Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/fsDfR-sW6-gp5Gg2NNJkzZo5TJ0.roa
File: fsDfR-sW6-gp5Gg2NNJkzZo5TJ0.roa (raw, json)
Hash identifier: QRnsAHJQ3bzIe1Od2iKHtfowNh9ZEpHxrIrNNADmWmQ=
Subject key identifier: 7E:C0:DF:47:EB:16:EB:E8:29:E4:68:36:34:D2:64:CD:9A:39:4C:9D
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 0181D7704770655BD46CE85DFDC00D4BA314
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/fsDfR-sW6-gp5Gg2NNJkzZo5TJ0.roa
Signing time: Thu 07 Jul 2022 06:54:28 +0000
ROA not before: Thu 07 Jul 2022 06:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8492
IP address blocks: 37.221.206.0/24 maxlen: 24
37.221.203.0/24 maxlen: 24
37.221.204.0/23 maxlen: 23
37.221.200.0/23 maxlen: 23
85.114.0.0/19 maxlen: 19
92.255.44.0/24 maxlen: 24
185.241.176.0/22 maxlen: 22
95.161.144.0/21 maxlen: 21
145.255.232.0/24 maxlen: 24
145.255.233.0/24 maxlen: 24
95.161.152.0/22 maxlen: 24
95.161.156.0/22 maxlen: 22
145.255.236.0/22 maxlen: 22
145.255.234.0/23 maxlen: 23
95.161.164.0/22 maxlen: 22
95.161.160.0/19 maxlen: 19
87.249.55.0/24 maxlen: 24
62.32.64.0/24 maxlen: 24
62.32.66.0/23 maxlen: 23
62.32.70.0/24 maxlen: 24
62.32.68.0/23 maxlen: 23
62.32.75.0/24 maxlen: 24
62.32.76.0/24 maxlen: 24
62.32.73.0/24 maxlen: 24
62.32.74.0/24 maxlen: 24
62.32.84.0/23 maxlen: 23
62.32.83.0/24 maxlen: 24
62.32.91.0/24 maxlen: 24
62.32.89.0/24 maxlen: 24
62.32.90.0/24 maxlen: 24
62.32.88.0/24 maxlen: 24
62.32.94.0/24 maxlen: 24
80.79.64.0/21 maxlen: 21
80.79.76.0/24 maxlen: 24
80.79.72.0/22 maxlen: 22
80.79.79.0/24 maxlen: 24
185.119.0.0/22 maxlen: 22
217.79.4.0/23 maxlen: 23
217.79.0.0/22 maxlen: 22
217.79.10.0/23 maxlen: 23
217.79.8.0/24 maxlen: 24
217.79.9.0/24 maxlen: 24
217.79.6.0/23 maxlen: 23
217.79.15.0/24 maxlen: 24
217.79.14.0/24 maxlen: 24
217.79.12.0/23 maxlen: 23
149.126.16.0/22 maxlen: 22
149.126.22.0/24 maxlen: 24
149.126.23.0/24 maxlen: 24
149.126.20.0/23 maxlen: 23
37.77.132.0/24 maxlen: 24
37.77.130.0/23 maxlen: 23
37.77.129.0/24 maxlen: 24
37.77.133.0/24 maxlen: 24
37.77.134.0/23 maxlen: 23
46.231.208.0/24 maxlen: 24
46.231.209.0/24 maxlen: 24
46.231.212.0/23 maxlen: 23
46.231.210.0/23 maxlen: 23
46.231.215.0/24 maxlen: 24
46.231.214.0/24 maxlen: 24
93.191.58.0/24 maxlen: 24
93.191.63.0/24 maxlen: 24
93.191.60.0/24 maxlen: 24
185.171.192.0/22 maxlen: 22
178.16.144.0/22 maxlen: 22
178.16.152.0/22 maxlen: 22
178.16.150.0/24 maxlen: 24
178.16.151.0/24 maxlen: 24
178.16.148.0/23 maxlen: 23
178.16.158.0/23 maxlen: 23
178.16.156.0/24 maxlen: 24
185.244.132.0/22 maxlen: 22
80.250.88.0/21 maxlen: 21
80.250.87.0/24 maxlen: 24
185.7.232.0/22 maxlen: 22
46.34.136.0/21 maxlen: 21
79.142.80.0/21 maxlen: 21
46.34.134.0/24 maxlen: 24
79.142.88.0/22 maxlen: 22
46.34.148.0/22 maxlen: 22
79.142.92.0/24 maxlen: 24
185.102.10.0/24 maxlen: 24
185.102.8.0/22 maxlen: 22
185.81.220.0/22 maxlen: 22
95.161.232.0/22 maxlen: 22
95.161.228.0/22 maxlen: 22
95.161.236.0/22 maxlen: 22
79.134.192.0/24 maxlen: 24
79.134.198.0/23 maxlen: 23
79.134.196.0/23 maxlen: 23
79.134.194.0/23 maxlen: 23
79.134.193.0/24 maxlen: 24
95.161.180.0/22 maxlen: 22
79.134.200.0/21 maxlen: 21
95.161.192.0/22 maxlen: 22
95.161.192.0/19 maxlen: 19
95.161.188.0/22 maxlen: 22
79.134.213.0/24 maxlen: 24
79.134.212.0/24 maxlen: 24
79.134.208.0/22 maxlen: 22
79.134.214.0/23 maxlen: 23
