Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/u--m78T1Qr955giLLsYbxH6Mx38.roa
File: u--m78T1Qr955giLLsYbxH6Mx38.roa (raw, json)
Hash identifier: /B9gX7eI6VSh4sScfiBbvTJzoAts/8kPJH0e3HX0Dy4=
Subject key identifier: BB:EF:A6:EF:C4:F5:42:BF:79:E6:08:8B:2E:C6:1B:C4:7E:8C:C7:7F
Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial: 018D11CD75AE28F33C78EA788DDF05C6FA7C
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/u--m78T1Qr955giLLsYbxH6Mx38.roa
Signing time: Tue 16 Jan 2024 10:24:54 +0000
ROA not before: Tue 16 Jan 2024 10:24:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12479
IP address blocks: 185.147.93.0/24 maxlen: 24
188.208.0.0/20 maxlen: 20
188.208.0.0/22 maxlen: 22
188.208.4.0/22 maxlen: 22
188.208.9.0/24 maxlen: 24
188.208.8.0/24 maxlen: 24
188.208.8.0/22 maxlen: 22
188.208.13.0/24 maxlen: 24
188.208.12.0/22 maxlen: 22
188.208.12.0/24 maxlen: 24
188.208.14.0/24 maxlen: 24
188.208.40.0/21 maxlen: 21
149.74.2.0/23 maxlen: 23
149.74.1.0/24 maxlen: 24
149.74.0.0/24 maxlen: 24
149.74.0.0/22 maxlen: 22
149.74.4.0/23 maxlen: 23
149.74.4.0/22 maxlen: 22
149.74.0.0/16 maxlen: 16
149.74.8.0/22 maxlen: 22
149.74.6.0/23 maxlen: 23
149.74.16.0/22 maxlen: 22
149.74.20.0/22 maxlen: 22
149.74.24.0/22 maxlen: 22
188.126.136.0/22 maxlen: 22
188.126.140.0/22 maxlen: 22
188.126.144.0/22 maxlen: 22
188.126.148.0/22 maxlen: 22
188.126.152.0/22 maxlen: 22
188.126.156.0/23 maxlen: 23
188.126.158.0/23 maxlen: 23
188.126.158.0/24 maxlen: 24
188.126.128.0/19 maxlen: 19
188.126.128.0/22 maxlen: 22
188.126.132.0/22 maxlen: 22
90.160.0.0/12 maxlen: 24
188.93.32.0/22 maxlen: 22
194.58.80.0/23 maxlen: 24
194.58.84.0/22 maxlen: 24
194.58.28.0/23 maxlen: 24
194.58.30.0/24 maxlen: 24
194.58.35.0/24 maxlen: 24
161.199.192.0/22 maxlen: 22
188.240.128.0/21 maxlen: 21
188.240.128.0/20 maxlen: 20
185.132.192.0/22 maxlen: 22
188.240.136.0/22 maxlen: 22
188.240.140.0/22 maxlen: 22
188.239.128.0/19 maxlen: 19
1.178.224.0/21 maxlen: 21
188.239.128.0/21 maxlen: 21
1.178.224.0/19 maxlen: 19
193.124.255.0/24 maxlen: 24
1.178.232.0/21 maxlen: 21
188.239.144.0/22 maxlen: 22
109.205.130.0/23 maxlen: 23
109.205.128.0/21 maxlen: 21
109.205.128.0/23 maxlen: 23
109.205.128.0/22 maxlen: 22
109.205.132.0/22 maxlen: 22
109.205.132.0/23 maxlen: 23
109.205.134.0/23 maxlen: 23
1.178.240.0/21 maxlen: 21
188.239.148.0/22 maxlen: 22
188.239.152.0/23 maxlen: 23
188.239.154.0/23 maxlen: 23
1.178.248.0/21 maxlen: 21
188.239.158.0/23 maxlen: 23
188.239.156.0/23 maxlen: 23
192.157.192.0/22 maxlen: 22
151.252.16.0/21 maxlen: 21
192.157.192.0/18 maxlen: 24
93.117.88.0/21 maxlen: 21
93.117.88.0/22 maxlen: 22
192.157.196.0/22 maxlen: 22
93.117.92.0/22 maxlen: 22
192.157.200.0/21 maxlen: 21
192.157.208.0/21 maxlen: 21
185.124.36.0/22 maxlen: 22
192.157.216.0/21 maxlen: 21
176.104.64.0/19 maxlen: 19
