Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Sp84alczuKnvGSMl0BVXOMSQgIw.roa
File: Sp84alczuKnvGSMl0BVXOMSQgIw.roa (raw, json)
Hash identifier: 6iLnfHOVWGy8m8Ki0YmC3iRacmomHGqoAfy/7whoCJc=
Subject key identifier: 4A:9F:38:6A:57:33:B8:A9:EF:19:23:25:D0:15:57:38:C4:90:80:8C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191F6B0D27D16B6DD681F8300AC86891A74
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Sp84alczuKnvGSMl0BVXOMSQgIw.roa
Signing time: Sun 15 Sep 2024 17:17:49 +0000
ROA not before: Sun 15 Sep 2024 17:17:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34224
IP address blocks: 2.58.92.0/24 maxlen: 24
31.13.195.0/24 maxlen: 24
31.13.197.0/24 maxlen: 24
31.13.208.0/24 maxlen: 24
31.13.216.0/21 maxlen: 24
31.13.217.0/24 maxlen: 24
31.13.221.0/24 maxlen: 24
31.13.223.0/24 maxlen: 24
31.13.230.0/23 maxlen: 24
31.13.236.0/22 maxlen: 24
31.13.241.0/24 maxlen: 24
31.13.245.0/24 maxlen: 24
37.60.138.0/24 maxlen: 24
37.60.139.0/24 maxlen: 24
45.81.38.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
83.143.115.0/24 maxlen: 24
85.217.140.0/24 maxlen: 24
87.120.6.0/23 maxlen: 24
87.120.6.0/24 maxlen: 24
87.120.8.0/24 maxlen: 24
87.120.13.0/24 maxlen: 24
87.120.36.100/32 maxlen: 32
87.120.37.0/24 maxlen: 24
87.120.39.0/24 maxlen: 24
87.120.43.0/24 maxlen: 24
87.120.61.0/24 maxlen: 24
87.120.104.0/24 maxlen: 24
87.120.109.0/24 maxlen: 24
87.120.128.0/23 maxlen: 24
87.120.132.0/24 maxlen: 24
87.120.133.0/24 maxlen: 24
87.120.134.0/24 maxlen: 24
87.120.135.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.176.0/24 maxlen: 24
87.120.195.0/24 maxlen: 24
87.120.199.0/24 maxlen: 24
87.120.200.0/24 maxlen: 24
87.120.201.0/24 maxlen: 24
87.120.206.0/23 maxlen: 24
87.120.206.0/24 maxlen: 24
87.120.207.0/24 maxlen: 24
87.120.217.0/24 maxlen: 24
87.120.223.0/24 maxlen: 24
87.120.253.0/24 maxlen: 24
87.120.254.0/24 maxlen: 24
87.120.255.0/24 maxlen: 24
87.121.0.0/23 maxlen: 24
87.121.0.0/24 maxlen: 24
87.121.1.0/24 maxlen: 24
87.121.2.0/24 maxlen: 24
87.121.6.0/23 maxlen: 24
87.121.42.0/24 maxlen: 24
87.121.52.0/24 maxlen: 24
87.121.64.0/24 maxlen: 24
87.121.82.0/24 maxlen: 24
87.121.83.0/24 maxlen: 24
87.121.90.0/23 maxlen: 24
87.121.110.0/24 maxlen: 24
87.121.111.0/24 maxlen: 24
87.121.112.0/24 maxlen: 24
87.121.113.0/24 maxlen: 24
87.121.118.0/24 maxlen: 24
87.121.150.0/23 maxlen: 32
87.121.161.0/24 maxlen: 24
91.92.0.0/24 maxlen: 24
91.92.1.0/24 maxlen: 24
91.92.2.0/24 maxlen: 24
91.92.65.0/24 maxlen: 24
91.92.66.0/24 maxlen: 24
91.92.68.0/24 maxlen: 24
91.92.69.0/24 maxlen: 24
91.92.105.0/24 maxlen: 24
91.92.109.0/24 maxlen: 24
91.92.139.0/24 maxlen: 24
91.92.197.0/24 maxlen: 24
91.92.198.0/23 maxlen: 24
91.92.219.0/24 maxlen: 24
91.92.230.0/24 maxlen: 24
91.212.233.0/24 maxlen: 24
