Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CRXmNnkaHQ0CuwP7l2DQtrBg0Fk.roa
File: CRXmNnkaHQ0CuwP7l2DQtrBg0Fk.roa (raw, json)
Hash identifier: f8PVZznJBvIwJbSl7rbM/ZftoDELS80enSBnJwbQPYA=
Subject key identifier: 09:15:E6:36:79:1A:1D:0D:02:BB:03:FB:97:60:D0:B6:B0:60:D0:59
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191FF33C6FD316030C8D28A4F607A47EF65
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CRXmNnkaHQ0CuwP7l2DQtrBg0Fk.roa
Signing time: Tue 17 Sep 2024 08:57:48 +0000
ROA not before: Tue 17 Sep 2024 08:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34224
IP address blocks: 2.58.92.0/24 maxlen: 24
31.13.195.0/24 maxlen: 24
31.13.197.0/24 maxlen: 24
31.13.208.0/24 maxlen: 24
31.13.216.0/21 maxlen: 24
31.13.217.0/24 maxlen: 24
31.13.221.0/24 maxlen: 24
31.13.223.0/24 maxlen: 24
31.13.230.0/23 maxlen: 24
31.13.236.0/22 maxlen: 24
31.13.241.0/24 maxlen: 24
31.13.245.0/24 maxlen: 24
37.60.138.0/24 maxlen: 24
37.60.139.0/24 maxlen: 24
45.81.38.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
83.143.115.0/24 maxlen: 24
85.217.140.0/24 maxlen: 24
87.120.6.0/23 maxlen: 24
87.120.6.0/24 maxlen: 24
87.120.8.0/24 maxlen: 24
87.120.13.0/24 maxlen: 24
87.120.36.100/32 maxlen: 32
87.120.37.0/24 maxlen: 24
87.120.39.0/24 maxlen: 24
87.120.43.0/24 maxlen: 24
87.120.61.0/24 maxlen: 24
87.120.104.0/24 maxlen: 24
87.120.109.0/24 maxlen: 24
87.120.128.0/23 maxlen: 24
87.120.132.0/24 maxlen: 24
87.120.133.0/24 maxlen: 24
87.120.134.0/24 maxlen: 24
87.120.135.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.176.0/24 maxlen: 24
87.120.195.0/24 maxlen: 24
87.120.199.0/24 maxlen: 24
87.120.200.0/24 maxlen: 24
87.120.201.0/24 maxlen: 24
87.120.206.0/23 maxlen: 24
87.120.206.0/24 maxlen: 24
87.120.207.0/24 maxlen: 24
87.120.217.0/24 maxlen: 24
87.120.223.0/24 maxlen: 24
87.120.253.0/24 maxlen: 24
87.120.254.0/24 maxlen: 24
87.120.255.0/24 maxlen: 24
87.121.0.0/23 maxlen: 24
87.121.0.0/24 maxlen: 24
87.121.1.0/24 maxlen: 24
87.121.2.0/24 maxlen: 24
87.121.6.0/23 maxlen: 24
87.121.42.0/24 maxlen: 24
87.121.52.0/24 maxlen: 24
87.121.64.0/24 maxlen: 24
87.121.82.0/24 maxlen: 24
87.121.83.0/24 maxlen: 24
87.121.90.0/23 maxlen: 24
87.121.110.0/24 maxlen: 24
87.121.111.0/24 maxlen: 24
87.121.112.0/24 maxlen: 24
87.121.113.0/24 maxlen: 24
87.121.118.0/24 maxlen: 24
87.121.150.0/23 maxlen: 32
87.121.150.0/24 maxlen: 32
87.121.151.0/24 maxlen: 32
87.121.161.0/24 maxlen: 24
91.92.0.0/24 maxlen: 24
91.92.1.0/24 maxlen: 24
91.92.2.0/24 maxlen: 24
91.92.65.0/24 maxlen: 24
91.92.66.0/24 maxlen: 24
91.92.68.0/24 maxlen: 24
91.92.69.0/24 maxlen: 24
91.92.105.0/24 maxlen: 24
