Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Uif_9ltYbakpMoqbJuDRmEBYJTQ.roa
File: Uif_9ltYbakpMoqbJuDRmEBYJTQ.roa (raw, json)
Hash identifier: fGQj56TPgWF5oUkikRMg5/HQRnqR8Qf/rYpHMS4MFeU=
Subject key identifier: 52:27:FF:F6:5B:58:6D:A9:29:32:8A:9B:26:E0:D1:98:40:58:25:34
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188E6957D24E039179B9C8B8683554E2DD0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Uif_9ltYbakpMoqbJuDRmEBYJTQ.roa
Signing time: Fri 23 Jun 2023 04:48:56 +0000
ROA not before: Fri 23 Jun 2023 04:48:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.22.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e6:95:7d:24:e0:39:17:9b:9c:8b:86:83:55:4e:2d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 23 04:48:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5227fff65b586da929328a9b26e0d19840582534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d1:5a:b2:55:09:86:84:5d:0d:d6:30:09:00:
e9:18:32:7c:de:79:cf:6a:2e:28:bd:86:4b:f8:c3:
03:d6:04:57:1a:55:49:78:ef:80:10:59:1e:2d:c1:
6e:12:71:04:ef:f2:b5:ce:d6:c5:ce:5f:f5:44:cb:
92:b8:b4:ce:c5:77:b2:f4:0a:a1:6d:31:50:7b:cb:
13:4a:1f:60:34:f3:8d:65:47:29:f4:03:fd:55:ad:
44:c9:76:4d:d3:a1:f9:b2:8b:21:e6:da:2a:fd:d7:
28:c9:3b:2b:d2:97:d3:f4:70:74:e7:6b:81:a1:6b:
c8:c4:3b:74:0b:fa:7a:bf:42:53:68:57:e4:1a:85:
01:dd:75:44:d2:1e:a2:e4:cb:fc:58:96:9b:ea:e2:
cc:c3:7f:9b:f3:f9:ae:f7:76:2a:f9:a0:6d:ef:ce:
cb:06:c4:b0:14:15:75:59:47:00:9f:77:5f:7a:73:
33:cf:d3:c9:f7:0a:7b:bd:6b:c8:ab:fa:5f:08:d0:
47:b6:da:d5:43:b1:a1:1f:c5:96:00:38:17:9a:68:
64:cb:4e:69:33:76:d2:7e:65:7e:43:85:4b:f7:81:
3d:ed:f6:43:b6:9d:af:43:ae:35:8f:a5:14:0c:5c:
a1:90:e6:6d:4a:23:7f:fb:7a:57:60:a0:b8:98:b2:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:27:FF:F6:5B:58:6D:A9:29:32:8A:9B:26:E0:D1:98:40:58:25:34
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Uif_9ltYbakpMoqbJuDRmEBYJTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0-192.124.191.255
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.16.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0/24
193.124.202.0/24
193.124.204.0/24
194.58.38.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.23.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.105.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.176.0/23
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.22.0/24
195.133.30.0/24
195.133.35.0/24
195.133.74.0/24
195.133.84.0/23
195.133.194.0/23
212.192.8.0/24
212.192.10.0/24
212.192.223.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
6c:73:d2:e4:be:a4:e9:aa:99:20:6e:83:63:57:f7:5c:e0:1c:
cc:a9:16:d2:1c:4f:7d:53:bd:5f:a5:cd:e7:e0:f0:e4:2c:00:
67:8f:b3:79:ae:b7:f6:8d:6d:63:77:19:65:ef:66:e2:d4:4c:
1f:76:cc:86:d8:d5:24:34:05:52:fd:24:68:1c:54:4f:8d:fb:
92:44:37:27:63:f5:a9:41:9e:6c:fb:95:fe:74:31:94:1a:43:
db:12:64:26:4b:7d:61:56:35:f2:97:24:75:09:00:45:06:f3:
cc:07:fd:51:25:e0:24:d7:bc:3e:b2:96:94:d5:ef:5b:11:d9:
95:89:42:74:31:87:de:49:dc:9b:a9:b9:63:23:9e:63:38:b8:
2f:a7:c9:c9:f4:8c:83:dd:4e:4c:78:b0:ec:5c:38:16:a1:24:
ce:af:8d:54:49:09:8f:d9:96:00:42:c1:17:a0:e4:7b:ed:2e:
d0:23:e6:29:f8:0e:68:21:f3:b1:e4:d5:6c:72:14:fa:b1:e5:
99:7e:28:e9:2c:2e:35:74:36:ec:83:97:b6:30:aa:04:56:1c:
1b:2e:22:95:65:71:29:0d:e9:c1:33:0e:c0:8e:31:de:91:50:
29:5a:35:25:87:1f:df:b6:19:43:10:e6:77:c5:35:af:c3:54:
f3:58:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:30:28 2025 by rpki-client