Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7lLPYcgIyFTAbh_qS8VzsgJQzbY.roa
File: 7lLPYcgIyFTAbh_qS8VzsgJQzbY.roa (raw, json)
Hash identifier: +ZNY3IbYF0inihGxIDOvTQGJhP8CWYIW9B+zCCzG0QI=
Subject key identifier: EE:52:CF:61:C8:08:C8:54:C0:6E:1F:EA:4B:C5:73:B2:02:50:CD:B6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195A3233CBD75BDC918438E676F26104821
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7lLPYcgIyFTAbh_qS8VzsgJQzbY.roa
Signing time: Mon 17 Mar 2025 08:05:50 +0000
ROA not before: Mon 17 Mar 2025 08:05:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.105.0/24 maxlen: 24
94.156.106.0/24 maxlen: 32
94.156.167.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
195.178.121.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:23:3c:bd:75:bd:c9:18:43:8e:67:6f:26:10:48:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 17 08:05:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee52cf61c808c854c06e1fea4bc573b20250cdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:63:bd:47:93:c7:91:2c:18:f6:ae:8b:78:
7c:0a:c3:fd:49:8d:98:04:01:1f:df:2d:bb:24:9b:
41:fa:fe:43:b7:01:51:13:02:e0:d4:91:63:b8:b1:
99:8a:b2:ab:c6:90:19:d0:0f:c2:b9:c5:a3:f6:40:
67:aa:28:6d:3e:c4:9e:97:47:bb:21:1a:fe:76:c4:
0c:6f:9d:1a:f4:6e:a2:a6:10:ac:1c:48:ec:d2:6a:
3e:44:3b:f5:ea:32:09:79:7a:57:cb:97:0a:20:ff:
71:83:5a:54:51:33:a5:29:ff:9e:4f:3f:ab:d2:85:
20:e5:f5:f2:d9:d1:a4:d1:b9:3c:6c:19:ac:7a:6b:
ba:70:8a:3a:b5:cc:c0:3e:04:52:0b:44:23:52:fc:
8c:41:ff:ef:27:e1:be:49:91:9c:58:54:a6:22:29:
20:fe:3b:16:cc:25:c3:ca:76:15:bb:60:f8:56:6a:
02:c6:68:b3:28:e2:c8:91:c6:e0:d8:0f:32:aa:6b:
96:65:1a:e6:f5:75:c7:41:c7:93:26:b2:60:08:73:
b2:77:43:e8:ef:4d:99:aa:15:ce:48:e2:dd:65:91:
61:85:3f:96:dc:01:ba:45:8b:5c:5d:2a:af:21:e7:
3e:8e:7d:41:55:8d:6a:83:37:f4:65:cc:10:01:e9:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:52:CF:61:C8:08:C8:54:C0:6E:1F:EA:4B:C5:73:B2:02:50:CD:B6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7lLPYcgIyFTAbh_qS8VzsgJQzbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.9.156.0/23
45.14.164.0/24
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0-87.120.127.255
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.50.0/24
93.123.109.0/24
94.154.160.0/22
94.156.64.0/21
94.156.105.0-94.156.106.255
94.156.167.0/24
94.156.179.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.55.186.0/24
194.169.175.0/24
195.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
15:19:33:51:70:48:e0:59:74:26:5c:79:ff:2e:c2:fa:c8:d2:
1e:c6:3d:9e:4c:fe:2a:da:f9:a1:be:97:f4:89:85:78:ac:08:
de:3e:ff:3d:ba:ac:b5:1e:81:0c:99:80:e9:72:16:94:4a:c9:
b8:c9:f9:e2:3d:2d:54:58:b8:7e:59:fc:18:b5:83:7c:d5:1e:
26:ce:a7:49:de:45:2d:31:5f:35:52:65:ee:3f:9d:94:c6:05:
fd:6f:41:98:00:34:6b:8f:4c:ab:34:70:ed:60:0d:55:1f:2b:
40:fd:5f:b4:44:81:f3:a7:47:30:58:19:f0:6d:88:70:d7:90:
4f:1e:b4:91:f1:a7:76:d7:e7:7f:11:f4:40:03:fb:8a:04:e8:
15:ae:ea:76:42:bc:01:cf:3a:a2:4e:60:06:05:b3:51:70:c5:
7c:54:b2:c3:66:49:47:64:b7:14:a8:d9:c5:01:c2:96:b7:42:
d8:ae:f8:8e:a2:64:82:43:14:d6:52:b0:25:62:88:8d:1d:e2:
27:50:ed:46:bc:95:b6:35:3f:f0:e8:99:ae:52:c3:0f:01:d2:
a7:9d:65:44:1a:d3:a9:3f:fc:9b:fe:b0:56:62:f3:91:0f:dd:
a1:40:54:7d:39:12:85:a8:c3:50:dd:08:f6:0c:f7:bb:28:d6:
88:98:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:03:53 2025 by rpki-client