193.124.120.0/24 maxlen: 24
193.124.132.0/24 maxlen: 24
193.124.135.0/24 maxlen: 24
176.10.16.0/21 maxlen: 21
176.10.24.0/21 maxlen: 21
193.124.85.0/24 maxlen: 24
145.1.232.0/21 maxlen: 21
145.1.228.0/22 maxlen: 22
145.1.240.0/20 maxlen: 20
145.1.192.0/20 maxlen: 20
145.1.208.0/20 maxlen: 20
145.1.224.0/22 maxlen: 22
62.36.0.0/16 maxlen: 24
62.36.21.0/24 maxlen: 24
149.74.244.0/22 maxlen: 22
149.74.248.0/22 maxlen: 22
149.74.252.0/22 maxlen: 22
149.74.252.0/23 maxlen: 23
149.74.251.0/24 maxlen: 24
194.135.196.0/22 maxlen: 24
145.1.128.0/19 maxlen: 19
145.1.128.0/17 maxlen: 17
85.48.188.0/24 maxlen: 24
107.183.128.0/17 maxlen: 17
145.1.160.0/19 maxlen: 19
85.48.0.0/12 maxlen: 24
113.203.128.0/18 maxlen: 18
149.74.80.0/22 maxlen: 22
149.74.84.0/22 maxlen: 22
149.74.88.0/22 maxlen: 22
149.74.92.0/22 maxlen: 22
194.135.0.0/24 maxlen: 24
149.74.98.0/23 maxlen: 23
149.74.96.0/20 maxlen: 20
194.135.3.0/24 maxlen: 24
149.74.96.0/23 maxlen: 23
149.74.102.0/23 maxlen: 23
149.74.100.0/23 maxlen: 23
149.74.104.0/23 maxlen: 23
149.74.106.0/23 maxlen: 23
149.74.108.0/23 maxlen: 23
149.74.110.0/23 maxlen: 23
149.74.112.0/21 maxlen: 21
194.135.19.0/24 maxlen: 24
194.135.31.0/24 maxlen: 24
149.74.120.0/21 maxlen: 21
194.135.28.0/23 maxlen: 24
149.74.128.0/22 maxlen: 22
149.74.132.0/22 maxlen: 22
149.74.28.0/22 maxlen: 22
149.74.30.0/24 maxlen: 24
149.74.32.0/20 maxlen: 20
149.74.48.0/21 maxlen: 21
149.74.56.0/22 maxlen: 22
149.74.60.0/22 maxlen: 22
149.74.64.0/21 maxlen: 21
149.74.72.0/21 maxlen: 21
149.74.188.0/22 maxlen: 22
149.74.187.0/24 maxlen: 24
149.74.192.0/22 maxlen: 22
149.74.196.0/22 maxlen: 22
194.135.102.0/24 maxlen: 24
194.135.101.0/24 maxlen: 24
149.74.199.0/24 maxlen: 24
149.74.197.0/24 maxlen: 24
149.74.200.0/22 maxlen: 22
149.74.204.0/22 maxlen: 22
149.74.210.0/23 maxlen: 23
149.74.208.0/22 maxlen: 22
149.74.208.0/23 maxlen: 23
149.74.212.0/22 maxlen: 22
149.74.216.0/22 maxlen: 22
194.135.125.0/24 maxlen: 24
194.135.126.0/23 maxlen: 24
149.74.220.0/22 maxlen: 22
149.74.224.0/22 maxlen: 22
194.135.134.0/24 maxlen: 24
149.74.232.0/22 maxlen: 22
149.74.236.0/22 maxlen: 22
149.74.240.0/22 maxlen: 22
149.74.134.0/24 maxlen: 24
149.74.136.0/22 maxlen: 22
149.74.140.0/22 maxlen: 22
149.74.144.0/22 maxlen: 22
149.74.148.0/22 maxlen: 22
194.135.56.0/22 maxlen: 24
149.74.152.0/21 maxlen: 21
149.74.160.0/22 maxlen: 22
149.74.164.0/22 maxlen: 22
149.74.168.0/22 maxlen: 22
149.74.172.0/22 maxlen: 22
194.135.76.0/22 maxlen: 24
149.74.170.0/24 maxlen: 24
149.74.178.0/24 maxlen: 24
152.41.0.0/17 maxlen: 17
149.74.176.0/22 maxlen: 22
149.74.180.0/22 maxlen: 22
149.74.184.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:cd:75:ae:28:f3:3c:78:ea:78:8d:df:05:c6:fa:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Validity
