Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eNiWQnC8gJbhkCSY4NAWORngB8U.roa
File: eNiWQnC8gJbhkCSY4NAWORngB8U.roa (raw, json)
Hash identifier: m8Jh1X7VreXUsaJESVg4rYyZDrBtt03G/AtM0xNzbYE=
Subject key identifier: 78:D8:96:42:70:BC:80:96:E1:90:24:98:E0:D0:16:39:19:E0:07:C5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195DC0109DB318DF2407859EBB8C8EF719D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eNiWQnC8gJbhkCSY4NAWORngB8U.roa
Signing time: Fri 28 Mar 2025 09:06:50 +0000
ROA not before: Fri 28 Mar 2025 09:06:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
45.9.157.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.113.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:01:09:db:31:8d:f2:40:78:59:eb:b8:c8:ef:71:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 28 09:06:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d8964270bc8096e1902498e0d0163919e007c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:f3:d5:68:29:83:47:b6:ed:bc:10:ab:57:
96:c3:15:43:5c:12:aa:2d:87:ff:e6:7b:77:50:1a:
ce:74:da:1e:e4:95:78:2b:c4:d5:2f:ef:88:bf:b8:
1f:7a:4e:8d:f0:9d:b0:be:a4:a2:df:d6:32:45:70:
0f:63:fd:1e:52:25:4c:da:77:42:10:3f:42:3d:c6:
cc:a7:0a:e6:ab:73:a9:62:c0:99:41:70:4b:d6:7f:
71:83:49:0d:1f:94:b0:ef:d9:7c:46:70:c6:05:26:
d1:8d:32:b4:0d:e5:ca:8b:74:e9:d4:4a:b7:b1:04:
1d:36:c6:b9:af:ab:a3:01:90:55:b6:68:00:33:5f:
bb:dd:96:34:3e:05:9c:01:96:28:69:19:d8:d5:f2:
30:96:c7:5f:8a:33:28:e5:5b:a3:41:54:ac:b1:01:
7e:22:49:b9:38:f1:7b:ef:af:5a:77:e6:0d:59:f4:
46:7f:b2:0b:d0:80:20:1a:8b:9f:89:74:7b:d8:e7:
52:0d:7a:c1:08:52:15:56:5b:cb:9c:33:e1:8a:d0:
50:9a:ad:0a:3e:bc:56:87:92:04:5f:52:6c:96:5f:
78:25:54:2a:ec:ce:aa:0f:6a:f4:eb:a5:7c:e5:d0:
45:d3:18:e1:9b:74:79:cf:7f:29:e7:ec:c3:d8:ec:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D8:96:42:70:BC:80:96:E1:90:24:98:E0:D0:16:39:19:E0:07:C5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eNiWQnC8gJbhkCSY4NAWORngB8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.9.157.0/24
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.128.96.0/24
45.139.106.0/24
45.141.158.0/24
45.151.90.0/23
79.110.50.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0/24
87.120.166.0/24
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.70.0/24
91.92.240.0/20
92.249.50.0/24
93.123.109.0/24
94.154.160.0/22
94.156.64.0/21
94.156.113.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
193.25.216.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:fd:2d:79:db:fa:bb:1d:8e:7e:1e:cc:7f:76:78:54:8b:60:
b2:d3:f9:5d:4e:61:1d:d9:55:d4:9e:56:e5:75:74:97:8a:ed:
99:ca:b2:22:12:ca:b4:4c:3c:a7:ec:9b:f5:b9:2c:1a:01:1f:
a9:6b:a2:da:c3:5c:76:11:a1:1c:03:2e:9a:66:84:fb:89:8d:
e4:26:75:c2:e9:3e:16:7b:be:d1:63:be:bb:13:1f:68:02:fc:
58:6c:ee:3e:c7:b7:da:a8:ff:ef:d1:37:a1:21:cb:cf:b8:5d:
31:8c:8f:23:ad:02:6a:11:80:d0:9e:03:08:f0:ae:03:e9:4f:
0f:d5:1c:1a:18:a9:ef:ad:30:d3:34:73:20:80:ff:81:2c:3b:
b0:d5:ce:94:97:cc:48:45:1d:82:f4:82:fd:9b:e6:dc:d4:d2:
6d:56:8e:69:22:27:84:15:9f:92:9b:88:56:c1:41:e9:b1:46:
6b:68:38:7e:47:b8:24:a2:01:25:aa:60:36:58:cc:c8:e9:a8:
aa:94:4c:82:10:0d:ac:57:d4:60:e6:26:f6:bc:2e:eb:d1:67:
72:52:43:38:3b:1c:c6:14:b4:90:99:dc:15:a0:be:51:ba:5e:
e5:76:b7:69:f4:8b:72:38:51:14:6b:3f:73:f6:79:4f:a7:0f:
19:4b:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:33:29 2025 by rpki-client