Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/10ilN49eTshgfXTeZcw9WuWkb7s.roa
File: 10ilN49eTshgfXTeZcw9WuWkb7s.roa (raw, json)
Hash identifier: kqJ509Y0Mb597oisIvfb58M6PaKdSmSDYEiI8YY25J8=
Subject key identifier: D7:48:A5:37:8F:5E:4E:C8:60:7D:74:DE:65:CC:3D:5A:E5:A4:6F:BB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193DF803FA1C65AF71BD688B9E424EB5192
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/10ilN49eTshgfXTeZcw9WuWkb7s.roa
Signing time: Thu 19 Dec 2024 15:19:04 +0000
ROA not before: Thu 19 Dec 2024 15:19:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.157.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.90.88.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
93.123.84.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.179.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:80:3f:a1:c6:5a:f7:1b:d6:88:b9:e4:24:eb:51:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 19 15:19:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d748a5378f5e4ec8607d74de65cc3d5ae5a46fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:da:7d:10:9e:0f:7a:35:16:52:ce:fd:cf:
a4:fa:1c:d3:37:39:19:47:0e:26:6f:d2:51:bc:4d:
25:26:4c:42:5e:ea:d6:e2:d0:34:c2:9c:57:b2:ec:
f8:30:35:50:79:2c:d3:a5:5a:39:54:73:97:21:e2:
49:69:4a:8d:90:62:75:03:50:21:8c:99:00:32:f9:
a4:71:c3:1c:e2:99:7f:5e:cf:35:15:65:21:96:d1:
3a:12:61:a7:ab:1a:53:9c:61:5a:d3:a0:8a:57:b1:
cd:ac:0f:8f:d2:f4:4e:52:d6:0d:67:e2:aa:8f:cd:
2b:66:44:8d:b1:17:48:40:25:9a:fd:f3:0a:d0:88:
53:a5:36:8f:5f:ee:b3:b8:2d:ee:bd:5b:64:45:84:
44:d3:d1:dd:29:03:5e:d5:c9:4b:79:2d:4e:27:6b:
60:58:63:3d:9a:8e:48:cc:39:5f:8f:0c:1d:5a:38:
5b:d8:af:32:0f:f5:72:6a:6c:f5:cd:cc:48:50:5e:
31:ed:6f:bf:f5:bc:77:13:37:0f:be:8f:f1:88:73:
38:b9:ad:1d:13:e4:1c:db:99:1b:8f:31:cb:45:7f:
c5:51:30:7a:23:b8:6f:48:53:fa:eb:03:d1:bc:64:
9e:34:7a:a3:de:1c:99:4c:ce:14:87:eb:6d:11:4c:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:48:A5:37:8F:5E:4E:C8:60:7D:74:DE:65:CC:3D:5A:E5:A4:6F:BB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/10ilN49eTshgfXTeZcw9WuWkb7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.157.0/24
45.12.255.0/24
45.14.164.0/24
45.66.228.0/24
45.88.64.0/24
45.90.88.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
93.123.84.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.179.0/24
141.98.1.0/24
147.78.100.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.226.175.0/24
193.25.216.0/24
194.49.94.0/24
194.180.48.0/23
Signature Algorithm: sha256WithRSAEncryption
26:dd:be:20:e7:c6:68:d7:b2:ed:55:c1:67:88:6a:3d:f6:43:
f1:e7:97:cb:37:32:6d:64:2a:e9:c0:3e:a1:bc:ee:f3:c9:ec:
dd:45:6a:ee:b0:57:d3:12:7c:ec:6a:fb:46:d2:df:c2:b5:ad:
9d:8f:e2:cd:db:cc:24:2f:7d:af:dc:f8:3f:2a:93:f3:ca:a0:
29:7b:77:d1:bf:2d:23:cf:2e:fb:a8:b0:08:89:78:2e:c3:1a:
60:00:a7:69:14:87:6c:0b:3c:28:69:82:65:06:8e:59:f9:e5:
5f:d7:94:85:3f:4c:57:25:c0:d0:87:3c:7d:7e:cc:c1:be:52:
db:a6:4c:07:a7:4b:25:fb:b4:47:08:e6:89:f5:65:ba:50:b4:
17:4c:f3:d7:8d:73:75:ab:f4:e3:4a:01:07:c2:4b:6e:a3:21:
58:7b:6c:35:28:73:3c:2b:4e:ef:26:b0:27:c2:e3:5b:82:c2:
50:09:1c:fa:11:f5:5d:fc:e8:6c:02:17:28:5c:49:53:d1:4c:
99:c9:44:ab:cc:6a:eb:d3:52:e6:7f:6e:d7:13:aa:fb:cd:28:
13:93:90:fd:a5:da:61:50:8a:b1:59:62:f3:0b:8f:94:f0:33:
7a:ba:16:f0:55:ef:84:05:c7:53:80:23:39:e0:42:d8:3e:36:
b1:1e:48:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:39:58 2025 by rpki-client