Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/kR26kD_jcfmpfwBRmeaERO8IVGs.roa
File: kR26kD_jcfmpfwBRmeaERO8IVGs.roa (raw, json)
Hash identifier: GsV1wk35dZGxKTol8ZZny2JONGhVUMi+jQ2TBSFyXsY=
Subject key identifier: 91:1D:BA:90:3F:E3:71:F9:A9:7F:00:51:99:E6:84:44:EF:08:54:6B
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 01975E253C56FBD0BD09C528DF0F67FBB653
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/kR26kD_jcfmpfwBRmeaERO8IVGs.roa
Signing time: Wed 11 Jun 2025 08:39:47 +0000
ROA not before: Wed 11 Jun 2025 08:39:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 45.156.22.0/24 maxlen: 32
45.156.23.0/24 maxlen: 32
45.156.24.0/24 maxlen: 32
45.156.25.0/24 maxlen: 32
45.156.27.0/24 maxlen: 32
178.255.222.0/24 maxlen: 32
185.92.180.0/24 maxlen: 32
185.92.181.0/24 maxlen: 32
185.92.182.0/24 maxlen: 32
185.92.183.0/24 maxlen: 32
193.176.153.0/24 maxlen: 32
193.176.190.0/24 maxlen: 32
194.36.170.0/24 maxlen: 32
194.36.171.0/24 maxlen: 32
194.36.209.0/24 maxlen: 32
194.116.214.0/24 maxlen: 32
194.116.215.0/24 maxlen: 32
194.116.216.0/23 maxlen: 23
194.116.216.0/24 maxlen: 32
194.116.217.0/24 maxlen: 32
194.120.24.0/24 maxlen: 32
194.120.116.0/24 maxlen: 32
213.232.204.0/24 maxlen: 32
2a13:7c00::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:25:3c:56:fb:d0:bd:09:c5:28:df:0f:67:fb:b6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Jun 11 08:39:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=911dba903fe371f9a97f005199e68444ef08546b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:aa:d3:13:8f:42:76:e7:cf:0a:d1:85:f0:
b9:35:13:10:cb:ce:88:7c:65:31:a2:75:71:d1:89:
3f:3f:9b:f6:2d:b9:d5:0f:20:50:66:6d:80:ef:3d:
d7:de:b9:a0:4b:17:6d:d9:d1:e2:20:2d:7e:18:60:
ea:88:74:56:90:2d:99:a9:5d:25:87:92:50:e0:ca:
a1:93:5d:a9:d5:54:ac:79:8a:4a:ce:e8:8b:4e:a7:
b6:2b:2f:5a:e7:50:57:54:a8:84:45:bb:c3:27:68:
8d:dd:07:af:7e:37:7f:1c:9a:1d:18:54:60:0a:71:
f5:21:da:bc:fc:13:09:8d:13:ec:4c:4b:53:69:f0:
f3:f4:30:f6:d5:b9:e7:f5:51:12:cb:be:91:43:e0:
bf:48:e4:25:33:db:fb:ae:96:ac:38:19:7c:6a:47:
e3:7f:ff:46:3c:9c:41:d8:84:46:d1:c3:1c:d6:b3:
b8:4c:82:99:9a:d2:de:15:a3:33:76:e7:70:0d:53:
a7:bb:3b:db:24:06:eb:4b:7f:c7:bd:6c:a3:47:65:
34:58:26:49:75:4c:b5:65:cc:2e:64:cf:40:94:23:
6c:49:a7:7a:59:fb:09:b3:87:69:04:1c:43:14:85:
5e:2b:00:9b:b1:0f:af:2a:01:b1:dd:fb:3c:21:c1:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1D:BA:90:3F:E3:71:F9:A9:7F:00:51:99:E6:84:44:EF:08:54:6B
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/kR26kD_jcfmpfwBRmeaERO8IVGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.22.0-45.156.25.255
45.156.27.0/24
178.255.222.0/24
185.92.180.0/22
193.176.153.0/24
193.176.190.0/24
194.36.170.0/23
194.36.209.0/24
194.116.214.0-194.116.217.255
194.120.24.0/24
194.120.116.0/24
213.232.204.0/24
IPv6:
2a13:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
1f:33:63:71:5f:42:6a:e1:24:fd:53:a1:4e:97:4b:6f:69:03:
f0:99:3d:78:4f:10:86:71:07:26:44:61:f3:14:d4:a6:c7:00:
b2:39:bf:e7:07:f0:c0:79:53:46:25:fd:24:3a:ea:b0:c8:48:
03:39:70:62:61:fb:a2:96:52:f7:84:6e:3e:a6:ed:8b:22:cf:
7a:62:9a:21:83:e1:01:e0:97:1d:e2:85:e2:06:a5:18:c8:db:
4f:9a:26:90:94:7c:5b:6a:32:42:dc:85:7f:e4:14:8c:42:6c:
61:5b:2f:0b:43:72:f9:65:99:7b:ff:5d:19:e1:48:8e:c2:99:
87:2c:9e:6b:92:dd:35:31:40:87:11:60:56:db:57:52:3f:ec:
24:a5:1f:b2:1e:c5:e3:33:5a:c1:bb:58:0b:37:2e:4a:4d:06:
cd:96:34:51:77:17:55:29:f7:4e:08:52:e9:a3:37:61:db:95:
c5:70:e7:57:2e:37:c6:8b:01:1d:59:5c:4d:51:72:a3:18:2d:
3c:36:3d:a0:29:37:29:15:24:f7:3b:24:5c:7b:25:52:59:4e:
a5:c5:25:db:bc:bc:79:a8:c3:5c:f6:30:64:3c:82:57:1f:91:
21:5f:d8:81:9b:8d:bd:bd:dd:81:34:42:14:60:58:83:06:47:
bc:e1:af:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:10:48 2025 by rpki-client