Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b-V5IHWBxRB2tDfr7ldlUkDIHIU.roa
File: b-V5IHWBxRB2tDfr7ldlUkDIHIU.roa (raw, json)
Hash identifier: OetZjzslMcxv9JBpg/QBdrVnVwqbASmhSORwOpTOKNA=
Subject key identifier: 6F:E5:79:20:75:81:C5:10:76:B4:37:EB:EE:57:65:52:40:C8:1C:85
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01943F7413477485FA243DDED0970BE3337A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b-V5IHWBxRB2tDfr7ldlUkDIHIU.roa
Signing time: Tue 07 Jan 2025 06:29:19 +0000
ROA not before: Tue 07 Jan 2025 06:29:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.9.157.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.84.0/23 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.102.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.237.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:74:13:47:74:85:fa:24:3d:de:d0:97:0b:e3:33:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 7 06:29:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fe579207581c51076b437ebee57655240c81c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f9:a1:9d:da:97:82:64:b4:8c:c4:61:65:76:
28:30:6f:ef:32:6f:c8:dd:01:f3:66:6f:79:fd:99:
2e:c7:0d:68:5b:73:d3:b2:fc:41:eb:c1:b0:0d:2a:
51:a5:53:56:f4:1a:f7:64:4a:25:91:e2:92:51:b6:
69:cf:ec:a1:22:13:da:ec:79:76:11:78:1f:f1:20:
36:4e:5f:d4:c9:0b:0d:37:28:01:59:85:6c:31:4c:
25:16:ea:67:bb:c7:bf:14:e7:93:cf:48:6c:35:67:
c6:36:e6:b2:e1:13:36:79:22:ca:53:8b:68:14:ec:
06:01:5c:5e:d3:e0:00:7c:6e:50:a2:0e:21:1c:2a:
1d:11:ba:14:57:24:95:e9:30:ba:b1:09:f6:88:b4:
6a:fc:3d:6c:af:0e:45:42:99:0a:6f:ed:04:a5:d6:
0e:31:52:50:51:e9:e2:c3:1b:6a:ab:c2:30:8d:4e:
15:89:5b:0c:8b:29:38:3f:d4:20:67:ce:ca:75:c3:
ff:dd:c3:3e:24:c5:6f:71:d9:65:cc:62:b6:e1:c3:
c2:51:d2:83:a8:7d:fb:93:b4:42:c9:9b:c1:32:fc:
8b:73:69:1a:34:c0:db:92:97:04:67:53:23:98:c2:
49:78:19:8e:13:b4:4e:7d:ae:06:7c:60:23:c1:fb:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E5:79:20:75:81:C5:10:76:B4:37:EB:EE:57:65:52:40:C8:1C:85
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b-V5IHWBxRB2tDfr7ldlUkDIHIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.157.0/24
45.12.255.0/24
45.14.164.0/24
45.66.228.0/24
45.66.230.0/24
45.88.64.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.62.0/24
81.161.239.0/24
83.219.97.0/24
84.54.48.0/24
85.209.133.0/24
87.120.84.0/24
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.84.0/23
87.121.87.0/24
87.121.105.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.48.0/24
92.249.50.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.102.0/24
94.156.179.0/24
94.156.248.0/24
95.214.27.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.237.0/24
