Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/Jt2iHruLXW8X4cDiOSGyEn5InHM.roa
File: Jt2iHruLXW8X4cDiOSGyEn5InHM.roa (raw, json)
Hash identifier: NL3453qbEBhZv4OHBgSDMVyVSOBqF9Gyfw+aimCbOGQ=
Subject key identifier: 26:DD:A2:1E:BB:8B:5D:6F:17:E1:C0:E2:39:21:B2:12:7E:48:9C:73
Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial: 01942445980881F5FE62327A8A0EB1FC51F7
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/Jt2iHruLXW8X4cDiOSGyEn5InHM.roa
Signing time: Wed 01 Jan 2025 23:48:48 +0000
ROA not before: Wed 01 Jan 2025 23:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31617
IP address blocks: 45.66.100.0/22 maxlen: 24
45.92.148.0/22 maxlen: 24
62.192.148.0/22 maxlen: 24
91.241.86.0/23 maxlen: 24
185.186.92.0/22 maxlen: 24
185.252.52.0/22 maxlen: 24
192.166.252.0/24 maxlen: 24
192.172.232.0/24 maxlen: 24
192.188.248.0/24 maxlen: 24
192.207.14.0/24 maxlen: 24
193.23.114.0/24 maxlen: 24
194.143.142.0/23 maxlen: 24
195.88.230.0/23 maxlen: 24
195.88.234.0/23 maxlen: 24
217.26.180.0/22 maxlen: 24
2a0b:7380::/29 maxlen: 29
2a0c:2140::/29 maxlen: 29
2a0d:9b40::/29 maxlen: 29
2a0e:2140::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:98:08:81:f5:fe:62:32:7a:8a:0e:b1:fc:51:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26dda21ebb8b5d6f17e1c0e23921b2127e489c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:a7:3e:22:e2:9f:43:25:fc:6e:dc:ea:ae:
79:ad:7f:d7:a0:ed:3a:48:12:bf:8f:7d:8d:95:3f:
de:a3:d3:74:0c:b4:a9:ed:20:2a:59:02:15:0c:1b:
35:5d:a0:d9:72:9a:6b:6a:99:f6:6e:c7:21:a5:30:
5c:bd:86:a9:93:39:d4:3a:1e:73:dd:44:4e:33:d7:
76:dc:da:12:84:cf:61:60:75:18:60:45:a6:2a:2a:
d6:52:54:fd:84:f2:28:c3:75:91:50:f5:fc:ed:2e:
4b:e3:28:8c:8e:ed:21:7c:0e:75:ed:40:6c:02:8f:
7b:a7:50:0e:8e:9c:7d:ca:05:a0:6d:9d:79:5d:dc:
5e:98:c2:d6:0c:7c:03:15:5c:58:9d:d8:43:9f:9a:
14:0a:8f:5c:d7:7b:92:c4:1c:5b:ce:77:e6:5f:0e:
79:fb:49:da:04:16:0b:8f:8b:30:5a:1c:2f:f2:d3:
55:04:d6:77:38:01:68:66:d3:61:24:aa:13:7d:b1:
94:1a:f3:fc:46:5e:d8:49:f3:5e:9c:88:93:23:f2:
7d:9e:29:a5:eb:51:f5:db:69:60:4e:06:67:f0:9a:
05:ce:ba:3b:82:08:01:08:6e:cc:11:6a:44:0a:08:
96:08:e2:9f:95:d6:d0:4d:ad:e7:1d:94:fd:4d:1f:
90:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:A2:1E:BB:8B:5D:6F:17:E1:C0:E2:39:21:B2:12:7E:48:9C:73
X509v3 Authority Key Identifier:
keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/Jt2iHruLXW8X4cDiOSGyEn5InHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.100.0/22
45.92.148.0/22
62.192.148.0/22
91.241.86.0/23
185.186.92.0/22
185.252.52.0/22
192.166.252.0/24
192.172.232.0/24
192.188.248.0/24
192.207.14.0/24
193.23.114.0/24
194.143.142.0/23
195.88.230.0/23
