Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/n5tIzDfY8ahrcyyh7MT0FCuu9cQ.roa
File: n5tIzDfY8ahrcyyh7MT0FCuu9cQ.roa (raw, json)
Hash identifier: 9dYQFHs0YPVnni02pmk6QOM6VtcjcRkZtFc1nLwI6ns=
Subject key identifier: 9F:9B:48:CC:37:D8:F1:A8:6B:73:2C:A1:EC:C4:F4:14:2B:AE:F5:C4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194466E629AFA6E7569E1B7BF192D07B7CE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/n5tIzDfY8ahrcyyh7MT0FCuu9cQ.roa
Signing time: Wed 08 Jan 2025 15:00:26 +0000
ROA not before: Wed 08 Jan 2025 15:00:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 62.76.234.0/24 maxlen: 24
62.76.239.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
192.124.176.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.124.22.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.87.58.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.67.0/24 maxlen: 24
195.133.92.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.221.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:6e:62:9a:fa:6e:75:69:e1:b7:bf:19:2d:07:b7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 8 15:00:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f9b48cc37d8f1a86b732ca1ecc4f4142baef5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:cb:d5:49:db:c0:36:2a:25:05:cd:ad:51:
da:2e:50:11:3e:c5:e0:31:57:d9:53:8f:63:42:65:
e3:de:cf:0d:da:92:f6:56:5c:da:3d:c9:ad:21:4f:
ff:8d:1d:6d:fd:ce:97:98:d6:db:5f:7a:c8:22:6c:
45:3d:f8:cd:37:10:98:5c:2c:de:56:a5:04:cb:be:
e8:6e:1b:5d:3e:a5:02:84:fa:5f:00:82:1c:83:66:
f6:7e:0d:48:33:13:20:59:84:04:4d:bd:01:25:89:
28:de:12:e1:e3:7f:3e:cd:c7:1b:e1:cd:11:7c:2b:
fe:5a:04:63:68:8c:23:72:a2:e7:94:ba:81:f5:0a:
56:8f:63:b6:06:45:2b:82:92:c0:81:95:96:20:47:
a4:26:69:3e:24:e5:22:25:be:30:90:30:2a:aa:d8:
c4:cf:55:0a:f2:ba:dc:c5:48:e4:bb:46:02:bb:6c:
70:5b:59:c8:00:8d:fd:cb:61:a4:e5:79:de:9e:32:
25:a8:73:fa:36:61:bf:3b:33:98:0f:4e:b5:2f:e0:
23:89:c6:4f:cc:91:e5:4f:6f:92:a9:e5:43:a8:f2:
a5:3e:4d:26:f9:96:7f:c5:e7:ab:45:15:96:34:63:
5f:84:cf:6d:7b:d5:fc:0f:ac:98:4c:cb:bd:dc:27:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9B:48:CC:37:D8:F1:A8:6B:73:2C:A1:EC:C4:F4:14:2B:AE:F5:C4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/n5tIzDfY8ahrcyyh7MT0FCuu9cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.234.0/24
62.76.239.0/24
185.72.8.0/24
192.124.176.0/24
192.124.209.0/24
193.124.22.0/24
193.124.41.0/24
193.124.46.0/24
193.124.49.0/24
194.58.34.0/24
194.58.38.0-194.58.40.255
194.58.44.0-194.58.46.255
194.58.59.0/24
194.58.66.0/24
194.58.68.0/24
194.87.10.0/24
194.87.17.0-194.87.18.255
194.87.23.0/24
194.87.30.0/24
194.87.39.0/24
194.87.47.0/24
194.87.58.0/24
194.87.82.0/24
194.87.105.0/24
194.87.108.0/24
194.87.178.0/24
194.87.198.0/24
