Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EN_VGENge_013av8crIPwguUgNM.roa
File: EN_VGENge_013av8crIPwguUgNM.roa (raw, json)
Hash identifier: b1SaYHk/eBEhZXBkT7/ubiqxEf8s83uDX4lNsDjC6Xs=
Subject key identifier: 10:DF:D5:18:43:60:7B:FD:35:DD:AB:FC:72:B2:0F:C2:0B:94:80:D3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195C7DDB2FF57BBB1672B4935851B3ED91E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EN_VGENge_013av8crIPwguUgNM.roa
Signing time: Mon 24 Mar 2025 11:15:50 +0000
ROA not before: Mon 24 Mar 2025 11:15:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.113.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:dd:b2:ff:57:bb:b1:67:2b:49:35:85:1b:3e:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 24 11:15:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10dfd51843607bfd35ddabfc72b20fc20b9480d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:ba:32:26:c0:23:ae:13:63:cc:18:da:91:
94:e3:27:92:9a:b7:74:ba:c9:a0:f4:6a:39:87:50:
29:9f:3e:65:f4:5a:6a:6d:cb:cc:f7:95:64:55:51:
4a:71:d8:e2:be:1b:4c:bb:29:86:69:ae:79:80:db:
43:40:06:6e:b1:4e:16:c0:e1:92:02:23:5a:33:92:
55:65:8d:e2:dc:0c:27:5e:70:30:6b:ca:50:6c:e6:
75:59:83:2b:e3:74:db:17:57:d5:8c:86:0f:f6:21:
65:36:96:75:fa:0f:d9:a9:e7:6c:71:fd:d5:dd:39:
33:db:77:83:81:6a:58:86:81:f5:fd:8c:c0:51:24:
82:7f:7c:e4:08:16:25:b2:d6:7c:b1:b8:3b:d7:6a:
09:5f:55:29:dc:b7:9a:f0:70:a6:53:b1:61:b1:76:
98:f9:e4:6b:d5:cf:28:5f:c4:fc:89:5d:d6:ba:73:
f2:3b:d9:55:1d:dd:d7:a7:56:06:90:64:08:45:61:
15:53:e0:be:7b:ac:70:f2:44:ff:97:8d:22:ba:d5:
9f:07:d5:9e:00:45:7f:dc:a6:82:13:3c:2f:b1:d0:
f7:27:cf:29:c6:80:66:16:e1:f4:b0:3c:8e:ee:9b:
32:0b:98:0b:87:40:37:6b:45:bc:2f:0d:ef:62:e0:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DF:D5:18:43:60:7B:FD:35:DD:AB:FC:72:B2:0F:C2:0B:94:80:D3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EN_VGENge_013av8crIPwguUgNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.9.156.0/23
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.128.96.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0-87.120.127.255
87.120.166.0/24
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.50.0/24
93.123.109.0/24
94.154.160.0/22
94.156.64.0/21
94.156.113.0/24
94.156.167.0/24
94.156.179.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
193.25.216.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
32:08:55:2e:07:8b:67:70:42:63:09:47:cd:9c:b7:34:e1:75:
5a:e8:d5:84:10:fa:4d:13:17:b5:1f:c9:a6:ad:81:33:b1:bf:
90:10:61:b6:a5:0d:f5:4e:f1:0e:27:a3:c0:84:8a:06:dc:74:
bc:f1:3b:ea:9b:6e:3d:3e:a4:94:6b:00:ea:92:ad:66:9d:d0:
f0:98:b3:78:38:22:94:10:c9:10:b9:a9:ab:7a:d0:fe:df:7a:
f5:1a:b8:67:95:5f:a5:49:ae:2f:2a:c1:2d:d8:77:47:a5:6b:
6e:20:58:ac:51:1d:9f:c8:55:4f:c5:58:99:30:19:83:2a:c6:
ad:b2:63:a5:65:a7:c8:11:12:d6:a3:dc:79:e9:ab:3f:ee:d5:
b5:65:c1:2a:f2:3a:57:be:58:a8:73:e8:77:83:67:31:9e:93:
cb:d6:ee:d2:de:31:cd:b6:15:7d:6a:e4:fa:39:8c:fc:22:de:
d3:21:e5:d5:1d:3e:6b:39:f3:64:20:ce:44:b3:07:28:c8:af:
41:94:d3:c0:89:13:03:5b:65:55:fa:f3:65:3d:b6:69:a0:88:
fb:10:37:9c:d3:9e:79:d7:d1:c2:e9:eb:5d:50:a5:ff:9a:01:
e2:cf:9b:8f:7f:24:7c:49:71:84:6f:91:f0:a4:9f:f2:fe:3b:
6c:ba:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:33:28 2025 by rpki-client