Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cRAP59rxlmuj9FpUR4P5xg0P28M.roa
File: cRAP59rxlmuj9FpUR4P5xg0P28M.roa (raw, json)
Hash identifier: QjZ+GJrJOPuIqTqWDHOvVjYDyjixfjLdrsNILokWTls=
Subject key identifier: 71:10:0F:E7:DA:F1:96:6B:A3:F4:5A:54:47:83:F9:C6:0D:0F:DB:C3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019416FEB80415F57ACB50A853F6DFEDDC54
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cRAP59rxlmuj9FpUR4P5xg0P28M.roa
Signing time: Mon 30 Dec 2024 09:56:19 +0000
ROA not before: Mon 30 Dec 2024 09:56:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.157.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.90.88.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.84.0/23 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.102.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.237.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:16:fe:b8:04:15:f5:7a:cb:50:a8:53:f6:df:ed:dc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 30 09:56:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71100fe7daf1966ba3f45a544783f9c60d0fdbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:e8:54:bb:36:eb:68:5a:3c:37:96:cf:bd:
d0:e4:6e:4e:ba:9d:18:63:75:12:11:aa:5b:af:49:
50:1e:8a:fc:16:aa:ef:82:fa:4b:cc:97:1f:ea:f4:
95:c4:c4:0b:46:0b:ec:00:2a:48:5f:b4:8c:5b:34:
7e:73:22:39:59:e6:8d:1a:20:47:5d:65:b5:2a:55:
aa:60:e0:8a:d9:04:13:b1:3a:da:53:70:d2:12:fb:
e4:de:fc:18:19:d8:f1:46:e0:a2:db:00:3b:5c:bb:
7e:7b:d4:a0:a3:45:15:dc:09:3d:54:87:11:17:b2:
3c:37:0e:52:51:6b:41:09:10:82:80:5d:ee:ff:01:
ee:af:04:4b:bd:91:5b:1b:68:5b:45:44:8b:bd:0b:
60:b5:cb:12:18:d2:c9:53:51:53:c1:99:e0:23:0a:
66:44:bc:7f:ba:d4:b0:1a:58:0a:df:b3:89:c8:0d:
80:2b:6e:10:1d:e9:d2:e9:70:d9:5c:b9:33:52:f3:
bd:77:ee:59:08:22:61:b3:66:20:6e:14:d1:dc:22:
08:0e:96:c1:ba:41:63:8a:7a:73:28:44:41:c7:0d:
2b:fc:70:64:b4:63:75:4c:a8:d8:8f:82:31:34:3a:
c0:7e:91:93:3b:c4:e7:20:68:a3:b0:60:ab:00:b3:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:10:0F:E7:DA:F1:96:6B:A3:F4:5A:54:47:83:F9:C6:0D:0F:DB:C3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cRAP59rxlmuj9FpUR4P5xg0P28M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.157.0/24
45.12.255.0/24
45.14.164.0/24
45.66.228.0/24
45.66.230.0/24
45.88.64.0/24
45.90.88.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.62.0/24
81.161.239.0/24
83.219.97.0/24
84.54.48.0/24
85.209.133.0/24
87.120.84.0/24
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.84.0/23
87.121.87.0/24
87.121.105.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.48.0/24
92.249.50.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.102.0/24
94.156.179.0/24
94.156.248.0/24
95.214.27.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.237.0/24
185.216.71.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.49.94.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:79:dc:4d:89:8f:b1:4d:6c:95:b4:2d:5e:75:a2:35:df:1a:
53:1d:af:2a:b7:da:af:84:8e:7e:57:84:e0:95:7e:94:0f:56:
43:3f:ea:a0:d3:28:c2:54:96:7f:9f:51:3e:ad:92:e3:2b:d5:
2d:70:a5:2b:a4:c0:2e:78:aa:c1:38:c2:44:ba:3c:b5:0c:a8:
c7:59:b3:72:07:7d:55:26:04:fc:81:7c:b7:1e:bc:a3:04:00:
3f:5d:8e:a5:dd:d5:38:b6:4a:4e:e7:ee:f3:ba:68:8b:2e:59:
a2:58:64:7f:d8:61:c9:ca:c9:ca:8d:6e:28:f7:4e:8d:4e:94:
00:cd:43:d7:bf:f8:4c:ba:d6:5c:79:b6:d9:e9:bc:c2:91:69:
2e:1d:e8:32:8f:6c:ac:62:fb:2f:e0:92:75:8a:1f:69:b3:ee:
52:5f:2f:a0:ee:57:89:eb:bf:29:1b:1f:4e:c2:f3:9f:21:ce:
a5:6e:89:15:23:84:ae:e8:a4:eb:d2:7b:a6:50:bb:38:04:86:
e8:2c:cf:40:51:8b:9c:44:6a:71:44:7d:fe:b8:98:5a:b3:e0:
cd:2d:85:7c:8b:e5:1b:07:20:25:c4:cb:9c:29:46:ab:1a:6d:
4a:14:eb:0f:c6:62:35:c5:c8:e5:a1:e6:54:75:5c:41:27:a9:
5b:ce:b0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:29:06 2025 by rpki-client