Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/0LRh3KVoIwp1LAqff028hD2hbns.roa
File: 0LRh3KVoIwp1LAqff028hD2hbns.roa (raw, json)
Hash identifier: s7JNLeK1td+6oprqmWjQmknErQCs6pz6pEFJNpfUWow=
Subject key identifier: D0:B4:61:DC:A5:68:23:0A:75:2C:0A:9F:7F:4D:BC:84:3D:A1:6E:7B
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D75E2C04BF58C97EA27B017AE8E07D
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/0LRh3KVoIwp1LAqff028hD2hbns.roa
Signing time: Wed 01 Jan 2025 21:48:24 +0000
ROA not before: Wed 01 Jan 2025 21:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34549
IP address blocks: 5.1.64.0/19 maxlen: 32
5.1.64.0/20 maxlen: 32
5.1.64.0/24 maxlen: 32
5.1.65.0/24 maxlen: 32
5.1.66.0/24 maxlen: 32
5.1.67.0/24 maxlen: 32
5.1.70.0/24 maxlen: 32
5.1.72.0/24 maxlen: 32
5.1.73.0/24 maxlen: 32
5.1.76.0/24 maxlen: 32
5.1.82.0/24 maxlen: 32
5.1.84.0/24 maxlen: 32
5.1.85.0/24 maxlen: 32
5.1.86.0/24 maxlen: 32
5.1.87.0/24 maxlen: 32
5.1.89.0/24 maxlen: 32
5.1.90.0/24 maxlen: 32
5.1.91.0/24 maxlen: 32
5.1.93.0/24 maxlen: 32
5.1.94.0/23 maxlen: 32
5.1.94.0/24 maxlen: 32
31.47.232.0/21 maxlen: 32
45.155.248.0/22 maxlen: 22
80.77.16.0/20 maxlen: 32
80.77.16.0/24 maxlen: 32
80.77.31.254/32 maxlen: 32
83.243.40.0/21 maxlen: 32
83.243.44.0/24 maxlen: 32
83.243.45.0/24 maxlen: 32
83.243.45.114/32 maxlen: 32
83.243.46.0/24 maxlen: 32
83.243.46.83/32 maxlen: 32
83.243.47.0/24 maxlen: 32
94.247.40.0/21 maxlen: 32
94.247.45.0/24 maxlen: 32
94.247.46.0/24 maxlen: 32
178.251.224.0/21 maxlen: 21
178.251.224.0/22 maxlen: 32
178.251.225.0/24 maxlen: 32
178.251.228.0/23 maxlen: 32
178.251.229.0/24 maxlen: 32
178.251.230.0/23 maxlen: 32
178.251.230.0/24 maxlen: 32
185.37.144.0/22 maxlen: 32
185.37.145.0/24 maxlen: 32
185.37.147.0/24 maxlen: 32
185.44.104.0/22 maxlen: 32
185.44.106.0/24 maxlen: 32
185.44.107.0/24 maxlen: 32
185.90.160.0/22 maxlen: 32
185.90.160.0/24 maxlen: 32
185.90.161.0/24 maxlen: 32
185.90.162.0/24 maxlen: 32
185.150.96.0/22 maxlen: 32
195.10.195.0/24 maxlen: 32
2a00:f820::/29 maxlen: 29
2a01:360::/29 maxlen: 29
2a01:360::/32 maxlen: 32
2a07:6fc0::/29 maxlen: 48
2a0f:b80::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5e:2c:04:bf:58:c9:7e:a2:7b:01:7a:e8:e0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0b461dca568230a752c0a9f7f4dbc843da16e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:a8:ae:e0:b8:6b:31:4e:09:c8:b4:9f:21:
ff:79:69:87:82:15:4e:82:a9:7f:57:31:c1:11:d3:
57:b1:35:fa:87:e9:46:2b:1f:27:8f:fc:55:6a:a5:
d3:b5:8c:f7:88:1c:49:72:cb:7f:35:6d:ba:2d:6b:
a5:51:23:d0:fb:b5:84:39:30:e8:50:e7:60:63:b1:
81:b8:99:67:79:76:34:0c:94:54:bb:2e:8b:eb:1a:
ac:af:74:59:30:9f:45:bb:bd:c9:de:7b:74:3c:bd:
eb:72:61:5d:5e:2b:26:34:26:37:da:42:6b:0d:2f:
e9:f7:5a:e5:86:da:2d:05:92:c9:31:11:a9:7d:d3:
26:d5:a2:38:0d:12:31:10:75:75:e8:61:59:5b:27:
1e:9c:9b:8e:98:6d:93:8b:68:2a:c5:3a:56:9b:d2:
75:c8:cf:a7:77:aa:dc:76:49:fd:d3:d8:f4:61:3b:
99:41:cf:16:5e:b6:c7:47:ac:f9:12:ab:5d:c4:ca:
ae:e3:e3:87:8b:06:47:73:f7:30:cf:4e:92:ea:e2:
2f:65:88:43:4f:86:b4:51:42:cb:33:ce:f4:9a:b5:
47:44:a7:3f:50:bf:15:00:f1:0c:61:8e:f3:5f:0c:
8e:14:54:ad:55:d0:d0:b3:f4:f4:15:67:f2:8f:ac:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B4:61:DC:A5:68:23:0A:75:2C:0A:9F:7F:4D:BC:84:3D:A1:6E:7B
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/0LRh3KVoIwp1LAqff028hD2hbns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.64.0/19
31.47.232.0/21
45.155.248.0/22
80.77.16.0/20
83.243.40.0/21
94.247.40.0/21
178.251.224.0/21
185.37.144.0/22
185.44.104.0/22
185.90.160.0/22
185.150.96.0/22
195.10.195.0/24
IPv6:
2a00:f820::/29
2a01:360::/29
2a07:6fc0::/29
2a0f:b80::/29
Signature Algorithm: sha256WithRSAEncryption
a6:11:c2:1a:ab:7e:08:07:8e:d3:b2:f5:e8:7a:85:d7:77:f2:
73:43:e4:49:b8:af:aa:cb:4b:06:88:5a:95:da:27:48:2d:08:
c2:a0:78:77:8b:ff:f8:4c:79:e7:7e:e1:ce:9f:6c:29:35:55:
b6:5a:0f:7b:70:fc:8b:a0:da:e6:73:fb:33:65:0e:17:3d:e3:
04:66:3b:af:f2:54:ab:b4:1b:c7:60:6a:dd:48:64:d4:b4:30:
44:f7:1a:3d:8e:78:44:65:21:85:7a:bf:17:57:3a:80:22:e4:
22:66:e3:3b:2e:b0:46:ba:8a:b8:52:1b:bc:60:84:5f:cf:40:
23:39:71:a8:45:22:ba:8c:19:07:41:03:b3:70:af:5c:bf:bc:
9b:67:bf:c9:9f:a9:8d:62:ca:f1:63:ce:92:d4:70:b7:c9:e9:
4b:61:f2:ca:35:57:4f:e5:61:2c:bb:da:f3:33:3f:60:38:21:
24:fa:c4:c3:d8:42:dc:f1:33:b2:53:5f:c5:6f:a0:84:5f:a7:
8c:27:86:6e:f6:8c:7b:b2:39:27:1a:b4:57:e7:7f:c1:1a:09:
a1:90:19:9d:3a:3e:08:22:c8:1f:a6:e7:ed:25:a2:fd:4b:a8:
46:a5:b2:53:37:d5:82:2f:28:64:57:b5:af:23:6d:90:b9:a1:
00:e2:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:55 2025 by rpki-client