Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BnrgEqFxgWlUicUmYfCzfbXI8ZE.roa
File: BnrgEqFxgWlUicUmYfCzfbXI8ZE.roa (raw, json)
Hash identifier: iH/PR36pRN8bxrCl6biIOHF7GXPFs/8Jg7Z6BihWL5I=
Subject key identifier: 06:7A:E0:12:A1:71:81:69:54:89:C5:26:61:F0:B3:7D:B5:C8:F1:91
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196F2CEB1DCED98397B4A068AACF42EB482
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BnrgEqFxgWlUicUmYfCzfbXI8ZE.roa
Signing time: Wed 21 May 2025 12:25:54 +0000
ROA not before: Wed 21 May 2025 12:25:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2.59.253.0/24 maxlen: 24
5.252.132.0/22 maxlen: 24
31.13.211.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.141.159.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
81.31.192.0/22 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.22.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.47.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.105.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
171.22.73.0/24 maxlen: 24
171.22.74.0/23 maxlen: 24
178.215.227.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
195.178.111.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:ce:b1:dc:ed:98:39:7b:4a:06:8a:ac:f4:2e:b4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 21 12:25:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=067ae012a17181695489c52661f0b37db5c8f191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:f8:33:e3:75:4b:56:5c:f9:f3:4e:fd:46:
08:c2:86:89:03:7b:e0:e3:87:94:28:83:b5:55:2e:
f1:c6:75:00:be:8f:73:49:25:73:a3:b8:83:d6:07:
8a:db:09:0c:5f:41:c0:27:4e:e9:21:ff:fe:e8:d1:
e3:b8:cb:33:81:7a:2d:e8:ef:b8:1d:d3:19:b5:6f:
2f:ea:d2:ca:bc:31:29:c2:94:c6:eb:a8:64:08:fa:
21:f3:b1:75:7e:84:70:65:2a:fa:35:b6:0b:43:05:
93:d9:76:96:8b:ec:00:2a:11:69:79:8e:82:fe:3e:
51:00:7d:46:41:a7:a3:f8:03:98:40:65:81:0b:82:
69:25:3c:6e:4f:03:92:e6:50:d2:21:17:99:c5:66:
b7:18:74:b2:b2:4b:a9:ee:7e:1a:d4:1b:9e:95:3d:
15:1a:0e:b9:9e:61:3e:02:00:eb:27:5f:0c:af:ea:
00:30:62:e7:db:6a:1a:14:0d:13:cd:16:74:40:2a:
12:2f:6a:58:47:1a:a0:8d:99:86:8b:fd:a7:36:94:
17:c5:39:97:e3:0f:c9:93:4c:22:51:8b:18:db:2a:
4c:0d:77:bb:d5:09:bb:da:63:bb:03:97:dc:3f:ab:
fb:33:70:94:5b:d5:fd:9c:42:19:6c:f1:ff:3e:53:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7A:E0:12:A1:71:81:69:54:89:C5:26:61:F0:B3:7D:B5:C8:F1:91
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BnrgEqFxgWlUicUmYfCzfbXI8ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
5.252.132.0/22
31.13.211.0/24
45.9.157.0/24
45.12.253.0/24
45.66.228.0/24
45.66.231.0/24
45.81.39.0/24
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/23
45.151.90.0/24
81.31.192.0/22
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.89.0/24
87.120.126.0/23
87.120.166.0/24
87.121.22.0/24
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.165.0/24
91.92.70.0/24
92.119.196.0/23
92.249.50.0/24
93.123.45.0/24
93.123.47.0/24
93.123.85.0/24
93.123.109.0/24
93.123.117.0/24
93.123.119.0/24
94.103.125.0/24
94.154.160.0/22
94.156.64.0/21
94.156.105.0/24
94.156.167.0/24
94.156.232.0/24
94.156.239.0/24
141.98.1.0/24
141.98.6.0/24
171.22.73.0-171.22.75.255
178.215.227.0/24
185.216.84.0/22
193.25.216.0/24
193.35.18.0/24
193.222.96.0/24
193.222.98.0/24
194.55.186.0/24
194.169.172.0/24
194.169.175.0/24
195.178.111.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
49:49:c2:db:9f:e6:85:69:39:bf:9f:31:82:dd:fa:13:bb:17:
c8:8d:81:26:6c:8b:9c:59:7a:1a:e2:7e:6c:3e:b6:84:03:f8:
b1:a9:a5:3b:1f:e4:36:82:ca:68:64:31:75:3b:29:4a:d2:f3:
69:77:47:cc:6a:88:e3:7a:7d:1c:76:51:02:9a:73:86:e4:17:
42:da:dd:b5:e0:bd:8c:bd:b0:ff:21:0e:ca:37:e0:62:19:1b:
70:f4:54:38:e6:a6:1a:e2:76:bc:63:f3:ed:01:d8:dc:d5:50:
8a:01:54:0c:28:0e:a4:5f:34:b7:63:2c:5e:0c:d2:06:08:8c:
4a:7a:a4:87:de:53:d7:05:37:19:1d:1f:7f:fb:21:13:44:38:
9b:a4:5d:c4:88:95:e7:d3:7e:ab:41:26:ed:b3:0b:7e:8a:86:
2d:aa:ab:ad:f6:3d:28:da:60:dd:f2:48:f9:5e:38:f0:3c:fb:
05:44:a2:f0:4f:2f:cd:b5:fa:50:de:e4:57:ac:28:48:46:7b:
b3:9f:ba:ae:ef:11:c5:73:69:d8:29:c6:62:54:0d:b9:2e:02:
99:c4:52:c6:23:9d:e9:34:f7:32:3d:bb:cc:79:e8:14:0d:6d:
a2:89:c8:24:96:fe:80:28:49:79:9e:e7:39:18:8f:ed:ed:7a:
b2:f6:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:43:34 2025 by rpki-client