Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dSRX2rM4DxrZ6eeQWUlgCVd-TAM.roa
File: dSRX2rM4DxrZ6eeQWUlgCVd-TAM.roa (raw, json)
Hash identifier: WXX+xG7/8J/dnQ55q99d91sdQIhQ/INSupCtWm3REQU=
Subject key identifier: 75:24:57:DA:B3:38:0F:1A:D9:E9:E7:90:59:49:60:09:57:7E:4C:03
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193B4A884443B2171DCD60FC394407E2443
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dSRX2rM4DxrZ6eeQWUlgCVd-TAM.roa
Signing time: Wed 11 Dec 2024 07:39:22 +0000
ROA not before: Wed 11 Dec 2024 07:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.12.255.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.90.88.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
93.123.84.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.179.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.35.17.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b4:a8:84:44:3b:21:71:dc:d6:0f:c3:94:40:7e:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 11 07:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=752457dab3380f1ad9e9e79059496009577e4c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:85:70:42:78:ff:e0:68:db:1c:e5:da:a5:
26:71:60:c1:51:61:e2:65:af:93:69:96:9d:1f:1c:
61:00:9e:30:3f:cf:a4:0d:31:4b:2c:ae:08:61:30:
7d:ae:76:3f:6b:0e:06:f9:74:14:eb:9f:42:aa:15:
4a:99:f9:d2:db:98:c0:ff:fe:a6:a8:44:f9:18:c2:
39:64:9f:77:a8:77:50:7a:fc:db:a5:9b:ee:f7:6d:
bb:7b:a8:b8:f0:ba:01:81:bf:53:03:aa:08:59:01:
28:c4:ee:a5:67:17:af:70:8e:2d:0a:52:00:71:5e:
e0:de:cb:e3:86:93:2a:b8:a5:aa:44:94:42:21:63:
9b:31:0f:7b:f7:60:f8:05:23:ba:98:03:dd:46:18:
60:bb:b0:33:e1:38:69:5a:a9:ce:19:68:a0:7d:29:
ba:b1:9e:11:20:fe:c9:49:3d:8a:fb:1d:66:40:7d:
0d:0f:8e:20:25:fc:91:7e:c3:95:1e:f7:a8:e2:0a:
5d:d1:62:aa:d3:ee:c8:0f:61:3d:bc:af:ce:1f:ff:
c5:2a:12:01:80:14:9b:2c:cb:21:66:0e:b1:23:c9:
54:9f:f6:71:d7:d5:2e:06:de:12:6f:6c:17:26:a0:
5d:b8:fa:46:43:46:bf:f7:c8:62:83:f6:4d:a4:30:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:24:57:DA:B3:38:0F:1A:D9:E9:E7:90:59:49:60:09:57:7E:4C:03
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dSRX2rM4DxrZ6eeQWUlgCVd-TAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
45.14.164.0/24
45.66.228.0/24
45.88.64.0/24
45.90.88.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
93.123.84.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.179.0/24
141.98.1.0/24
147.78.100.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.35.17.0/24
193.58.122.0/24
194.49.94.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a0:ef:de:79:38:6d:bf:6d:21:69:8b:ac:10:78:71:16:da:
92:df:19:1d:06:58:91:3b:f9:98:e4:8b:88:cf:d2:ce:4a:65:
94:f4:7c:af:7a:04:1d:0c:7f:96:cf:80:87:63:42:b8:ff:32:
5c:a7:44:e4:de:4a:24:5e:e2:45:77:73:46:c1:63:20:15:49:
73:68:24:c7:0e:86:ac:a1:f1:b8:48:db:6c:03:0c:0f:77:aa:
b1:33:bb:58:70:ee:f3:e9:64:2a:5a:dd:13:80:dd:0c:d9:88:
5b:bf:bf:a3:07:7d:a2:e8:5f:1e:49:54:2b:d9:86:d7:cb:75:
d3:3e:fc:9a:f1:da:6b:89:bd:34:c3:65:b6:4e:26:06:eb:03:
53:d4:7d:ba:51:af:c1:c7:a0:9d:68:e1:55:0f:ca:f4:4f:aa:
9c:88:59:ec:5f:43:72:25:da:e6:92:af:19:d9:f6:b9:97:d3:
6b:a2:9a:41:98:22:fc:83:e7:9e:fa:14:fc:26:0e:f1:9b:56:
5c:28:db:e3:5b:5f:2f:09:bc:cf:3f:f5:c0:48:f4:29:71:1c:
61:3e:15:29:a2:8d:fd:2d:9b:d1:d6:ad:39:15:a2:cc:40:54:
26:cc:93:86:84:41:19:0b:ef:d8:3e:f5:a7:a4:2a:22:43:57:
d5:79:34:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:32 2025 by rpki-client