Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/n_iEalVeLwjhZN0XvVez7tMQPmQ.roa
File: n_iEalVeLwjhZN0XvVez7tMQPmQ.roa (raw, json)
Hash identifier: y3+W6OOxvX2lEf6SYa5AHAkleaFyFvd1LMN8HyPeIww=
Subject key identifier: 9F:F8:84:6A:55:5E:2F:08:E1:64:DD:17:BD:57:B3:EE:D3:10:3E:64
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 018CC9BBA710A1FEB44BF23E4305BA1C2E7B
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/n_iEalVeLwjhZN0XvVez7tMQPmQ.roa
Signing time: Tue 02 Jan 2024 10:32:47 +0000
ROA not before: Tue 02 Jan 2024 10:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25145
IP address blocks: 77.92.106.0/24 maxlen: 24
77.92.109.0/24 maxlen: 24
77.92.110.0/24 maxlen: 24
77.92.107.0/24 maxlen: 24
77.92.108.0/24 maxlen: 24
77.92.111.0/24 maxlen: 24
77.92.112.0/24 maxlen: 24
77.92.113.0/24 maxlen: 24
77.92.116.0/24 maxlen: 24
77.92.117.0/24 maxlen: 24
77.92.114.0/24 maxlen: 24
77.92.115.0/24 maxlen: 24
77.92.118.0/24 maxlen: 24
77.92.123.0/24 maxlen: 24
77.92.124.0/24 maxlen: 24
77.92.122.0/24 maxlen: 24
77.92.125.0/24 maxlen: 24
77.92.120.0/24 maxlen: 24
77.92.119.0/24 maxlen: 24
77.92.126.0/24 maxlen: 24
77.92.127.0/24 maxlen: 24
77.92.96.0/24 maxlen: 24
77.92.97.0/24 maxlen: 24
77.92.98.0/24 maxlen: 24
77.92.99.0/24 maxlen: 24
77.92.102.0/24 maxlen: 24
77.92.103.0/24 maxlen: 24
77.92.100.0/24 maxlen: 24
77.92.101.0/24 maxlen: 24
77.92.104.0/24 maxlen: 24
77.92.105.0/24 maxlen: 24
213.144.97.0/24 maxlen: 24
213.144.98.0/24 maxlen: 24
213.144.96.0/24 maxlen: 24
213.144.101.0/24 maxlen: 24
213.144.99.0/24 maxlen: 24
213.144.104.0/24 maxlen: 24
213.144.105.0/24 maxlen: 24
213.144.103.0/24 maxlen: 24
213.144.107.0/24 maxlen: 24
213.144.108.0/24 maxlen: 24
213.144.106.0/24 maxlen: 24
213.144.111.0/24 maxlen: 24
213.144.112.0/24 maxlen: 24
213.144.109.0/24 maxlen: 24
213.144.110.0/24 maxlen: 24
213.144.114.0/24 maxlen: 24
213.144.115.0/24 maxlen: 24
213.144.113.0/24 maxlen: 24
213.144.118.0/24 maxlen: 24
213.144.116.0/24 maxlen: 24
213.144.117.0/24 maxlen: 24
213.144.119.0/24 maxlen: 24
213.144.121.0/24 maxlen: 24
213.144.122.0/24 maxlen: 24
213.144.120.0/24 maxlen: 24
213.144.125.0/24 maxlen: 24
213.144.123.0/24 maxlen: 24
213.144.124.0/24 maxlen: 24
213.144.126.0/24 maxlen: 24
213.144.127.0/24 maxlen: 24
185.115.208.0/24 maxlen: 24
185.115.210.0/24 maxlen: 24
185.115.211.0/24 maxlen: 24
31.40.240.0/24 maxlen: 24
31.40.240.0/22 maxlen: 22
31.40.243.0/24 maxlen: 24
31.40.241.0/24 maxlen: 24
31.40.242.0/24 maxlen: 24
2a02:ac87:ac87::/48 maxlen: 48
2a02:ac80:10::/48 maxlen: 48
2a02:ac81::/32 maxlen: 32
2a02:ac82::/32 maxlen: 32
2a02:ac80:c0::/48 maxlen: 48