92.249.49.0/24 maxlen: 24
93.123.8.0/24 maxlen: 24
93.123.12.0/24 maxlen: 24
93.123.18.0/24 maxlen: 24
93.123.28.0/23 maxlen: 24
93.123.32.0/22 maxlen: 24
93.123.36.0/24 maxlen: 24
93.123.37.0/24 maxlen: 24
93.123.64.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
94.156.12.0/24 maxlen: 24
94.156.15.0/24 maxlen: 24
94.156.24.0/24 maxlen: 24
94.156.25.0/24 maxlen: 24
94.156.42.0/24 maxlen: 24
94.156.44.0/24 maxlen: 24
94.156.77.0/24 maxlen: 24
94.156.94.0/24 maxlen: 24
94.156.98.0/24 maxlen: 24
94.156.100.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.129.0/24 maxlen: 24
94.156.130.0/24 maxlen: 24
94.156.153.0/24 maxlen: 24
94.156.158.0/24 maxlen: 24
94.156.159.0/24 maxlen: 24
94.156.172.0/23 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.185.0/24 maxlen: 24
94.156.188.0/24 maxlen: 24
94.156.190.0/24 maxlen: 24
94.156.216.0/21 maxlen: 24
94.156.227.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
94.156.233.0/24 maxlen: 24
94.156.249.0/24 maxlen: 24
94.156.251.0/24 maxlen: 24
94.156.252.0/24 maxlen: 24
194.55.184.0/23 maxlen: 24
194.169.173.0/24 maxlen: 24
212.73.128.0/23 maxlen: 24
212.73.130.0/23 maxlen: 24
212.73.131.0/24 maxlen: 24
212.73.132.0/24 maxlen: 24
212.73.133.0/24 maxlen: 24
212.73.134.0/24 maxlen: 24
212.73.136.0/24 maxlen: 24
212.73.138.0/23 maxlen: 24
212.73.138.0/24 maxlen: 24
212.73.140.0/24 maxlen: 24
212.73.141.0/24 maxlen: 24
212.73.142.0/24 maxlen: 24
212.73.143.0/24 maxlen: 24
212.73.144.0/24 maxlen: 24
212.73.145.0/24 maxlen: 24
212.73.146.0/24 maxlen: 24
212.73.147.0/24 maxlen: 24
212.73.148.0/24 maxlen: 24
212.73.155.0/24 maxlen: 24
212.73.157.0/24 maxlen: 24
212.87.207.0/24 maxlen: 24
2a00:1728::/32 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:3::/48 maxlen: 48
2a00:1728:1b::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:2f::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:35::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f6:b0:d2:7d:16:b6:dd:68:1f:83:00:ac:86:89:1a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 15 17:17:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a9f386a5733b8a9ef192325d0155738c490808c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:a5:de:d7:f2:43:4b:63:91:55:dd:0b:2c:
2e:1f:5b:6f:97:33:cc:8a:55:41:a2:fe:09:1c:04:
fc:67:af:8c:90:ee:a8:b1:22:7e:8a:ce:8c:32:ad:
a7:39:04:ed:d6:91:e8:5c:58:e5:bc:da:94:8a:4a:
20:9d:ca:5c:ea:ae:86:1d:5f:e5:06:2e:af:b2:d2:
0e:8b:3c:72:62:34:fe:c1:32:85:75:c5:df:1b:6e:
3b:7b:36:53:0b:e5:02:51:12:d0:32:e2:62:c5:b2:
c8:48:0a:d7:76:8a:48:33:4c:c0:11:27:ab:b7:3b:
a9:43:4e:d5:3e:db:1d:71:01:c2:f0:f8:15:33:b0:
79:d5:71:86:81:75:70:d2:31:38:92:48:df:cd:68:
c7:62:ee:80:74:22:ef:4c:8a:e3:8b:b2:ed:3d:af:
cf:fb:87:14:37:dd:f5:18:10:66:d7:ae:a5:9c:f4:
