Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/g7K2pOFy02UQv912oUjHJ1wlsmQ.roa
File: g7K2pOFy02UQv912oUjHJ1wlsmQ.roa (raw, json)
Hash identifier: BC1/tkQrAVO8H8xtje/darsr/PRHYbyhoEP+6J6Domw=
Subject key identifier: 83:B2:B6:A4:E1:72:D3:65:10:BF:DD:76:A1:48:C7:27:5C:25:B2:64
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 0186DEE7BAD7379544FE4B4F84634BAD4B81
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/g7K2pOFy02UQv912oUjHJ1wlsmQ.roa
Signing time: Tue 14 Mar 2023 06:56:13 +0000
ROA not before: Tue 14 Mar 2023 06:56:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8492
IP address blocks: 37.221.206.0/24 maxlen: 24
37.221.203.0/24 maxlen: 24
37.221.204.0/23 maxlen: 23
37.221.200.0/23 maxlen: 23
85.114.0.0/19 maxlen: 19
92.255.44.0/24 maxlen: 24
92.255.41.0/24 maxlen: 24
185.241.176.0/22 maxlen: 22
92.255.40.0/24 maxlen: 24
92.255.45.0/24 maxlen: 24
92.255.46.0/24 maxlen: 24
92.255.47.0/24 maxlen: 24
95.161.144.0/21 maxlen: 21
145.255.232.0/24 maxlen: 24
145.255.233.0/24 maxlen: 24
95.161.152.0/22 maxlen: 24
95.161.156.0/22 maxlen: 22
145.255.236.0/22 maxlen: 22
145.255.234.0/23 maxlen: 23
95.161.164.0/22 maxlen: 22
95.161.160.0/19 maxlen: 19
87.249.55.0/24 maxlen: 24
62.32.64.0/24 maxlen: 24
62.32.66.0/23 maxlen: 23
62.32.70.0/24 maxlen: 24
62.32.68.0/23 maxlen: 23
62.32.75.0/24 maxlen: 24
62.32.76.0/24 maxlen: 24
62.32.73.0/24 maxlen: 24
62.32.74.0/24 maxlen: 24
62.32.84.0/23 maxlen: 23
62.32.83.0/24 maxlen: 24
62.32.91.0/24 maxlen: 24
62.32.89.0/24 maxlen: 24
62.32.90.0/24 maxlen: 24
62.32.88.0/24 maxlen: 24
62.32.94.0/24 maxlen: 24
80.79.64.0/21 maxlen: 21
80.79.76.0/24 maxlen: 24
80.79.72.0/22 maxlen: 22
80.79.79.0/24 maxlen: 24
185.119.0.0/22 maxlen: 22
217.79.4.0/23 maxlen: 23
217.79.0.0/22 maxlen: 22
217.79.10.0/23 maxlen: 23
217.79.8.0/24 maxlen: 24
217.79.9.0/24 maxlen: 24
217.79.6.0/23 maxlen: 23
217.79.15.0/24 maxlen: 24
217.79.14.0/24 maxlen: 24
217.79.12.0/23 maxlen: 23
149.126.16.0/22 maxlen: 22
149.126.22.0/24 maxlen: 24
149.126.23.0/24 maxlen: 24
149.126.20.0/23 maxlen: 23
37.77.132.0/24 maxlen: 24
37.77.130.0/23 maxlen: 23
89.104.118.0/24 maxlen: 24
89.104.115.0/24 maxlen: 24
37.77.129.0/24 maxlen: 24
37.77.133.0/24 maxlen: 24
37.77.134.0/23 maxlen: 23
46.231.208.0/24 maxlen: 24
46.231.209.0/24 maxlen: 24
46.231.212.0/23 maxlen: 23
46.231.210.0/23 maxlen: 23
46.231.215.0/24 maxlen: 24
