Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ka-lYa3hvtpeBxHkBRwyQ9N4YHw.roa
File: Ka-lYa3hvtpeBxHkBRwyQ9N4YHw.roa (raw, json)
Hash identifier: qMzF7XPLraIstc62zu20SxMCRTRupd3xdbcne6BGpyw=
Subject key identifier: 29:AF:A5:61:AD:E1:BE:DA:5E:07:11:E4:05:1C:32:43:D3:78:60:7C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824E8E4DAD8E3FA2A4C6B1101A05090
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ka-lYa3hvtpeBxHkBRwyQ9N4YHw.roa
Signing time: Thu 02 Jan 2025 17:51:34 +0000
ROA not before: Thu 02 Jan 2025 17:51:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 62.76.234.0/24 maxlen: 24
62.76.239.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
192.124.176.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.124.22.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.87.58.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.67.0/24 maxlen: 24
195.133.92.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.221.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:e8:e4:da:d8:e3:fa:2a:4c:6b:11:01:a0:50:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29afa561ade1beda5e0711e4051c3243d378607c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:2a:e0:66:3e:9a:67:7a:e1:3c:8d:3f:ae:
cf:3e:f7:ec:d4:ba:0c:ae:73:25:24:d3:3e:aa:3b:
d5:da:97:1b:2f:dc:29:6f:1b:a9:a5:6c:80:ec:37:
9b:0f:6e:5d:2c:ae:d1:61:16:20:fd:53:96:53:80:
0e:24:cf:36:9b:b0:31:a6:f9:1a:17:07:90:fe:28:
9c:69:2e:c3:5f:48:c2:cc:d3:c9:1a:bd:e4:4e:59:
08:20:2a:50:2f:f6:6e:db:84:b2:86:81:81:db:c5:
f7:e2:34:eb:0f:30:ce:db:4a:ac:68:6a:df:97:ec:
7f:79:c3:6d:88:36:3d:75:63:aa:45:dd:57:9d:29:
d5:c8:f2:c3:21:c9:eb:b6:93:55:23:89:5b:35:30:
de:ef:51:e1:d6:53:cb:94:a2:88:80:75:c8:75:f0:
3c:70:07:ca:8d:f9:c9:56:08:b0:22:0f:78:ec:b7:
68:6d:a5:e8:34:30:4f:54:25:80:07:25:1f:5a:a3:
52:6a:79:d7:9a:e2:fe:67:8a:d1:f0:1e:ba:4a:20:
8a:05:6b:b9:7d:b7:f1:45:97:48:8b:bc:dd:49:47:
eb:c6:02:c4:b4:d5:3f:07:87:f5:a9:8b:36:39:e3:
76:97:d1:80:8c:8b:c7:2d:2d:08:43:28:10:16:10:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:A5:61:AD:E1:BE:DA:5E:07:11:E4:05:1C:32:43:D3:78:60:7C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ka-lYa3hvtpeBxHkBRwyQ9N4YHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.234.0/24
62.76.239.0/24
185.72.8.0/24
192.124.176.0/24
192.124.209.0/24
193.124.22.0/24
193.124.41.0/24
193.124.46.0/24
193.124.49.0/24
194.58.34.0/24
194.58.38.0-194.58.40.255
194.58.44.0-194.58.46.255
194.58.59.0/24
194.58.66.0/24
194.58.68.0/24
194.87.10.0/24
194.87.17.0-194.87.18.255
194.87.23.0/24
194.87.30.0/24
194.87.39.0/24
194.87.47.0/24
194.87.58.0/24
194.87.82.0/24
194.87.105.0/24
194.87.108.0/24
194.87.178.0/24
194.87.198.0/24
194.87.227.0/24
194.87.230.0/24
