Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/bAaIiCiF7rQAudv4i8xJigRWCr4.roa
File: bAaIiCiF7rQAudv4i8xJigRWCr4.roa (raw, json)
Hash identifier: JFyqLJacrsT8PFcaMnyWdR24Q85t8rVg+AWvzpams9M=
Subject key identifier: 6C:06:88:88:28:85:EE:B4:00:B9:DB:F8:8B:CC:49:8A:04:56:0A:BE
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 01892F785799F9CC483C2A5A6C5988CEF126
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/bAaIiCiF7rQAudv4i8xJigRWCr4.roa
Signing time: Fri 07 Jul 2023 08:29:23 +0000
ROA not before: Fri 07 Jul 2023 08:29:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25229
IP address blocks: 77.121.17.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
77.121.12.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
93.74.0.0/17 maxlen: 18
93.74.0.0/16 maxlen: 17
109.201.226.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.224.0/24 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
93.73.0.0/16 maxlen: 17
93.72.0.0/16 maxlen: 17
93.72.0.0/15 maxlen: 16
95.69.240.0/21 maxlen: 22
95.69.250.0/23 maxlen: 24
95.69.248.0/22 maxlen: 23
77.123.64.0/19 maxlen: 20
77.123.0.0/18 maxlen: 19
77.123.32.0/19 maxlen: 20
77.123.160.0/19 maxlen: 20
95.69.192.0/19 maxlen: 20
141.170.226.0/24 maxlen: 24
45.15.234.0/23 maxlen: 23
141.170.229.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
95.69.224.0/21 maxlen: 22
141.170.236.0/24 maxlen: 24
77.123.96.0/21 maxlen: 22
77.123.104.0/21 maxlen: 22
95.69.128.0/20 maxlen: 21
95.69.144.0/21 maxlen: 22
77.123.112.0/21 maxlen: 22
95.69.152.0/22 maxlen: 23
77.123.120.0/21 maxlen: 22
77.123.128.0/19 maxlen: 20
95.69.156.0/22 maxlen: 23
95.69.160.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
188.230.28.0/22 maxlen: 23
188.230.26.0/23 maxlen: 24
188.230.32.0/21 maxlen: 22
188.230.40.0/21 maxlen: 22
188.230.48.0/21 maxlen: 22
188.230.56.0/21 maxlen: 22
188.230.64.0/21 maxlen: 22
188.230.78.0/23 maxlen: 24
77.122.128.0/17 maxlen: 18
188.230.74.0/23 maxlen: 24
188.230.0.0/21 maxlen: 22
188.230.0.0/22 maxlen: 23
188.230.4.0/23 maxlen: 24
188.230.8.0/21 maxlen: 22
188.230.16.0/21 maxlen: 22
188.230.24.0/23 maxlen: 24
77.244.32.0/20 maxlen: 21
188.230.80.0/21 maxlen: 22
188.230.88.0/22 maxlen: 23
188.230.96.0/23 maxlen: 24
188.230.118.0/23 maxlen: 24
188.230.116.0/23 maxlen: 24
188.230.120.0/22 maxlen: 23
188.230.126.0/23 maxlen: 24
77.121.128.0/20 maxlen: 21
77.121.144.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.112.0/20 maxlen: 21
77.122.0.0/17 maxlen: 18
193.189.96.0/23 maxlen: 24
77.122.0.0/16 maxlen: 17
77.121.192.0/20 maxlen: 21
77.121.192.0/19 maxlen: 20
77.121.208.0/21 maxlen: 22
77.121.216.0/21 maxlen: 22
77.121.224.0/19 maxlen: 20
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 22
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 19
109.201.232.0/22 maxlen: 23
109.201.228.0/22 maxlen: 23
109.201.238.0/23 maxlen: 24
109.201.236.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
77.121.64.0/21 maxlen: 22