46.231.214.0/23 maxlen: 23
46.231.214.0/24 maxlen: 24
93.191.58.0/24 maxlen: 24
93.191.63.0/24 maxlen: 24
93.191.60.0/24 maxlen: 24
185.171.192.0/22 maxlen: 22
89.104.97.0/24 maxlen: 24
178.16.144.0/22 maxlen: 22
178.16.152.0/22 maxlen: 22
178.16.150.0/24 maxlen: 24
178.16.151.0/24 maxlen: 24
178.16.148.0/23 maxlen: 23
178.16.158.0/23 maxlen: 23
178.16.156.0/24 maxlen: 24
185.244.132.0/22 maxlen: 22
80.250.80.0/24 maxlen: 24
80.250.88.0/21 maxlen: 21
80.250.87.0/24 maxlen: 24
185.7.232.0/22 maxlen: 22
46.34.136.0/21 maxlen: 21
79.142.80.0/21 maxlen: 21
46.34.134.0/24 maxlen: 24
79.142.88.0/22 maxlen: 22
46.34.148.0/22 maxlen: 22
79.142.92.0/24 maxlen: 24
185.102.10.0/24 maxlen: 24
185.102.8.0/22 maxlen: 22
185.81.220.0/22 maxlen: 22
95.161.232.0/22 maxlen: 22
95.161.228.0/22 maxlen: 22
95.161.236.0/22 maxlen: 22
79.134.192.0/24 maxlen: 24
79.134.196.0/23 maxlen: 23
79.134.198.0/23 maxlen: 23
79.134.194.0/23 maxlen: 23
79.134.193.0/24 maxlen: 24
95.161.180.0/22 maxlen: 22
79.134.200.0/21 maxlen: 21
95.161.192.0/22 maxlen: 22
95.161.192.0/19 maxlen: 19
95.161.188.0/22 maxlen: 22
79.134.213.0/24 maxlen: 24
79.134.212.0/24 maxlen: 24
79.134.208.0/22 maxlen: 22
79.134.214.0/23 maxlen: 23
79.134.216.0/22 maxlen: 22
95.161.213.0/24 maxlen: 24
79.134.222.0/23 maxlen: 23
79.134.220.0/23 maxlen: 23
95.161.214.0/23 maxlen: 23
95.161.218.0/23 maxlen: 23
95.161.216.0/23 maxlen: 23
95.161.220.0/24 maxlen: 24
89.223.1.0/24 maxlen: 24
46.229.210.0/23 maxlen: 23
46.229.210.0/24 maxlen: 24
46.229.211.0/24 maxlen: 24
46.229.208.0/23 maxlen: 23
46.229.208.0/22 maxlen: 22
2a05:a406::/32 maxlen: 32
2a01:590::/32 maxlen: 32
2a05:a400::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:de:e7:ba:d7:37:95:44:fe:4b:4f:84:63:4b:ad:4b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Mar 14 06:56:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83b2b6a4e172d36510bfdd76a148c7275c25b264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:23:b4:79:64:7d:7a:6d:bb:0d:7b:4c:b6:
45:a2:58:38:58:6c:40:84:e9:74:ef:dc:61:57:58:
36:ce:7f:21:b9:de:21:0a:4c:95:86:5f:13:2f:7a:
a0:b4:54:58:84:fe:61:6a:ed:ff:79:3f:99:51:63:
be:55:da:f4:0a:7a:53:de:02:27:02:00:ab:6d:c4:
58:1c:37:45:27:49:f7:85:95:67:48:45:53:3a:92:
44:8d:4b:1d:6d:98:9b:3b:74:e9:69:6b:1d:ab:cb:
25:17:21:fa:d9:b2:7d:23:f6:fc:aa:a2:1d:fe:34:
96:b9:fe:c9:bc:7e:8d:ff:73:61:79:d3:b1:c8:5b:
