Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/dox4sTk3EPL7FMfmlwRBRapfB-U.roa
File: dox4sTk3EPL7FMfmlwRBRapfB-U.roa (raw, json)
Hash identifier: bIg6h6FsLJezV+Gb7WXRBunGFnzM9ou8V8FUSzsp3kA=
Subject key identifier: 76:8C:78:B1:39:37:10:F2:FB:14:C7:E6:97:04:41:45:AA:5F:07:E5
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 098C5DB0
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/dox4sTk3EPL7FMfmlwRBRapfB-U.roa
Signing time: Mon 10 Jan 2022 09:37:34 +0000
ROA not before: Mon 10 Jan 2022 09:37:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207044
IP address blocks: 94.156.228.0/22 maxlen: 24
91.92.28.0/22 maxlen: 24
94.156.28.0/22 maxlen: 24
88.151.24.0/21 maxlen: 24
94.156.204.0/22 maxlen: 24
213.133.64.0/21 maxlen: 24
185.167.196.0/22 maxlen: 24
89.184.60.0/22 maxlen: 24
46.183.108.0/22 maxlen: 24
87.121.252.0/22 maxlen: 24
37.128.192.0/21 maxlen: 24
94.156.148.0/22 maxlen: 24
87.120.240.0/22 maxlen: 24
89.184.36.0/22 maxlen: 24
87.120.248.0/22 maxlen: 24
87.120.48.0/21 maxlen: 24
2a0b:ae00::/29 maxlen: 29
2a0b:ae00:1000::/38 maxlen: 38
2a0b:ae00:1400::/38 maxlen: 38
2a0b:ae00:1800::/38 maxlen: 38
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160193968 (0x98c5db0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Jan 10 09:37:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=768c78b1393710f2fb14c7e697044145aa5f07e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:0d:41:fb:2d:8f:42:67:81:86:99:bb:04:
c0:1f:8b:fa:a7:82:a6:5b:d6:14:67:70:96:ec:1b:
8d:17:0b:75:8e:82:47:50:1b:64:db:f3:2c:c6:d4:
c8:fa:1a:dd:0e:6c:18:ff:c2:c6:d1:74:c2:aa:df:
50:38:18:48:ba:00:b4:cb:b5:3e:39:4a:36:d4:0b:
4a:e8:2c:41:57:5e:d5:2d:17:f1:9e:d2:75:62:eb:
bf:55:d6:93:27:e7:3a:df:05:1c:e7:54:6a:af:bf:
2d:da:ee:83:19:c5:86:9b:a8:49:8e:aa:c9:ee:a1:
dc:36:f2:af:f6:71:7a:d1:5b:34:01:3e:7f:89:6e:
27:fb:d1:6a:f4:b2:d5:b6:7b:d6:5f:04:1b:67:b5:
b6:13:46:bc:a9:b3:89:e3:17:52:60:22:f0:5c:17:
ad:b8:f8:74:a3:fb:8a:04:78:3b:8c:b8:8c:f1:47:
a5:bd:f7:7c:f2:24:f5:bf:cd:81:d4:72:9e:7a:be:
75:fe:70:dd:7f:2a:d4:48:40:d1:7e:0d:bf:3c:0d:
0f:a4:90:c1:8e:fb:be:70:87:aa:a0:88:10:85:a9:
8e:5a:df:a5:14:6e:8b:c2:39:b2:ce:d8:9e:9d:4e:
12:73:00:51:7e:05:90:31:f9:7d:92:38:0f:40:d4:
c0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:78:B1:39:37:10:F2:FB:14:C7:E6:97:04:41:45:AA:5F:07:E5
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/dox4sTk3EPL7FMfmlwRBRapfB-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.192.0/21
46.183.108.0/22
87.120.48.0/21
87.120.240.0/22
87.120.248.0/22
87.121.252.0/22
88.151.24.0/21
89.184.36.0/22
89.184.60.0/22
91.92.28.0/22
94.156.28.0/22
94.156.148.0/22
94.156.204.0/22
94.156.228.0/22
185.167.196.0/22
213.133.64.0/21
IPv6:
