Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EfzzGtU4XonCimvJHZNSuRxKZj4.roa
File: EfzzGtU4XonCimvJHZNSuRxKZj4.roa (raw, json)
Hash identifier: LqM1fAeaiNQTtk9a6NxC6MlZ9zU0LPUnSXZCbwk0f+4=
Subject key identifier: 11:FC:F3:1A:D5:38:5E:89:C2:8A:6B:C9:1D:93:52:B9:1C:4A:66:3E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195A29295F6DB57A389838B402921263A3C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EfzzGtU4XonCimvJHZNSuRxKZj4.roa
Signing time: Mon 17 Mar 2025 05:27:50 +0000
ROA not before: Mon 17 Mar 2025 05:27:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.106.0/24 maxlen: 32
94.156.166.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:92:95:f6:db:57:a3:89:83:8b:40:29:21:26:3a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 17 05:27:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11fcf31ad5385e89c28a6bc91d9352b91c4a663e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:2a:e5:84:c1:35:6f:10:3a:5e:2d:20:70:
bc:18:b1:11:e4:2f:7e:04:88:29:a9:95:9b:c2:53:
96:17:8f:77:aa:65:3c:4a:90:f7:54:58:cd:c0:1c:
7a:64:b9:8d:c6:fd:b9:ca:07:00:ca:39:27:52:ff:
01:6c:a2:f8:a6:bc:80:9d:33:bd:09:6f:6b:61:cc:
f0:e5:df:2d:0d:47:d2:1f:6a:57:80:40:53:ea:cc:
34:63:be:e7:3c:b5:73:79:46:e6:e3:52:da:1a:9e:
04:e0:5e:fb:54:7d:52:07:d2:ad:9a:fc:49:75:17:
b2:eb:3e:ba:af:74:32:aa:73:4f:2c:7f:75:44:d4:
65:be:6e:92:d0:81:2b:13:ca:63:3d:17:f5:b8:47:
81:1d:d1:91:79:d1:ac:d1:ce:c8:99:aa:46:56:b1:
68:f6:ce:22:06:9d:6c:05:8e:0d:d6:24:da:9e:09:
bd:24:df:96:2b:b6:20:19:f6:75:8c:52:c8:3f:62:
ef:3a:58:b8:58:5c:3d:41:9f:25:fe:88:d2:d3:80:
7b:de:4a:49:58:d2:45:c1:e3:b4:ba:1c:84:90:5f:
55:01:46:de:28:a2:16:31:46:4a:4f:f8:c1:4e:d7:
00:22:bc:b2:18:73:a5:ef:0c:75:5c:28:a9:84:f0:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FC:F3:1A:D5:38:5E:89:C2:8A:6B:C9:1D:93:52:B9:1C:4A:66:3E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EfzzGtU4XonCimvJHZNSuRxKZj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.9.156.0/23
45.14.164.0/24
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
79.110.62.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0-87.120.127.255
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.50.0/24
93.123.109.0/24
94.154.160.0/22
94.156.64.0/21
94.156.104.0-94.156.106.255
94.156.166.0/23
94.156.179.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e2:2d:1c:c9:09:3d:a4:e0:6c:5a:66:48:73:2c:fa:de:f6:
2e:8c:8e:c7:e3:7a:aa:84:3d:81:13:7f:6a:d4:d8:55:fa:2b:
27:d9:87:a7:b7:92:74:2a:5e:0c:69:52:0b:b0:4b:8b:1a:bb:
e6:41:98:66:e4:41:fa:1c:71:4a:5a:2e:df:62:09:e8:0b:14:
66:79:47:fe:38:2d:d3:54:c5:65:a5:68:ae:76:32:b5:44:a4:
af:f5:11:57:b4:fa:af:d5:08:91:d4:03:01:99:ef:a6:d3:25:
e3:b9:90:71:78:2d:89:86:19:e6:92:f7:9d:ff:b8:17:a1:37:
32:a2:8b:5a:aa:cd:d5:b7:27:e4:e0:7f:d6:b2:0b:2f:ae:16:
0a:99:e9:33:de:e1:6f:5e:1d:4c:a8:97:bc:d8:21:76:43:6e:
65:30:43:3a:81:dc:19:c7:aa:38:b1:26:1c:ae:e2:80:2d:be:
92:2b:b9:c9:4a:50:2c:f7:86:98:ad:93:c5:a3:11:09:0b:29:
db:c8:89:bf:25:d6:05:ac:7d:13:e4:67:30:7e:c5:e3:c6:4e:
49:8e:ef:81:9f:7b:c8:e6:73:c8:1a:f9:d3:a9:95:66:ea:6b:
20:0d:11:45:1c:c4:1e:8b:33:73:6e:1c:31:7d:4f:cc:34:e4:
4a:51:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:51:24 2025 by rpki-client