Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/ufOmqbntNQ1bxTowVTWtGreoG30.roa
File: ufOmqbntNQ1bxTowVTWtGreoG30.roa (raw, json)
Hash identifier: wDUN8+Yf7bKMpCwCuHhbRc+p6FBr4e3LOClm24TYjRQ=
Subject key identifier: B9:F3:A6:A9:B9:ED:35:0D:5B:C5:3A:30:55:35:AD:1A:B7:A8:1B:7D
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 01825A78E5256F7D1C76E93BDC071D5D6F30
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/ufOmqbntNQ1bxTowVTWtGreoG30.roa
Signing time: Mon 01 Aug 2022 17:34:08 +0000
ROA not before: Mon 01 Aug 2022 17:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34458
IP address blocks: 46.20.108.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
46.20.110.0/24 maxlen: 24
46.20.97.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
46.20.105.0/24 maxlen: 24
46.20.100.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.100.170.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.100.169.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:78:e5:25:6f:7d:1c:76:e9:3b:dc:07:1d:5d:6f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Aug 1 17:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9f3a6a9b9ed350d5bc53a305535ad1ab7a81b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:3f:3c:7f:c0:cf:96:29:f6:26:f5:12:4b:
11:a4:3f:be:70:9d:6f:c0:36:e6:06:43:aa:8e:2f:
e6:0f:16:51:4e:57:db:0b:db:6f:23:5d:da:5f:46:
d2:ff:36:b2:49:cd:f3:71:83:de:de:98:58:fb:46:
ac:2c:df:c2:75:0c:e5:01:a5:54:d2:1f:a6:ba:22:
af:b9:21:f7:6c:f3:43:22:8f:4a:c2:3b:53:64:c7:
7a:4b:cf:d8:82:b0:2b:ba:9d:f2:20:cf:3e:eb:26:
c5:4c:01:89:ba:57:9b:2c:86:86:57:27:53:cc:cf:
29:16:c8:f1:fb:2b:07:cd:25:94:28:04:63:6b:80:
b6:04:cc:40:51:02:4d:8f:d6:b8:60:bb:2e:07:fb:
ca:96:32:5b:6c:dc:36:0d:66:fd:d0:c2:f3:2d:25:
61:6d:76:d6:9c:63:3a:f8:69:01:3f:19:aa:d4:a0:
36:3e:ef:34:8a:62:b3:04:8b:f1:e4:eb:e5:20:a7:
35:e2:2e:a3:fd:de:04:e2:d2:06:29:0b:82:aa:0c:
bb:ba:4e:c0:a5:63:9e:84:3c:18:70:a1:8c:25:0c:
26:f8:f0:0b:c8:15:36:09:34:63:18:98:6f:7d:41:
0d:b2:75:9f:25:66:a3:14:d9:88:60:54:40:1f:78:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F3:A6:A9:B9:ED:35:0D:5B:C5:3A:30:55:35:AD:1A:B7:A8:1B:7D
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/ufOmqbntNQ1bxTowVTWtGreoG30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.100.0/23
46.20.104.0-46.20.106.255
46.20.108.0/24
46.20.110.0/23
185.100.168.0/22
185.160.194.0/24
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
9a:5d:8e:8f:06:eb:26:aa:59:82:6e:00:35:1a:74:1e:c3:1b:
5d:cc:ea:45:43:d4:fb:86:60:61:58:ae:58:a5:7f:98:c5:04:
2d:36:23:16:7e:48:57:ae:04:38:69:6a:3a:50:84:f5:bc:59:
8a:da:c8:a8:64:c2:d7:82:98:5c:b8:f2:9f:f4:d9:d7:76:7f:
b2:a0:ec:77:c9:84:4d:85:3e:f9:25:61:5a:78:47:d4:2d:a8:
2a:77:48:be:3c:3c:ce:2d:ea:88:63:ff:50:7a:a9:7a:72:7a:
bc:8d:21:32:fe:67:d9:c3:78:fb:5d:65:d3:26:df:83:30:e2:
0e:7d:18:83:1e:b7:73:ef:d3:4e:b1:29:22:48:41:61:20:73:
00:a5:0a:c9:a6:97:71:7c:5f:13:3f:0d:80:fe:f9:cb:c2:90:
57:fd:84:8b:0f:0d:bc:63:5b:2a:ca:10:22:35:c5:20:01:a4:
77:92:02:cf:49:e7:4a:e5:04:6c:53:68:74:3b:3d:62:79:d9:
17:09:7e:1c:4a:41:6d:b2:a1:df:80:73:c9:8f:e6:6a:0d:33:
56:56:b5:59:17:67:fd:3e:b2:bc:ef:ec:c4:c7:98:c2:a4:2d:
78:94:c2:7d:4d:e5:6c:82:d3:35:c0:df:5e:9a:ed:dc:e6:f8:
77:b3:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:02:30 2025 by rpki-client