Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T9IpQip7xEwNwcgSlud7Re4jNlg.roa
File: T9IpQip7xEwNwcgSlud7Re4jNlg.roa (raw, json)
Hash identifier: BmVRIVfvIlpdTYhbbjwJzZ1XvTQTwd38SWzzqHjCwZ4=
Subject key identifier: 4F:D2:29:42:2A:7B:C4:4C:0D:C1:C8:12:96:E7:7B:45:EE:23:36:58
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194B17B797B90811B13A7C0CC9A026E3260
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T9IpQip7xEwNwcgSlud7Re4jNlg.roa
Signing time: Wed 29 Jan 2025 09:54:06 +0000
ROA not before: Wed 29 Jan 2025 09:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.179.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.237.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:7b:79:7b:90:81:1b:13:a7:c0:cc:9a:02:6e:32:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 29 09:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fd229422a7bc44c0dc1c81296e77b45ee233658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:51:ab:d8:18:02:9c:7c:42:d7:3a:bc:55:
79:e4:4b:a1:2e:80:cb:66:0a:87:9e:c3:47:b1:e0:
1d:d9:02:2a:aa:bd:f1:71:84:60:04:ab:f0:d8:30:
38:a6:a5:2d:28:ff:b4:bf:ed:35:71:f0:ce:69:96:
ca:70:06:1b:b3:b2:66:5a:a9:cd:0a:3f:1e:ca:89:
c6:c0:19:03:44:37:c6:15:0b:fc:0a:41:3d:91:2e:
65:4f:4a:3c:9a:1a:39:40:0d:ac:8c:df:3e:99:bc:
e8:5a:70:cf:39:cc:9e:4b:b6:d9:4a:f3:db:eb:12:
08:ce:da:ae:00:63:33:e0:7e:71:97:be:31:0f:59:
dd:e9:8b:f6:e4:82:fe:d3:18:48:40:50:1e:fe:34:
ca:37:ea:80:09:44:c8:f7:d3:c0:18:b3:2a:9b:37:
44:1a:a6:f5:8e:75:bd:42:92:ad:be:ad:91:59:eb:
95:32:83:99:c0:cf:23:f3:f7:f2:2e:2f:5e:02:74:
01:77:ec:b3:a7:67:bf:e5:2f:95:87:71:d8:7c:e7:
7f:62:ff:36:a6:df:91:68:7e:d0:24:cf:48:68:77:
85:e7:da:d0:b2:5f:91:ea:e9:33:db:6f:92:3d:fa:
60:93:a7:b7:29:f7:6c:91:53:c3:2a:11:c6:ee:c5:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D2:29:42:2A:7B:C4:4C:0D:C1:C8:12:96:E7:7B:45:EE:23:36:58
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T9IpQip7xEwNwcgSlud7Re4jNlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.9.156.0/23
45.14.164.0/24
45.66.228.0/24
45.66.230.0/24
45.88.64.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
79.110.62.0/24
83.219.97.0/24
84.54.48.0/24
85.209.133.0/24
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.48.0/24
92.249.50.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.179.0/24
94.156.248.0/24
95.214.27.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.237.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.49.94.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
34:51:8d:7c:36:df:80:46:b2:e3:e9:11:15:cd:b9:cf:20:f4:
1a:64:8d:08:94:1d:f4:06:db:b5:f7:ba:a0:6b:a0:c5:28:e7:
3b:d1:c9:5f:06:2b:be:20:46:19:96:14:e3:f5:fd:16:7c:38:
92:35:7c:6b:40:1b:a2:ee:bd:bd:30:c7:f9:03:d1:95:b3:e9:
49:13:47:09:91:dc:54:07:8e:b9:d9:c0:30:f2:aa:1b:00:ed:
ae:32:8a:62:2c:03:1c:29:65:16:56:92:ad:d2:64:38:88:33:
0d:6f:df:8c:6c:33:9f:ee:82:35:92:ad:c4:97:bb:2b:13:9e:
36:b5:dc:5f:c4:10:6a:f5:1e:70:5a:d3:f8:73:3d:c2:b2:0e:
f5:17:5a:7c:88:42:03:df:ca:29:61:77:24:b5:8a:7d:8a:62:
8c:05:89:51:ce:36:fe:76:a1:bb:4e:cd:6f:20:2f:94:00:26:
a3:35:89:61:51:fb:9b:23:db:52:0a:b3:99:62:1b:ed:75:e4:
88:46:4e:c5:eb:b7:39:f7:42:37:a7:d9:ec:32:97:66:7f:1d:
8b:a4:c8:9a:a1:73:be:c2:35:9e:3b:ca:68:f4:29:19:d8:6e:
ff:a4:70:2b:ed:18:36:ab:32:c2:df:e3:72:95:8c:1d:1b:4b:
72:91:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:22:11 2025 by rpki-client