Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RK2QVhZpUmJMqw3pJy-wWWyBibM.roa
File: RK2QVhZpUmJMqw3pJy-wWWyBibM.roa (raw, json)
Hash identifier: qYtgbBnj/RijVwWhCfNvIFCAl/yjyzkG1oPD9/4/sbc=
Subject key identifier: 44:AD:90:56:16:69:52:62:4C:AB:0D:E9:27:2F:B0:59:6C:81:89:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01953740B7D018EF786BBFC94CC860A2D6AC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RK2QVhZpUmJMqw3pJy-wWWyBibM.roa
Signing time: Mon 24 Feb 2025 09:19:02 +0000
ROA not before: Mon 24 Feb 2025 09:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
31.13.224.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.106.0/24 maxlen: 32
94.156.166.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:40:b7:d0:18:ef:78:6b:bf:c9:4c:c8:60:a2:d6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 24 09:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44ad9056166952624cab0de9272fb0596c8189b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:1e:44:81:d0:d3:2f:40:3c:b3:1c:42:c1:
88:d7:d5:b3:88:c6:1f:40:b4:46:60:d2:63:a7:ef:
f1:0f:f3:49:59:c6:bf:a8:f4:94:a4:5f:ef:3e:ad:
c7:fc:f6:0f:c4:34:ed:23:71:96:14:5c:b4:e1:6f:
fe:53:3d:b5:76:16:b3:76:95:43:64:5c:af:df:0c:
3a:6b:d8:5f:50:cb:85:9a:d2:01:6c:9e:e3:78:1c:
2b:ea:81:f7:89:88:fa:91:48:01:19:1c:75:00:9f:
f8:93:b3:2d:88:7b:e0:93:30:a0:e0:41:92:82:f6:
87:22:e5:1c:5c:69:41:78:b3:d2:61:bb:ce:32:ed:
fa:b5:64:dc:9e:76:a4:50:33:47:18:e6:0b:55:06:
ba:ce:c5:f5:cb:99:94:ab:b7:80:63:80:81:b9:8e:
43:dc:e4:b1:bf:47:68:f3:02:4c:55:85:5e:6c:32:
a5:92:48:8d:38:2c:a8:a4:10:2f:68:ed:ad:6e:67:
1f:b5:c9:b8:28:04:59:75:01:2e:5f:8a:27:93:a5:
a3:b9:97:77:24:65:03:f3:95:98:48:ab:8c:5e:2a:
a5:bc:a2:08:4b:48:02:01:f3:2e:dd:69:0d:d2:df:
8a:2e:74:32:d1:51:8e:d5:e1:1c:7c:bd:90:b6:9a:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AD:90:56:16:69:52:62:4C:AB:0D:E9:27:2F:B0:59:6C:81:89:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RK2QVhZpUmJMqw3pJy-wWWyBibM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
31.13.224.0/24
45.9.156.0/23
45.14.164.0/24
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/24
45.149.241.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
79.110.62.0/24
80.76.51.0/24
81.161.230.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0-87.120.127.255
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.50.0/24
93.123.39.0/24
93.123.85.0/24
93.123.109.0/24
94.103.125.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.104.0-94.156.106.255
94.156.166.0/23
94.156.179.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.48.251.0/24
194.49.94.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
97:15:c5:5a:05:7a:7e:c3:e8:9e:b5:36:fb:0e:b5:37:2a:bc:
da:ce:8d:83:a7:98:c6:d9:97:ae:85:61:fc:ba:e3:d3:78:cc:
de:8a:08:45:b1:e1:01:12:15:5f:58:34:69:ee:8a:68:77:94:
8d:20:b6:d2:3b:18:0b:07:53:59:5b:22:23:d0:38:ba:2e:61:
04:b3:0b:74:9d:f3:00:29:80:35:db:e0:39:3f:13:9e:b8:13:
dd:be:27:6c:b6:4b:cb:e2:f5:25:76:80:dc:07:e1:d1:0e:36:
e3:ea:bf:de:80:26:db:08:5c:b8:55:ab:2a:9e:24:2d:6c:9f:
11:7a:b8:13:8d:12:b4:d8:cf:4c:e4:72:8a:7f:71:dd:d4:9f:
23:1f:ae:03:14:e6:79:ad:7f:63:50:eb:f7:4a:22:f1:66:0e:
85:59:9d:95:97:ac:9e:cf:4e:76:77:f0:67:45:e8:2d:9d:c4:
33:3a:f7:92:2a:a5:01:c9:bd:d5:2d:01:9f:0d:f1:ad:49:d4:
d8:b0:d2:45:f9:bc:3b:b1:00:1c:19:41:61:98:7c:b2:51:ce:
cb:66:2c:43:f1:5b:99:a3:5b:65:72:49:5b:28:a9:6a:a7:68:
0b:fa:f1:b4:85:22:aa:13:03:72:80:67:69:88:fa:f9:82:53:
ea:51:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:19:44 2025 by rpki-client