Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qHbjerkQw0TaYRbiPYBM6raVZR4.roa
File: qHbjerkQw0TaYRbiPYBM6raVZR4.roa (raw, json)
Hash identifier: pt4n789MBQ7mlj9N6icIWxTDYfr09/ag9yzPgSZHrOE=
Subject key identifier: A8:76:E3:7A:B9:10:C3:44:DA:61:16:E2:3D:80:4C:EA:B6:95:65:1E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195C97C6FA8647B5205DE8C0445C77476BB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qHbjerkQw0TaYRbiPYBM6raVZR4.roa
Signing time: Mon 24 Mar 2025 18:48:50 +0000
ROA not before: Mon 24 Mar 2025 18:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
45.9.157.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.113.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:7c:6f:a8:64:7b:52:05:de:8c:04:45:c7:74:76:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 24 18:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a876e37ab910c344da6116e23d804ceab695651e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:15:69:fc:76:3c:75:da:02:bf:f5:ae:63:
11:03:3e:7e:4a:ea:f1:c1:a4:fb:ce:50:ef:b3:b2:
b8:6a:ab:97:c5:a7:36:c1:7a:ba:fe:de:e7:1e:92:
0e:3e:28:90:87:65:8a:a2:40:b9:59:db:b7:e0:22:
3f:af:c3:c4:28:34:85:6d:61:1f:e7:d9:65:e7:20:
c7:57:d3:56:d3:48:84:a0:32:9b:49:b1:57:a3:f5:
dc:8f:d5:80:4d:b8:92:5c:36:4f:f0:74:c9:ee:af:
ee:9d:1f:46:4a:96:43:48:cc:29:a1:ea:e8:f3:97:
d2:cf:61:13:42:24:ba:cc:3e:ab:cf:cf:67:e0:44:
45:8f:7f:25:44:c8:4c:e7:3b:f5:14:c6:04:37:bb:
2b:57:74:66:89:f0:d1:a4:21:42:6a:99:ba:84:be:
29:50:fd:d4:8a:b7:31:15:11:99:56:51:1a:be:d2:
02:13:e4:eb:ed:27:ba:75:cc:d9:43:0b:1b:76:1b:
d7:82:d9:32:3e:f4:52:71:80:83:48:83:1c:21:39:
99:8f:40:63:a8:f2:82:c2:89:87:f8:c7:36:5c:49:
1d:a7:ca:0d:9b:55:d1:b9:89:21:95:f2:7f:2d:8f:
c0:ea:84:ec:bd:c2:c1:47:57:6f:9a:9e:db:24:33:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:76:E3:7A:B9:10:C3:44:DA:61:16:E2:3D:80:4C:EA:B6:95:65:1E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qHbjerkQw0TaYRbiPYBM6raVZR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.9.157.0/24
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.128.96.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0-87.120.127.255
87.120.166.0/24
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.50.0/24
93.123.109.0/24
94.154.160.0/22
94.156.64.0/21
94.156.113.0/24
94.156.167.0/24
94.156.179.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
193.25.216.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
26:16:9e:9b:0b:d3:f5:50:71:c1:b3:0a:7a:10:66:84:b1:b3:
e3:fc:f9:34:2a:cd:25:78:db:44:10:c4:ae:34:73:ef:8e:26:
88:56:39:06:02:01:05:a4:74:31:67:6c:06:86:ab:1b:bd:1e:
92:ee:77:2b:47:03:20:06:0c:54:c4:cf:28:03:16:1e:28:51:
b3:a9:05:3e:fc:ce:2b:6b:62:e7:03:fc:85:07:ea:22:d1:f7:
3a:bb:2e:12:60:68:b3:d7:3a:8e:4c:8d:45:84:0d:80:59:1a:
95:4c:1e:46:c6:66:95:5b:4a:a8:6e:ec:16:a6:99:b1:63:a4:
23:fe:13:21:8e:eb:6a:02:e7:f4:ba:41:a8:b6:c3:a5:78:cc:
c2:f8:4f:9a:4d:75:c7:4b:c8:30:ec:8f:96:c5:0c:38:22:71:
4d:63:f8:9f:29:8c:03:a8:2d:ea:af:9a:25:c8:01:4c:05:07:
07:e5:ad:f6:83:aa:c5:38:03:e3:f8:ae:9b:64:00:97:05:4a:
c7:9b:e6:8b:3f:4a:74:45:c3:b6:15:89:69:9d:03:69:65:b0:
d6:06:56:fc:b8:8d:5c:da:b4:54:34:26:b8:14:05:ef:b9:87:
2d:44:18:76:9b:bd:03:5d:7f:71:89:6f:d8:f5:4a:da:8a:8e:
f6:00:54:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:41:21 2025 by rpki-client