Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uAVXM8Gy_4VIPCNHpqhuvnpP2A0.roa
File: uAVXM8Gy_4VIPCNHpqhuvnpP2A0.roa (raw, json)
Hash identifier: cyRK/V/lwokLDbVCnD5IYFuhComaoso2AOGfmjlbZDc=
Subject key identifier: B8:05:57:33:C1:B2:FF:85:48:3C:23:47:A6:A8:6E:BE:7A:4F:D8:0D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195B3BB47CA156CB144B5E6FA572E666977
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uAVXM8Gy_4VIPCNHpqhuvnpP2A0.roa
Signing time: Thu 20 Mar 2025 13:25:50 +0000
ROA not before: Thu 20 Mar 2025 13:25:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.105.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:bb:47:ca:15:6c:b1:44:b5:e6:fa:57:2e:66:69:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 20 13:25:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8055733c1b2ff85483c2347a6a86ebe7a4fd80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8c:2f:10:ba:4a:71:ab:2b:7e:7d:f3:ab:91:
6d:1e:bd:38:17:c2:b3:d6:54:6c:04:0b:da:fd:5f:
c8:04:92:d6:49:b6:a1:d1:bc:06:4f:0f:58:9e:cd:
38:79:df:fb:7f:3e:69:6d:21:b4:18:84:cd:c2:33:
6e:0f:2d:44:5c:37:03:50:93:18:84:48:cc:e8:7c:
3b:dc:ce:e4:ce:7e:5e:41:9e:45:68:73:bb:b7:c1:
50:ef:d1:dd:a0:05:02:df:2f:ce:14:ca:2a:64:68:
8b:da:db:7d:db:31:21:b6:32:ed:2c:db:b6:51:d1:
25:7f:a2:c3:b7:dc:13:ae:fe:d6:ba:60:db:6b:44:
c6:9a:e0:90:ea:cb:6f:75:68:6a:50:5b:47:3e:aa:
94:62:de:83:37:bf:3e:39:4c:a5:aa:f2:e7:2f:ba:
b9:70:83:d1:89:c7:d5:d1:b6:e5:22:30:25:dc:7d:
ac:62:b0:2f:fc:51:95:f9:a4:03:b2:d1:d2:27:cd:
b1:02:23:d1:66:fa:07:76:e3:40:03:2c:c9:5a:1b:
de:f6:7c:93:80:79:75:c2:11:14:9d:97:fb:06:21:
ff:61:c4:45:93:17:dd:da:17:56:81:33:dc:b7:5e:
57:98:69:df:4d:19:71:3f:f0:8f:cb:a6:6b:e9:1c:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:05:57:33:C1:B2:FF:85:48:3C:23:47:A6:A8:6E:BE:7A:4F:D8:0D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uAVXM8Gy_4VIPCNHpqhuvnpP2A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.9.156.0/23
45.14.164.0/24
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0-87.120.127.255
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.50.0/24
93.123.109.0/24
94.154.160.0/22
94.156.64.0/21
94.156.105.0/24
94.156.167.0/24
94.156.179.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
193.25.216.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
37:30:45:a1:e6:78:8b:d3:6b:de:b1:62:04:6f:98:b1:ce:37:
ec:d1:fb:8d:0a:f4:87:5a:48:1b:d2:dc:a4:77:88:ce:b6:7b:
6d:8a:90:3e:28:08:66:8d:e3:97:6e:8b:94:d5:0a:d6:8f:28:
de:73:53:72:0b:da:80:45:90:fc:6c:83:e6:65:c4:0b:f3:30:
73:88:ca:9b:b1:e0:6d:23:cc:ba:98:86:97:55:4d:61:8e:87:
05:0f:48:a2:0c:da:7f:d7:40:5a:39:c3:ae:b1:99:81:8a:c2:
a1:69:f4:21:c3:98:7a:17:1a:91:36:fb:b7:2b:a1:5b:46:0e:
46:51:2e:ea:60:b7:e4:da:53:74:8e:04:10:fe:50:2e:40:18:
43:2d:ea:92:7a:da:fb:5e:c0:1d:20:08:e0:10:5d:08:11:f0:
ef:6c:da:25:8c:72:f0:84:5f:95:78:a0:04:00:e3:66:a8:70:
6f:bb:09:ea:69:17:01:fa:07:fb:4a:14:87:5c:cf:a9:49:70:
f6:24:53:c7:b4:0f:c6:3f:fd:ff:e6:b0:06:52:7c:6d:85:18:
94:d4:c4:f6:dc:67:b0:7d:d2:5e:5f:83:81:f2:d9:3a:36:41:
f3:1a:28:88:40:bb:a6:8b:59:6d:a9:dc:67:74:c1:ee:cf:23:
c2:24:b9:1b
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgISAZWzu0fKFWyxRLXm+lcuZml3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMzIwMTMyNTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODA1NTczM2MxYjJmZjg1NDgzYzIzNDdhNmE4NmViZTdhNGZkODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IwvELpKcasrfn3zq5FtHr04F8Kz
1lRsBAva/V/IBJLWSbah0bwGTw9Yns04ed/7fz5pbSG0GITNwjNuDy1EXDcDUJMY
hEjM6Hw73M7kzn5eQZ5FaHO7t8FQ79HdoAUC3y/OFMoqZGiL2tt92zEhtjLtLNu2
UdElf6LDt9wTrv7WumDba0TGmuCQ6stvdWhqUFtHPqqUYt6DN78+OUylqvLnL7q5
cIPRicfV0bblIjAl3H2sYrAv/FGV+aQDstHSJ82xAiPRZvoHduNAAyzJWhve9nyT
gHl1whEUnZf7BiH/YcRFkxfd2hdWgTPct15XmGnfTRlxP/CPy6Zr6Rx5lQIDAQAB
o4IDLTCCAykwHQYDVR0OBBYEFLgFVzPBsv+FSDwjR6aobr56T9gNMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdUFWWE04R3lfNFZJUENOSHBxaHV2bnBQMkEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBQQYIKwYBBQUHAQcBAf8EggEwMIIBLDCCASgEAgABMIIB
IAMEAgX8hAMEAS0JnAMEAC0OpAMEAC1C5AMEAS1C5gMEAC1YQAMEAC1Z9wMEAC1a
WQMEAC2LagMEAC2NnjAMAwQALZdZAwQCLZdYAwQAT24yAwQAUaHuAwQAU9thAwQA
VDYwAwQAV3hXMAwDBARXeHADBAFXeHQDBAFXeHgwDAMEAFd4fQMEB1d4AAMEAFd4
pgMEAFd5LQMEAFd5VwMEAVd5fAMEAFd5ogMEAFd5pQMEBFtc8AMEAVx3xAMEAFz5
MgMEAF17bQMEAl6aoAMEA16cQAMEAF6caQMEAF6cpwMEAF6cswMEAG3O7QMEAI1i
AQMEAI1iBgMEAJNOZAMEAqsWSAMEALLX4AMEArnYVAMEAMEZ2AMEAMI3ugMEAMKp
rzANBgkqhkiG9w0BAQsFAAOCAQEANzBFoeZ4i9Nr3rFiBG+Ysc437NH7jQr0h1pI
G9LcpHeIzrZ7bYqQPigIZo3jl26LlNUK1o8o3nNTcgvagEWQ/GyD5mXEC/Mwc4jK
m7HgbSPMupiGl1VNYY6HBQ9Iogzaf9dAWjnDrrGZgYrCoWn0IcOYehcakTb7tyuh
W0YORlEu6mC35NpTdI4EEP5QLkAYQy3qknra+17AHSAI4BBdCBHw72zaJYxy8IRf
lXigBADjZqhwb7sJ6mkXAfoH+0oUh1zPqUlw9iRTx7QPxj/9/+awBlJ8bYUYlNTE
9txnsH3SXl+DgfLZOjZB8xooiEC7potZbancZ3TB7s8jwiS5Gw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:39:08 2025 by rpki-client