194.87.227.0/24
194.87.230.0/24
194.87.240.0/24
194.87.245.0/24
195.133.67.0/24
195.133.92.0/24
212.192.214.0/23
212.192.221.0/24
212.192.223.0/24
212.193.1.0-212.193.2.255
212.193.6.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5b:5b:15:72:d1:14:18:f0:76:e2:3a:f1:52:cd:a5:15:56:
d1:07:7c:d2:a0:37:74:23:f0:df:33:36:71:cb:e8:88:c5:ed:
60:78:5a:88:27:3f:d6:77:80:02:8f:60:01:1e:0a:4b:4f:64:
7e:0c:7c:e2:38:4b:28:3d:d8:9a:f1:77:7c:aa:d7:67:1c:6e:
54:48:07:b0:8e:9b:d1:28:3b:3b:85:45:1a:4b:0d:01:6c:19:
52:bb:f8:ac:0e:90:72:37:ce:1d:bf:4e:54:cf:f3:6c:8a:bd:
c9:23:d8:c4:f3:2a:08:55:f6:31:92:d4:cb:73:84:75:bf:a5:
3f:90:5d:85:0c:6f:5c:b7:9f:96:b1:2f:71:a5:dc:d8:ed:dd:
d7:61:1e:a9:7f:3b:22:4f:97:25:8f:b6:2b:ec:b6:9d:09:52:
05:09:bc:f8:70:6e:c0:1f:7f:cd:d5:b3:90:03:4a:d6:8b:d3:
66:dd:e3:b5:1d:4d:e8:f7:7e:1b:32:4c:c1:41:3a:80:e1:2b:
47:38:4c:e6:29:6d:15:d3:71:d5:d8:7b:39:19:1e:88:c3:7f:
b7:e1:5b:f5:f1:c6:53:be:d8:0d:49:55:83:2f:c4:6f:34:22:
c8:1a:3f:3f:7a:94:8b:15:a4:dd:53:fa:65:c0:2a:f9:5a:6b:
99:ab:f9:5f
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgISAZRGbmKa+m51aeG3vxktB7fOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwMTA4MTUwMDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjliNDhjYzM3ZDhmMWE4NmI3MzJjYTFlY2M0ZjQxNDJiYWVmNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JzL1UnbwDYqJQXNrVHaLlARPsXg
MVfZU49jQmXj3s8N2pL2VlzaPcmtIU//jR1t/c6XmNbbX3rIImxFPfjNNxCYXCze
VqUEy77obhtdPqUChPpfAIIcg2b2fg1IMxMgWYQETb0BJYko3hLh438+zccb4c0R
fCv+WgRjaIwjcqLnlLqB9QpWj2O2BkUrgpLAgZWWIEekJmk+JOUiJb4wkDAqqtjE
z1UK8rrcxUjku0YCu2xwW1nIAI39y2Gk5XnenjIlqHP6NmG/OzOYD061L+AjicZP
zJHlT2+SqeVDqPKlPk0m+ZZ/xeerRRWWNGNfhM9te9X8D6yYTMu93CdlDwIDAQAB
o4IDETCCAw0wHQYDVR0OBBYEFJ+bSMw32PGoa3MsoezE9BQrrvXEMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbjV0SXpEZlk4YWhyY3l5aDdNVDBGQ3V1OWNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJQYIKwYBBQUHAQcBAf8EggEUMIIBEDCCAQwEAgABMIIB
BAMEAD5M6gMEAD5M7wMEALlICAMEAMB8sAMEAMB80QMEAMF8FgMEAMF8KQMEAMF8
LgMEAMF8MQMEAMI6IjAMAwQBwjomAwQAwjooMAwDBALCOiwDBADCOi4DBADCOjsD
BADCOkIDBADCOkQDBADCVwowDAMEAMJXEQMEAMJXEgMEAMJXFwMEAMJXHgMEAMJX
JwMEAMJXLwMEAMJXOgMEAMJXUgMEAMJXaQMEAMJXbAMEAMJXsgMEAMJXxgMEAMJX
4wMEAMJX5gMEAMJX8AMEAMJX9QMEAMOFQwMEAMOFXAMEAdTA1gMEANTA3QMEANTA
3zAMAwQA1MEBAwQA1MECAwQA1MEGMA0GCSqGSIb3DQEBCwUAA4IBAQAEW1sVctEU
GPB24jrxUs2lFVbRB3zSoDd0I/DfMzZxy+iIxe1geFqIJz/Wd4ACj2ABHgpLT2R+
DHziOEsoPdia8Xd8qtdnHG5USAewjpvRKDs7hUUaSw0BbBlSu/isDpByN84dv05U
z/Nsir3JI9jE8yoIVfYxktTLc4R1v6U/kF2FDG9ct5+WsS9xpdzY7d3XYR6pfzsi
T5clj7Yr7LadCVIFCbz4cG7AH3/N1bOQA0rWi9Nm3eO1HU3o934bMkzBQTqA4StH
OEzmKW0V03HV2Hs5GR6Iw3+34Vv18cZTvtgNSVWDL8RvNCLIGj8/epSLFaTdU/pl
wCr5WmuZq/lf
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:04 2025 by rpki-client