Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jiJMkhaTgThCB8ZqiiotEXpHrNA.roa
File: jiJMkhaTgThCB8ZqiiotEXpHrNA.roa (raw, json)
Hash identifier: Qk6g8WIWrSgCEoOo6X30kCRUONVOxaA+IM9eogmDxR0=
Subject key identifier: 8E:22:4C:92:16:93:81:38:42:07:C6:6A:8A:2A:2D:11:7A:47:AC:D0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018973088B1F3D739411EEA9C0CDD4AB2DB9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jiJMkhaTgThCB8ZqiiotEXpHrNA.roa
Signing time: Thu 20 Jul 2023 11:21:26 +0000
ROA not before: Thu 20 Jul 2023 11:21:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.36.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:08:8b:1f:3d:73:94:11:ee:a9:c0:cd:d4:ab:2d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 20 11:21:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e224c92169381384207c66a8a2a2d117a47acd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:84:b3:39:16:99:87:da:32:42:37:a9:79:
0f:ca:90:83:4b:45:39:58:2d:2a:43:08:8e:2b:25:
6c:ba:3c:50:d0:e2:99:18:9b:a6:db:4c:71:5b:0a:
1e:23:b5:99:63:19:cb:e9:54:9e:c9:ed:79:43:36:
d3:53:20:2d:dc:98:e9:73:60:84:46:2e:6e:9f:a0:
30:c5:73:83:fd:3b:f0:fb:b5:f5:e6:82:2f:91:64:
4e:0c:15:46:81:88:75:8d:66:84:be:e9:42:65:f3:
f6:ec:e6:7b:32:65:6e:81:f4:03:b7:a9:39:77:ae:
83:21:ab:2d:a9:a6:81:08:11:7b:79:c9:30:f4:60:
2b:e8:8a:9d:28:f4:25:2c:75:3d:49:4e:a5:27:38:
25:c3:e6:98:d9:26:c9:6e:07:e2:9b:4c:cc:86:47:
37:63:02:14:80:09:3e:96:e3:b3:47:25:6c:fb:fa:
22:55:f8:36:e3:55:59:8c:54:c7:c5:dc:b0:86:30:
dd:ac:dd:41:cc:f1:37:d7:8b:0a:fd:99:01:1b:c1:
c5:04:c8:0e:10:74:ae:1f:ed:17:b8:01:49:0b:24:
67:b3:22:0d:50:c7:03:e4:b0:18:d1:a0:93:10:c9:
59:99:f7:49:f3:d7:2e:07:21:75:ac:a4:bd:82:e5:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:4C:92:16:93:81:38:42:07:C6:6A:8A:2A:2D:11:7A:47:AC:D0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jiJMkhaTgThCB8ZqiiotEXpHrNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/23
192.124.178.0/24
192.124.181.0/24
192.124.189.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0/24
194.87.3.0/24
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.24.0/22
194.87.36.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.134.0/23
194.87.151.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.35.0/24
195.133.73.0/24
195.133.84.0/23
195.133.194.0/23
212.192.241.0/24
212.192.248.0/22
Signature Algorithm: sha256WithRSAEncryption
07:45:ed:f0:58:b8:43:cc:22:c9:3b:50:b1:47:94:c8:07:e0:
e9:e8:f5:fc:34:b8:dd:df:52:40:4c:07:32:c8:a7:9f:5d:ef:
35:7c:82:bc:b5:4a:79:d4:25:7d:b2:9b:c7:4d:99:c9:33:ba:
00:de:91:4b:f6:ca:ea:a2:0b:ce:a5:c3:08:12:81:19:31:7c:
58:4f:ff:35:03:88:db:81:c9:ff:3a:eb:c5:7f:1a:e9:e9:87:
86:bb:09:7e:aa:16:fe:49:ad:80:c2:1b:aa:c1:d8:98:cd:50:
dd:d2:b7:28:d9:b6:1d:e9:fe:87:42:78:46:ae:78:05:67:c0:
a8:7b:e9:01:a2:1c:83:a1:6f:0f:a8:07:6d:35:95:4b:83:04:
6e:11:49:a0:43:a4:21:a8:a3:aa:69:5b:a9:f9:0f:57:34:1c:
97:62:d9:20:0f:8b:0d:34:f2:dd:3a:40:b0:f3:78:74:37:0c:
27:8e:71:9e:38:8f:c2:7e:2c:f5:df:c2:ce:ed:c7:d2:f0:dd:
ec:30:06:c6:48:51:8e:58:71:be:ee:84:10:06:b6:d9:6f:53:
be:f1:89:17:71:60:d9:e2:37:b3:ab:7d:f9:79:89:a7:13:b1:
09:d5:6a:8a:7b:7e:10:44:77:62:7c:c5:84:1d:c3:07:57:c6:
38:5c:25:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:10:43 2025 by rpki-client