Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/GqvNhnVjjZOaWK7n0H8syLAQbvY.roa
File: GqvNhnVjjZOaWK7n0H8syLAQbvY.roa (raw, json)
Hash identifier: 47FgYhD9NSzjkmQIOYf6zHNbO/DsvrYU9TYac1suuy0=
Subject key identifier: 1A:AB:CD:86:75:63:8D:93:9A:58:AE:E7:D0:7F:2C:C8:B0:10:6E:F6
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01906D86F2FDFE53D4D82C8ED6725A2C99DF
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/GqvNhnVjjZOaWK7n0H8syLAQbvY.roa
Signing time: Mon 01 Jul 2024 09:01:18 +0000
ROA not before: Mon 01 Jul 2024 09:01:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200598
IP address blocks: 24.235.22.0/23 maxlen: 24
31.187.92.0/22 maxlen: 24
66.9.96.0/20 maxlen: 24
69.72.72.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.110.184.0/22 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
85.204.28.0/23 maxlen: 24
86.106.28.0/23 maxlen: 24
89.20.50.0/23 maxlen: 24
89.37.60.0/23 maxlen: 24
89.39.184.0/23 maxlen: 24
89.40.236.0/23 maxlen: 24
91.210.80.0/22 maxlen: 24
91.217.106.0/23 maxlen: 24
95.215.144.0/22 maxlen: 24
121.127.48.0/20 maxlen: 24
128.0.60.0/22 maxlen: 24
134.199.80.0/20 maxlen: 24
141.193.108.0/22 maxlen: 24
141.193.214.0/23 maxlen: 24
162.216.138.0/23 maxlen: 24
162.250.216.0/22 maxlen: 24
168.149.248.0/23 maxlen: 24
173.214.200.0/22 maxlen: 24
176.111.54.0/23 maxlen: 24
176.222.48.0/22 maxlen: 24
178.216.184.0/21 maxlen: 24
188.215.12.0/22 maxlen: 24
193.91.8.0/23 maxlen: 24
195.78.90.0/23 maxlen: 24
198.14.16.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
199.48.230.0/23 maxlen: 24
204.15.4.0/22 maxlen: 24
205.220.216.0/23 maxlen: 24
217.144.108.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:86:f2:fd:fe:53:d4:d8:2c:8e:d6:72:5a:2c:99:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jul 1 09:01:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1aabcd8675638d939a58aee7d07f2cc8b0106ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:db:bd:c9:80:db:91:7c:eb:5f:a1:a9:53:
c8:e6:f3:62:3a:6d:fa:36:9b:ab:c9:f3:56:d1:7c:
a3:8d:c7:3e:0b:76:e7:f9:6c:f7:50:ed:fd:5e:b2:
23:6c:3c:dd:f1:95:b3:5e:a3:bc:0b:3c:b0:ef:ea:
68:5f:50:c1:b3:28:a0:10:cd:56:be:5e:fd:a4:6f:
85:a8:90:75:0e:1c:6e:61:dc:50:98:69:c5:05:fb:
04:f0:ff:ac:24:bf:5f:e5:04:cf:e1:7d:22:13:a2:
3d:cb:33:2d:45:53:56:5a:a0:74:18:9d:85:fb:48:
ab:4a:11:ae:00:78:33:7d:55:29:26:ff:6f:62:7a:
51:00:46:6d:4f:39:04:86:eb:5d:a5:1c:0c:62:2e:
a4:c7:6b:10:7f:c1:13:bb:f9:b2:37:0f:c1:5d:f1:
73:23:35:f6:44:94:d0:e1:88:83:15:e9:db:59:79:
23:7b:1e:6b:9d:91:76:a7:e9:8c:79:93:57:fc:28:
7f:4c:2d:6d:3b:df:07:a1:30:3d:d2:09:e6:f2:a3:
b1:e0:3e:24:db:5e:8a:f1:12:cc:b6:22:d7:dd:d4:
fb:95:c7:eb:bb:d2:4a:d1:2a:74:9d:08:5d:60:d9:
2a:b0:76:55:55:c8:df:ed:5e:e5:2d:19:20:2b:04:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:CD:86:75:63:8D:93:9A:58:AE:E7:D0:7F:2C:C8:B0:10:6E:F6
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/GqvNhnVjjZOaWK7n0H8syLAQbvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.235.22.0/23
31.187.92.0/22
66.9.96.0/20
69.72.72.0/22
77.223.192.0-77.223.201.255
79.110.184.0/22
79.139.64.0/23
83.142.200.0/21
85.204.28.0/23
86.106.28.0/23
89.20.50.0/23
89.37.60.0/23
89.39.184.0/23
89.40.236.0/23
91.210.80.0/22
91.217.106.0/23
95.215.144.0/22
121.127.48.0/20
128.0.60.0/22
134.199.80.0/20
141.193.108.0/22
141.193.214.0/23
162.216.138.0/23
162.250.216.0/22
168.149.248.0/23
173.214.200.0/22
176.111.54.0/23
176.222.48.0/22
178.216.184.0/21
188.215.12.0/22
193.91.8.0/23
195.78.90.0/23
198.14.16.0/20
198.145.112.0/22
199.48.230.0/23
204.15.4.0/22
205.220.216.0/23
217.144.108.0/22
Signature Algorithm: sha256WithRSAEncryption
97:ff:58:14:3f:f7:c2:81:22:0e:32:6c:13:48:2b:d5:0e:4e:
83:c6:ba:58:84:80:64:4a:3c:78:d5:76:06:86:e0:f2:a9:1b:
9b:5b:9c:f7:50:b4:b4:81:30:df:6f:d3:aa:14:bd:a9:15:1e:
dc:b8:d6:49:37:e6:d4:9b:41:79:77:be:c9:61:56:17:16:48:
33:3b:f9:de:a4:81:60:66:0e:d5:55:70:3a:15:99:a7:69:49:
48:c6:da:f0:a1:db:85:52:81:16:cc:82:db:00:0c:24:43:cd:
c1:82:e9:21:fe:40:e5:b2:ea:ef:ae:4b:21:f9:24:e5:d6:0d:
c9:6f:2e:a9:52:b9:c1:e5:b6:51:b7:2f:96:e2:d2:f5:63:64:
65:16:0f:2f:ab:36:b4:1a:cc:0e:32:15:be:bb:93:e3:9b:3b:
b2:28:b0:12:ec:d6:1a:a9:9a:bf:9e:ad:f7:2a:4f:df:0c:a9:
2e:be:76:04:4e:b8:ec:4d:cc:42:ef:b2:b9:87:72:e6:c2:5f:
0e:39:1b:1b:96:2b:d2:ed:b7:84:58:0a:9c:bf:96:73:32:02:
08:ca:79:c8:a0:8c:5f:4f:ed:92:c7:07:1f:22:c9:69:9e:9b:
0b:9b:37:c2:eb:66:c0:17:6c:fc:70:56:ec:46:d7:48:8e:9b:
2c:ec:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:11:57 2025 by rpki-client