194.87.240.0/24
194.87.245.0/24
195.133.67.0/24
195.133.92.0/24
212.192.215.0/24
212.192.221.0/24
212.192.223.0/24
212.193.1.0-212.193.2.255
212.193.6.0/24
Signature Algorithm: sha256WithRSAEncryption
91:42:4a:74:56:60:b5:b1:a3:23:28:3c:8f:fb:8e:e7:2f:ee:
28:ae:3d:45:c5:e3:4c:f8:25:58:30:bd:30:53:4e:5a:2d:49:
96:46:06:5b:aa:94:d5:d5:f7:4a:9b:9b:7f:5a:86:48:50:5a:
2b:dd:c0:7f:f3:b8:7e:64:d7:89:ac:f8:e4:86:8f:8e:b4:f5:
63:93:47:6c:c2:dd:63:d0:25:8b:31:7d:af:52:d8:01:25:82:
26:4f:60:08:da:43:d6:64:39:e3:79:b9:31:4f:16:a0:b8:a3:
62:19:22:b9:4c:66:f8:d1:3f:21:c2:38:3d:23:a6:b0:85:4e:
eb:e5:cc:2a:64:0f:d9:34:10:77:b5:a2:35:8b:6a:06:4a:47:
69:1d:74:53:ab:0d:a3:8f:2c:fc:21:98:04:0a:70:fc:c2:e9:
96:90:97:53:ca:25:63:d2:f5:bb:57:04:6c:93:fc:96:5f:ee:
08:61:a5:68:45:fe:3b:d8:3a:9d:42:d0:0d:12:fe:70:4d:59:
9a:bc:10:17:23:ee:de:97:cd:da:ab:be:dc:7a:21:0f:1a:28:
6e:37:aa:07:81:58:7b:28:f7:0b:ac:f3:e8:96:4f:ad:8d:de:
69:3d:22:95:44:08:36:e0:6d:48:58:97:87:7d:69:78:53:4e:
62:13:26:ef
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgISAZQoJOjk2tjj+ipMaxEBoFCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwMTAyMTc1MTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWFmYTU2MWFkZTFiZWRhNWUwNzExZTQwNTFjMzI0M2QzNzg2MDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp38q4GY+mmd64TyNP67PPvfs1LoM
rnMlJNM+qjvV2pcbL9wpbxuppWyA7DebD25dLK7RYRYg/VOWU4AOJM82m7Axpvka
FweQ/iicaS7DX0jCzNPJGr3kTlkIICpQL/Zu24SyhoGB28X34jTrDzDO20qsaGrf
l+x/ecNtiDY9dWOqRd1XnSnVyPLDIcnrtpNVI4lbNTDe71Hh1lPLlKKIgHXIdfA8
cAfKjfnJVgiwIg947LdobaXoNDBPVCWAByUfWqNSannXmuL+Z4rR8B66SiCKBWu5
fbfxRZdIi7zdSUfrxgLEtNU/B4f1qYs2OeN2l9GAjIvHLS0IQygQFhAg9QIDAQAB
o4IDETCCAw0wHQYDVR0OBBYEFCmvpWGt4b7aXgcR5AUcMkPTeGB8MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvS2EtbFlhM2h2dHBlQnhIa0JSd3lROU40WUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJQYIKwYBBQUHAQcBAf8EggEUMIIBEDCCAQwEAgABMIIB
BAMEAD5M6gMEAD5M7wMEALlICAMEAMB8sAMEAMB80QMEAMF8FgMEAMF8KQMEAMF8
LgMEAMF8MQMEAMI6IjAMAwQBwjomAwQAwjooMAwDBALCOiwDBADCOi4DBADCOjsD
BADCOkIDBADCOkQDBADCVwowDAMEAMJXEQMEAMJXEgMEAMJXFwMEAMJXHgMEAMJX
JwMEAMJXLwMEAMJXOgMEAMJXUgMEAMJXaQMEAMJXbAMEAMJXsgMEAMJXxgMEAMJX
4wMEAMJX5gMEAMJX8AMEAMJX9QMEAMOFQwMEAMOFXAMEANTA1wMEANTA3QMEANTA
3zAMAwQA1MEBAwQA1MECAwQA1MEGMA0GCSqGSIb3DQEBCwUAA4IBAQCRQkp0VmC1
saMjKDyP+47nL+4orj1FxeNM+CVYML0wU05aLUmWRgZbqpTV1fdKm5t/WoZIUFor
3cB/87h+ZNeJrPjkho+OtPVjk0dswt1j0CWLMX2vUtgBJYImT2AI2kPWZDnjebkx
TxaguKNiGSK5TGb40T8hwjg9I6awhU7r5cwqZA/ZNBB3taI1i2oGSkdpHXRTqw2j
jyz8IZgECnD8wumWkJdTyiVj0vW7VwRsk/yWX+4IYaVoRf472DqdQtANEv5wTVma
vBAXI+7el83aq77ceiEPGihuN6oHgVh7KPcLrPPolk+tjd5pPSKVRAg24G1IWJeH
fWl4U05iEybv
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:12:51 2025 by rpki-client