Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TCv_VJv9av-a6XCHlsMy_58xhD8.roa
File: TCv_VJv9av-a6XCHlsMy_58xhD8.roa (raw, json)
Hash identifier: vDsovMGlknwYdtrzr/l36JKx8RIbk3NujimIQTpxlCs=
Subject key identifier: 4C:2B:FF:54:9B:FD:6A:FF:9A:E9:70:87:96:C3:32:FF:9F:31:84:3F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01949201EB3E8F3FC90B6FB176C58707D24C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TCv_VJv9av-a6XCHlsMy_58xhD8.roa
Signing time: Thu 23 Jan 2025 07:13:06 +0000
ROA not before: Thu 23 Jan 2025 07:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.102.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.170.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.237.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:01:eb:3e:8f:3f:c9:0b:6f:b1:76:c5:87:07:d2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 23 07:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c2bff549bfd6aff9ae9708796c332ff9f31843f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:48:e0:57:22:83:7d:fc:d0:61:4c:8d:c2:
08:ad:47:01:3f:ee:22:2c:73:a7:72:ed:94:cd:13:
38:1a:b0:ae:92:9b:09:d9:a4:18:8a:e3:b6:81:59:
14:9c:69:00:09:3a:90:fc:5c:de:00:8f:9a:99:4b:
49:52:33:37:3c:a6:86:56:7e:dd:88:b5:ce:dd:25:
3e:b2:15:11:fe:19:44:06:1f:5d:e7:3d:83:98:27:
c6:3e:9a:58:f6:8a:c0:9e:ae:0e:1e:2c:b0:5c:d8:
d6:db:f4:e6:8a:e9:2c:4c:fa:22:d7:a2:ca:88:12:
1f:fa:e3:14:da:97:7a:9c:57:43:96:76:72:74:25:
65:d2:7d:45:4a:a8:e8:2a:17:da:44:fb:be:7a:d1:
4a:86:75:2f:d3:dc:76:fb:ad:ff:83:8b:3e:a9:a9:
79:59:80:11:cd:e6:98:17:cd:6b:3d:a0:0c:1e:e1:
e0:cb:ab:2f:be:dd:6e:65:3d:fe:ef:dc:7f:2b:e4:
48:ae:99:ab:25:5a:a2:7e:29:58:94:fd:f6:7f:3a:
60:3b:ea:2e:b8:6d:87:31:50:af:e2:46:3d:f1:cc:
5a:b1:27:e1:88:27:41:08:59:69:55:4e:80:96:f2:
a0:bb:f8:4e:86:bb:bb:7d:e9:90:f0:ea:fa:9d:43:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2B:FF:54:9B:FD:6A:FF:9A:E9:70:87:96:C3:32:FF:9F:31:84:3F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TCv_VJv9av-a6XCHlsMy_58xhD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/23
45.12.255.0/24
45.14.164.0/24
45.66.228.0/24
45.66.230.0/24
45.88.64.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
79.110.62.0/24
83.219.97.0/24
84.54.48.0/24
85.209.133.0/24
87.120.84.0/24
87.120.87.0/24
87.120.166.0/24
87.120.187.0/24
87.121.45.0/24
87.121.87.0/24
87.121.105.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.48.0/24
92.249.50.0/24
94.154.160.0/22
94.154.173.0/24
94.156.11.0/24
94.156.64.0/21
94.156.102.0/24
94.156.114.0/24
94.156.170.0/24
94.156.179.0/24
94.156.248.0/24
95.214.27.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.237.0/24
185.216.71.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.49.94.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:97:dd:f7:6c:e4:23:d5:42:3d:13:dc:f3:6f:3e:37:e7:74:
d2:e1:9d:93:6b:98:f9:1a:00:75:23:f6:76:73:07:c3:3a:6c:
56:e3:58:a1:f2:7a:d3:09:a3:4c:79:e1:f4:bc:83:70:39:d0:
df:39:7e:d7:ca:47:49:7d:7a:1c:49:d0:06:96:2a:41:ef:41:
4a:f3:9d:13:fa:4c:c6:3b:74:23:cf:9f:88:3b:f2:ba:8b:25:
fb:25:97:9f:67:ac:9d:cd:23:78:95:58:a9:b9:21:27:53:54:
d4:b5:e1:61:76:60:13:a7:ec:43:fe:9b:95:e9:88:39:83:6b:
30:4a:ad:dc:af:74:00:c8:23:bf:6a:78:e1:f2:96:9b:b1:83:
c6:7c:9b:89:96:f4:b9:d2:cb:4d:55:c4:d8:88:02:f8:74:06:
9e:bc:ed:cc:d9:00:ef:1a:4a:c7:4d:60:23:76:63:3d:79:46:
c3:6f:e5:f2:ab:a7:e6:75:a4:7d:49:72:e1:db:a3:54:7d:58:
9c:de:4e:cc:21:43:42:da:fd:f5:12:13:ac:1a:04:71:f3:f6:
1c:b3:ed:c5:b5:df:48:3c:dc:02:f2:2d:11:b0:08:18:ec:c2:
61:f5:b6:9d:5d:75:63:0e:f5:68:6a:ee:f3:ed:b8:15:76:f0:
9e:90:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:44:09 2025 by rpki-client