Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/bKJpkrYTTyXlIAhOdU4aoKRbrd0.roa
File: bKJpkrYTTyXlIAhOdU4aoKRbrd0.roa (raw, json)
Hash identifier: FJvSMmhc7Ec4cNTYQYB94/uSQlR3ZcCJwXKIXE5ZX5E=
Subject key identifier: 6C:A2:69:92:B6:13:4F:25:E5:20:08:4E:75:4E:1A:A0:A4:5B:AD:DD
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 25BD963B
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/bKJpkrYTTyXlIAhOdU4aoKRbrd0.roa
Signing time: Wed 29 Jun 2022 06:39:02 +0000
ROA not before: Wed 29 Jun 2022 06:39:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8492
IP address blocks: 37.221.206.0/24 maxlen: 24
37.221.203.0/24 maxlen: 24
37.221.204.0/23 maxlen: 23
37.221.200.0/23 maxlen: 23
85.114.0.0/19 maxlen: 19
92.255.44.0/24 maxlen: 24
185.241.176.0/22 maxlen: 22
95.161.144.0/21 maxlen: 21
145.255.232.0/24 maxlen: 24
145.255.233.0/24 maxlen: 24
95.161.152.0/22 maxlen: 24
95.161.156.0/22 maxlen: 22
145.255.236.0/22 maxlen: 22
145.255.234.0/23 maxlen: 23
95.161.164.0/22 maxlen: 22
95.161.160.0/19 maxlen: 19
62.32.64.0/24 maxlen: 24
62.32.66.0/23 maxlen: 23
62.32.70.0/24 maxlen: 24
62.32.68.0/23 maxlen: 23
62.32.75.0/24 maxlen: 24
62.32.76.0/24 maxlen: 24
62.32.73.0/24 maxlen: 24
62.32.74.0/24 maxlen: 24
62.32.84.0/23 maxlen: 23
62.32.83.0/24 maxlen: 24
62.32.91.0/24 maxlen: 24
62.32.89.0/24 maxlen: 24
62.32.90.0/24 maxlen: 24
62.32.88.0/24 maxlen: 24
62.32.94.0/24 maxlen: 24
80.79.64.0/21 maxlen: 21
80.79.76.0/24 maxlen: 24
80.79.72.0/22 maxlen: 22
80.79.79.0/24 maxlen: 24
185.119.0.0/22 maxlen: 22
217.79.4.0/23 maxlen: 23
217.79.0.0/22 maxlen: 22
217.79.10.0/23 maxlen: 23
217.79.8.0/24 maxlen: 24
217.79.9.0/24 maxlen: 24
217.79.6.0/23 maxlen: 23
217.79.15.0/24 maxlen: 24
217.79.14.0/24 maxlen: 24
217.79.12.0/23 maxlen: 23
149.126.16.0/22 maxlen: 22
149.126.22.0/24 maxlen: 24
149.126.23.0/24 maxlen: 24
149.126.20.0/23 maxlen: 23
37.77.132.0/24 maxlen: 24
37.77.130.0/23 maxlen: 23
37.77.129.0/24 maxlen: 24
37.77.133.0/24 maxlen: 24
37.77.134.0/23 maxlen: 23
46.231.208.0/24 maxlen: 24
46.231.209.0/24 maxlen: 24
46.231.212.0/23 maxlen: 23
46.231.210.0/23 maxlen: 23
46.231.215.0/24 maxlen: 24
46.231.214.0/24 maxlen: 24
93.191.58.0/24 maxlen: 24
93.191.63.0/24 maxlen: 24
93.191.60.0/24 maxlen: 24
185.171.192.0/22 maxlen: 22
178.16.144.0/22 maxlen: 22
178.16.152.0/22 maxlen: 22
178.16.150.0/24 maxlen: 24
178.16.151.0/24 maxlen: 24
178.16.148.0/23 maxlen: 23
178.16.158.0/23 maxlen: 23
178.16.156.0/24 maxlen: 24
185.244.132.0/22 maxlen: 22
80.250.88.0/21 maxlen: 21
80.250.87.0/24 maxlen: 24
185.7.232.0/22 maxlen: 22
46.34.136.0/21 maxlen: 21
79.142.80.0/21 maxlen: 21
46.34.134.0/24 maxlen: 24
79.142.88.0/22 maxlen: 22
46.34.148.0/22 maxlen: 22
79.142.92.0/24 maxlen: 24
185.102.10.0/24 maxlen: 24
185.102.8.0/22 maxlen: 22
185.81.220.0/22 maxlen: 22
95.161.232.0/22 maxlen: 22
95.161.228.0/22 maxlen: 22
95.161.236.0/22 maxlen: 22
79.134.192.0/24 maxlen: 24
79.134.198.0/23 maxlen: 23
79.134.196.0/23 maxlen: 23
79.134.194.0/23 maxlen: 23
95.161.180.0/22 maxlen: 22
79.134.193.0/24 maxlen: 24
79.134.200.0/21 maxlen: 21
95.161.192.0/22 maxlen: 22
95.161.192.0/19 maxlen: 19
95.161.188.0/22 maxlen: 22
79.134.213.0/24 maxlen: 24
79.134.212.0/24 maxlen: 24
79.134.208.0/22 maxlen: 22
79.134.214.0/23 maxlen: 23
79.134.216.0/22 maxlen: 22
95.161.213.0/24 maxlen: 24
