Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oWQ6SVChVv95xaOs3i7HHHblg-o.roa
File: oWQ6SVChVv95xaOs3i7HHHblg-o.roa (raw, json)
Hash identifier: 0fIx1EsyCqP+h08+ZA6zrx+mkjeM/Zws7AQjnL6/mkM=
Subject key identifier: A1:64:3A:49:50:A1:56:FF:79:C5:A3:AC:DE:2E:C7:1C:76:E5:83:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A660749F2A7C08C231F792FA16042527C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oWQ6SVChVv95xaOs3i7HHHblg-o.roa
Signing time: Tue 05 Sep 2023 15:47:48 +0000
ROA not before: Tue 05 Sep 2023 15:47:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 2.59.254.0/24 maxlen: 24
94.156.6.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
185.225.75.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
87.121.3.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
94.156.161.0/24 maxlen: 24
193.42.33.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
185.216.68.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
93.123.118.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:66:07:49:f2:a7:c0:8c:23:1f:79:2f:a1:60:42:52:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 5 15:47:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1643a4950a156ff79c5a3acde2ec71c76e583ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:4f:d3:19:18:16:0d:a5:cf:de:bc:ad:f8:
a0:04:8b:aa:6c:e7:54:d0:28:9f:64:30:19:36:cf:
c8:6b:d2:e9:f9:13:1e:6d:fd:37:19:dd:44:ea:90:
4a:38:14:b0:ca:b1:0f:ec:20:65:a1:f6:29:14:e4:
fe:98:83:91:5c:21:ef:11:57:c7:be:24:ce:40:3b:
59:16:8b:22:51:a1:d0:5a:7d:2e:a4:b8:2b:dd:8b:
07:77:76:23:d7:b2:34:dc:ea:79:17:80:2b:34:37:
28:82:4c:ad:e0:8c:ca:68:ee:26:bb:80:29:55:81:
7e:09:a0:7e:d8:14:78:e6:4b:69:68:26:d6:23:f1:
8e:78:c9:1b:ec:27:7a:2e:b9:67:30:01:42:ea:e8:
62:f8:45:f7:e9:b4:3d:04:88:25:4d:c8:b7:d3:d3:
17:77:30:e2:82:f9:1a:4b:d3:a5:af:4b:2e:df:fa:
62:71:ef:fc:b8:ee:2d:29:d1:f0:ed:f5:0a:50:f0:
c1:ee:22:eb:0f:06:f9:e6:79:01:f1:e7:03:1f:4b:
50:c2:4e:bf:27:89:22:5c:9f:35:b4:60:f3:8e:46:
ff:86:9e:e8:1b:92:ba:09:ef:67:02:3a:12:37:31:
7b:71:56:bb:5a:5b:bc:23:df:5f:cc:b3:38:de:b0:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:3A:49:50:A1:56:FF:79:C5:A3:AC:DE:2E:C7:1C:76:E5:83:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oWQ6SVChVv95xaOs3i7HHHblg-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.254.0/24
37.139.128.0/23
45.12.253.0/24
45.66.230.0/24
45.81.39.0/24
45.81.243.0/24
79.110.48.0/24
79.110.62.0/23
80.76.51.0/24
84.21.172.0/24
84.54.50.0/24
85.31.44.0-85.31.46.255
85.217.144.0/24
87.121.3.0/24
87.121.221.0/24
93.123.118.0/24
94.156.6.0/24
94.156.102.0/24
94.156.161.0/24
94.156.253.0/24
95.214.27.0/24
109.206.240.0/23
109.206.243.0/24
185.216.68.0/24
