Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/ZBT0qrqIWoS3J2y3rOfPkn-10Tw.roa
File: ZBT0qrqIWoS3J2y3rOfPkn-10Tw.roa (raw, json)
Hash identifier: YRwgf1Ycfqw5cOMJkJ/FueZx7NnZMDB+8QNJ0rddPxc=
Subject key identifier: 64:14:F4:AA:BA:88:5A:84:B7:27:6C:B7:AC:E7:CF:92:7F:B5:D1:3C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 0195D1C80E40DDFBEC85A4E160965420C43B
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/ZBT0qrqIWoS3J2y3rOfPkn-10Tw.roa
Signing time: Wed 26 Mar 2025 09:28:23 +0000
ROA not before: Wed 26 Mar 2025 09:28:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202
IP address blocks: 5.159.208.0/21 maxlen: 24
5.181.72.0/22 maxlen: 24
31.192.96.0/21 maxlen: 24
45.8.100.0/22 maxlen: 24
45.132.108.0/22 maxlen: 24
45.137.44.0/22 maxlen: 24
80.74.240.0/21 maxlen: 24
80.74.248.0/21 maxlen: 24
83.150.252.0/22 maxlen: 24
85.95.96.0/19 maxlen: 24
92.42.120.0/21 maxlen: 24
95.129.64.0/21 maxlen: 24
176.58.0.0/21 maxlen: 24
185.79.184.0/22 maxlen: 24
185.90.0.0/22 maxlen: 24
185.94.204.0/22 maxlen: 24
185.99.76.0/22 maxlen: 24
185.145.88.0/22 maxlen: 24
185.178.216.0/22 maxlen: 24
185.182.200.0/23 maxlen: 24
185.204.212.0/22 maxlen: 24
185.229.4.0/22 maxlen: 24
185.246.132.0/22 maxlen: 24
185.247.200.0/22 maxlen: 24
185.248.252.0/24 maxlen: 24
185.248.253.0/24 maxlen: 24
185.248.254.0/24 maxlen: 24
185.248.255.0/24 maxlen: 24
188.94.16.0/21 maxlen: 24
193.24.3.0/24 maxlen: 24
193.24.6.0/24 maxlen: 24
193.24.13.0/24 maxlen: 24
193.24.31.0/24 maxlen: 24
195.26.32.0/19 maxlen: 24
195.88.8.0/23 maxlen: 24
212.11.68.0/22 maxlen: 24
212.11.72.0/22 maxlen: 24
217.145.128.0/20 maxlen: 24
2a00:f1c0::/32 maxlen: 32
2a0d:7680::/29 maxlen: 29
2a0d:bf80::/29 maxlen: 29
2a0e:a1c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:c8:0e:40:dd:fb:ec:85:a4:e1:60:96:54:20:c4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Mar 26 09:28:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6414f4aaba885a84b7276cb7ace7cf927fb5d13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:23:55:14:e7:b5:6f:c5:03:c8:5a:e3:d0:
f5:0f:29:5c:67:47:1c:cb:63:61:fd:89:bc:c1:69:
cc:fa:57:a6:80:cf:d4:1c:88:de:59:10:82:cf:45:
87:05:94:19:0f:c4:ad:d7:ec:8d:ea:fc:79:a4:7d:
20:30:b0:24:57:d0:7b:e1:de:d3:5d:39:d6:ba:5e:
6e:7f:55:22:66:78:c9:a1:73:aa:87:1a:31:a0:1f:
f7:e1:4c:0d:fa:3f:fd:9b:1b:97:14:14:da:dd:c3:
fe:05:f0:de:b8:31:7a:d6:d4:14:d3:23:45:d3:86:
88:e2:6d:0b:bd:f7:d0:16:30:7b:5d:d6:45:e7:b8:
8d:79:eb:b8:23:2c:28:4e:ea:c1:2c:4f:d2:fb:26:
da:d6:5f:a3:d3:3d:38:f2:2b:11:de:11:a6:c8:9c:
ac:09:be:39:df:0e:c7:83:59:86:08:70:d4:9c:a1:
ac:8c:b0:84:c3:0a:22:0b:91:66:b4:e9:44:9e:1d:
5e:88:f5:18:04:c3:20:37:e0:68:d6:91:a0:e7:d5:
16:d7:f7:ff:88:8e:ac:ef:ba:0d:ba:d7:a6:20:67:
55:52:d9:95:b0:14:8c:00:67:78:24:49:4f:1e:3f:
d0:0b:3c:09:b1:e6:7f:b8:fa:26:62:00:3d:a3:49:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:14:F4:AA:BA:88:5A:84:B7:27:6C:B7:AC:E7:CF:92:7F:B5:D1:3C
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/ZBT0qrqIWoS3J2y3rOfPkn-10Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.208.0/21
5.181.72.0/22
31.192.96.0/21
45.8.100.0/22
45.132.108.0/22
45.137.44.0/22
80.74.240.0/20
83.150.252.0/22
85.95.96.0/19
92.42.120.0/21
95.129.64.0/21
176.58.0.0/21
185.79.184.0/22
185.90.0.0/22
185.94.204.0/22
185.99.76.0/22
185.145.88.0/22
185.178.216.0/22
185.182.200.0/23
185.204.212.0/22
185.229.4.0/22
185.246.132.0/22
185.247.200.0/22
185.248.252.0/22
188.94.16.0/21
193.24.3.0/24
193.24.6.0/24
193.24.13.0/24
193.24.31.0/24
195.26.32.0/19
195.88.8.0/23
212.11.68.0-212.11.75.255
217.145.128.0/20
IPv6:
2a00:f1c0::/32
2a0d:7680::/29
2a0d:bf80::/29
2a0e:a1c0::/29
Signature Algorithm: sha256WithRSAEncryption
2f:0b:ff:01:39:d6:b0:bd:73:3c:73:2a:1f:72:66:b8:04:26:
2f:82:55:e1:61:56:3f:53:74:f7:9e:de:86:1d:2e:58:1a:62:
8c:9d:2b:f8:fa:5e:c2:bc:7f:b1:af:2b:be:ca:a5:4c:98:65:
75:d3:c4:86:66:bb:87:5b:66:9b:61:24:58:cb:d9:df:23:df:
92:bf:14:b9:66:9b:0a:f6:8c:46:72:7f:1e:cc:f6:63:b9:b1:
ec:71:c4:aa:79:a0:7f:ff:55:19:29:6c:ed:e2:f7:22:aa:c1:
53:ec:1a:e3:f7:98:9d:74:3e:2d:ea:c9:a1:2f:f5:35:1a:1e:
e0:fa:78:b3:99:dc:68:30:5c:1a:17:a3:be:2e:fa:00:38:8b:
57:4e:40:72:43:50:29:11:cf:c6:f9:c2:5a:0a:a1:bb:d1:2e:
97:31:aa:30:21:aa:db:70:a9:78:7c:d5:93:48:c3:3b:70:40:
f6:99:5a:b0:14:d1:68:81:07:64:91:cf:8b:da:63:7a:fd:83:
8c:f5:ae:f7:0f:9e:a3:5a:82:23:e4:a9:67:6c:fb:10:6d:a0:
f2:03:7b:50:79:ce:76:21:dd:17:86:e5:2b:c1:7a:36:0e:eb:
30:29:91:f0:09:d5:e6:b5:7a:8d:18:ac:ab:9a:c5:9e:d3:68:
21:95:6c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:08:42 2025 by rpki-client