2a02:ac80:40::/48 maxlen: 48
2a02:ac84::/32 maxlen: 32
2a02:ac80::/29 maxlen: 29
2a02:ac80:7370::/48 maxlen: 48
2a02:ac80:70::/48 maxlen: 48
2a02:ac80:f0::/48 maxlen: 48
2a02:ac87:59cb::/48 maxlen: 48
2a02:ac83::/32 maxlen: 32
2a02:ac80:20::/48 maxlen: 48
2a02:ac80:a0::/48 maxlen: 48
2a02:ac87:5900::/48 maxlen: 48
2a02:ac80:d0::/48 maxlen: 48
2a02:ac80:50::/48 maxlen: 48
2a02:ac80:a00::/48 maxlen: 48
2a02:ac80:f000::/48 maxlen: 48
2a02:ac80:d00::/48 maxlen: 48
2a02:ac80:e00::/48 maxlen: 48
2a02:ac80:b000::/48 maxlen: 48
2a02:ac80:b00::/48 maxlen: 48
2a02:ac80:500::/48 maxlen: 48
2a02:ac80:6000::/48 maxlen: 48
2a02:ac80:e000::/48 maxlen: 48
2a02:ac80:3000::/48 maxlen: 48
2a02:ac80:1000::/48 maxlen: 48
2a02:ac80:200::/48 maxlen: 48
2a02:ac80:300::/48 maxlen: 48
2a02:ac80:600::/48 maxlen: 48
2a02:ac80:7000::/48 maxlen: 48
2a02:ac80:100::/48 maxlen: 48
2a02:ac80:2000::/48 maxlen: 48
2a02:ac80:f00::/48 maxlen: 48
2a02:ac80:c00::/48 maxlen: 48
2a02:ac80:d000::/48 maxlen: 48
2a02:ac80:a000::/48 maxlen: 48
2a02:ac80:400::/48 maxlen: 48
2a02:ac80:c000::/48 maxlen: 48
2a02:ac80:700::/48 maxlen: 48
2a02:ac80:4000::/48 maxlen: 48
2a02:ac80:5000::/48 maxlen: 48
2a02:ac85::/32 maxlen: 32
2a02:ac87::/32 maxlen: 32
2a02:ac80:b0::/48 maxlen: 48
2a02:ac80:30::/48 maxlen: 48
2a02:ac80::/32 maxlen: 32
2a02:ac80:60::/48 maxlen: 48
2a02:ac80:e0::/48 maxlen: 48
2a02:ac86::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:a7:10:a1:fe:b4:4b:f2:3e:43:05:ba:1c:2e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Jan 2 10:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ff8846a555e2f08e164dd17bd57b3eed3103e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:be:49:bd:9f:53:64:98:fa:13:95:d3:d5:
28:d3:67:76:de:25:38:21:7d:ba:45:b1:a4:a5:59:
56:ef:fd:2b:35:48:5a:f4:78:89:b3:46:cd:f9:89:
0d:ea:69:7b:1c:9a:14:14:7a:ef:a2:59:84:76:cb:
87:07:b4:29:c9:c5:e5:77:46:dd:2a:44:14:04:32:
18:f7:eb:6b:03:e8:86:5f:fe:ad:37:f0:60:8b:e0:
8d:46:49:28:db:78:72:67:6c:e9:3c:08:05:3f:b4:
b5:ca:ad:9d:5d:c4:8e:e2:68:88:d7:87:f5:33:9c:
ea:f2:3e:f3:52:89:2b:13:b8:c0:d8:3d:7a:c2:3c:
a8:86:3b:b8:25:72:75:ea:d2:2a:73:28:fd:b3:41:
30:65:30:0a:c7:2a:e7:a4:3c:ec:21:65:79:69:8c:
0a:16:ed:49:b6:db:0f:95:55:de:d9:41:8b:af:4d:
d8:40:43:44:3a:76:6f:32:29:1b:ce:fb:82:c6:98:
2a:1a:16:0b:9a:f9:07:9a:97:5f:59:8e:3b:9f:e1:
85:70:7f:1c:27:4c:88:a3:e5:16:75:8e:bb:04:d6:
3e:87:72:53:06:4e:7c:64:d4:79:86:5f:99:48:0d:
1c:b0:96:1d:a4:bd:29:d9:9c:10:7c:54:15:49:e1:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F8:84:6A:55:5E:2F:08:E1:64:DD:17:BD:57:B3:EE:D3:10:3E:64