79.134.222.0/23 maxlen: 23
79.134.220.0/23 maxlen: 23
95.161.214.0/23 maxlen: 23
95.161.218.0/23 maxlen: 23
95.161.216.0/23 maxlen: 23
95.161.220.0/24 maxlen: 24
46.229.210.0/23 maxlen: 23
46.229.210.0/24 maxlen: 24
46.229.211.0/24 maxlen: 24
46.229.208.0/23 maxlen: 23
46.229.208.0/22 maxlen: 22
2a01:590::/32 maxlen: 32
2a05:a400::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633181755 (0x25bd963b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jun 29 06:39:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ca26992b6134f25e520084e754e1aa0a45baddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ac:06:13:5d:8d:84:cb:60:d2:67:5d:f4:3f:
87:df:f0:b6:4d:85:45:fb:86:da:e7:89:2c:9b:63:
9a:71:ad:84:59:42:cf:08:a2:99:94:bd:4e:b2:58:
4b:d6:7f:56:e9:2c:fd:1a:06:ae:7a:b4:85:a7:04:
2f:84:ce:ad:34:d0:8b:cf:78:c3:a0:23:44:20:8d:
0a:33:c5:93:96:f4:27:99:20:84:2d:32:f2:8b:e8:
d6:6c:c2:03:2d:0a:cc:b6:74:a6:98:2a:87:ec:c6:
37:b5:02:8d:47:84:99:50:cd:03:da:99:87:57:81:
3b:ff:f3:3e:f9:91:77:71:9d:44:a0:2f:76:b5:83:
44:e0:42:d3:06:2a:96:bc:3d:3b:57:81:30:1c:80:
cf:89:d2:ab:3d:70:e2:66:6c:1f:a0:64:7f:ac:50:
82:25:33:d4:3e:78:df:22:8e:44:c3:eb:ee:bd:02:
8c:3e:8e:b5:f0:c0:5a:ed:24:36:a2:e7:5f:72:16:
d0:ef:bb:94:fd:af:a5:33:73:ea:52:90:11:13:93:
91:0a:23:8a:14:31:54:77:97:20:32:9e:cc:aa:59:
69:0f:e2:f4:cb:7b:80:93:a7:03:f5:a8:a6:35:4d:
5b:4a:13:4c:0c:4c:3c:93:2b:09:9e:83:b3:fd:86:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:69:92:B6:13:4F:25:E5:20:08:4E:75:4E:1A:A0:A4:5B:AD:DD
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/bKJpkrYTTyXlIAhOdU4aoKRbrd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.129.0-37.77.135.255
37.221.200.0/23
37.221.203.0-37.221.206.255
46.34.134.0/24
46.34.136.0/21
46.34.148.0/22
46.229.208.0/22
46.231.208.0/21
62.32.64.0/24
62.32.66.0-62.32.70.255
62.32.73.0-62.32.76.255
62.32.83.0-62.32.85.255
62.32.88.0/22
62.32.94.0/24
79.134.192.0/19
79.142.80.0-79.142.92.255
80.79.64.0-80.79.76.255
80.79.79.0/24
80.250.87.0-80.250.95.255
85.114.0.0/19
92.255.44.0/24
93.191.58.0/24
93.191.60.0/24
93.191.63.0/24
95.161.144.0-95.161.223.255
95.161.228.0-95.161.239.255
145.255.232.0/21
149.126.16.0/21
178.16.144.0-178.16.156.255
178.16.158.0/23
185.7.232.0/22
185.81.220.0/22
185.102.8.0/22
185.119.0.0/22
185.171.192.0/22
185.241.176.0/22
185.244.132.0/22
217.79.0.0/20
IPv6:
2a01:590::/32
2a05:a400::/29
Signature Algorithm: sha256WithRSAEncryption
a8:14:de:8c:54:bd:c2:3c:08:d9:a4:ad:af:ed:7d:6b:b1:5e:
38:61:23:e5:27:2a:e3:5b:e7:14:74:e8:0d:55:cc:39:22:12:
1f:73:0e:8d:ab:09:22:53:cf:9f:05:ff:98:eb:8e:94:34:38:
f0:2f:a5:93:cc:ff:66:de:04:62:0f:49:5b:13:e5:6a:ae:ec:
3b:21:66:13:48:69:c7:98:7f:66:29:03:28:37:b1:d8:76:74:
12:74:2a:c1:d9:79:ce:90:f7:c0:b9:9d:5f:e7:6b:6e:5d:29:
57:a8:3c:4f:95:a4:8d:b2:43:7c:29:50:2d:4e:3c:c4:ac:83:
76:b0:82:79:05:06:c9:19:a6:9d:1b:47:ce:cd:70:3f:de:dc:
86:2d:8c:84:09:01:28:55:1f:2f:6d:f7:dc:c5:75:46:64:48:
79:4f:54:dc:24:02:be:9b:38:ad:c0:73:49:1f:9f:7a:7a:3a:
e6:1d:c5:e6:3b:39:5a:60:63:85:d9:67:89:27:3d:a8:4a:9a:
41:e8:25:d4:4e:aa:63:06:33:ee:6d:04:4f:73:0d:d2:a4:2f:
0d:f4:78:d9:09:9c:b9:3f:f3:d9:59:08:3a:ad:1c:58:93:5a:
ae:de:2b:b9:f3:af:0a:9b:ea:8c:84:a6:bc:5a:37:ae:a5:87:
c7:b1:84:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:19 2024 by rpki-client on console-ams.rpki-client.org