed:ed:e9:fc:a6:de:a7:0f:cc:aa:94:10:
32:c6:de:de:c9:7c:2d:a8:12:63:09:d0:a6:9b:47:
ec:5e:fd:ad:c2:20:14:f0:e0:34:72:bc:ab:fc:af:
b2:f4:50:a8:92:39:de:3b:78:d5:0f:02:96:e3:08:
08:a2:3e:87:28:bc:81:4f:50:5f:9f:9a:b2:75:fb:
6f:27:e1:d4:69:5b:c2:c3:5c:ab:ed:bf:e4:e6:24:
eb:d8:09:4b:3e:7b:39:26:76:5e:ac:27:f1:7d:8b:
29:fd:e0:ae:6a:e7:e6:87:a4:5c:ea:ac:cf:69:04:
0f:e7:4e:e4:cc:3c:3c:88:3f:ad:73:fe:df:18:29:
35:31:87:8f:bd:00:57:f7:1b:17:47:1c:bf:81:eb:
8b:3f:85:73:05:6b:bd:9b:68:61:37:90:2e:43:d4:
f2:ff:1b:5b:96:68:09:9a:71:6a:9d:8d:8d:5e:26:
d6:ac:7d:c2:a0:9f:44:7e:5c:be:52:b3:95:7e:9e:
76:7d:cc:26:f6:56:e8:d6:b1:4f:d9:50:eb:b0:c8:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9C:CF:CB:63:BC:9B:2D:E7:00:13:4A:3D:B3:4B:58:26:B0:EE:67
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/NZzPy2O8my3nABNKPbNLWCaw7mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.129.0-37.77.135.255
37.221.200.0/23
37.221.203.0-37.221.206.255
46.34.134.0/24
46.34.136.0/21
46.34.148.0/22
46.229.208.0/22
46.231.208.0/21
62.32.64.0/24
62.32.66.0-62.32.70.255
62.32.73.0-62.32.76.255
62.32.83.0-62.32.85.255
62.32.88.0/22
62.32.94.0/24
79.134.192.0/19
79.142.80.0-79.142.92.255
80.79.64.0-80.79.76.255
80.79.79.0/24
80.250.80.0/24
80.250.87.0-80.250.95.255
85.114.0.0/19
87.249.55.0/24
89.104.97.0/24
89.104.115.0/24
89.104.118.0/24
89.223.1.0/24
92.255.40.0/23
92.255.44.0/22
93.191.58.0/24
93.191.60.0/24
93.191.63.0/24
95.161.144.0-95.161.223.255
95.161.228.0-95.161.239.255
145.255.232.0/21
149.126.16.0/21
178.16.144.0-178.16.156.255
178.16.158.0/23
185.7.232.0/22
185.81.220.0/22
185.102.8.0/22
185.119.0.0/22
185.171.192.0/22
185.241.176.0/22
185.244.132.0/22
217.79.0.0/20
IPv6:
2a01:590::/32
2a05:a400::/29
Signature Algorithm: sha256WithRSAEncryption
53:3e:d6:cf:c5:8a:c2:78:f5:32:c3:b8:32:c1:03:ba:56:51:
93:87:1f:20:d2:50:71:39:7b:40:8e:b9:6f:b6:aa:7c:08:93:
28:9f:4a:9d:d0:6e:10:fe:d6:89:cb:b0:52:df:71:c6:36:ad:
3e:2c:25:7e:dc:83:85:13:77:a3:6d:80:f1:2c:86:10:8d:f2:
b8:16:8c:a4:70:5d:c4:7d:d1:5a:47:b1:29:30:5a:48:8c:17:
a2:94:d1:57:82:32:2a:43:e8:8b:c8:31:51:e8:85:bb:c7:8f:
7d:68:24:28:9c:2e:ab:03:13:3a:19:4d:f3:9b:38:2d:82:22:
b9:5c:6f:76:4e:d7:1f:fd:85:42:03:c7:df:da:8d:7f:fc:da:
72:f4:76:85:50:95:e9:97:7e:74:54:d0:30:eb:73:d4:d9:c7:
5f:b8:8e:b0:97:34:97:35:c4:35:ab:52:5f:cb:57:51:20:d1:
b8:ca:c1:18:30:8c:9f:5a:8e:d1:53:00:7e:74:e7:b4:67:f2:
2c:ee:25:66:3d:b1:ee:fe:b8:99:85:f1:1e:07:0a:ec:de:bb:
c9:7b:18:e9:eb:cb:22:0f:c9:53:3e:0e:63:43:8b:da:c7:07:
fd:e2:31:dd:be:6d:a9:1c:28:87:dc:4f:7f:14:67:5c:a4:c8:
a4:8f:ca:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org