Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Sx9Rs6-LYdQPtkhHzw_E-VsP8Xw.roa
File: Sx9Rs6-LYdQPtkhHzw_E-VsP8Xw.roa (raw, json)
Hash identifier: zgt8/brlDPOadqr8oSktTCPJLyDOaekEu14n6Rmb28I=
Subject key identifier: 4B:1F:51:B3:AF:8B:61:D4:0F:B6:48:47:CF:0F:C4:F9:5B:0F:F1:7C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01878E30E778969B16C1B3D8D480D2D1BD77
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Sx9Rs6-LYdQPtkhHzw_E-VsP8Xw.roa
Signing time: Mon 17 Apr 2023 07:49:42 +0000
ROA not before: Mon 17 Apr 2023 07:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.25.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:30:e7:78:96:9b:16:c1:b3:d8:d4:80:d2:d1:bd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 17 07:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b1f51b3af8b61d40fb64847cf0fc4f95b0ff17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:75:cb:d0:67:cf:90:9c:94:0d:d2:11:d5:
ac:9f:2f:99:75:7f:12:4a:1b:35:e2:d3:8c:27:83:
03:b9:ca:d1:0d:9a:e3:5f:fc:71:ba:fd:e2:d1:1e:
83:80:c1:08:0c:80:48:c1:c4:6f:8a:6e:1d:6e:10:
38:51:83:4e:1d:96:3f:b9:de:2a:ec:1e:6b:40:eb:
f4:80:b7:3d:25:2e:60:ed:09:ad:63:e0:44:30:44:
02:3e:1e:e3:0e:3b:a9:90:99:e4:b4:33:0c:58:54:
a8:a1:7a:2b:57:cc:a3:2d:b0:c5:a3:3d:ff:fb:a1:
90:ac:02:8a:ca:2f:38:0d:e6:4e:69:61:50:f1:7c:
05:4e:39:93:a8:23:8b:82:c7:c4:af:dd:e0:6a:5c:
10:5b:a0:71:5a:c2:0f:d2:52:54:9b:8d:73:21:c8:
fa:cb:ab:e3:36:29:31:30:cf:fd:57:50:49:b7:76:
58:aa:7e:8c:26:4d:f1:16:ed:4f:b1:f1:49:16:61:
32:fc:a1:f9:3e:5f:1e:30:88:d4:35:49:e4:70:f7:
52:12:a8:bb:3b:ae:9a:3b:6e:b6:42:46:f0:b7:7c:
32:92:64:17:13:19:33:7d:43:9e:6c:55:67:e2:c9:
3c:61:b8:2b:4a:68:45:fd:42:3f:27:27:58:e1:5e:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1F:51:B3:AF:8B:61:D4:0F:B6:48:47:CF:0F:C4:F9:5B:0F:F1:7C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Sx9Rs6-LYdQPtkhHzw_E-VsP8Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.178.0/24
192.124.180.0/22
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.133.0/24
193.124.201.0/24
194.58.38.0/24
194.58.40.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.67.0/24
194.58.154.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0/24
194.87.24.0/22
194.87.37.0/24
194.87.56.0/24
194.87.73.0/24
194.87.77.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.87.246.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/23
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.76.0/24
195.133.84.0/24
195.133.194.0/23
212.192.1.0/24
212.192.4.0/24
212.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fd:45:90:7d:4b:4d:26:1f:57:94:76:cd:c9:50:2c:59:16:
5b:c1:9e:52:13:67:f5:38:37:4a:03:45:a0:39:f4:e0:fa:f8:
4e:f3:2e:01:a0:15:2c:6c:2a:75:ad:9c:ba:8f:69:07:ee:b8:
93:9c:5a:46:c8:50:de:22:f0:08:ad:b2:97:bf:00:2a:3f:8f:
c2:e1:c9:00:60:86:22:9b:a6:3c:81:04:89:e7:f5:cf:40:ac:
71:aa:9c:50:45:c5:bf:1a:6b:4f:11:eb:3d:d3:aa:07:69:f4:
06:4c:95:51:65:da:12:57:be:d7:9f:85:46:fe:c5:47:16:fa:
1b:25:56:3f:2c:02:cc:86:e7:bf:25:92:1a:04:1a:b4:9c:14:
4a:51:d5:26:73:35:ee:5b:1b:99:76:4d:70:5d:92:42:b0:41:
84:04:00:32:ad:f5:05:e0:73:2e:2a:f1:ff:68:2c:1e:ed:0f:
d8:33:51:b2:dd:8e:a2:74:d1:79:45:97:7c:89:fa:91:0c:58:
37:bc:a0:7d:48:10:7c:bf:9c:44:c5:fa:9c:f7:70:3b:69:d9:
16:59:b6:63:48:31:e4:d2:3c:2d:71:44:1b:a7:67:88:e2:5f:
a0:c9:66:84:42:ee:c4:7d:88:7e:91:17:33:74:be:cb:bb:94:
cf:7e:61:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:58:30 2025 by rpki-client