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/n_iEalVeLwjhZN0XvVez7tMQPmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.240.0/22
77.92.96.0-77.92.120.255
77.92.122.0-77.92.127.255
185.115.208.0/24
185.115.210.0/23
213.144.96.0/22
213.144.101.0/24
213.144.103.0-213.144.127.255
IPv6:
2a02:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
31:76:63:b1:03:72:a8:77:ca:cc:ab:7c:2c:86:15:f5:97:18:
1d:04:8a:65:fe:c2:49:25:0e:58:ce:9b:9f:78:a2:bc:bf:e9:
90:36:71:00:ea:e8:2d:2f:c1:5f:da:f8:0a:b4:40:26:17:80:
42:79:d4:97:a6:a6:25:d5:e1:89:f9:cb:92:7f:2f:bc:06:96:
f5:f7:df:5d:1d:f1:d1:86:e2:70:e6:df:4b:23:27:60:c4:0e:
ce:60:c1:63:ed:3d:94:5c:5d:9c:50:c9:af:4d:6b:bc:62:4d:
8d:63:49:34:e0:79:26:76:d2:b3:a2:7e:52:28:7c:54:cd:16:
ce:69:4f:23:d1:d8:28:90:39:63:3c:ac:2f:66:d3:70:59:52:
79:e7:0c:82:58:57:7f:e0:12:84:11:40:dc:21:19:21:c7:ea:
77:a6:ab:db:96:ab:ea:70:ca:17:38:5a:17:35:2d:26:4f:2a:
74:00:99:e2:1f:f3:c7:bc:0f:cb:77:52:cb:86:41:0e:28:a5:
5a:01:99:94:c0:b1:15:de:d6:78:ac:a9:49:3d:0e:03:e8:3e:
a9:b1:f2:c2:b0:b6:39:12:7b:2d:b4:b1:ba:1b:fc:13:44:d1:
a0:99:89:42:80:da:7e:86:a4:7a:b8:12:86:17:2c:26:48:b2:
12:bf:e1:53
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAYzJu6cQof60S/I+QwW6HC57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz
Yzg4NWMwHhcNMjQwMTAyMTAzMjQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmY4ODQ2YTU1NWUyZjA4ZTE2NGRkMTdiZDU3YjNlZWQzMTAzZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLO+Sb2fU2SY+hOV09Uo02d23iU4
IX26RbGkpVlW7/0rNUha9HiJs0bN+YkN6ml7HJoUFHrvolmEdsuHB7QpycXld0bd
KkQUBDIY9+trA+iGX/6tN/Bgi+CNRkko23hyZ2zpPAgFP7S1yq2dXcSO4miI14f1
M5zq8j7zUokrE7jA2D16wjyohju4JXJ16tIqcyj9s0EwZTAKxyrnpDzsIWV5aYwK
Fu1JttsPlVXe2UGLr03YQENEOnZvMikbzvuCxpgqGhYLmvkHmpdfWY47n+GFcH8c
J0yIo+UWdY67BNY+h3JTBk58ZNR5hl+ZSA0csJYdpL0p2ZwQfFQVSeFIpQIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFJ/4hGpVXi8I4WTdF71Xs+7TED5kMB8GA1UdIwQY
MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt
ZDcxMmQ0NzM4MDQ2LzEvbl9pRWFsVmVMd2poWk4wWHZWZXo3dE1RUG1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2
LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQCHyjwMAwD
BAVNXGADBABNXHgwDAMEAU1cegMEB01cAAMEALlz0AMEAblz0gMEAtWQYAMEANWQ
ZTAMAwQA1ZBnAwQH1ZAAMA0EAgACMAcDBQMqAqyAMA0GCSqGSIb3DQEBCwUAA4IB
AQAxdmOxA3Kod8rMq3wshhX1lxgdBIpl/sJJJQ5YzpufeKK8v+mQNnEA6ugtL8Ff
2vgKtEAmF4BCedSXpqYl1eGJ+cuSfy+8Bpb1999dHfHRhuJw5t9LIydgxA7OYMFj
7T2UXF2cUMmvTWu8Yk2NY0k04HkmdtKzon5SKHxUzRbOaU8j0dgokDljPKwvZtNw
WVJ55wyCWFd/4BKEEUDcIRkhx+p3pqvblqvqcMoXOFoXNS0mTyp0AJniH/PHvA/L
d1LLhkEOKKVaAZmUwLEV3tZ4rKlJPQ4D6D6psfLCsLY5EnsttLG6G/wTRNGgmYlC
gNp+hqR6uBKGFywmSLISv+FT
-----END CERTIFICATE-----
Generated at Tue May 13 02:29:37 2025 by rpki-client