Not Before: Jan 16 10:24:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbefa6efc4f542bf79e6088b2ec61bc47e8cc77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8e:cd:c0:4e:8a:85:10:b5:f5:cf:a8:e4:54:
00:2e:4d:2a:9d:c9:98:94:1e:db:6a:56:be:91:9b:
11:31:44:0b:50:20:dd:88:bb:8e:14:ea:6d:70:86:
ae:a1:e3:69:2f:64:26:9d:55:bb:da:94:0c:8c:10:
38:c7:4b:e8:40:09:04:f8:5d:d4:0c:a2:c1:9c:45:
43:45:7d:20:51:51:ae:3f:80:f7:d6:92:0a:da:55:
a5:a2:41:45:38:63:06:34:4a:91:83:b1:99:83:d7:
0f:30:e4:51:88:2e:bd:b1:fd:c9:a8:41:1f:15:a2:
d9:27:1d:35:47:39:9e:69:8f:be:ff:e9:d0:66:09:
c3:df:99:fb:cb:9e:d5:51:d2:a8:a5:9e:a9:c5:e0:
e3:ee:ac:77:41:29:fc:61:be:49:14:24:89:c7:3e:
ef:c4:53:51:b5:12:36:7d:34:cd:71:59:49:b4:78:
c8:10:a8:0b:8d:c3:7f:92:cc:90:24:1e:cd:a7:2a:
04:62:25:50:8c:09:7f:48:00:b3:8e:fc:06:e5:f7:
5f:68:04:49:b8:d8:d7:1a:09:c4:a4:07:a6:de:e6:
aa:41:ef:30:61:59:64:22:6b:12:38:aa:fe:40:d7:
e5:2c:b8:2d:8a:06:ea:1d:8d:90:1e:35:ef:53:66:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EF:A6:EF:C4:F5:42:BF:79:E6:08:8B:2E:C6:1B:C4:7E:8C:C7:7F
X509v3 Authority Key Identifier:
keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/u--m78T1Qr955giLLsYbxH6Mx38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.224.0/19
62.36.0.0/16
85.48.0.0/12
90.160.0.0/12
93.117.88.0/21
107.183.128.0/17
109.205.128.0/21
113.203.128.0/18
145.1.128.0/17
149.74.0.0/16
151.252.16.0/21
152.41.0.0/17
161.199.192.0/22
176.10.16.0/20
176.104.64.0/19
185.124.36.0/22
185.132.192.0/22
185.147.93.0/24
188.93.32.0/22
188.126.128.0/19
188.208.0.0/20
188.208.40.0/21
188.239.128.0/19
188.240.128.0/20
192.157.192.0/18
193.124.85.0/24
193.124.120.0/24
193.124.132.0/24
193.124.135.0/24
193.124.255.0/24
194.58.28.0-194.58.30.255
194.58.35.0/24
194.58.80.0/23
194.58.84.0/22
194.135.0.0/24
194.135.3.0/24
194.135.19.0/24
194.135.28.0/23
194.135.31.0/24
194.135.56.0/22
194.135.76.0/22
194.135.101.0-194.135.102.255
194.135.125.0-194.135.127.255
194.135.134.0/24
194.135.196.0/22
Signature Algorithm: sha256WithRSAEncryption
63:a6:8a:ba:2f:d4:dc:a8:31:90:5b:3d:30:8a:cd:47:ca:04:
fd:2e:f6:cc:c3:89:b6:a4:0f:b3:6d:af:55:9a:34:52:82:30:
ae:32:39:95:a9:a7:b4:c7:81:00:41:11:84:c5:26:96:53:f6:
a7:5f:a3:50:14:17:2e:95:b1:88:59:01:03:7f:4d:d3:d4:73:
7c:50:de:ef:44:75:c5:ba:64:10:7c:1c:66:18:23:08:71:b4:
37:59:61:49:fb:72:8d:25:90:75:ee:12:3a:e7:16:97:ee:9b:
0d:33:80:c1:5b:77:f2:48:2a:af:5d:a0:be:7a:ba:82:24:51:
2a:4f:a5:80:0a:86:61:c6:e3:6f:4f:96:4a:fe:b5:49:34:b5:
97:a3:e1:4b:79:ba:6a:8b:4a:28:4a:1c:f1:e0:30:5f:b1:4b:
18:11:18:91:23:3e:4f:2f:1f:a4:a3:e7:e9:c2:55:72:8d:b4:
12:18:d5:ea:b6:fb:5e:9e:79:ea:a5:24:c2:01:b0:3e:b1:de:
25:ed:e5:58:fa:94:9e:da:c2:a7:b9:b0:6c:3b:a6:03:58:31:
47:ea:72:c5:55:e6:1d:99:e1:75:ab:c5:10:66:ad:94:58:67:
cc:43:48:bf:08:22:3c:83:92:b6:66:3a:3a:08:2e:8c:a3:ba:
a7:50:1d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:46:44 2025 by rpki-client