Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vTIGuFcZCSmU9H9al19mEhFoZNk.roa
File: vTIGuFcZCSmU9H9al19mEhFoZNk.roa (raw, json)
Hash identifier: j3rgkWObQYGEQHw/NVS05C/9JCbX7T/KsIWDT7JOyrU=
Subject key identifier: BD:32:06:B8:57:19:09:29:94:F4:7F:5A:97:5F:66:12:11:68:64:D9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282454E4A081A708E41A90818EC869E4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vTIGuFcZCSmU9H9al19mEhFoZNk.roa
Signing time: Thu 02 Jan 2025 17:50:57 +0000
ROA not before: Thu 02 Jan 2025 17:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.9.157.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.84.0/23 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.102.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.237.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:54:e4:a0:81:a7:08:e4:1a:90:81:8e:c8:69:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd3206b85719092994f47f5a975f6612116864d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:b2:7e:7a:af:c9:8e:16:57:3e:ab:3d:6d:
bd:08:a3:d0:86:1b:a9:c6:eb:95:22:64:91:5b:62:
14:62:a4:0a:60:47:11:5f:23:bb:c7:a1:50:e8:cd:
68:b5:c7:d0:76:c8:9f:d1:a5:65:91:ff:ef:21:45:
13:a3:6c:2a:72:14:b7:c1:d8:5d:fe:0b:9f:18:9b:
4a:ed:b8:f8:7d:aa:44:87:c6:da:cf:ad:7e:46:26:
16:f6:7c:39:a8:58:b4:d7:a0:87:b9:80:5c:0d:4c:
4b:cc:aa:6f:ed:43:d6:8b:86:88:c9:09:97:d6:62:
67:41:d8:9b:49:d8:a3:b6:dc:b2:86:4b:f4:1e:6a:
86:10:9c:d6:ed:b1:34:96:92:3d:21:2a:a8:34:b1:
c0:70:12:14:ba:ae:29:0b:4d:b4:d8:92:7b:d3:4f:
c2:74:50:4a:ed:dd:ec:1a:c7:4a:b6:44:59:93:cd:
a0:1d:54:9e:c3:69:15:23:d6:9a:ca:9f:30:d8:a7:
71:10:9f:04:01:26:b7:30:a0:0c:03:12:ed:7a:d2:
04:08:38:0c:61:41:00:6a:21:94:16:61:ee:fa:ca:
7d:34:28:38:cf:8e:b2:44:74:68:f7:a5:5a:a2:ef:
12:f0:eb:d5:70:84:51:2b:73:05:d5:9b:10:0d:1b:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:32:06:B8:57:19:09:29:94:F4:7F:5A:97:5F:66:12:11:68:64:D9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vTIGuFcZCSmU9H9al19mEhFoZNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.157.0/24
45.12.255.0/24
45.14.164.0/24
45.66.228.0/24
45.66.230.0/24
45.88.64.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.62.0/24
81.161.239.0/24
83.219.97.0/24
84.54.48.0/24
85.209.133.0/24
87.120.84.0/24
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.84.0/23
87.121.87.0/24
87.121.105.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.48.0/24
92.249.50.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.102.0/24
94.156.179.0/24
94.156.248.0/24
95.214.27.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.237.0/24
185.216.71.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.49.94.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b9:a6:ca:7e:58:a0:e4:cb:eb:75:05:01:1b:a5:e1:de:1f:
07:c0:23:00:49:91:20:b6:c3:00:f5:3c:30:5b:2a:d7:f5:a0:
f1:85:1c:58:f0:88:d8:b3:b3:3e:87:6e:1b:08:e6:7c:aa:af:
a1:2a:fb:c3:b6:a6:91:d2:87:ee:94:c8:b6:db:18:a7:0c:af:
54:c0:74:c8:a2:a3:3c:5a:c8:3e:22:af:ae:1c:c0:ab:b8:88:
5e:36:82:59:78:f9:3c:b9:22:f2:02:9e:f4:b5:4f:df:29:c3:
30:e6:24:e2:d8:4b:dd:a3:d5:27:bd:6f:14:32:53:66:ca:49:
13:c0:c0:2c:fe:1e:40:f5:ae:29:51:b2:0c:13:45:a0:9a:0a:
77:47:9c:f7:16:b8:43:7b:8a:95:83:1b:47:35:40:ab:f8:58:
57:92:87:88:02:00:d8:b6:75:b4:a9:2c:39:1c:5a:87:ea:0a:
51:4a:ea:fd:17:89:7c:13:9a:e4:ed:de:de:8a:e8:a9:19:96:
24:bb:33:3b:87:0f:ba:f8:19:bb:b8:ee:eb:db:f0:57:13:77:
2c:50:17:63:4d:29:81:a4:90:43:86:1d:9f:be:e5:4e:fc:c5:
89:95:85:3d:fa:e4:2f:85:c2:b1:37:64:00:9e:6d:f1:cc:2f:
07:1b:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:24:05 2025 by rpki-client