77.120.216.0/22 maxlen: 23
77.120.224.0/20 maxlen: 21
77.120.220.0/22 maxlen: 23
77.120.232.0/22 maxlen: 23
77.120.228.0/22 maxlen: 23
77.120.236.0/22 maxlen: 23
77.120.240.0/20 maxlen: 21
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
93.79.96.0/21 maxlen: 22
93.79.104.0/21 maxlen: 22
93.79.112.0/23 maxlen: 24
93.79.114.0/23 maxlen: 24
93.79.112.0/21 maxlen: 22
93.79.120.0/21 maxlen: 22
93.79.64.0/19 maxlen: 20
77.120.52.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.60.0/22 maxlen: 23
77.120.72.0/21 maxlen: 22
77.120.80.0/22 maxlen: 23
77.120.80.0/20 maxlen: 21
77.120.84.0/22 maxlen: 23
77.120.88.0/22 maxlen: 23
77.120.92.0/22 maxlen: 23
77.120.96.0/19 maxlen: 20
77.120.0.0/20 maxlen: 21
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
93.78.96.0/19 maxlen: 20
93.78.128.0/17 maxlen: 18
93.78.128.0/18 maxlen: 19
93.79.0.0/18 maxlen: 19
93.79.0.0/19 maxlen: 20
93.79.32.0/19 maxlen: 20
93.78.192.0/18 maxlen: 19
93.77.192.0/19 maxlen: 20
93.77.224.0/19 maxlen: 20
93.77.128.0/19 maxlen: 20
93.78.32.0/20 maxlen: 21
93.78.48.0/21 maxlen: 22
93.78.56.0/21 maxlen: 22
93.78.0.0/19 maxlen: 20
93.77.0.0/19 maxlen: 20
93.76.160.0/19 maxlen: 20
95.69.232.0/24 maxlen: 24
141.170.244.0/22 maxlen: 23
141.170.250.0/23 maxlen: 24
141.170.248.0/23 maxlen: 24
95.69.253.0/24 maxlen: 24
95.69.252.0/24 maxlen: 24
95.69.255.0/24 maxlen: 24
95.69.254.0/24 maxlen: 24
93.76.192.0/18 maxlen: 19
93.77.64.0/18 maxlen: 19
82.144.192.0/19 maxlen: 20
93.77.32.0/20 maxlen: 21
93.77.48.0/21 maxlen: 22
93.77.56.0/21 maxlen: 22
93.76.0.0/19 maxlen: 20
93.76.32.0/20 maxlen: 21
93.76.48.0/20 maxlen: 21
93.75.224.0/19 maxlen: 20
93.76.112.0/20 maxlen: 21
93.76.128.0/19 maxlen: 20
141.170.226.0/23 maxlen: 24
141.170.224.0/23 maxlen: 24
45.15.234.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.240.0/22 maxlen: 23
93.76.64.0/20 maxlen: 21
93.76.80.0/21 maxlen: 22
93.76.88.0/21 maxlen: 22
93.76.96.0/21 maxlen: 22
93.76.104.0/21 maxlen: 22
93.75.64.0/21 maxlen: 22
93.75.72.0/21 maxlen: 22
93.75.80.0/21 maxlen: 22
188.230.71.0/24 maxlen: 24
188.230.77.0/24 maxlen: 24
188.230.76.0/24 maxlen: 24
93.75.88.0/21 maxlen: 22
188.230.73.0/24 maxlen: 24
188.230.72.0/24 maxlen: 24
93.75.0.0/19 maxlen: 20
188.230.7.0/24 maxlen: 24
93.75.32.0/19 maxlen: 20
93.75.160.0/21 maxlen: 22
93.75.168.0/21 maxlen: 22
93.75.176.0/21 maxlen: 22
93.75.184.0/21 maxlen: 22
93.75.192.0/19 maxlen: 20
93.75.192.0/18 maxlen: 19
93.75.96.0/19 maxlen: 20
188.230.98.0/24 maxlen: 24
188.230.95.0/24 maxlen: 24
188.230.94.0/24 maxlen: 24
188.230.105.0/24 maxlen: 24
188.230.104.0/24 maxlen: 24
188.230.103.0/24 maxlen: 24
188.230.102.0/24 maxlen: 24
93.75.112.0/20 maxlen: 21
188.230.100.0/24 maxlen: 24
188.230.99.0/24 maxlen: 24
188.230.112.0/24 maxlen: 24
188.230.111.0/24 maxlen: 24
188.230.109.0/24 maxlen: 24
188.230.108.0/24 maxlen: 24
188.230.107.0/24 maxlen: 24
188.230.106.0/24 maxlen: 24
93.75.128.0/20 maxlen: 21
93.75.128.0/19 maxlen: 20
188.230.115.0/24 maxlen: 24
