Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/MhFx9pSRdkBihiypybKIPyYXtp4.roa
File: MhFx9pSRdkBihiypybKIPyYXtp4.roa (raw, json)
Hash identifier: 1PFdqYr+QIMmHUlVueJAkXiwiv4rdZeeprIyJ5Uy4p8=
Subject key identifier: 32:11:71:F6:94:91:76:40:62:86:2C:A9:C9:B2:88:3F:26:17:B6:9E
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 3660A4F2
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/MhFx9pSRdkBihiypybKIPyYXtp4.roa
Signing time: Sat 01 Jan 2022 15:01:18 +0000
ROA not before: Sat 01 Jan 2022 15:01:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196921
IP address blocks: 94.187.151.0/24 maxlen: 24
94.187.152.0/24 maxlen: 24
94.187.150.0/24 maxlen: 24
94.187.148.0/24 maxlen: 24
94.187.149.0/24 maxlen: 24
94.187.146.0/24 maxlen: 24
94.187.147.0/24 maxlen: 24
94.187.155.0/24 maxlen: 24
94.187.156.0/24 maxlen: 24
94.187.153.0/24 maxlen: 24
94.187.154.0/24 maxlen: 24
94.187.158.0/24 maxlen: 24
94.187.159.0/24 maxlen: 24
94.187.157.0/24 maxlen: 24
94.187.160.0/19 maxlen: 19
94.187.160.0/21 maxlen: 21
94.187.168.0/21 maxlen: 21
94.187.179.0/24 maxlen: 24
94.187.178.0/24 maxlen: 24
94.187.176.0/24 maxlen: 24
94.187.177.0/24 maxlen: 24
94.187.176.0/21 maxlen: 21
94.187.180.0/24 maxlen: 24
94.187.183.0/24 maxlen: 24
94.187.184.0/23 maxlen: 23
94.187.181.0/24 maxlen: 24
94.187.182.0/24 maxlen: 24
94.187.184.0/21 maxlen: 21
94.187.187.0/24 maxlen: 24
94.187.190.0/24 maxlen: 24
94.187.191.0/24 maxlen: 24
94.187.128.0/21 maxlen: 21
94.187.128.0/19 maxlen: 19
94.187.132.0/24 maxlen: 24
94.187.134.0/24 maxlen: 24
94.187.135.0/24 maxlen: 24
94.187.133.0/24 maxlen: 24
94.187.138.0/24 maxlen: 24
94.187.136.0/21 maxlen: 21
94.187.136.0/24 maxlen: 24
94.187.137.0/24 maxlen: 24
94.187.139.0/24 maxlen: 24
94.187.141.0/24 maxlen: 24
94.187.142.0/24 maxlen: 24
94.187.140.0/24 maxlen: 24
94.187.145.0/24 maxlen: 24
94.187.143.0/24 maxlen: 24
94.187.144.0/22 maxlen: 22
94.187.144.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912303346 (0x3660a4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Jan 1 15:01:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=321171f69491764062862ca9c9b2883f2617b69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:54:91:a2:49:85:b3:77:d7:9d:af:54:2e:bd:
4a:5f:d4:2a:41:e1:92:09:c3:07:56:d5:03:c5:1d:
1a:f1:62:e7:03:8c:66:31:d5:76:f2:c5:d8:d2:ad:
8f:26:27:25:1e:29:1d:7a:53:97:c9:8e:a7:ca:8b:
46:04:24:22:ce:2a:84:72:ee:08:69:e7:c6:1c:22:
d4:ef:cc:ee:83:68:d5:d4:bc:bb:04:4d:89:b5:87:
ee:4b:50:67:52:c0:a0:05:94:2c:25:dc:c2:ee:a2:
b6:dc:ac:d7:6f:83:c5:07:bc:0b:4a:48:4b:3b:c9:
80:bb:ab:fe:c4:5d:c7:ca:35:09:2e:9f:4a:57:71:
f0:d5:fa:37:04:35:8f:ec:35:cd:11:7c:15:46:0f:
03:73:64:c7:f1:0d:14:16:25:8b:95:84:a7:5c:2a:
ff:ff:16:21:de:e6:2e:ca:45:b4:f1:c7:cd:60:35:
af:ef:b3:44:73:3e:0c:8e:78:08:42:d6:7a:35:b5:
79:9a:5a:c9:55:8c:a4:39:4c:40:ea:cb:1d:83:2e:
44:e9:63:ac:f9:10:e3:8a:4e:2c:8d:6c:ff:b4:c2:
5d:11:ae:16:a8:8a:11:11:79:d0:66:69:44:9d:27:
2f:59:1e:eb:d5:94:2e:c6:46:82:bc:59:30:e7:67:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:11:71:F6:94:91:76:40:62:86:2C:A9:C9:B2:88:3F:26:17:B6:9E
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/MhFx9pSRdkBihiypybKIPyYXtp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.187.128.0/18
Signature Algorithm: sha256WithRSAEncryption
31:2c:0d:da:9a:ec:53:2d:e3:55:b7:88:77:c0:15:f8:47:d3:
37:a1:06:ee:af:c3:f2:15:5d:7a:b9:dd:46:cf:3a:6f:67:4f:
92:5a:e2:c3:9f:f0:db:e1:08:d4:b6:63:12:99:2c:96:21:79:
da:b7:d0:be:81:3f:d6:31:44:fd:6b:1c:cf:7b:df:5b:1b:69:
32:ed:88:c7:b1:81:31:49:de:16:c1:87:18:65:3d:1a:d6:12:
6b:90:84:0f:a5:a2:33:6b:ff:9a:c6:fe:2e:e2:1a:c1:5c:1a:
31:f1:b0:c6:c1:ab:cb:bd:a0:6a:2c:e2:86:25:df:4d:a7:06:
67:72:60:0b:ab:3f:88:c3:a2:34:7f:68:22:0e:be:08:77:39:
40:7b:c1:f1:ab:56:9f:ed:82:b6:76:cc:61:46:63:65:4a:19:
7b:16:80:48:b7:92:02:2e:74:e0:82:56:1d:e0:f1:40:df:f9:
75:06:b8:27:4f:20:15:ac:34:12:48:01:37:5e:28:ca:aa:ef:
3b:95:3a:2b:54:f5:a1:b1:a9:08:a7:b7:eb:60:b7:b9:93:22:
f8:f1:25:a2:a3:be:19:e0:c4:0c:30:af:c2:11:83:aa:cc:5d:
b7:e3:f3:32:0f:93:40:79:5b:8a:9e:eb:f7:8e:13:7a:54:f4:
6e:ab:ed:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:29:55 2025 by rpki-client