Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CnRyIPTa2hStAfb7k3CqSU9y_uA.roa
File: CnRyIPTa2hStAfb7k3CqSU9y_uA.roa (raw, json)
Hash identifier: 9QFz57yqNEvzVgjKzysRsFHlwv/hjDbU2GvQh/RrS60=
Subject key identifier: 0A:74:72:20:F4:DA:DA:14:AD:01:F6:FB:93:70:AA:49:4F:72:FE:E0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01944F600165E2C5F7476C3D657578437F65
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CnRyIPTa2hStAfb7k3CqSU9y_uA.roa
Signing time: Fri 10 Jan 2025 08:41:19 +0000
ROA not before: Fri 10 Jan 2025 08:41:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.9.157.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.84.0/23 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.102.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.237.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:60:01:65:e2:c5:f7:47:6c:3d:65:75:78:43:7f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 10 08:41:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a747220f4dada14ad01f6fb9370aa494f72fee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:5a:7f:17:f6:62:3c:01:14:5a:d0:5a:fd:
6a:30:5c:19:0b:51:5f:f9:da:ff:1f:a8:17:d3:e1:
31:49:54:35:a2:8f:9e:38:3e:1c:80:ba:c9:18:53:
63:6d:b1:44:9f:c5:ed:83:0d:15:b0:0c:a7:90:4f:
fd:8b:6b:b9:bc:f3:2d:81:73:e4:89:0e:27:f1:35:
cf:f5:c3:96:62:41:39:f5:e2:c3:b3:4f:9d:69:2e:
21:6d:bb:ab:7a:e6:aa:77:ea:5a:3b:fe:89:d8:0a:
84:88:e2:bb:66:b6:ae:4e:b1:3a:e1:f7:3c:93:61:
86:89:65:0c:70:ca:05:b8:48:3a:5a:72:47:93:1f:
19:e0:27:57:3e:fc:b9:7e:4c:e7:a7:ae:dd:74:95:
8d:e6:6b:db:d6:ad:b7:bc:f3:fb:8b:36:2f:a5:f9:
1d:77:1b:ad:b9:0e:e5:53:29:25:dd:fc:d2:02:68:
cf:06:fd:3f:d4:cf:e1:36:fd:bd:c0:07:d7:4b:b5:
21:d7:6b:b4:49:79:8c:56:d5:f9:2e:23:b3:e5:d4:
53:3e:1d:76:3b:af:d7:c1:95:a9:8a:48:19:1d:98:
9d:ae:bc:7e:fa:02:dd:38:44:2d:42:35:dd:bd:c6:
d8:58:e4:13:91:9e:ec:79:74:40:e1:27:f1:c6:c9:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:74:72:20:F4:DA:DA:14:AD:01:F6:FB:93:70:AA:49:4F:72:FE:E0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CnRyIPTa2hStAfb7k3CqSU9y_uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.157.0/24
45.12.255.0/24
45.14.164.0/24
45.66.228.0/24
45.66.230.0/24
45.88.64.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
79.110.62.0/24
81.161.239.0/24
83.219.97.0/24
84.54.48.0/24
85.209.133.0/24
87.120.84.0/24
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.84.0/23
87.121.87.0/24
87.121.105.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.48.0/24
92.249.50.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.102.0/24
94.156.179.0/24
94.156.248.0/24
95.214.27.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.237.0/24
185.216.71.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.49.94.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
30:fb:71:08:a0:c4:e4:60:9b:71:b0:92:85:33:73:09:5b:cd:
27:04:1f:44:b7:31:39:a3:5b:89:43:78:4b:32:c6:6b:d8:25:
07:7d:a7:45:b4:d9:ed:ef:08:03:8c:f5:25:19:9e:fd:42:48:
fb:c6:cf:6e:da:12:29:da:8c:a0:ee:9c:fa:63:17:50:50:21:
88:66:63:9e:28:eb:8a:28:e2:5d:a8:3d:a4:a1:38:7a:98:e0:
6a:72:3d:7d:dc:f6:f8:91:fd:44:a4:44:f6:21:bc:64:7a:15:
9c:2f:02:64:b9:08:03:4d:ec:95:0f:3b:57:ac:d7:4d:99:cc:
8d:3f:ab:85:92:5e:17:b0:8d:06:82:f6:94:a2:96:a4:b0:bd:
04:dd:94:09:9d:3d:42:21:07:f5:b4:3f:24:9c:59:d7:27:da:
98:f9:dd:30:8a:0a:ef:b6:bc:7a:cc:76:70:91:36:bd:8b:e9:
6a:80:63:86:19:54:db:6a:bd:27:b3:a0:fe:6e:3b:e0:31:e0:
ca:ee:fb:f2:f0:32:5c:e4:d4:c9:e8:63:6d:6a:83:a4:b4:29:
ba:b9:9a:8f:86:ef:aa:67:2c:c0:7d:2e:5f:18:91:01:1f:00:
b2:95:16:a4:8a:59:33:2f:41:7c:ef:1a:59:74:6c:48:0d:69:
0b:26:59:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:31 2025 by rpki-client