68:66:a8:0c:d2:06:58:86:73:03:31:08:cb:ff:57:
d0:fb:03:15:51:93:18:8c:d4:7b:05:26:71:9c:15:
46:9f:20:bd:f9:19:32:b2:43:27:72:50:88:52:da:
ba:37:36:4a:fd:bf:80:6e:c6:cc:ea:ee:16:d2:df:
99:61:d5:d7:da:e6:67:31:85:ea:ad:c3:4c:59:a8:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9F:38:6A:57:33:B8:A9:EF:19:23:25:D0:15:57:38:C4:90:80:8C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Sp84alczuKnvGSMl0BVXOMSQgIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.92.0/24
31.13.195.0/24
31.13.197.0/24
31.13.208.0/24
31.13.216.0/21
31.13.230.0/23
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
37.60.138.0/23
45.81.38.0/24
82.115.210.0/24
83.143.115.0/24
85.217.140.0/24
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.36.100/32
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.104.0/24
87.120.109.0/24
87.120.128.0/23
87.120.132.0/22
87.120.165.0/24
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.42.0/24
87.121.52.0/24
87.121.64.0/24
87.121.82.0/23
87.121.90.0/23
87.121.110.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.68.0/23
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.197.0-91.92.199.255
91.92.219.0/24
91.92.230.0/24
91.212.233.0/24
92.249.49.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.37.255
93.123.64.0/24
93.123.117.0/24
94.156.12.0/24
94.156.15.0/24
94.156.24.0/23
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/24
94.156.98.0/24
94.156.100.0/24
94.156.106.0/24
94.156.129.0-94.156.130.255
94.156.153.0/24
94.156.158.0/23
94.156.172.0/23
94.156.179.0/24
94.156.185.0/24
94.156.188.0/24
94.156.190.0/24
94.156.216.0/21
94.156.227.0/24
94.156.232.0/23
94.156.249.0/24
94.156.251.0-94.156.252.255
194.55.184.0/23
194.169.173.0/24
212.73.128.0-212.73.134.255
212.73.136.0/24
212.73.138.0-212.73.148.255
212.73.155.0/24
212.73.157.0/24
212.87.207.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
36:1c:3c:05:92:b4:00:65:da:0a:19:02:61:02:df:a5:1c:4b:
7d:b5:39:e7:4a:f5:2b:46:98:56:c2:f8:b2:30:86:65:94:32:
6c:6f:bc:fa:cb:81:f5:e1:d8:45:15:b4:96:08:61:1d:39:57:
c7:68:96:90:a2:46:a2:31:ac:de:10:3a:15:78:89:7a:10:dd:
f5:82:77:fd:12:f3:a3:5a:20:34:dd:65:ff:aa:a6:c2:72:cc:
cf:a2:5a:af:2d:e2:87:34:fb:e6:29:96:b6:46:fd:7f:96:c7:
78:a6:1d:d5:95:f2:5e:f6:a4:44:5c:f9:4f:67:cf:c9:de:a5:
4f:26:68:2a:46:e0:a5:be:b0:ec:ea:bd:64:23:1a:7a:fa:da:
0a:3b:5f:fa:25:86:5c:3f:ec:d4:a0:b3:19:08:f6:ed:24:01:
9c:c5:f4:55:79:88:22:52:71:51:bb:20:c8:fc:77:70:5b:0f:
79:ae:fd:57:7c:2e:ee:c8:d0:2b:18:b5:e6:2d:26:c0:93:e8:
e8:ea:eb:f6:90:2b:c5:1e:53:20:f5:b5:3e:bb:8e:bd:51:62:
f0:b3:d0:7a:92:5a:ed:ed:64:b8:52:f9:92:74:0b:56:36:eb:
54:71:cc:96:02:4e:9b:2d:65:ab:33:00:cb:97:e3:06:47:43:
42:2c:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:51:31 2025 by rpki-client