84:4b:0c:20:bb:d3:ec:b0:93:5f:40:dd:83:41:7c:
be:45:ee:99:24:74:6e:77:06:17:9d:84:32:9d:6e:
2e:fd:0e:49:53:36:53:8f:bf:45:6d:68:96:35:46:
84:fb:2e:35:4e:ff:50:5a:bc:61:c9:f5:0f:d4:78:
4b:be:93:4a:cf:36:a8:e1:90:10:8a:f8:b8:dc:19:
13:0d:9e:f3:c1:cc:87:70:1d:25:3f:7d:9c:f7:3d:
27:9a:7b:2e:1a:bd:91:2d:4c:5d:17:af:33:cb:1c:
c0:e8:78:ff:bf:b0:e0:7e:63:c5:cb:d0:26:d8:22:
d9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B2:B6:A4:E1:72:D3:65:10:BF:DD:76:A1:48:C7:27:5C:25:B2:64
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/g7K2pOFy02UQv912oUjHJ1wlsmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.129.0-37.77.135.255
37.221.200.0/23
37.221.203.0-37.221.206.255
46.34.134.0/24
46.34.136.0/21
46.34.148.0/22
46.229.208.0/22
46.231.208.0/21
62.32.64.0/24
62.32.66.0-62.32.70.255
62.32.73.0-62.32.76.255
62.32.83.0-62.32.85.255
62.32.88.0/22
62.32.94.0/24
79.134.192.0/19
79.142.80.0-79.142.92.255
80.79.64.0-80.79.76.255
80.79.79.0/24
80.250.80.0/24
80.250.87.0-80.250.95.255
85.114.0.0/19
87.249.55.0/24
89.104.97.0/24
89.104.115.0/24
89.104.118.0/24
89.223.1.0/24
92.255.40.0/23
92.255.44.0/22
93.191.58.0/24
93.191.60.0/24
93.191.63.0/24
95.161.144.0-95.161.223.255
95.161.228.0-95.161.239.255
145.255.232.0/21
149.126.16.0/21
178.16.144.0-178.16.156.255
178.16.158.0/23
185.7.232.0/22
185.81.220.0/22
185.102.8.0/22
185.119.0.0/22
185.171.192.0/22
185.241.176.0/22
185.244.132.0/22
217.79.0.0/20
IPv6:
2a01:590::/32
2a05:a400::/29
Signature Algorithm: sha256WithRSAEncryption
3d:2a:f9:50:8c:eb:43:03:94:e3:66:7e:c7:0d:1e:da:a5:e4:
7e:35:bb:93:3e:de:67:d7:5f:06:d0:83:94:56:64:33:6e:02:
1b:a0:23:1f:1b:57:a8:6b:cc:dd:04:4b:95:87:a7:7a:97:87:
7f:da:09:47:75:3c:59:6b:d9:d8:cd:0e:b3:a4:64:11:db:74:
06:35:5e:29:fb:af:30:b1:a4:0b:5d:65:71:aa:2e:30:55:b7:
6a:ca:9d:90:29:15:8d:48:9a:47:6e:17:81:9c:c7:83:e7:4a:
4b:5f:07:85:04:22:20:17:21:80:35:06:48:b7:6a:04:56:86:
1b:10:bc:e4:22:9c:09:05:0b:1a:5e:46:34:a1:e6:05:e7:41:
50:b9:d6:92:35:c1:f3:84:06:24:e1:e8:16:10:5a:29:28:57:
79:5d:95:94:6d:d5:d0:e2:49:55:45:e1:30:7e:83:2b:19:2c:
4e:35:29:73:7a:44:6e:e0:16:a2:76:f0:80:2f:6b:05:c0:ff:
5b:46:4c:e2:f1:39:9d:5b:e9:02:0e:87:e5:93:46:48:7a:26:
68:94:f6:43:e9:f8:0f:5a:1a:06:af:a9:68:a9:53:a1:bf:0d:
d5:d7:2f:58:51:2d:4d:99:c9:69:8e:7c:fe:17:24:d1:31:40:
28:95:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:14 2025 by rpki-client