Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Xk4AbqOJHvrD7ScYs_bz2-T08fk.roa
File: Xk4AbqOJHvrD7ScYs_bz2-T08fk.roa (raw, json)
Hash identifier: e18Z2vzD/9KNSjWZgaRvqkHWFGvuUQkZAi4MY84wCQ4=
Subject key identifier: 5E:4E:00:6E:A3:89:1E:FA:C3:ED:27:18:B3:F6:F3:DB:E4:F4:F1:F9
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01979CBCC6C5FDB6360FB9392EC89B077BF2
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Xk4AbqOJHvrD7ScYs_bz2-T08fk.roa
Signing time: Mon 23 Jun 2025 12:21:46 +0000
ROA not before: Mon 23 Jun 2025 12:21:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 46.102.191.0/24 maxlen: 24
86.105.151.0/24 maxlen: 24
86.107.47.0/24 maxlen: 24
86.107.184.0/24 maxlen: 24
86.107.244.0/23 maxlen: 24
89.33.87.0/24 maxlen: 24
89.35.26.0/24 maxlen: 24
89.35.51.0/24 maxlen: 24
89.35.172.0/24 maxlen: 24
89.40.65.0/24 maxlen: 24
89.40.204.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
89.42.158.0/23 maxlen: 24
92.114.104.0/23 maxlen: 24
94.176.3.0/24 maxlen: 24
94.177.58.0/24 maxlen: 24
188.240.17.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:bc:c6:c5:fd:b6:36:0f:b9:39:2e:c8:9b:07:7b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jun 23 12:21:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e4e006ea3891efac3ed2718b3f6f3dbe4f4f1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:b6:60:86:0c:10:96:99:6f:c4:59:41:18:
f4:99:ba:0d:46:5c:3f:5c:78:56:6a:12:7a:97:d3:
78:18:4d:23:1d:e5:12:1b:cc:e1:e8:cd:03:10:f4:
11:0f:66:3d:01:9d:e8:c3:d1:11:ac:08:7e:25:55:
30:34:da:98:28:34:39:05:c4:db:5b:1e:46:f1:81:
e8:85:02:ce:e7:23:c9:96:90:17:ec:e9:b3:a2:91:
ef:5b:50:75:d9:f3:55:f3:d8:31:c8:fb:ee:e4:7d:
f2:4c:48:79:51:91:53:24:e6:9a:21:29:7f:6e:b2:
95:62:51:d5:c9:13:a8:f3:d5:78:8d:39:6e:61:1a:
f4:a8:a8:f0:d2:f2:41:e5:a8:2a:ce:14:f8:d4:28:
45:44:91:c9:59:47:3c:16:f2:4f:89:f0:1e:df:3a:
76:3c:2f:96:79:ad:ba:86:c1:7e:8b:e2:d4:0e:74:
b9:b3:de:fb:b8:98:3f:43:e6:0e:92:5d:bc:e1:92:
3c:46:e9:5d:75:6b:70:72:3d:8c:71:e6:a1:5d:a7:
74:04:92:8e:92:45:c0:75:19:87:37:58:7e:84:51:
cd:4f:20:90:13:b3:cc:f5:3b:d9:84:e3:9d:d6:75:
e0:e8:33:fa:b3:8a:87:d5:e2:2b:df:62:e8:4b:93:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4E:00:6E:A3:89:1E:FA:C3:ED:27:18:B3:F6:F3:DB:E4:F4:F1:F9
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Xk4AbqOJHvrD7ScYs_bz2-T08fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.191.0/24
86.105.151.0/24
86.107.47.0/24
86.107.184.0/24
86.107.244.0/23
89.33.87.0/24
89.35.26.0/24
89.35.51.0/24
89.35.172.0/24
89.40.65.0/24
89.40.204.0/24
89.40.233.0/24
89.42.158.0/23
92.114.104.0/23
94.176.3.0/24
94.177.58.0/24
188.240.17.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:8f:53:3c:a0:cd:ed:2b:16:08:95:07:b8:33:28:c4:36:b9:
48:e7:1e:56:df:31:53:83:e5:8a:a3:91:5e:ca:80:c8:15:13:
f5:a4:2b:91:e8:a4:7c:40:86:3a:ab:d7:ca:f7:cd:d4:a8:3c:
3c:b3:51:0c:b5:72:ee:16:04:5e:b4:97:15:bc:40:04:b7:e6:
99:80:a7:50:6a:5c:33:58:86:ed:ef:e5:67:51:2b:4a:1b:cc:
bd:39:7b:03:eb:ea:3c:14:5d:7c:aa:1a:fd:bb:e4:1f:90:84:
67:0e:a5:cc:52:7b:80:d0:a4:8f:2c:2c:67:a7:17:fb:5f:93:
2c:05:03:90:96:0c:7f:d8:3a:54:6c:db:43:e6:c3:36:62:20:
ab:41:75:6c:44:72:d1:01:bf:22:c5:89:cb:3b:62:4d:d6:d5:
69:c6:15:d6:50:a7:46:9e:f2:40:30:18:b7:c3:e2:f9:95:12:
06:68:56:10:82:e4:e9:ee:5c:a8:a0:9f:ba:80:00:77:73:c0:
a9:77:bf:a6:76:59:34:6f:91:b4:56:0b:c2:f0:51:0c:22:77:
55:ee:5f:17:42:e6:8c:56:1f:60:6a:73:5f:a9:7e:92:d6:5e:
dd:c4:3a:94:67:f1:f6:86:fb:d2:0d:45:8e:ed:2d:7d:c3:a1:
b5:a3:80:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:01:34 2025 by rpki-client