Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wjgFm1oF67Sw9mWdEJTHToi-NIc.roa
File: wjgFm1oF67Sw9mWdEJTHToi-NIc.roa (raw, json)
Hash identifier: VNiO9G3SWWM7YAdKlBKXxCKIRGBYP2BvpA8IyRjbt/w=
Subject key identifier: C2:38:05:9B:5A:05:EB:B4:B0:F6:65:9D:10:94:C7:4E:88:BE:34:87
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019574FEA4B3BF5E6FEE9099B4E8DA939312
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wjgFm1oF67Sw9mWdEJTHToi-NIc.roa
Signing time: Sat 08 Mar 2025 09:03:20 +0000
ROA not before: Sat 08 Mar 2025 09:03:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.106.0/24 maxlen: 32
94.156.119.0/24 maxlen: 24
94.156.166.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:74:fe:a4:b3:bf:5e:6f:ee:90:99:b4:e8:da:93:93:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 8 09:03:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c238059b5a05ebb4b0f6659d1094c74e88be3487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:f9:c4:e1:b6:cd:20:15:25:d3:df:70:6c:
ca:b2:81:3d:e4:07:5f:64:7d:85:af:b7:45:3e:ac:
2b:ff:c2:21:17:44:63:f5:97:26:c4:80:4f:e5:e8:
51:b0:45:c3:c4:59:6f:80:58:95:e5:bf:6a:93:21:
21:47:ff:63:41:1e:c9:3d:3b:75:a8:46:3a:b6:b0:
bf:46:08:b2:b8:71:2b:0a:1b:00:ca:c4:4b:57:e6:
e6:b7:59:23:34:9b:ea:2a:6e:da:ae:7b:af:42:1c:
d1:c4:15:4f:85:27:a6:c8:bd:62:68:48:e5:5d:9b:
f0:f9:0f:c5:54:c1:17:19:4f:75:7b:20:f2:e8:99:
5e:57:be:62:13:fa:3c:a6:b4:f3:85:c6:97:7a:64:
98:84:8f:5d:12:52:b3:be:a8:5e:9b:41:47:6f:66:
d8:23:17:f5:fc:bf:11:14:e2:9d:24:66:77:08:6f:
7a:bf:ca:42:43:c8:f9:cb:1f:45:78:86:d9:a9:d6:
5d:97:b5:5b:f6:bb:c3:71:ef:8a:64:50:cc:19:ac:
1e:3b:ca:b3:57:ad:9d:ef:2d:8b:84:8d:bd:01:15:
e1:7d:d3:ef:52:5d:a1:37:21:ac:8f:18:8e:80:75:
3d:0b:70:d5:90:6b:a0:02:86:fa:e0:a3:d9:05:e1:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:38:05:9B:5A:05:EB:B4:B0:F6:65:9D:10:94:C7:4E:88:BE:34:87
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wjgFm1oF67Sw9mWdEJTHToi-NIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.9.156.0/23
45.14.164.0/24
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/24
45.149.241.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
79.110.62.0/24
81.161.230.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0-87.120.127.255
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.50.0/24
93.123.109.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.104.0-94.156.106.255
94.156.119.0/24
94.156.166.0/23
94.156.179.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.49.94.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
07:75:ad:d9:a4:b6:65:17:76:21:5b:e3:8d:b8:08:14:21:83:
d2:bb:a2:06:c8:08:1f:2a:c4:61:58:49:41:30:a9:c6:da:4d:
6c:b6:b4:1e:65:df:43:e4:df:39:ad:cb:d8:6d:7b:09:17:36:
4f:5b:4a:8e:92:94:1e:d4:c4:3f:e3:df:95:67:8e:9b:8a:63:
65:f3:37:bd:d3:10:ce:db:05:8d:0b:d3:9a:fc:55:b9:cf:4b:
fc:4d:33:35:4b:2f:a8:42:69:bd:d5:05:de:17:3a:f8:01:16:
c9:e3:ca:b9:74:50:77:77:61:a8:28:42:62:23:ca:ee:21:8a:
10:39:09:03:a5:9b:68:37:4c:b8:84:b9:f4:3a:55:b1:eb:4e:
8c:1b:25:11:fe:00:d6:57:4c:c8:0a:5c:17:5a:99:a1:6d:1e:
a8:c6:84:85:8a:2d:db:c6:86:39:13:57:2b:b0:9d:25:de:c6:
c1:b2:08:0c:9b:9c:54:52:bb:6d:22:fa:5c:08:10:b4:ab:ef:
c8:9d:87:33:ac:9f:75:24:6c:96:8f:6b:fe:fc:be:d4:86:e4:
38:b2:c1:1f:d4:d8:92:2c:c2:44:82:81:7f:b4:a5:b7:89:41:
31:89:f8:47:b3:bd:79:1e:ab:4f:4c:a7:d7:f7:ec:0f:82:b3:
0d:f4:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:36:07 2025 by rpki-client