Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/44LCjb9N8c31Pn-ASG-rt2NNdaw.roa
File: 44LCjb9N8c31Pn-ASG-rt2NNdaw.roa (raw, json)
Hash identifier: ybCHdi85E4MCRE/dn+qMLmBZ/yHldnifqGSEeBrUwAI=
Subject key identifier: E3:82:C2:8D:BF:4D:F1:CD:F5:3E:7F:80:48:6F:AB:B7:63:4D:75:AC
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 03BA908C
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/44LCjb9N8c31Pn-ASG-rt2NNdaw.roa
Signing time: Wed 15 Jun 2022 09:29:44 +0000
ROA not before: Wed 15 Jun 2022 09:29:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34458
IP address blocks: 46.20.108.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
46.20.110.0/24 maxlen: 24
46.20.97.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
46.20.105.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.100.170.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.100.169.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62558348 (0x3ba908c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Jun 15 09:29:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e382c28dbf4df1cdf53e7f80486fabb7634d75ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:53:d7:38:58:1b:5c:00:4e:f7:7e:18:90:
ee:e3:4f:61:4f:b1:bd:18:e0:e9:e1:92:58:21:25:
88:a8:52:4f:32:7b:e0:3c:f9:42:9d:93:75:df:d5:
62:30:eb:0c:5f:b3:3d:b9:1b:91:09:62:14:94:f1:
3e:90:d0:e7:c6:0c:7c:f5:ff:8c:e5:2e:f2:46:9f:
18:07:6a:b4:30:8c:3e:b6:09:82:6b:24:15:50:7f:
96:21:ae:96:d1:a3:6c:84:52:4f:3c:a3:e1:47:99:
35:0a:ce:dd:9b:4d:c7:b9:2b:85:05:51:eb:30:a1:
f4:8c:9c:bc:26:56:c7:e9:bf:2d:3f:74:ea:f0:9b:
fd:3b:d5:ff:9f:24:af:67:a5:15:b7:86:42:62:af:
f1:58:2d:e0:fc:a5:be:86:ba:b1:f3:e3:54:61:02:
6a:e3:40:63:c3:ad:6f:7a:52:7d:c2:f7:39:01:27:
bb:79:db:c0:b3:c6:b0:5d:89:af:40:3f:5f:2c:06:
f4:75:c3:bc:11:e7:fb:c1:97:b6:65:11:e2:d8:07:
28:75:21:d2:9d:3b:64:ed:04:ac:48:ee:b3:6c:0a:
c0:c3:0c:8d:31:f8:2e:f5:8b:93:78:da:a2:9f:81:
38:f8:ea:3c:32:f1:14:67:0f:13:b9:85:c9:7d:05:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:C2:8D:BF:4D:F1:CD:F5:3E:7F:80:48:6F:AB:B7:63:4D:75:AC
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/44LCjb9N8c31Pn-ASG-rt2NNdaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.101.0/24
46.20.104.0-46.20.106.255
46.20.108.0/24
46.20.110.0/23
185.100.168.0/22
185.160.194.0/24
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
04:4f:da:42:2c:d5:da:9c:8a:7d:f3:b7:24:75:e3:d7:75:63:
e2:c7:e6:f6:d8:9d:53:17:ab:a5:c3:c7:4f:5d:bb:aa:41:0a:
5d:44:31:64:b9:74:fd:52:df:42:b4:ac:6b:85:25:26:48:30:
d6:2c:a3:a9:a3:09:d1:ce:12:18:81:34:77:27:2b:e8:1b:14:
c3:1c:a8:01:b6:99:6e:f7:6c:7b:99:34:ac:bc:12:47:0e:14:
87:f7:56:a0:70:fd:e0:42:5d:a2:27:91:a9:c9:0d:2b:69:1a:
d5:85:97:64:f4:fb:4c:e8:3f:ab:4a:aa:09:c7:23:80:df:90:
6d:4d:bd:75:a7:fc:e5:6d:ce:93:11:98:2b:a8:c8:15:30:51:
65:4d:35:2f:43:22:b6:95:0d:b6:e7:ff:96:8b:8f:08:e1:07:
d0:97:bd:cb:24:2f:64:f0:da:7d:d8:65:ac:02:ac:38:26:d7:
6d:cd:3b:d9:78:9f:ae:f6:4d:7d:79:66:30:2d:dc:45:0b:d3:
98:bd:9b:00:00:4e:f5:19:51:ba:c2:ab:42:74:91:18:d9:95:
de:e9:f2:4b:d6:56:7c:e4:7c:0d:a5:93:a0:4e:41:88:3b:e6:
31:a9:25:e3:a2:61:e1:49:e6:1e:66:f7:48:d5:e6:e6:74:a1:
8a:bf:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:07:17 2025 by rpki-client