Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/szYThjUKQ4ZzenxRiXkkQRzNA8M.roa
File: szYThjUKQ4ZzenxRiXkkQRzNA8M.roa (raw, json)
Hash identifier: ove1rZ4S+rF4GRtp7n3w4EBIkfux9RpNw88XGm5sPCU=
Subject key identifier: B3:36:13:86:35:0A:43:86:73:7A:7C:51:89:79:24:41:1C:CD:03:C3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01939B357032C943BF3DC45DA6AF2F12D9CF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/szYThjUKQ4ZzenxRiXkkQRzNA8M.roa
Signing time: Fri 06 Dec 2024 09:03:10 +0000
ROA not before: Fri 06 Dec 2024 09:03:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.12.255.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.90.88.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.179.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
194.49.94.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:35:70:32:c9:43:bf:3d:c4:5d:a6:af:2f:12:d9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 6 09:03:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3361386350a4386737a7c51897924411ccd03c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:b0:27:78:6c:00:69:ee:fa:06:1b:e0:bd:
91:90:9a:39:57:48:bd:0c:35:b9:16:a7:d8:49:48:
1d:8a:99:7e:4a:7f:42:1b:8c:ac:be:b1:ca:5f:4e:
52:a2:45:e1:b7:85:46:6c:eb:ab:b8:4c:fe:0f:42:
29:fb:2c:c4:a6:f7:e9:d4:82:9c:23:4d:3b:a9:eb:
59:6a:2b:c8:c9:e3:20:21:20:2c:15:bb:03:7a:42:
a0:24:f1:31:81:e6:e4:7b:97:53:ee:e0:68:06:09:
41:49:e9:e9:4f:d5:0e:30:2d:ac:67:7e:ad:b6:19:
a9:ce:c1:84:b0:f0:46:e6:4b:be:70:da:07:91:18:
10:7e:ea:09:86:1d:3e:59:40:63:99:3a:1a:32:31:
e7:82:46:41:14:e7:9c:05:2a:37:8e:46:0f:15:88:
7a:08:2b:a5:36:5f:b4:1a:ad:e2:38:a2:89:46:19:
8d:4a:90:37:e2:36:5d:74:6f:e7:93:c2:d7:26:26:
0e:0a:72:cb:c6:9d:5b:0c:b9:f8:bc:68:4d:49:b2:
2e:96:db:8f:37:0a:5d:5b:f0:31:6d:9b:7f:0b:78:
01:b4:bb:da:fd:4d:5e:18:89:4a:6a:0d:62:6e:c2:
24:b4:cd:51:d7:2d:5a:91:c0:ca:f7:3b:df:ed:04:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:13:86:35:0A:43:86:73:7A:7C:51:89:79:24:41:1C:CD:03:C3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/szYThjUKQ4ZzenxRiXkkQRzNA8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
45.14.164.0/24
45.66.228.0/24
45.88.64.0/24
45.90.88.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
93.123.24.0/24
93.123.84.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.179.0/24
141.98.1.0/24
147.78.100.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
194.49.94.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7c:ed:4c:dc:ba:ed:25:b2:61:08:bd:fb:c9:c3:9e:84:a0:
ba:14:d0:45:8f:32:30:73:94:31:97:7e:30:19:38:1e:5f:b6:
29:b2:c1:e3:11:c1:7f:0d:03:b2:6a:9e:51:53:c9:6b:7a:0e:
22:e1:e6:8a:60:dd:f7:b2:b6:9f:42:00:e6:20:0c:c9:8a:41:
ce:7c:62:db:a7:01:a5:72:05:c1:e7:4c:4c:4f:95:49:6a:45:
e8:03:e0:64:1d:03:e1:9f:1f:bf:52:e0:b5:0d:00:78:3c:d3:
5f:f8:90:de:07:e0:af:62:89:0e:ea:ed:18:93:56:74:b8:bd:
14:7c:92:dd:cc:d7:c9:ff:d7:74:af:2f:20:ed:76:53:f3:ef:
35:7f:3d:02:64:d2:1c:07:0e:a9:a2:9c:14:12:a5:8b:62:29:
65:36:87:51:bf:9c:22:62:c9:63:c0:88:3a:cd:71:af:6b:f2:
28:02:a9:3d:67:e7:6b:2d:ed:c9:a4:ad:7d:7b:e2:1a:93:e2:
35:f0:b3:c2:2b:e2:69:a1:9f:2d:66:9f:cb:2e:7a:fe:bd:55:
c3:c7:83:20:26:be:ba:79:46:5d:6d:20:ff:0b:c1:e2:6e:d6:
52:8f:70:74:f9:13:8d:a8:b4:1c:57:3a:2e:fd:a1:20:b2:be:
f4:c8:5b:48
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISAZObNXAyyUO/PcRdpq8vEtnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMjA2MDkwMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzM2MTM4NjM1MGE0Mzg2NzM3YTdjNTE4OTc5MjQ0MTFjY2QwM2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIywJ3hsAGnu+gYb4L2RkJo5V0i9
DDW5FqfYSUgdipl+Sn9CG4ysvrHKX05SokXht4VGbOuruEz+D0Ip+yzEpvfp1IKc
I007qetZaivIyeMgISAsFbsDekKgJPExgebke5dT7uBoBglBSenpT9UOMC2sZ36t
thmpzsGEsPBG5ku+cNoHkRgQfuoJhh0+WUBjmToaMjHngkZBFOecBSo3jkYPFYh6
CCulNl+0Gq3iOKKJRhmNSpA34jZddG/nk8LXJiYOCnLLxp1bDLn4vGhNSbIultuP
NwpdW/AxbZt/C3gBtLva/U1eGIlKag1ibsIktM1R1y1akcDK9zvf7QTb/wIDAQAB
o4ICyjCCAsYwHQYDVR0OBBYEFLM2E4Y1CkOGc3p8UYl5JEEczQPDMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvc3pZVGhqVUtRNFp6ZW54UmlYa2tRUnpOQThNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCByQQCAAEwgcIDBAAt
DP8DBAAtDqQDBAAtQuQDBAAtWEADBAAtWlgDBAAti2oDBAAtjZ4wDAMEAC2XWQME
Ai2XWAMEAFPbYQMEAFQ2MAMEAFd4VwMEAFd4pgMEAFd5LQMEAFd5VwMEAVd5fAME
AFd5ogMEAFd5pQMEBFtc8AMEAVx3xAMEAF17GAMEAF17VAMEAl6aoAMEAF6cCwME
A16cQAMEAF6cswMEAI1iAQMEAJNOZAMEAqsWSAMEArnYVAMEArnaVAMEAMIxXjAN
BgkqhkiG9w0BAQsFAAOCAQEAS3ztTNy67SWyYQi9+8nDnoSguhTQRY8yMHOUMZd+
MBk4Hl+2KbLB4xHBfw0DsmqeUVPJa3oOIuHmimDd97K2n0IA5iAMyYpBznxi26cB
pXIFwedMTE+VSWpF6APgZB0D4Z8fv1LgtQ0AeDzTX/iQ3gfgr2KJDurtGJNWdLi9
FHyS3czXyf/XdK8vIO12U/PvNX89AmTSHAcOqaKcFBKli2IpZTaHUb+cImLJY8CI
Os1xr2vyKAKpPWfnay3tyaStfXviGpPiNfCzwiviaaGfLWafyy56/r1Vw8eDICa+
unlGXW0g/wvB4m7WUo9wdPkTjai0HFc6Lv2hILK+9MhbSA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:38:11 2025 by rpki-client