Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/MO5XvMdl039fo64DXdPJqvfZquI.roa
File: MO5XvMdl039fo64DXdPJqvfZquI.roa (raw, json)
Hash identifier: Dusj0mvQtpYrPoSc3VoSIzzn+McExDtuDacl++WG4oc=
Subject key identifier: 30:EE:57:BC:C7:65:D3:7F:5F:A3:AE:03:5D:D3:C9:AA:F7:D9:AA:E2
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0197B64769D8D7B6F51713E3EC658B4A8B69
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/MO5XvMdl039fo64DXdPJqvfZquI.roa
Signing time: Sat 28 Jun 2025 11:23:42 +0000
ROA not before: Sat 28 Jun 2025 11:23:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 94.183.192.0/22 maxlen: 22
94.183.196.0/22 maxlen: 22
94.183.200.0/22 maxlen: 22
94.183.204.0/22 maxlen: 22
94.183.208.0/22 maxlen: 22
94.183.212.0/22 maxlen: 22
94.183.216.0/22 maxlen: 22
94.183.220.0/22 maxlen: 22
94.183.224.0/22 maxlen: 22
94.183.228.0/22 maxlen: 22
94.183.232.0/22 maxlen: 22
94.183.236.0/22 maxlen: 22
94.183.240.0/22 maxlen: 22
94.183.244.0/22 maxlen: 22
94.183.248.0/22 maxlen: 22
94.183.252.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:47:69:d8:d7:b6:f5:17:13:e3:ec:65:8b:4a:8b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jun 28 11:23:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30ee57bcc765d37f5fa3ae035dd3c9aaf7d9aae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:bf:9a:77:78:de:e9:3e:4c:78:ca:a2:bf:
90:11:99:cb:b9:c0:d8:9d:0c:5c:0f:b0:6b:73:31:
89:13:2b:83:14:66:92:26:b6:0f:14:28:d4:3e:b2:
46:82:f3:d9:e7:4d:d0:61:76:1f:9b:a0:32:fe:ee:
c3:2e:00:01:75:26:5b:9d:a3:eb:84:c0:26:dd:d1:
be:99:f3:35:0c:96:07:1a:16:9f:5b:0e:43:d4:99:
e5:48:0d:47:47:43:31:02:10:2b:11:ac:ef:56:65:
b5:e3:36:9f:ed:9b:98:82:57:e9:32:c8:9a:f1:ba:
c6:bd:4d:48:76:84:5d:f8:4d:fa:2b:e4:83:c1:b4:
55:c5:a5:36:aa:ad:2d:31:11:ef:cd:6a:00:e1:33:
81:55:ff:25:0e:96:e0:a4:d4:72:57:66:26:fb:38:
17:f0:7f:de:fd:18:fe:5f:66:af:53:18:81:3b:7f:
f4:b2:09:c8:e4:3d:01:94:57:1f:4e:3a:53:6b:8e:
57:9c:88:0d:5c:83:98:93:b9:32:30:83:75:40:15:
de:10:3b:ee:e1:41:63:fd:ad:d4:1d:99:3d:d8:c1:
65:39:38:7d:35:d2:b7:26:96:cf:87:99:3c:f7:d8:
10:6d:58:91:31:eb:53:4e:cc:47:8a:b0:b4:d2:3d:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EE:57:BC:C7:65:D3:7F:5F:A3:AE:03:5D:D3:C9:AA:F7:D9:AA:E2
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/MO5XvMdl039fo64DXdPJqvfZquI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ba:2e:76:a7:95:9d:d4:d4:f2:c4:70:8d:06:bd:74:d2:99:36:
77:83:de:64:4b:f1:74:9c:51:9f:c9:59:6c:2b:74:15:8c:f2:
65:76:f8:11:cc:c9:f7:fd:cf:9b:e1:3e:10:9d:2f:7d:fe:3b:
13:9d:7f:bd:7f:24:11:c4:f4:43:f8:22:80:87:13:b3:d7:17:
8c:59:20:99:22:50:aa:80:bd:81:47:54:86:51:a7:da:56:3f:
cc:b2:03:ca:fc:a5:36:35:f4:89:54:e3:e5:3d:af:12:84:8b:
85:8c:bc:f0:50:2c:03:4c:77:be:9c:3e:93:01:eb:8a:5e:51:
98:7a:66:52:1f:39:e1:c2:00:5e:b6:55:8f:58:c9:81:02:63:
16:fa:ce:79:6f:23:f1:33:85:e6:b2:14:3d:9b:b6:a8:c1:2c:
3a:61:6b:65:8d:a9:2c:cf:35:93:3e:7c:82:8f:c7:74:46:7b:
ca:74:5b:86:a5:c5:14:0e:cb:f6:9b:34:e6:fa:61:d6:02:be:
25:8a:bd:aa:cb:2d:b9:32:b7:d3:b7:0a:d1:79:54:44:8a:71:
9d:69:93:bc:d1:c4:c5:54:a0:dd:ee:c9:aa:9b:96:ea:87:de:
17:3d:dc:16:9f:61:6c:7c:b1:84:1a:9e:ba:8b:1c:2c:4d:24:
95:62:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:26:28 2025 by rpki-client