91.92.109.0/24 maxlen: 24
91.92.139.0/24 maxlen: 24
91.92.197.0/24 maxlen: 24
91.92.198.0/23 maxlen: 24
91.92.219.0/24 maxlen: 24
91.92.230.0/24 maxlen: 24
91.212.233.0/24 maxlen: 24
92.249.49.0/24 maxlen: 24
93.123.8.0/24 maxlen: 24
93.123.12.0/24 maxlen: 24
93.123.18.0/24 maxlen: 24
93.123.28.0/23 maxlen: 24
93.123.32.0/22 maxlen: 24
93.123.36.0/24 maxlen: 24
93.123.37.0/24 maxlen: 24
93.123.64.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
94.156.12.0/24 maxlen: 24
94.156.15.0/24 maxlen: 24
94.156.24.0/24 maxlen: 24
94.156.25.0/24 maxlen: 24
94.156.42.0/24 maxlen: 24
94.156.44.0/24 maxlen: 24
94.156.77.0/24 maxlen: 24
94.156.94.0/24 maxlen: 24
94.156.98.0/24 maxlen: 24
94.156.100.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.129.0/24 maxlen: 24
94.156.130.0/24 maxlen: 24
94.156.153.0/24 maxlen: 24
94.156.158.0/24 maxlen: 24
94.156.159.0/24 maxlen: 24
94.156.172.0/23 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.185.0/24 maxlen: 24
94.156.188.0/24 maxlen: 24
94.156.190.0/24 maxlen: 24
94.156.216.0/21 maxlen: 24
94.156.227.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
94.156.233.0/24 maxlen: 24
94.156.249.0/24 maxlen: 24
94.156.251.0/24 maxlen: 24
94.156.252.0/24 maxlen: 24
194.55.184.0/23 maxlen: 24
194.169.173.0/24 maxlen: 24
212.73.128.0/23 maxlen: 24
212.73.130.0/23 maxlen: 24
212.73.131.0/24 maxlen: 24
212.73.132.0/24 maxlen: 24
212.73.133.0/24 maxlen: 24
212.73.134.0/24 maxlen: 24
212.73.136.0/24 maxlen: 24
212.73.138.0/23 maxlen: 24
212.73.138.0/24 maxlen: 24
212.73.140.0/24 maxlen: 24
212.73.141.0/24 maxlen: 24
212.73.142.0/24 maxlen: 24
212.73.143.0/24 maxlen: 24
212.73.144.0/24 maxlen: 24
212.73.145.0/24 maxlen: 24
212.73.146.0/24 maxlen: 24
212.73.147.0/24 maxlen: 24
212.73.148.0/24 maxlen: 24
212.73.155.0/24 maxlen: 24
212.73.157.0/24 maxlen: 24
212.87.207.0/24 maxlen: 24
2a00:1728::/32 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:3::/48 maxlen: 48
2a00:1728:1b::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:2f::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:35::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:33:c6:fd:31:60:30:c8:d2:8a:4f:60:7a:47:ef:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 08:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0915e636791a1d0d02bb03fb9760d0b6b060d059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:e8:64:f3:dd:82:ab:0d:02:94:f6:57:f6:
c4:60:1c:a1:f8:c2:67:d0:4c:af:fb:a5:70:84:17:
c6:25:51:3b:cb:ad:f0:3c:dd:1b:4e:0e:0f:ac:bd:
e8:a0:4f:c0:1f:af:a2:66:f0:28:38:e2:07:a8:54:
d7:75:ba:c2:98:f7:77:fd:89:98:7e:51:b6:f6:92:
f2:a7:48:e1:b5:e0:88:ba:c0:e0:68:da:c6:dc:78:
a5:40:0a:f0:fa:9b:bd:1c:99:17:32:75:53:20:3b:
e9:93:01:ac:cb:32:ba:a9:52:f8:9f:27:69:c5:5a:
24:71:cb:0b:42:91:4e:34:6a:7b:cd:b1:86:0e:23:
da:5e:d6:91:ae:d0:93:54:62:58:a5:c6:9c:e3:df:
7e:38:97:2d:dc:bf:c5:9a:ea:64:6d:7f:2f:44:21:
c3:36:10:a2:b1:a0:1f:64:39:24:e6:08:0a:55:e2:
7d:36:53:7b:23:40:c3:cc:6c:ac:43:99:12:0e:c9:
c2:39:ec:95:64:1e:ed:1b:ae:70:bf:ce:43:b5:42:
7d:65:14:c2:2f:75:6e:30:4f:dc:c7:5d:7b:ef:92:
8a:d8:6f:b5:04:7b:67:23:1f:fd:21:6e:b7:6d:f1:
e3:75:bf:54:60:14:56:98:25:34:9a:05:18:87:0d:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:15:E6:36:79:1A:1D:0D:02:BB:03:FB:97:60:D0:B6:B0:60:D0:59
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CRXmNnkaHQ0CuwP7l2DQtrBg0Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.92.0/24
31.13.195.0/24
31.13.197.0/24
31.13.208.0/24
31.13.216.0/21
31.13.230.0/23
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
37.60.138.0/23
45.81.38.0/24
82.115.210.0/24
83.143.115.0/24
85.217.140.0/24
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.36.100/32
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.104.0/24
87.120.109.0/24
87.120.128.0/23
87.120.132.0/22
87.120.165.0/24
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.42.0/24
87.121.52.0/24
87.121.64.0/24
87.121.82.0/23
87.121.90.0/23
87.121.110.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.68.0/23
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.197.0-91.92.199.255
91.92.219.0/24
91.92.230.0/24
91.212.233.0/24
92.249.49.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.37.255
93.123.64.0/24
93.123.117.0/24
94.156.12.0/24
94.156.15.0/24
94.156.24.0/23
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/24
94.156.98.0/24
94.156.100.0/24
94.156.106.0/24
94.156.129.0-94.156.130.255
94.156.153.0/24
94.156.158.0/23
94.156.172.0/23
94.156.179.0/24
94.156.185.0/24
94.156.188.0/24
94.156.190.0/24
94.156.216.0/21
94.156.227.0/24
94.156.232.0/23
94.156.249.0/24
94.156.251.0-94.156.252.255
194.55.184.0/23
194.169.173.0/24
212.73.128.0-212.73.134.255
212.73.136.0/24
212.73.138.0-212.73.148.255
212.73.155.0/24
212.73.157.0/24
212.87.207.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
53:9f:f8:5e:df:db:1a:bf:d4:bb:14:26:c5:d1:a8:a5:7f:8f:
db:84:71:db:ba:3e:70:a1:b1:5b:99:19:ac:9a:ad:41:ba:d6:
bd:e0:25:e1:25:a5:51:07:fa:0a:67:22:76:94:8f:f2:1b:a0:
41:b0:7f:37:d0:c3:a2:43:7d:8f:a2:f9:ec:9f:80:40:26:95:
21:c9:bd:f9:f4:cb:8f:a7:de:fb:e2:41:55:e7:e8:1f:e9:cf:
f5:fd:a2:82:d4:4e:5a:ee:6c:29:34:13:7f:e8:09:29:97:91:
30:93:a9:ce:60:33:4c:38:c2:a1:75:1e:1c:5d:42:95:ea:34:
a0:12:f4:ad:cb:42:b6:56:87:26:dc:ae:9a:11:b9:69:82:b1:
