Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/d7i0ysnVWbTMXTg3Ig-Y8efDEUQ.roa
File: d7i0ysnVWbTMXTg3Ig-Y8efDEUQ.roa (raw, json)
Hash identifier: PuWL63T7smLpQwPwhD/1W2hN92O5TZ129OcHT03nw9k=
Subject key identifier: 77:B8:B4:CA:C9:D5:59:B4:CC:5D:38:37:22:0F:98:F1:E7:C3:11:44
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747C8539FC4A031E8F2569003404977
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/d7i0ysnVWbTMXTg3Ig-Y8efDEUQ.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
5.182.48.0/24 maxlen: 24
45.81.20.0/22 maxlen: 24
45.90.144.0/22 maxlen: 24
45.140.220.0/22 maxlen: 24
45.154.196.0/22 maxlen: 24
77.83.240.0/22 maxlen: 24
77.83.243.0/24 maxlen: 24
78.108.217.0/24 maxlen: 24
83.143.116.0/22 maxlen: 24
83.143.116.0/24 maxlen: 24
85.202.160.0/22 maxlen: 24
89.190.156.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
185.185.40.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
185.227.68.0/22 maxlen: 24
185.227.71.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.242.225.0/24 maxlen: 24
193.31.30.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
212.107.12.0/22 maxlen: 24
212.107.14.0/24 maxlen: 24
2a0b:b82::/44 maxlen: 44
2a0b:b84::/32 maxlen: 32
2a0b:b85::/32 maxlen: 32
2a0b:b86::/40 maxlen: 48
2a0b:b87:ff12::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b87:ffd2::/48 maxlen: 48
2a0b:b87:ffda::/48 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:7080:10::/48 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:7080:20::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0d:77c0::/29 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c8:53:9f:c4:a0:31:e8:f2:56:90:03:40:49:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77b8b4cac9d559b4cc5d3837220f98f1e7c31144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:44:b6:94:29:22:df:82:42:02:0c:d4:5c:
d0:2b:8c:b5:42:8f:e4:ca:0a:d9:d8:3b:6a:93:3f:
b7:08:2b:29:9f:d3:ad:4e:4f:ca:97:03:e2:fe:ae:
0f:1c:3c:c3:08:b0:44:c8:47:da:fb:d3:64:1a:28:
32:33:18:69:16:4e:8d:c8:4b:a5:27:4f:a1:5a:15:
a8:b3:ca:5a:56:3d:d8:d9:05:a6:54:27:1b:86:7d:
95:71:4b:37:97:8f:26:2f:5f:d6:d7:6f:a4:4e:72:
e6:bf:7d:ed:59:3f:ce:38:b8:7d:55:60:f7:80:6e:
fe:b6:78:bd:4a:60:cf:cc:17:25:2e:09:c2:26:c0:
44:20:c0:45:75:49:60:1e:f0:43:59:56:92:79:2a:
97:63:61:78:01:92:aa:f4:b7:65:23:64:ee:7b:8c:
4a:23:8a:9c:61:72:f9:27:e9:ca:e3:d5:9b:8b:e5:
e7:86:a7:6b:66:38:2c:1e:f1:77:db:d1:8d:32:e4:
e9:1e:44:b7:e9:d1:b9:0b:72:1f:29:6d:9d:e2:5d:
f3:bf:78:91:df:67:8b:65:2f:1a:56:b9:1a:87:36:
c9:28:3d:dd:67:b1:d9:1d:14:d5:a2:ce:3d:e4:5a:
07:04:96:5f:e7:44:02:0e:a4:05:02:f8:56:04:ea:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B8:B4:CA:C9:D5:59:B4:CC:5D:38:37:22:0F:98:F1:E7:C3:11:44
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/d7i0ysnVWbTMXTg3Ig-Y8efDEUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/24
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
45.154.196.0/22
77.83.240.0/22
78.108.217.0/24
83.143.116.0/22
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/22
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.30.0/24
193.34.76.0/22
193.221.192.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::-2a0b:b86:ff:ffff:ffff:ffff:ffff:ffff
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffd2::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:6f:80:c9:41:46:c4:66:7b:6d:ef:32:55:ba:92:3f:02:b3:
30:05:6a:2e:38:2a:d9:2d:71:d7:20:44:67:ba:29:e7:30:28:
7a:68:9d:07:27:cd:c9:cd:e0:a9:e3:29:67:cb:17:06:ea:74:
85:04:f8:99:5e:19:23:83:37:49:28:b4:07:6a:23:c3:31:f3:
c0:b3:1f:ec:e7:59:14:62:6a:dc:87:16:8b:b8:73:a8:60:42:
c1:2f:49:e4:7c:ca:7f:48:b4:cb:ca:68:bd:39:e9:f1:a2:82:
c2:b9:7f:b5:54:e5:e0:aa:27:1d:7c:24:af:ea:86:30:30:c6:
09:e9:7e:45:7f:d6:aa:f6:bb:5d:27:62:da:00:0c:13:1f:51:
73:fe:6a:81:c8:cd:fe:78:1e:c3:88:25:0a:16:92:d7:75:73:
b9:a6:22:44:a9:82:39:2f:21:9a:9f:8f:f8:af:eb:8e:cc:c4:
44:24:6e:74:e6:58:0e:cb:f9:a4:a0:33:80:1a:e8:10:88:9c:
b1:42:6d:22:24:69:bb:b1:88:93:e1:1c:d0:fd:f4:ea:b0:ba:
8d:0b:cd:8f:58:21:63:56:60:98:0d:20:c7:25:88:5c:39:1b:
f5:48:b3:c2:f8:32:4d:2d:7d:f8:0b:73:61:93:78:32:77:7a:
a8:6d:ef:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:13:28 2025 by rpki-client