185.216.71.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.49.94.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
07:15:00:ea:42:53:fb:89:c2:66:29:f7:e9:b1:8e:28:e2:d8:
e3:4d:3f:6f:87:da:fe:4a:ba:4a:6a:b7:d7:d3:bc:46:9a:57:
73:b0:63:b4:75:52:3f:2a:af:43:d0:de:56:74:b6:a1:57:68:
12:53:6a:b9:52:0a:4d:34:5f:97:62:9e:f7:d2:ed:37:c3:6b:
30:9b:e3:9b:b2:44:28:83:01:9e:63:31:68:43:4d:4a:b1:da:
6f:8e:6d:4c:a8:79:d6:0e:f4:00:1e:06:93:76:1a:f3:1a:d9:
02:5d:86:94:b1:85:b0:4b:72:fb:96:42:56:db:07:54:d3:a1:
cf:b7:eb:9e:dc:3e:c0:89:28:c3:b1:48:7f:55:7d:25:88:30:
71:cd:58:73:24:e5:45:1d:12:ac:0a:42:24:57:b7:eb:66:4e:
69:83:12:32:07:2b:b7:9f:db:ae:fb:b0:3e:df:96:60:7a:09:
40:7b:9f:9b:42:d6:13:de:0c:dd:43:11:a9:0f:3d:9a:52:f3:
cc:14:26:55:32:e7:ac:77:ed:d0:82:fb:cd:ff:78:a4:25:c0:
86:50:f8:a7:2e:9e:2b:58:84:56:2c:fe:32:21:9f:be:fa:31:
fd:2a:96:ed:81:46:95:1f:1a:b0:6d:88:d9:4d:7c:6d:1b:5a:
0b:49:9d:39
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgISAZQ/dBNHdIX6JD3e0JcL4zN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTA3MDYyOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmU1NzkyMDc1ODFjNTEwNzZiNDM3ZWJlZTU3NjU1MjQwYzgxYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PmhndqXgmS0jMRhZXYoMG/vMm/I
3QHzZm95/Zkuxw1oW3PTsvxB68GwDSpRpVNW9Br3ZEolkeKSUbZpz+yhIhPa7Hl2
EXgf8SA2Tl/UyQsNNygBWYVsMUwlFupnu8e/FOeTz0hsNWfGNuay4RM2eSLKU4to
FOwGAVxe0+AAfG5Qog4hHCodEboUVySV6TC6sQn2iLRq/D1srw5FQpkKb+0EpdYO
MVJQUeniwxtqq8IwjU4ViVsMiyk4P9QgZ87KdcP/3cM+JMVvcdllzGK24cPCUdKD
qH37k7RCyZvBMvyLc2kaNMDbkpcEZ1MjmMJJeBmOE7ROfa4GfGAjwftI+wIDAQAB
o4IDLzCCAyswHQYDVR0OBBYEFG/leSB1gcUQdrQ36+5XZVJAyByFMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvYi1WNUlIV0J4UkIydERmcjdsZGxVa0RJSElVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBQwYIKwYBBQUHAQcBAf8EggEyMIIBLjCCASoEAgABMIIB
IgMEAC0JnQMEAC0M/wMEAC0OpAMEAC1C5AMEAC1C5gMEAC1YQAMEAC2LagMEAC2N
njAMAwQALZdZAwQCLZdYAwQAT24+AwQAUaHvAwQAU9thAwQAVDYwAwQAVdGFAwQA
V3hUAwQAV3hXAwQAV3imAwQAV3ktAwQBV3lUAwQAV3lXAwQAV3lpAwQBV3l8AwQA
V3miAwQAV3mlAwQEW1zwAwQBXHfEAwQAXPkwAwQAXPkyAwQCXpqgAwQAXpwLAwQD
XpxAAwQAXpxmAwQAXpyzAwQAXpz4AwQAX9YbAwQAjWIBAwQAjWIGAwQAk05kAwQC
qxZIAwQAstftAwQAudhHAwQCudhUAwQCudpUAwQAwRnYAwQAwjFeAwQAwje6AwQA
wqmvMA0GCSqGSIb3DQEBCwUAA4IBAQAHFQDqQlP7icJmKffpsY4o4tjjTT9vh9r+
SrpKarfX07xGmldzsGO0dVI/Kq9D0N5WdLahV2gSU2q5UgpNNF+XYp730u03w2sw
m+ObskQogwGeYzFoQ01Ksdpvjm1MqHnWDvQAHgaTdhrzGtkCXYaUsYWwS3L7lkJW
2wdU06HPt+ue3D7AiSjDsUh/VX0liDBxzVhzJOVFHRKsCkIkV7frZk5pgxIyByu3
n9uu+7A+35ZgeglAe5+bQtYT3gzdQxGpDz2aUvPMFCZVMuesd+3QgvvN/3ikJcCG
UPinLp4rWIRWLP4yIZ+++jH9KpbtgUaVHxqwbYjZTXxtG1oLSZ05
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:31:11 2025 by rpki-client