185.216.71.0/24
185.225.73.0-185.225.75.255
185.246.220.0/23
185.252.178.0/24
185.254.37.0/24
193.42.32.0/23
193.47.61.0/24
194.55.186.0/24
194.55.224.0/24
194.180.48.0/23
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
92:4e:8a:7e:55:c3:94:60:9b:de:45:bd:d8:d1:d6:8e:4b:f4:
81:ec:1d:3b:19:5a:04:90:88:53:03:f2:94:8a:29:67:e4:fa:
ad:5b:3c:77:71:33:b8:b2:69:19:e2:9f:a1:b1:94:68:c5:a0:
b6:ea:c5:1e:77:62:dc:63:d8:68:fd:a5:ef:88:92:36:e4:ee:
da:76:fc:fc:ad:52:e0:fc:42:11:7d:7b:42:65:22:ba:53:f0:
7c:74:00:8c:16:3d:42:80:b2:ff:90:3a:87:d7:b1:28:08:76:
22:cd:94:de:1d:54:a7:32:84:5d:72:19:e1:a8:25:4f:3a:66:
25:77:ab:2f:32:59:9d:e5:f9:fc:04:ec:59:f4:66:a7:57:4e:
a9:df:82:80:f8:17:c9:dd:25:1e:be:b3:fa:e7:30:31:e9:24:
f1:96:a6:c6:db:5b:dc:3c:30:70:db:a8:2a:e8:d1:c8:4d:7d:
67:d4:9f:13:63:8f:7c:09:cc:7e:32:1b:78:6f:18:61:d0:35:
1e:ac:bf:7f:92:c1:2c:f2:2e:bf:ea:ee:56:f9:c7:ef:78:93:
54:6c:ff:65:9b:f7:b2:27:ee:84:fb:7c:f0:0e:4e:2b:ec:cb:
ce:e8:8c:cb:ce:2c:35:6e:c1:7f:4b:50:4a:97:9c:37:b2:ae:
3c:4a:b0:c2
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgISAYpmB0nyp8CMIx95L6FgQlJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwOTA1MTU0NzQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTY0M2E0OTUwYTE1NmZmNzljNWEzYWNkZTJlYzcxYzc2ZTU4M2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyBP0xkYFg2lz968rfigBIuqbOdU
0CifZDAZNs/Ia9Lp+RMebf03Gd1E6pBKOBSwyrEP7CBlofYpFOT+mIORXCHvEVfH
viTOQDtZFosiUaHQWn0upLgr3YsHd3Yj17I03Op5F4ArNDcogkyt4IzKaO4mu4Ap
VYF+CaB+2BR45ktpaCbWI/GOeMkb7Cd6LrlnMAFC6uhi+EX36bQ9BIglTci309MX
dzDigvkaS9Olr0su3/pice/8uO4tKdHw7fUKUPDB7iLrDwb55nkB8ecDH0tQwk6/
J4kiXJ81tGDzjkb/hp7oG5K6Ce9nAjoSNzF7cVa7Wlu8I99fzLM43rCDDwIDAQAB
o4IC6jCCAuYwHQYDVR0OBBYEFKFkOklQoVb/ecWjrN4uxxx25YPqMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvb1dRNlNWQ2hWdjk1eGFPczNpN0hISGJsZy1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH/BggrBgEFBQcBBwEB/wSB7zCB7DCB6QQCAAEwgeIDBAAC
O/4DBAEli4ADBAAtDP0DBAAtQuYDBAAtUScDBAAtUfMDBABPbjADBAFPbj4DBABQ
TDMDBABUFawDBABUNjIwDAMEAlUfLAMEAFUfLgMEAFXZkAMEAFd5AwMEAFd53QME
AF17dgMEAF6cBgMEAF6cZgMEAF6coQMEAF6c/QMEAF/WGwMEAW3O8AMEAG3O8wME
ALnYRAMEALnYRzAMAwQAueFJAwQCueFIAwQBufbcAwQAufyyAwQAuf4lAwQBwSog
AwQAwS89AwQAwje6AwQAwjfgAwQBwrQwAwQA1FfMMA0GCSqGSIb3DQEBCwUAA4IB
AQCSTop+VcOUYJveRb3Y0daOS/SB7B07GVoEkIhTA/KUiiln5PqtWzx3cTO4smkZ
4p+hsZRoxaC26sUed2LcY9ho/aXviJI25O7advz8rVLg/EIRfXtCZSK6U/B8dACM
Fj1CgLL/kDqH17EoCHYizZTeHVSnMoRdchnhqCVPOmYld6svMlmd5fn8BOxZ9Gan
V06p34KA+BfJ3SUevrP65zAx6STxlqbG21vcPDBw26gq6NHITX1n1J8TY498Ccx+
Mht4bxhh0DUerL9/ksEs8i6/6u5W+cfveJNUbP9lm/eyJ+6E+3zwDk4r7MvO6IzL
ziw1bsF/S1BKl5w3sq48SrDC
-----END CERTIFICATE-----
Generated at Sat Jun 14 00:35:48 2025 by rpki-client