Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oD4NTrZLD5vrVVJRjHZhYpZI8bo.roa
File: oD4NTrZLD5vrVVJRjHZhYpZI8bo.roa (raw, json)
Hash identifier: T2Px06lK91BhQvGOb8RLKC7tSy69G2tMzgniRNghb6Y=
Subject key identifier: A0:3E:0D:4E:B6:4B:0F:9B:EB:55:52:51:8C:76:61:62:96:48:F1:BA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019029C77230456F7DD3E01DCC86C14156E9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oD4NTrZLD5vrVVJRjHZhYpZI8bo.roa
Signing time: Tue 18 Jun 2024 05:17:34 +0000
ROA not before: Tue 18 Jun 2024 05:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.149.242.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:29:c7:72:30:45:6f:7d:d3:e0:1d:cc:86:c1:41:56:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 18 05:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a03e0d4eb64b0f9beb5552518c7661629648f1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:ca:b0:c2:5c:19:a0:e8:68:5c:0c:7b:1e:
d1:44:45:0e:5b:11:e0:de:1f:e7:de:d9:7b:32:c9:
09:3f:38:97:ce:4f:fe:4e:a6:a1:46:e8:2b:b9:f4:
81:8d:2e:2a:e4:d2:d3:43:41:df:a3:c3:d9:1c:d0:
17:3f:a5:b8:c8:00:f1:2a:30:10:48:d9:74:9a:0e:
93:09:7a:74:5e:11:d7:e1:04:2c:b4:ba:b9:2f:ad:
20:39:0d:26:cd:bf:bd:78:71:07:96:76:63:94:56:
ed:fb:e6:43:81:2c:79:08:16:e7:3c:17:a2:0a:c3:
2e:1b:5b:80:0d:62:fe:20:f5:94:f6:fa:cb:4a:30:
f7:78:35:6e:70:9f:15:12:87:6c:d9:fc:ce:0e:75:
e0:4b:3e:dd:56:76:ba:de:70:da:66:c4:dd:c5:e9:
eb:fd:58:c5:40:88:16:e3:d3:21:20:c8:2c:7c:38:
69:22:6e:31:f5:c6:49:b2:af:24:a3:22:56:b0:64:
be:32:e9:2f:34:4e:9a:7f:c2:61:da:ad:13:40:ef:
92:df:a3:b9:dd:44:7d:20:61:e6:2b:6d:a5:c5:f7:
06:26:ee:d4:37:45:d6:f8:e6:b3:11:15:4f:de:9c:
bc:2d:c0:17:56:bc:6a:c3:9f:14:6a:8c:50:f3:46:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3E:0D:4E:B6:4B:0F:9B:EB:55:52:51:8C:76:61:62:96:48:F1:BA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oD4NTrZLD5vrVVJRjHZhYpZI8bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.149.242.0/23
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1b:aa:bf:0e:d6:d8:d7:d4:00:70:32:7e:9d:fa:9d:4b:c9:
3c:93:a2:40:58:5c:ef:4c:a6:25:36:43:c9:da:88:26:22:db:
85:32:5d:78:68:5c:6a:b1:82:90:3a:14:33:9d:28:86:f0:3b:
d0:15:7e:bc:2c:e2:bf:c5:c0:9d:ff:09:75:6c:ad:8c:5e:73:
71:a8:4b:08:3f:78:b3:e0:54:41:27:25:8a:f7:2a:ec:27:1f:
88:cf:8e:f3:01:56:e3:a9:a9:4b:aa:d3:c7:c5:27:06:b5:5f:
67:98:9f:e8:b7:88:59:b9:21:89:21:96:a4:12:f3:85:e9:87:
d0:21:d4:94:e9:ac:5a:e3:3d:7a:75:82:76:8d:67:f9:2c:b3:
a3:a4:93:b2:31:01:ba:41:8c:11:43:71:b9:a7:3d:cb:ab:4a:
d3:fa:8b:76:ed:42:40:d4:c5:30:96:f8:45:67:e7:a3:35:83:
e0:2b:a6:5f:14:72:8f:8d:d0:db:df:b9:8f:7e:82:4e:ae:0b:
36:b0:3f:e9:95:25:69:af:55:f4:d4:6c:21:09:cb:5b:d6:a9:
12:fd:c2:19:4c:e1:ab:eb:2a:a7:ba:2b:6a:9a:bb:65:50:3b:
32:7d:7b:d8:45:a6:5d:7a:4f:26:bf:a3:1b:84:70:24:c7:98:
74:c5:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:35:52 2025 by rpki-client