Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rM-9DmSUqSENCllqKBlQ8BviXOc.roa
File: rM-9DmSUqSENCllqKBlQ8BviXOc.roa (raw, json)
Hash identifier: Z1wYLQ/Id8jWhHDbsoIgnUtFvAFc1oKL5Jjv/B+/UqM=
Subject key identifier: AC:CF:BD:0E:64:94:A9:21:0D:0A:59:6A:28:19:50:F0:1B:E2:5C:E7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195387E6879D11E09D12EC6B4D236FCAD87
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rM-9DmSUqSENCllqKBlQ8BviXOc.roa
Signing time: Mon 24 Feb 2025 15:06:03 +0000
ROA not before: Mon 24 Feb 2025 15:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
31.13.224.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.106.0/24 maxlen: 32
94.156.166.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:7e:68:79:d1:1e:09:d1:2e:c6:b4:d2:36:fc:ad:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 24 15:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=accfbd0e6494a9210d0a596a281950f01be25ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:de:54:a0:ce:eb:0c:77:9e:58:64:7d:41:
d5:e6:be:60:ec:04:37:70:9f:ed:10:b8:db:d1:67:
a9:e1:e3:bf:aa:4c:e6:fc:93:07:f4:30:b0:dc:a0:
61:ef:b1:22:83:6a:81:07:92:50:94:da:9a:57:dc:
fa:3d:23:e2:cb:c4:4e:da:7f:cd:6d:dd:af:4d:dc:
c1:1e:c5:a4:00:a8:80:3a:7a:34:65:75:43:24:ba:
1c:ab:21:b6:1a:ef:75:94:f0:48:2b:e8:b9:da:c3:
60:cf:3a:d1:6b:64:db:88:ef:98:e2:54:db:eb:cb:
3c:df:42:eb:8e:13:43:75:81:3e:1a:39:70:36:97:
37:8d:1d:d4:75:48:ec:89:ef:39:69:c5:e9:4b:8c:
bb:74:7b:e4:65:9a:9a:10:38:bd:7e:cf:3c:ae:f3:
eb:79:7c:af:33:05:fa:0e:ac:d8:cf:6f:95:f6:58:
a2:4f:a8:2d:0c:54:91:bc:db:56:bc:5c:f3:98:07:
fe:ec:de:9a:27:b9:53:ff:01:2f:82:a4:91:3b:17:
1c:e3:69:be:55:64:12:a7:c2:74:06:4d:59:02:b0:
b2:45:e6:d2:ff:bf:1a:65:c9:68:b4:b6:82:3d:5e:
ec:8e:0c:8a:f1:89:cd:29:32:6a:0d:1e:f8:0f:23:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CF:BD:0E:64:94:A9:21:0D:0A:59:6A:28:19:50:F0:1B:E2:5C:E7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rM-9DmSUqSENCllqKBlQ8BviXOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
31.13.224.0/24
45.9.156.0/23
45.14.164.0/24
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/24
45.149.241.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
79.110.62.0/24
80.76.51.0/24
81.161.230.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0-87.120.127.255
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.50.0/24
93.123.39.0/24
93.123.85.0/24
93.123.109.0/24
94.103.125.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.104.0-94.156.106.255
94.156.166.0/23
94.156.179.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.48.251.0/24
194.49.94.0/24
194.55.186.0/24
194.169.175.0/24
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:c4:63:19:81:03:9f:f0:ab:50:30:60:69:66:60:01:6d:5d:
7a:1c:07:94:0e:b0:b8:4e:d3:38:33:c7:70:f1:40:d5:f7:48:
9a:1c:80:a5:56:ac:4d:2a:8a:ba:82:ee:d6:0a:cc:a3:2c:40:
ab:ee:4d:29:fb:65:92:d0:f2:60:db:44:43:54:2d:62:33:9a:
93:b6:77:38:8a:ab:a8:f0:fc:e8:fd:dc:aa:11:11:61:9f:86:
42:30:ce:df:dc:d1:2a:40:5c:09:e5:d7:9c:6d:40:6e:1c:87:
09:e3:9b:8f:53:8a:9b:0f:8a:25:50:3c:0f:32:c5:15:85:cb:
ad:4d:84:25:d2:17:90:c2:a3:df:11:e5:61:95:ce:5f:3c:11:
a1:56:31:b9:5a:b9:0e:97:92:77:7d:b0:b9:37:9c:00:09:f6:
a6:95:d1:8d:a9:a1:b3:0f:f1:94:4e:db:03:7d:e7:6b:95:42:
71:57:73:2c:f4:29:7f:b2:72:bd:69:73:75:92:c3:63:02:d4:
6a:62:e6:26:c5:74:34:66:c2:80:93:50:04:30:26:db:94:10:
f6:c0:7b:00:ee:16:c0:62:44:c5:98:ea:53:e5:6f:d3:28:48:
91:c7:46:a8:61:15:f7:eb:0d:28:ab:29:f7:19:26:e2:92:ac:
da:6e:1c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:42:12 2025 by rpki-client