Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mdmrb7O88LomBEAriuGbuqporeI.roa
File: mdmrb7O88LomBEAriuGbuqporeI.roa (raw, json)
Hash identifier: sZfa6z/wVnMEPS7Ec62I029fDx+ye/g8OL8mWI+L9fc=
Subject key identifier: 99:D9:AB:6F:B3:BC:F0:BA:26:04:40:2B:8A:E1:9B:BA:AA:68:AD:E2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187E10D611DB3BE38044A2F022D88FF3D61
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mdmrb7O88LomBEAriuGbuqporeI.roa
Signing time: Wed 03 May 2023 09:59:23 +0000
ROA not before: Wed 03 May 2023 09:59:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.25.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.20.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.64.0/22 maxlen: 22
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:0d:61:1d:b3:be:38:04:4a:2f:02:2d:88:ff:3d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 3 09:59:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99d9ab6fb3bcf0ba2604402b8ae19bbaaa68ade2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:7a:23:fe:c9:3c:42:17:7b:8e:39:db:a4:
ba:7f:ba:f9:aa:a3:f1:51:09:d6:4d:82:1a:3c:ec:
e7:6d:c5:41:ee:e3:1e:f6:f1:0d:6a:bb:15:2d:8a:
66:2b:88:ce:c3:db:9d:3d:aa:6d:17:22:af:8c:ce:
73:5b:b7:67:27:f6:50:95:9b:02:8d:f6:12:24:ac:
3c:dd:1a:de:5b:29:a2:8a:60:83:19:ce:b2:c4:2a:
cf:28:52:ef:52:9f:52:0f:b7:b4:85:93:55:57:24:
f5:1f:1a:8e:bd:60:87:4d:d6:7d:15:43:96:65:c7:
b2:d1:b7:be:3d:79:67:f1:2d:2c:8f:9d:a8:8f:40:
ad:fb:a8:c8:f1:41:ff:d9:24:97:3c:0c:d3:10:da:
b2:c8:fa:ee:69:83:20:86:78:20:87:23:9c:3f:32:
5f:70:bf:4f:2d:28:47:b3:e7:3b:d4:f1:b7:32:82:
69:89:20:8a:e5:6e:9b:49:13:b6:21:71:01:bc:25:
56:84:29:a6:65:52:a4:d7:28:48:7c:dc:47:db:9b:
6d:e6:c9:a1:68:c2:51:3e:89:6f:22:2f:49:00:3f:
52:b6:35:73:4a:05:5e:bc:37:06:35:32:a5:bf:a4:
29:71:70:6c:d5:73:80:fd:bb:7e:5c:f1:91:2f:88:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D9:AB:6F:B3:BC:F0:BA:26:04:40:2B:8A:E1:9B:BA:AA:68:AD:E2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mdmrb7O88LomBEAriuGbuqporeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.190.0/24
193.108.115.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.133.0/24
193.124.201.0-193.124.202.255
193.124.204.0/24
193.124.226.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.85.251.0/24
194.87.1.0-194.87.3.255
194.87.6.0/23
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.37.0/24
194.87.43.0-194.87.44.255
194.87.51.0/24
194.87.56.0/24
194.87.73.0/24
194.87.77.0-194.87.78.255
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.119.0/24
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/23
194.87.179.0/24
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.51.0/24
195.58.54.0/24
195.58.56.0/24
195.58.58.0/23
195.58.61.0-195.58.63.255
195.133.0.0/24
195.133.19.0-195.133.20.255
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.40.0/23
195.133.64.0/22
195.133.74.0/24
195.133.79.0/24
195.133.84.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
75:67:4e:1d:50:47:73:4e:74:1c:50:68:12:da:dc:07:63:49:
dc:d9:43:23:97:6c:a2:ce:cb:ed:3a:eb:63:94:7d:c5:e5:d6:
47:60:21:28:39:ce:14:af:85:3f:2c:c9:c4:a8:ec:9c:55:ed:
98:82:1c:cb:6a:75:03:0b:88:96:66:21:7b:cd:dd:d2:e6:0d:
7f:8a:9d:b3:0e:4a:cb:6c:0d:51:a9:05:3c:80:50:4e:83:53:
37:12:36:4b:5e:4c:b2:62:90:c7:fe:01:e9:09:4e:3e:43:44:
c5:47:ae:be:47:8d:11:66:fc:44:43:fc:c2:1a:7c:8c:45:e6:
6c:e4:8b:44:8d:9f:01:cf:38:fa:8d:a4:75:5a:e1:f0:81:40:
af:1f:d7:21:d9:d5:a6:e5:ed:ed:22:40:13:a0:85:fa:ca:89:
93:50:f6:56:67:c5:00:2b:b8:0f:eb:64:24:61:f3:ac:f3:ec:
da:93:1a:84:43:09:3b:82:e7:84:3b:14:14:29:80:99:73:17:
05:3b:b0:5d:2b:79:c2:8f:57:1c:2f:65:ec:9e:05:d5:83:db:
54:3d:10:2e:84:0c:52:a7:24:39:b6:74:8a:f2:44:c6:8c:0b:
59:47:65:a7:e5:81:e6:27:52:31:15:ba:63:cb:8a:96:d9:07:
e2:c3:47:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:01:19 2025 by rpki-client