Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/ck42KloRAHLBXD1BDJbyIJcVltI.roa
File: ck42KloRAHLBXD1BDJbyIJcVltI.roa (raw, json)
Hash identifier: oFM8LGoWbcKtDeMrwik5LPUpQQtKmfsZycp9skJU+ps=
Subject key identifier: 72:4E:36:2A:5A:11:00:72:C1:5C:3D:41:0C:96:F2:20:97:15:96:D2
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 0195DD6E5313C9874795504BC303B9DC0F72
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/ck42KloRAHLBXD1BDJbyIJcVltI.roa
Signing time: Fri 28 Mar 2025 15:45:49 +0000
ROA not before: Fri 28 Mar 2025 15:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56655
IP address blocks: 45.88.200.0/24 maxlen: 24
45.88.201.0/24 maxlen: 24
45.88.202.0/24 maxlen: 24
151.216.40.0/22 maxlen: 24
185.14.97.0/24 maxlen: 24
185.125.168.0/22 maxlen: 22
185.181.60.0/22 maxlen: 22
185.243.216.0/24 maxlen: 24
185.243.217.0/24 maxlen: 24
185.243.218.0/24 maxlen: 24
193.200.238.0/24 maxlen: 24
193.243.189.0/24 maxlen: 24
194.32.107.0/24 maxlen: 24
194.110.207.0/24 maxlen: 24
195.16.73.0/24 maxlen: 24
198.140.141.0/24 maxlen: 24
2a03:94e0::/32 maxlen: 32
2a03:94e1::/32 maxlen: 32
2a03:94e2::/32 maxlen: 32
2a03:94e3::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:6e:53:13:c9:87:47:95:50:4b:c3:03:b9:dc:0f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: Mar 28 15:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=724e362a5a110072c15c3d410c96f220971596d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:47:2d:ed:34:f7:7f:23:94:08:a0:70:5d:36:
4b:6d:23:58:aa:a3:a0:1c:a4:c9:24:74:29:eb:26:
d3:76:51:ac:dd:0d:dd:20:80:4f:26:55:4e:ff:42:
ac:c8:da:71:cf:b3:23:4b:74:c5:42:7f:bd:be:8d:
e8:d3:c5:f3:be:bb:5c:cd:c4:ec:f5:0c:53:9d:3c:
be:89:c8:69:12:61:c1:f4:2b:e0:1e:30:67:c0:53:
95:73:cf:ce:27:d3:96:56:de:a1:af:9e:89:a7:10:
dc:21:da:17:01:37:a8:79:d0:53:88:24:dd:8a:9b:
a3:8d:29:9e:5a:82:6f:0a:73:de:b5:8d:b9:c2:22:
95:ca:f7:5f:24:5b:fe:6d:e1:a3:8a:40:6f:22:43:
fa:be:c9:70:33:20:98:b2:ef:0a:21:ef:3f:65:f0:
19:a3:a7:29:4a:04:bf:b7:9c:e4:d3:aa:34:c9:4c:
d4:dd:8c:16:66:63:51:be:88:52:b8:11:cf:ab:be:
7b:36:ac:8d:70:21:02:25:81:16:04:15:d0:91:05:
6b:27:f7:a3:67:ae:c3:40:d7:e3:5c:62:8b:5d:c9:
48:af:90:1f:1c:07:c4:e0:70:b1:e3:95:f7:39:0d:
b8:cb:58:f3:39:09:4f:0d:22:a9:4f:dd:0b:f5:b9:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4E:36:2A:5A:11:00:72:C1:5C:3D:41:0C:96:F2:20:97:15:96:D2
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/ck42KloRAHLBXD1BDJbyIJcVltI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.200.0-45.88.202.255
151.216.40.0/22
185.14.97.0/24
185.125.168.0/22
185.181.60.0/22
185.243.216.0-185.243.218.255
193.200.238.0/24
193.243.189.0/24
194.32.107.0/24
194.110.207.0/24
195.16.73.0/24
198.140.141.0/24
IPv6:
2a03:94e0::/30
Signature Algorithm: sha256WithRSAEncryption
9e:a7:de:2a:7d:2c:85:11:51:49:9d:4f:a8:80:75:92:56:36:
c0:2a:48:cb:4a:a5:21:32:cd:8a:ac:33:70:54:8c:fa:0b:ea:
50:7f:6b:b0:a3:60:73:88:3c:e9:94:3c:5d:59:1c:53:3a:0b:
54:78:25:70:22:77:64:e8:70:51:4b:d9:c3:44:fd:77:c1:6e:
6e:78:98:0d:fa:8e:a6:c1:61:03:49:e7:99:ea:18:18:9c:fe:
3d:a9:69:5f:74:cf:42:c8:9d:6b:60:4b:06:bd:05:ef:98:ed:
4f:3a:14:1a:12:c6:a7:75:27:e3:0f:b0:e9:8c:86:24:2b:fd:
66:a4:48:a5:7e:1e:10:58:a6:fc:48:40:e2:ea:62:31:5c:0a:
dd:ee:df:38:b6:c6:7a:db:0b:16:c6:bd:aa:d0:b5:02:6b:e4:
8a:6c:c1:ce:25:58:79:4c:66:56:a9:d7:10:4b:2e:b6:5a:5c:
69:de:41:56:d5:c0:df:4f:6e:4c:c8:90:62:28:df:b3:53:b0:
db:85:13:ed:c1:e6:59:90:79:d6:35:03:f3:5d:82:9a:c2:90:
4b:62:8c:c6:b7:51:96:86:c1:68:91:2b:7b:d6:ac:8f:38:44:
84:8f:c4:30:f5:c7:e3:dc:11:75:3b:f9:fe:04:4a:6b:6d:2c:
eb:0d:c1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:58:35 2025 by rpki-client