2a0b:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
57:e2:ac:c4:c8:3b:78:0f:99:b1:23:23:2b:e2:3f:90:5f:a1:
a6:72:60:5f:2d:55:9e:e0:ce:cb:5b:a7:d8:02:e0:40:21:37:
d7:a2:89:57:30:d0:7f:ea:53:9d:34:ba:a6:83:ca:4a:1f:17:
d2:a1:ee:31:f6:28:42:af:95:ec:57:48:28:aa:a6:77:d2:87:
94:c1:24:19:fe:8a:2f:4d:b8:75:fc:d1:b7:36:3e:48:e2:e2:
7e:bb:91:ab:5b:1b:0d:45:c6:7e:81:c3:87:f1:86:76:c2:0c:
29:fa:d2:96:f2:4e:50:46:4e:f4:81:87:1e:12:c6:85:9e:06:
0d:13:e5:2a:3c:a9:97:84:6d:50:71:c1:b4:15:28:57:e6:a4:
1d:3c:b3:38:3b:65:37:1b:1f:08:71:58:c8:e8:c3:bc:fa:41:
b0:fc:06:07:87:ce:60:91:08:9f:d1:23:a6:d8:f4:a3:7b:2d:
9b:e3:46:78:0a:c2:42:ac:84:ca:8d:76:d6:c2:e1:67:89:ba:
92:2a:15:6a:70:4d:06:32:81:1f:68:c6:bc:fa:59:ce:3d:d1:
5d:e8:b4:e4:0b:c2:ad:39:aa:cc:4d:cc:3d:d2:ea:40:6e:c2:
00:0e:aa:af:bf:d8:ee:54:d0:0a:f8:57:2e:ee:33:de:c6:8f:
2c:45:4d:e8
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIECYxdsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MGQ5MzNlODI0NzQ2NTBjNmFhM2U5Y2JmMDU3NGQyNzI4NjU5MmU3MB4XDTIyMDEx
MDA5MzczNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzY4Yzc4YjEzOTM3
MTBmMmZiMTRjN2U2OTcwNDQxNDVhYTVmMDdlNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALssDUH7LY9CZ4GGmbsEwB+L+qeCplvWFGdwluwbjRcLdY6C
R1AbZNvzLMbUyPoa3Q5sGP/CxtF0wqrfUDgYSLoAtMu1PjlKNtQLSugsQVde1S0X
8Z7SdWLrv1XWkyfnOt8FHOdUaq+/LdrugxnFhpuoSY6qye6h3Dbyr/ZxetFbNAE+
f4luJ/vRavSy1bZ71l8EG2e1thNGvKmzieMXUmAi8FwXrbj4dKP7igR4O4y4jPFH
pb33fPIk9b/NgdRynnq+df5w3X8q1EhA0X4NvzwND6SQwY77vnCHqqCIEIWpjlrf
pRRui8I5ss7Ynp1OEnMAUX4FkDH5fZI4D0DUwJsCAwEAAaOCAnMwggJvMB0GA1Ud
DgQWBBR2jHixOTcQ8vsUx+aXBEFFql8H5TAfBgNVHSMEGDAWgBRA2TPoJHRlDGqj
6cvwV00nKGWS5zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FOa3o2Q1IwWlF4cW8tbkw4RmROSnlobGt1Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvMzg3OWRkLWVmOTUtNDVlNi04NzY3LWU2ODFlYmJhNGE0YS8x
L2RveDRzVGszRVBMN0ZNZm1sd1JCUmFwZkItVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
Mzg3OWRkLWVmOTUtNDVlNi04NzY3LWU2ODFlYmJhNGE0YS8xL1FOa3o2Q1IwWlF4
cW8tbkw4RmROSnlobGt1Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
iAYIKwYBBQUHAQcBAf8EeTB3MGYEAgABMGADBAMlgMADBAIut2wDBANXeDADBAJX
ePADBAJXePgDBAJXefwDBANYlxgDBAJZuCQDBAJZuDwDBAJbXBwDBAJenBwDBAJe
nJQDBAJenMwDBAJenOQDBAK5p8QDBAPVhUAwDQQCAAIwBwMFAyoLrgAwDQYJKoZI
hvcNAQELBQADggEBAFfirMTIO3gPmbEjIyviP5BfoaZyYF8tVZ7gzstbp9gC4EAh
N9eiiVcw0H/qU500uqaDykofF9Kh7jH2KEKvlexXSCiqpnfSh5TBJBn+ii9NuHX8
0bc2Pkji4n67katbGw1Fxn6Bw4fxhnbCDCn60pbyTlBGTvSBhx4SxoWeBg0T5So8
qZeEbVBxwbQVKFfmpB08szg7ZTcbHwhxWMjow7z6QbD8BgeHzmCRCJ/RI6bY9KN7
LZvjRngKwkKshMqNdtbC4WeJupIqFWpwTQYygR9oxrz6Wc490V3otOQLwq05qsxN
zD3S6kBuwgAOqq+/2O5U0Ar4Vy7uM97GjyxFTeg=
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:52:08 2025 by rpki-client