Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/8EG_WXXRB9ZJ_rN86zWPbQhAY9g.roa
File: 8EG_WXXRB9ZJ_rN86zWPbQhAY9g.roa (raw, json)
Hash identifier: YTXiljF7sAU3nW+AV5ohQ7zr96Dg6Mzvcn5BWe2RIGc=
Subject key identifier: F0:41:BF:59:75:D1:07:D6:49:FE:B3:7C:EB:35:8F:6D:08:40:63:D8
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 0183AC2A3F9E7CD05967F33C9801C54AE567
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/8EG_WXXRB9ZJ_rN86zWPbQhAY9g.roa
Signing time: Thu 06 Oct 2022 07:19:53 +0000
ROA not before: Thu 06 Oct 2022 07:19:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34458
IP address blocks: 46.20.108.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
46.20.110.0/24 maxlen: 24
46.20.97.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
46.20.105.0/24 maxlen: 24
46.20.100.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.100.170.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.100.169.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:2a:3f:9e:7c:d0:59:67:f3:3c:98:01:c5:4a:e5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Oct 6 07:19:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f041bf5975d107d649feb37ceb358f6d084063d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:c9:92:8a:dd:44:fc:c0:84:76:0a:84:b5:
ac:e4:3c:19:54:06:6f:28:cd:9c:da:b8:8e:ff:82:
69:2c:5c:c0:f3:d8:0f:1d:0d:53:92:af:43:bf:8d:
15:0f:74:86:bf:4d:1a:78:cb:6f:b6:c5:d8:f3:9f:
62:09:fc:ab:d1:e9:cb:0d:54:cc:a5:97:be:ba:a3:
c7:50:9f:a5:33:46:fc:30:ed:b4:5d:e5:bb:b8:9d:
93:d5:ba:32:42:35:50:ad:be:ee:0e:9f:e8:73:69:
87:0b:2a:ab:6c:9d:ed:2a:10:3f:ed:e5:8e:8d:1e:
61:26:b4:9a:18:1c:65:71:50:6b:83:d2:4d:4d:3e:
5f:89:c7:33:d1:82:2c:fb:0c:b5:ab:2e:92:3d:21:
0c:b5:9f:df:14:53:74:3f:aa:9a:fb:d0:81:bb:a8:
4f:ee:5f:ae:30:17:c7:4e:a8:94:40:7a:70:5f:7f:
73:b4:ab:6f:46:68:37:b2:5e:e2:4b:23:52:cf:31:
f3:63:1e:ab:cf:5c:8a:f5:5c:81:c3:17:ed:d7:aa:
05:0c:8b:dc:98:4b:31:cd:2b:da:82:e6:3e:a6:a8:
06:ab:46:23:a4:87:21:28:41:21:e6:28:05:36:24:
70:23:ca:91:24:3a:27:ac:b0:91:d4:18:4c:cd:df:
5f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:41:BF:59:75:D1:07:D6:49:FE:B3:7C:EB:35:8F:6D:08:40:63:D8
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/8EG_WXXRB9ZJ_rN86zWPbQhAY9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.100.0/23
46.20.104.0-46.20.106.255
46.20.108.0/24
46.20.110.0/23
185.100.168.0/22
185.160.194.0/24
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
76:05:e9:e4:81:96:6e:45:88:ed:4f:ec:d4:d8:ef:db:29:2a:
28:0d:35:24:19:77:18:4b:3e:c0:36:21:4f:69:a5:6c:25:34:
2a:86:22:a2:73:19:1e:82:98:77:a1:b7:e7:f4:cf:0e:62:bf:
73:ca:3a:98:b0:1e:a9:5e:fb:38:dc:16:f4:49:0e:bb:e5:1c:
69:cb:f7:28:89:73:20:3a:bc:9b:58:62:cd:5f:57:af:8c:c9:
1d:7c:4a:01:15:a1:c6:92:ef:5f:ad:bf:a4:05:f3:85:92:6f:
0d:64:c2:7f:5d:b3:41:f7:ba:83:83:e3:9b:99:b6:57:66:b7:
99:df:f8:9a:f3:13:59:6e:ef:2a:78:a7:70:a5:ec:23:03:21:
e0:36:dc:3d:b6:55:54:4b:13:c2:08:c5:60:0c:98:e3:8d:2a:
d3:01:f4:b5:ff:27:39:98:13:e0:45:eb:68:85:ea:6b:2d:1e:
41:61:e8:fa:cf:3c:24:e6:42:83:9e:31:dc:14:68:77:79:98:
f6:98:1d:9c:90:69:8b:9f:1b:c3:62:16:c9:ef:72:ac:ce:8b:
68:1e:95:cd:f9:79:35:bc:cf:90:f2:0e:85:b3:a5:fd:92:b1:
7a:aa:fa:e7:a0:45:90:e0:9b:95:53:1f:99:e5:db:c8:17:8b:
af:5d:95:93
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAYOsKj+efNBZZ/M8mAHFSuVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZGQwZWJmZjViYTM4YTg3NThiNzk0ZDA0ZDYyOTA1MTk0
YTMyNjYwHhcNMjIxMDA2MDcxOTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDQxYmY1OTc1ZDEwN2Q2NDlmZWIzN2NlYjM1OGY2ZDA4NDA2M2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+TJkordRPzAhHYKhLWs5DwZVAZv
KM2c2riO/4JpLFzA89gPHQ1Tkq9Dv40VD3SGv00aeMtvtsXY859iCfyr0enLDVTM
pZe+uqPHUJ+lM0b8MO20XeW7uJ2T1boyQjVQrb7uDp/oc2mHCyqrbJ3tKhA/7eWO
jR5hJrSaGBxlcVBrg9JNTT5ficcz0YIs+wy1qy6SPSEMtZ/fFFN0P6qa+9CBu6hP
7l+uMBfHTqiUQHpwX39ztKtvRmg3sl7iSyNSzzHzYx6rz1yK9VyBwxft16oFDIvc
mEsxzSvaguY+pqgGq0YjpIchKEEh5igFNiRwI8qRJDonrLCR1BhMzd9fVQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFPBBv1l10QfWSf6zfOs1j20IQGPYMB8GA1UdIwQY
MBaAFBHdDr/1ujiodYt5TQTWKQUZSjJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYt
ZjE3NjEzZWE0OWU3LzEvOEVHX1dYWFJCOVpKX3JOODZ6V1BiUWhBWTlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYtZjE3NjEzZWE0OWU3
LzEvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQALhRhAwQB
LhRkMAwDBAMuFGgDBAAuFGoDBAAuFGwDBAEuFG4DBAK5ZKgDBAC5oMIwDAMEALmp
3QMEBbmpwDANBgkqhkiG9w0BAQsFAAOCAQEAdgXp5IGWbkWI7U/s1Njv2ykqKA01
JBl3GEs+wDYhT2mlbCU0KoYionMZHoKYd6G35/TPDmK/c8o6mLAeqV77ONwW9EkO
u+Ucacv3KIlzIDq8m1hizV9Xr4zJHXxKARWhxpLvX62/pAXzhZJvDWTCf12zQfe6
g4Pjm5m2V2a3md/4mvMTWW7vKnincKXsIwMh4DbcPbZVVEsTwgjFYAyY440q0wH0
tf8nOZgT4EXraIXqay0eQWHo+s88JOZCg54x3BRod3mY9pgdnJBpi58bw2IWye9y
rM6LaB6Vzfl5NbzPkPIOhbOl/ZKxeqr656BFkOCblVMfmeXbyBeLr12Vkw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:18:38 2025 by rpki-client