79.134.216.0/22 maxlen: 22
95.161.213.0/24 maxlen: 24
79.134.222.0/23 maxlen: 23
79.134.220.0/23 maxlen: 23
95.161.214.0/23 maxlen: 23
95.161.218.0/23 maxlen: 23
95.161.216.0/23 maxlen: 23
95.161.220.0/24 maxlen: 24
46.229.210.0/23 maxlen: 23
46.229.210.0/24 maxlen: 24
46.229.211.0/24 maxlen: 24
46.229.208.0/23 maxlen: 23
46.229.208.0/22 maxlen: 22
2a01:590::/32 maxlen: 32
2a05:a400::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:70:47:70:65:5b:d4:6c:e8:5d:fd:c0:0d:4b:a3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jul 7 06:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ec0df47eb16ebe829e4683634d264cd9a394c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:e2:2a:58:3b:99:b7:a9:e4:c6:d9:71:7d:
08:4e:6e:e8:41:aa:17:ba:de:6d:0e:a9:9a:68:05:
97:6d:78:d7:38:ae:16:f3:4e:ce:55:6c:9a:3e:0d:
02:ab:02:a7:36:52:bc:a6:6c:01:76:66:71:94:78:
09:1b:2b:54:ed:4d:50:9c:dc:7f:f3:0d:93:38:ff:
07:50:0b:27:2b:b2:06:91:cc:bf:fb:9c:de:fe:4b:
ac:2c:53:3a:4d:cc:13:4e:52:a8:3a:1d:41:4a:5e:
79:56:ff:8d:e0:d2:a7:78:bc:1b:69:38:1f:c1:c1:
41:78:44:76:a2:33:5f:6f:de:85:92:f5:fb:3d:0f:
bd:eb:3c:68:bd:e2:1b:fc:a0:5a:97:f4:9f:1c:4b:
85:81:ab:48:cc:27:84:f7:87:3e:07:28:4a:ec:0a:
ac:77:4d:b0:c9:52:69:eb:9b:89:5c:45:b4:84:ea:
5a:07:e2:c4:6e:3a:65:c3:ea:94:44:46:dd:f5:c8:
76:5b:63:79:d2:14:3f:cd:78:0c:ed:ef:87:7b:5d:
ce:bc:3c:88:15:38:da:a0:08:6a:ae:28:d8:66:7d:
fd:f2:3f:37:f0:d4:58:b7:bd:50:c7:f1:84:74:8e:
91:ac:47:49:ca:33:00:e4:fe:ff:d2:14:ef:65:4c:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C0:DF:47:EB:16:EB:E8:29:E4:68:36:34:D2:64:CD:9A:39:4C:9D
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/fsDfR-sW6-gp5Gg2NNJkzZo5TJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.129.0-37.77.135.255
37.221.200.0/23
37.221.203.0-37.221.206.255
46.34.134.0/24
46.34.136.0/21
46.34.148.0/22
46.229.208.0/22
46.231.208.0/21
62.32.64.0/24
62.32.66.0-62.32.70.255
62.32.73.0-62.32.76.255
62.32.83.0-62.32.85.255
62.32.88.0/22
62.32.94.0/24
79.134.192.0/19
79.142.80.0-79.142.92.255
80.79.64.0-80.79.76.255
80.79.79.0/24
80.250.87.0-80.250.95.255
85.114.0.0/19
87.249.55.0/24
92.255.44.0/24
93.191.58.0/24
93.191.60.0/24
93.191.63.0/24
95.161.144.0-95.161.223.255
95.161.228.0-95.161.239.255
145.255.232.0/21
149.126.16.0/21
178.16.144.0-178.16.156.255
178.16.158.0/23
185.7.232.0/22
185.81.220.0/22
185.102.8.0/22
185.119.0.0/22
185.171.192.0/22
185.241.176.0/22
185.244.132.0/22
217.79.0.0/20
IPv6:
2a01:590::/32
2a05:a400::/29
Signature Algorithm: sha256WithRSAEncryption
a8:65:5d:d3:79:3b:b8:47:bc:18:9f:d2:39:97:42:f0:03:f5:
80:e1:72:ca:4c:7d:2e:52:1f:f2:9b:04:c1:53:26:e7:52:40:
13:37:8d:78:7b:0c:64:7a:c0:65:71:45:b0:2c:6d:90:93:bc:
27:5c:77:a1:86:cb:de:03:30:60:8d:ee:d9:ba:c6:a3:50:39:
99:da:3c:cc:80:72:73:d3:5e:65:97:40:06:27:00:04:4e:9e:
55:29:cf:b0:cd:dd:5d:a7:36:73:9c:95:e8:3e:ae:94:31:a4:
43:5e:f7:2e:43:e5:49:ae:0e:e4:da:09:f6:2e:4a:6f:d5:27:
a0:bb:c9:99:b9:ca:1f:d7:3e:68:74:35:03:09:f0:44:cc:37:
08:d2:bc:ea:c5:9e:ae:9c:da:92:70:c0:48:5b:7f:a1:2a:8f:
71:da:ba:2e:cc:84:5b:e2:aa:55:92:18:3b:b3:ef:94:50:99:
77:f2:a7:e5:89:c1:01:59:83:6f:a9:53:3b:05:0d:79:c0:b0:
2f:3e:b6:64:1c:b9:2b:61:a3:c6:40:16:5e:0b:cb:2f:29:bb:
02:05:e8:16:56:6c:50:15:5b:32:73:99:43:06:d7:8c:1d:ea:
0f:34:95:6b:f0:d9:4f:87:e7:8f:00:e6:e6:f6:7c:52:53:4f:
4d:8b:ce:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org