fe:18:98:f6:c6:28:07:1e:af:a6:70:67:1f:6e:f4:01:a3:e4:
17:10:a7:e4:72:15:08:dc:20:89:0b:6f:a6:c1:ef:d5:07:c5:
ae:2e:d6:fe:ad:c9:4b:0f:50:cc:c3:69:16:e4:4e:9b:c5:5f:
80:f6:f2:71:7e:65:22:44:3d:76:b7:03:5b:57:fb:5c:25:d5:
27:a8:e0:eb:9c:39:6f:31:70:83:f3:d5:82:3f:00:ca:c5:d1:
f4:f3:df:10:13:64:d8:09:4c:aa:c2:db:33:72:12:83:7e:ab:
55:f1:74:c1
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgISAZH/M8b9MWAwyNKKT2B6R+9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwOTE3MDg1NzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTE1ZTYzNjc5MWExZDBkMDJiYjAzZmI5NzYwZDBiNmIwNjBkMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAjoZPPdgqsNApT2V/bEYByh+MJn
0Eyv+6VwhBfGJVE7y63wPN0bTg4PrL3ooE/AH6+iZvAoOOIHqFTXdbrCmPd3/YmY
flG29pLyp0jhteCIusDgaNrG3HilQArw+pu9HJkXMnVTIDvpkwGsyzK6qVL4nydp
xVokccsLQpFONGp7zbGGDiPaXtaRrtCTVGJYpcac499+OJct3L/FmupkbX8vRCHD
NhCisaAfZDkk5ggKVeJ9NlN7I0DDzGysQ5kSDsnCOeyVZB7tG65wv85DtUJ9ZRTC
L3VuME/cx11775KK2G+1BHtnIx/9IW63bfHjdb9UYBRWmCU0mgUYhw3OYwIDAQAB
o4IEpDCCBKAwHQYDVR0OBBYEFAkV5jZ5Gh0NArsD+5dg0LawYNBZMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQ1JYbU5ua2FIUTBDdXdQN2wyRFF0ckJnMEZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICuAYIKwYBBQUHAQcBAf8EggKnMIICozCCApAEAgABMIIC
iAMEAAI6XAMEAB8NwwMEAB8NxQMEAB8N0AMEAx8N2AMEAR8N5gMEAh8N7AMEAB8N
8QMEAB8N9QMEASU8igMEAC1RJgMEAFJz0gMEAFOPcwMEAFXZjDAMAwQBV3gGAwQA
V3gIAwQAV3gNAwUAV3gkZAMEAFd4JQMEAFd4JwMEAFd4KwMEAFd4PQMEAFd4aAME
AFd4bQMEAVd4gAMEAld4hAMEAFd4pQMEAFd4sAMEAFd4wzAMAwQAV3jHAwQBV3jI
AwQBV3jOAwQAV3jZAwQAV3jfMAwDBABXeP0DBABXeQIDBAFXeQYDBABXeSoDBABX
eTQDBABXeUADBAFXeVIDBAFXeVowDAMEAVd5bgMEAVd5cAMEAFd5dgMEAVd5lgME
AFd5oTALAwMCW1wDBABbXAIwDAMEAFtcQQMEAFtcQgMEAVtcRAMEAFtcaQMEAFtc
bQMEAFtcizAMAwQAW1zFAwQDW1zAAwQAW1zbAwQAW1zmAwQAW9TpAwQAXPkxAwQA
XXsIAwQAXXsMAwQAXXsSAwQBXXscMAwDBAVdeyADBAFdeyQDBABde0ADBABde3UD
BABenAwDBABenA8DBAFenBgDBABenCoDBABenCwDBABenE0DBABenF4DBABenGID
BABenGQDBABenGowDAMEAF6cgQMEAF6cggMEAF6cmQMEAV6cngMEAV6crAMEAF6c
swMEAF6cuQMEAF6cvAMEAF6cvgMEA16c2AMEAF6c4wMEAV6c6AMEAF6c+TAMAwQA
Xpz7AwQAXpz8AwQBwje4AwQAwqmtMAwDBAfUSYADBADUSYYDBADUSYgwDAMEAdRJ
igMEANRJlAMEANRJmwMEANRJnQMEANRXzzANBAIAAjAHAwUAKgAXKDANBgkqhkiG
9w0BAQsFAAOCAQEAU5/4Xt/bGr/UuxQmxdGopX+P24Rx27o+cKGxW5kZrJqtQbrW
veAl4SWlUQf6CmcidpSP8hugQbB/N9DDokN9j6L57J+AQCaVIcm9+fTLj6fe++JB
VefoH+nP9f2igtROWu5sKTQTf+gJKZeRMJOpzmAzTDjCoXUeHF1Cleo0oBL0rctC
tlaHJtyumhG5aYKx/hiY9sYoBx6vpnBnH270AaPkFxCn5HIVCNwgiQtvpsHv1QfF
ri7W/q3JSw9QzMNpFuROm8VfgPbycX5lIkQ9drcDW1f7XCXVJ6jg65w5bzFwg/PV
gj8AysXR9PPfEBNk2AlMqsLbM3ISg36rVfF0wQ==
-----END CERTIFICATE-----
Generated at Tue May 13 16:46:33 2025 by rpki-client