188.230.113.0/24 maxlen: 24
188.230.124.0/24 maxlen: 24
93.75.144.0/20 maxlen: 21
93.74.128.0/17 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:78:57:99:f9:cc:48:3c:2a:5a:6c:59:88:ce:f1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jul 7 08:29:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c0688882885eeb400b9dbf88bcc498a04560abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:99:60:b2:8b:15:ef:f9:9b:66:8f:83:58:
be:77:21:61:12:7b:e5:b6:8d:17:53:14:a0:ef:ce:
80:82:5f:4e:6c:0c:9f:8a:8f:2f:f8:db:a4:73:35:
96:c5:9f:a2:d8:16:8b:5e:7d:67:3e:2b:c6:15:96:
39:66:91:fa:a6:71:6a:7c:09:e7:9d:9f:e9:4b:e9:
c7:04:ed:72:d4:4c:ba:0f:0e:d9:34:3b:89:39:3f:
48:90:65:b8:c3:1c:24:7d:78:a7:c9:b9:da:8f:7b:
58:aa:52:85:30:f2:6a:d7:ec:77:e1:14:3a:b1:60:
fe:14:70:d6:79:7a:65:12:83:73:e3:39:59:42:ce:
68:e3:af:fd:2f:2c:6d:a0:4f:ff:1b:49:7a:29:dc:
32:46:49:ae:44:ee:6d:32:c8:c6:1a:91:41:e1:d0:
81:4d:29:bd:af:d8:9d:33:b3:0c:dc:cb:84:87:11:
a6:70:77:19:d9:e6:9f:b5:73:17:5f:7b:23:7c:6e:
ce:a0:8c:6c:57:57:85:68:15:89:96:04:d5:06:24:
08:15:b4:4b:3f:20:3c:6e:13:47:ff:87:a9:0f:9a:
7e:24:87:6f:17:65:0d:56:e3:0a:5f:cb:98:c7:fc:
f9:72:26:79:c7:f6:7d:c9:1b:99:5e:26:62:69:e7:
47:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:06:88:88:28:85:EE:B4:00:B9:DB:F8:8B:CC:49:8A:04:56:0A:BE
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/bAaIiCiF7rQAudv4i8xJigRWCr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.234.0/23
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.120.191.255
77.120.200.0-77.121.13.255
77.121.15.0-77.121.26.255
77.121.28.0-77.121.30.255
77.121.64.0-77.123.191.255
77.244.32.0/20
82.144.192.0/19
93.72.0.0-93.77.159.255
93.77.192.0-93.78.63.255
93.78.96.0-93.79.127.255
95.69.128.0-95.69.232.255
95.69.240.0/20
109.201.224.0/19
141.170.224.0/22
141.170.229.0-141.170.236.255
141.170.238.0/24
141.170.240.0-141.170.251.255
188.230.0.0-188.230.91.255
188.230.94.0-188.230.100.255
188.230.102.0-188.230.109.255
188.230.111.0-188.230.113.255
188.230.115.0-188.230.124.255
188.230.126.0/23
193.189.96.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:85:b9:c8:44:fa:86:af:e4:22:4e:64:df:db:4a:b1:e2:86:
6a:b0:94:c2:23:0f:46:25:7b:83:23:aa:f9:2f:f6:a2:b8:55:
37:67:2e:64:50:72:08:fa:13:55:dc:b1:ad:b3:6a:95:d5:37:
11:93:47:5a:d0:d8:76:cd:c3:bf:9d:e0:d1:00:a3:be:11:47:
70:64:92:43:bc:c3:ff:46:cc:f2:47:37:1a:b2:b3:d8:c0:bb:
84:40:0e:95:b8:55:cf:65:a3:12:ff:95:a2:fa:ba:c4:48:8f:
a4:32:44:17:75:84:7f:0b:ee:d6:9a:9c:b6:6c:c9:cc:3b:ab:
f8:24:34:a2:e8:84:96:34:3f:e0:6a:9b:f3:1b:f7:73:8e:2a:
54:a6:c2:6f:2d:a5:6a:db:08:96:4d:25:12:04:26:18:03:53:
bf:51:79:1f:95:55:63:c9:7c:0e:be:f0:98:cd:f0:e0:37:3d:
1a:ca:4b:e2:4e:fb:24:4b:a9:14:f3:78:b6:48:d2:2a:a0:f4:
ec:6e:75:1f:51:9a:ff:26:87:ca:d0:96:63:e7:21:74:61:c5:
57:40:d6:99:cf:40:a0:14:03:a6:11:97:69:15:eb:57:bd:b8:
f6:1d:6b:66:b0:4a:18:7c:5b:d8:f6:71:e9:d3:a9:ac:93:72:
d7:12:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:20:50 2025 by rpki-client