Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JOB4blCdaBniKK2-0mHP3DZjBEI.roa
File: JOB4blCdaBniKK2-0mHP3DZjBEI.roa (raw, json)
Hash identifier: juNulq0UxpqnQPKsJJxPkTlsPIUPS+PMygz6zGU72Vc=
Subject key identifier: 24:E0:78:6E:50:9D:68:19:E2:28:AD:BE:D2:61:CF:DC:36:63:04:42
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01890854BCBBDA7F16EE630DEFC734ABFC1B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JOB4blCdaBniKK2-0mHP3DZjBEI.roa
Signing time: Thu 29 Jun 2023 18:05:18 +0000
ROA not before: Thu 29 Jun 2023 18:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.22.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:08:54:bc:bb:da:7f:16:ee:63:0d:ef:c7:34:ab:fc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 29 18:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24e0786e509d6819e228adbed261cfdc36630442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a2:b2:26:da:0b:82:90:54:30:c2:60:92:00:
15:a0:40:44:fd:0f:89:82:bc:ba:dc:cf:b4:5d:ff:
fd:37:37:f9:8f:78:af:32:dc:00:82:18:4e:4e:8f:
97:fa:8e:77:9a:4a:88:6e:ce:04:42:93:28:e4:ed:
3c:ca:fb:b2:c2:b7:91:91:f1:af:ac:4a:5f:4d:49:
49:0f:1a:10:7e:dc:4f:50:19:dd:1c:9d:41:50:38:
53:0e:ff:34:03:44:2e:1e:c2:ed:21:7e:08:09:b3:
9a:55:9c:d1:40:92:ca:00:0f:0a:7c:df:b9:a8:28:
e4:3f:eb:2c:29:94:8d:fe:aa:59:b1:68:95:ed:64:
ed:ba:3d:01:47:18:cf:16:ed:c6:45:fc:d2:b9:eb:
62:be:92:01:66:ff:3f:12:eb:cb:3f:b8:9e:f8:97:
0b:82:91:61:7e:03:62:4b:d9:f2:6c:fd:25:92:26:
06:19:bb:c4:69:fd:e0:7a:ec:a1:45:af:e8:aa:a3:
ba:f0:05:6d:6a:ad:6b:6f:ec:eb:c9:2a:37:ea:f9:
ed:0f:1e:01:8b:83:23:3d:8a:57:d7:2b:63:40:17:
27:38:30:1e:02:1f:33:d9:5f:1e:d2:38:79:fd:77:
9b:d6:dc:c3:a8:a4:7c:5b:d2:e3:b6:c0:f7:02:31:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E0:78:6E:50:9D:68:19:E2:28:AD:BE:D2:61:CF:DC:36:63:04:42
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JOB4blCdaBniKK2-0mHP3DZjBEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0/24
192.124.191.0/24
193.124.3.0/24
193.124.8.0/24
193.124.16.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0/24
193.124.204.0/24
194.58.42.0/24
194.58.47.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.23.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.177.0-194.87.179.255
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.24.0/24
194.135.46.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.22.0/24
195.133.30.0/24
195.133.35.0/24
195.133.74.0/24
195.133.84.0/23
195.133.194.0/23
212.192.8.0/24
212.192.10.0/24
212.192.223.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
8e:2e:eb:27:9f:e2:73:da:14:cf:00:86:36:53:27:ed:11:5f:
b0:f5:ae:ca:b2:0b:56:a1:60:a8:f8:5e:54:cc:92:57:69:c6:
f4:c9:34:f4:39:17:6e:6d:89:97:e3:5d:32:a3:dc:8d:db:fd:
1c:92:ac:d7:fc:8d:e6:dd:02:f5:7e:aa:01:8d:f2:3b:f2:95:
65:c9:c4:4f:b8:15:9c:57:e2:36:38:8f:4a:78:9d:32:df:82:
49:99:78:6a:7f:5d:a9:f6:d7:93:23:06:23:0e:f1:24:90:6a:
ac:3a:3a:ff:d8:4f:bf:8e:98:1d:95:e7:65:64:e6:a6:a6:fe:
b0:ce:4f:0d:10:45:3c:0a:b4:04:c6:f3:29:9b:3d:62:03:f4:
a1:2f:2a:5a:41:9d:cb:3a:a6:b0:21:bf:50:46:71:f0:0c:fb:
bc:38:5a:ac:79:86:9d:cb:8e:bd:0a:e1:05:48:54:65:a6:a1:
19:be:1b:f9:f1:7f:4f:73:06:e7:2f:4f:be:fe:17:8c:3b:6d:
14:0e:15:0e:bc:8a:16:37:45:cb:5a:aa:fd:44:cc:ed:f6:3f:
51:f6:ff:3b:e8:04:8a:b7:9f:cf:85:3f:17:45:63:11:a8:b8:
49:d0:f8:16:ef:e8:5b:e7:1d:a3:fe:ef:85:9f:b0:c4:ca:c4:
8f:6d:f1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:30:08 2025 by rpki-client