Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/EOWu1a2MUCaS9B9fYZ-Gpo7wEMg.roa
File: EOWu1a2MUCaS9B9fYZ-Gpo7wEMg.roa (raw, json)
Hash identifier: y4FhEUJpvy9Nxk65njh+31aK738Hg98cdkTLCIxmfCE=
Subject key identifier: 10:E5:AE:D5:AD:8C:50:26:92:F4:1F:5F:61:9F:86:A6:8E:F0:10:C8
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0194AC0C5588FFBF3DDB07A2A3908B9D6D42
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/EOWu1a2MUCaS9B9fYZ-Gpo7wEMg.roa
Signing time: Tue 28 Jan 2025 08:34:36 +0000
ROA not before: Tue 28 Jan 2025 08:34:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 94.131.2.0/24 maxlen: 24
94.131.2.0/32 maxlen: 32
94.131.3.0/24 maxlen: 24
94.131.3.0/32 maxlen: 32
94.131.96.0/24 maxlen: 24
94.131.97.0/24 maxlen: 24
94.131.98.0/24 maxlen: 24
94.131.99.0/24 maxlen: 24
94.131.99.0/32 maxlen: 32
94.131.100.0/24 maxlen: 24
94.131.101.0/24 maxlen: 24
94.131.102.0/24 maxlen: 24
94.131.103.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
94.131.108.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
94.131.120.0/22 maxlen: 24
95.164.0.0/22 maxlen: 24
95.164.4.0/22 maxlen: 24
95.164.8.0/22 maxlen: 24
95.164.16.0/22 maxlen: 24
95.164.19.0/32 maxlen: 32
95.164.21.0/24 maxlen: 24
95.164.22.0/24 maxlen: 24
95.164.23.0/24 maxlen: 24
95.164.32.0/21 maxlen: 24
95.164.44.0/22 maxlen: 24
95.164.51.0/24 maxlen: 24
95.164.60.0/22 maxlen: 24
95.164.68.0/24 maxlen: 24
95.164.69.0/24 maxlen: 24
95.164.84.0/22 maxlen: 24
95.164.88.0/24 maxlen: 24
95.164.89.0/24 maxlen: 24
95.164.112.0/21 maxlen: 24
95.164.114.0/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:0c:55:88:ff:bf:3d:db:07:a2:a3:90:8b:9d:6d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 28 08:34:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10e5aed5ad8c502692f41f5f619f86a68ef010c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:fa:c9:96:c4:ef:83:6a:5b:09:89:9b:85:
07:59:d0:47:2d:50:56:f3:5d:9b:3b:bc:9f:8b:e5:
f2:9a:c4:8b:2e:37:8a:c7:09:7d:26:0e:e1:8e:94:
7c:16:6f:90:43:4f:bf:8b:06:3e:99:c2:53:05:1e:
82:c2:0a:bd:6d:b2:28:e3:97:8c:e8:b3:db:5f:52:
2d:bb:e1:99:b1:25:2f:46:ea:08:bb:78:d2:a2:b4:
b9:a5:ad:2c:f0:ae:53:28:56:df:1a:44:72:ef:ec:
b9:9b:2c:88:cb:51:7f:d3:d8:1f:38:45:c7:db:93:
b5:8e:bc:33:e7:92:0b:8b:4a:21:d7:db:a3:f4:e4:
d0:1a:c8:f0:87:c4:4b:d1:b8:69:e7:28:3f:60:7e:
11:da:e0:b4:4d:6f:02:ca:3b:06:20:90:64:da:1e:
ab:81:c0:20:b2:70:8e:e0:76:31:bc:8a:05:79:88:
65:fa:e4:13:ea:b7:87:8b:5e:ce:e4:6b:d4:9f:73:
47:3b:25:21:e0:d1:ce:b2:e8:23:13:55:4e:9c:60:
56:0d:a4:eb:45:27:46:8e:d5:71:e9:6c:0d:7a:a1:
d5:d5:86:f7:06:75:67:97:0c:ed:c6:34:39:06:d2:
f6:12:4c:e8:46:2a:1c:e5:68:8b:fe:d4:92:b6:42:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E5:AE:D5:AD:8C:50:26:92:F4:1F:5F:61:9F:86:A6:8E:F0:10:C8
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/EOWu1a2MUCaS9B9fYZ-Gpo7wEMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.2.0/23
94.131.96.0/20
94.131.120.0/22
95.164.0.0-95.164.11.255
95.164.16.0/22
95.164.21.0-95.164.23.255
95.164.32.0/21
95.164.44.0/22
95.164.51.0/24
95.164.60.0/22
95.164.68.0/23
95.164.84.0-95.164.89.255
95.164.112.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:8c:9d:ce:1e:76:09:18:19:d9:35:f4:4a:32:ec:7e:92:1c:
9f:b0:09:e7:63:53:90:73:fb:8e:25:48:fc:bb:e8:2a:8d:80:
0f:02:8c:33:fe:54:46:43:17:f2:b1:6b:b9:a4:09:9c:65:37:
0a:3c:07:f8:73:60:9c:c0:fe:48:d4:8d:cc:8e:fe:d1:e6:7d:
f2:2e:03:65:59:eb:d9:bb:a7:1f:d1:98:1b:90:b9:00:32:50:
30:68:f4:fb:f1:ab:ed:a9:4d:28:3f:5a:7c:a3:54:a6:20:0a:
67:5b:40:08:9a:f5:e0:66:c4:86:4c:19:c0:fd:6b:98:3b:03:
04:0e:d7:b3:97:8c:c5:40:16:25:8a:a1:a5:ac:7b:23:f7:bf:
a9:ec:72:9a:e7:b2:2c:b4:42:41:9d:8b:e7:3a:47:2f:7c:31:
8f:1c:b3:ce:66:67:73:89:59:fd:91:1e:25:be:dc:87:c8:01:
eb:7b:33:92:28:a4:60:a9:cc:7d:da:25:d9:da:f7:5c:ac:3b:
55:bf:ec:ac:4d:54:95:da:19:90:31:45:fb:b5:ba:7e:f5:6a:
47:82:ea:65:be:0c:11:7b:0e:6b:21:ae:d3:65:45:9f:39:bd:
b2:e1:b9:50:7d:6c:cb:d7:0b:cc:df:33:bd:c5:fd:4b:bc:74:
49:da:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:24 2025 by rpki-client