195.88.234.0/23
217.26.180.0/22
IPv6:
2a0b:7380::/29
2a0c:2140::/29
2a0d:9b40::/29
2a0e:2140::/29
Signature Algorithm: sha256WithRSAEncryption
a2:c2:d1:ef:d6:52:e7:ee:4a:07:15:00:bc:bb:79:b6:49:d1:
ee:ed:cd:99:b6:af:58:45:29:ee:38:f0:f9:11:8b:e6:4c:dd:
e7:50:a1:7a:96:fa:71:b0:74:de:56:af:fd:fa:b6:46:18:24:
a8:5f:fe:50:6e:f1:49:e8:2c:eb:4f:63:10:42:b7:c7:e0:b1:
94:56:d8:99:34:05:d9:13:83:ad:97:e1:b3:96:d5:19:18:4f:
cd:1e:98:da:f5:73:76:9d:67:d6:6b:66:fb:4c:cb:cf:c8:ca:
56:88:92:f4:8f:3e:d5:a1:18:60:4a:47:17:90:5a:ce:60:c2:
79:63:4b:b2:96:1d:80:08:3f:3e:6e:95:81:ee:bb:23:9e:94:
8d:3f:26:32:25:8b:50:ca:bb:73:67:23:72:fe:fe:4d:17:5f:
3f:b0:26:c6:49:28:04:f7:82:21:92:35:98:16:5f:6a:8b:52:
15:e6:76:ea:08:48:7b:ae:23:6b:2c:9f:50:00:14:db:3e:20:
aa:10:46:d4:b2:3f:01:23:6d:ec:72:cc:4f:41:4d:02:7e:f4:
83:39:5d:3e:8f:20:92:1a:a8:cd:f8:ea:62:24:18:2c:76:2f:
a9:2f:d5:8c:09:d8:29:ca:bb:ad:0d:41:0f:ce:09:7c:c5:e1:
f7:2d:a2:81
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQkRZgIgfX+YjJ6ig6x/FH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjMxMDA0ZGYxMzVhYTFhOGI5NDMwMzNkYjE0NjkxYjEx
YTYzZGQwHhcNMjUwMTAxMjM0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmRkYTIxZWJiOGI1ZDZmMTdlMWMwZTIzOTIxYjIxMjdlNDg5YzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz6nPiLin0Ml/G7c6q55rX/XoO06
SBK/j32NlT/eo9N0DLSp7SAqWQIVDBs1XaDZcpprapn2bschpTBcvYapkznUOh5z
3UROM9d23NoShM9hYHUYYEWmKirWUlT9hPIow3WRUPX87S5L4yiMju0hfA517UBs
Ao97p1AOjpx9ygWgbZ15XdxemMLWDHwDFVxYndhDn5oUCo9c13uSxBxbznfmXw55
+0naBBYLj4swWhwv8tNVBNZ3OAFoZtNhJKoTfbGUGvP8Rl7YSfNenIiTI/J9niml
61H122lgTgZn8JoFzro7gggBCG7MEWpECgiWCOKfldbQTa3nHZT9TR+QTwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCbdoh67i11vF+HA4jkhshJ+SJxzMB8GA1UdIwQY
MBaAFKizEATfE1qhqLlDAz2xRpGxGmPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQt
YzJhNDNiMDgwZDZmLzEvSnQyaUhydUxYVzhYNGNEaU9TR3lFbjVJbkhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQtYzJhNDNiMDgwZDZm
LzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjBgBAIAATBaAwQCLUJk
AwQCLVyUAwQCPsCUAwQBW/FWAwQCubpcAwQCufw0AwQAwKb8AwQAwKzoAwQAwLz4
AwQAwM8OAwQAwRdyAwQBwo+OAwQBw1jmAwQBw1jqAwQC2Rq0MCIEAgACMBwDBQMq
C3OAAwUDKgwhQAMFAyoNm0ADBQMqDiFAMA0GCSqGSIb3DQEBCwUAA4IBAQCiwtHv
1lLn7koHFQC8u3m2SdHu7c2Ztq9YRSnuOPD5EYvmTN3nUKF6lvpxsHTeVq/9+rZG
GCSoX/5QbvFJ6CzrT2MQQrfH4LGUVtiZNAXZE4Otl+GzltUZGE/NHpja9XN2nWfW
a2b7TMvPyMpWiJL0jz7VoRhgSkcXkFrOYMJ5Y0uylh2ACD8+bpWB7rsjnpSNPyYy
JYtQyrtzZyNy/v5NF18/sCbGSSgE94IhkjWYFl9qi1IV5nbqCEh7riNrLJ9QABTb
PiCqEEbUsj8BI23scsxPQU0CfvSDOV0+jyCSGqjN+OpiJBgsdi+pL9WMCdgpyrut
DUEPzgl8xeH3LaKB
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:12:04 2025 by rpki-client