Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9k544AtvUvpIHjvijylfvC-zVNA.roa
File: 9k544AtvUvpIHjvijylfvC-zVNA.roa (raw, json)
Hash identifier: OM4zjoI4Wmok+N80v/GEajNWwyKhO0GMxUC86MN4BdI=
Subject key identifier: F6:4E:78:E0:0B:6F:52:FA:48:1E:3B:E2:8F:29:5F:BC:2F:B3:54:D0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01954435AD18B7BC28583B3D9A760F515F9D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9k544AtvUvpIHjvijylfvC-zVNA.roa
Signing time: Wed 26 Feb 2025 21:42:03 +0000
ROA not before: Wed 26 Feb 2025 21:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
31.13.224.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.106.0/24 maxlen: 32
94.156.166.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:44:35:ad:18:b7:bc:28:58:3b:3d:9a:76:0f:51:5f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 26 21:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f64e78e00b6f52fa481e3be28f295fbc2fb354d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:47:0b:0c:73:0d:de:2d:ed:e5:c4:9d:9b:
65:bd:83:c1:8f:ef:96:b0:0c:5d:70:7b:da:cc:ad:
5d:92:41:44:a4:2e:80:e7:6f:59:be:39:05:23:29:
dc:b6:37:45:e7:89:ed:25:eb:04:0d:34:d6:d9:3d:
8a:d8:61:af:e9:c8:4e:66:62:18:da:34:73:30:e1:
3c:5d:c1:91:c0:cf:d1:18:ec:e3:5e:36:87:94:fa:
41:e5:0c:a4:1d:98:79:26:01:1a:05:83:4a:84:20:
b6:db:cb:84:05:b8:2e:1f:ec:de:6c:58:22:ef:27:
b9:74:8e:9a:e3:8b:28:49:ac:df:fb:53:d0:9e:30:
6f:30:4d:dd:34:87:f3:96:40:a0:0d:d2:cc:e7:ff:
ae:ec:d6:27:56:c9:5b:5e:07:8f:1e:74:37:37:5c:
c4:d1:0a:ff:f1:c9:c8:88:65:6c:27:3d:08:61:ab:
f4:82:1a:f1:5b:8e:a1:3e:9b:95:e4:05:c8:7d:13:
1f:c3:c6:56:7d:47:f0:6c:56:78:a3:65:5b:8b:9f:
88:d2:df:03:11:e6:87:03:7d:b3:7f:59:63:00:e4:
83:7e:a5:29:14:b6:bb:72:ce:30:5d:d3:3f:3e:e4:
fa:d6:aa:c6:b8:c0:11:26:3b:28:c2:fa:a4:a1:c7:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4E:78:E0:0B:6F:52:FA:48:1E:3B:E2:8F:29:5F:BC:2F:B3:54:D0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9k544AtvUvpIHjvijylfvC-zVNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
31.13.224.0/24
45.9.156.0/23
45.14.164.0/24
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/24
45.149.241.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
79.110.62.0/24
81.161.230.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0-87.120.127.255
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.50.0/24
93.123.109.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.104.0-94.156.106.255
94.156.166.0/23
94.156.179.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.48.251.0/24
194.49.94.0/24
194.55.186.0/24
194.169.175.0/24
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d6:a7:4d:c5:37:20:05:c0:00:a5:c7:5e:29:67:eb:14:59:
bf:0f:9a:93:be:e5:35:27:06:dc:b8:fc:a2:0a:3f:ff:41:5e:
81:ef:2f:33:dd:17:35:f9:35:11:fb:5e:a8:ab:b7:ac:c7:a1:
1f:fc:90:23:5e:10:d2:f7:8d:ce:4c:d2:c4:72:c0:06:2a:94:
54:bb:b1:8b:87:d2:af:bd:82:6e:ab:54:9e:65:8c:9e:25:a5:
8d:89:78:d7:45:1c:cc:70:9d:55:cc:cf:47:92:da:b4:46:b8:
e7:e4:37:82:2a:0c:b0:6b:b2:0b:e7:ff:89:97:88:1f:c0:0d:
e8:87:96:9a:ca:31:d2:9b:31:96:16:7c:df:7b:77:2c:be:5d:
b0:c8:3a:6d:c4:d6:5b:be:85:28:dc:17:a9:78:d1:6c:67:2e:
7b:89:fc:31:ae:f9:f6:8a:d5:ea:33:74:6f:0d:22:a2:15:05:
91:43:6e:fc:04:10:40:51:20:80:cc:d3:66:be:b6:3d:0a:34:
bc:50:6c:0b:62:b4:07:54:3c:01:13:6c:4c:72:53:c1:4f:23:
16:2f:e2:30:74:7f:e8:11:9f:67:4d:d8:4f:68:72:c9:93:c2:
48:7a:a4:68:8e:e1:05:70:4d:e9:e8:22:19:e8:fd:55:b6:50:
26:34:3c:a2
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISAZVENa0Yt7woWDs9mnYPUV+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMjI2MjE0MjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjRlNzhlMDBiNmY1MmZhNDgxZTNiZTI4ZjI5NWZiYzJmYjM1NGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrxHCwxzDd4t7eXEnZtlvYPBj++W
sAxdcHvazK1dkkFEpC6A529ZvjkFIynctjdF54ntJesEDTTW2T2K2GGv6chOZmIY
2jRzMOE8XcGRwM/RGOzjXjaHlPpB5QykHZh5JgEaBYNKhCC228uEBbguH+zebFgi
7ye5dI6a44soSazf+1PQnjBvME3dNIfzlkCgDdLM5/+u7NYnVslbXgePHnQ3N1zE
0Qr/8cnIiGVsJz0IYav0ghrxW46hPpuV5AXIfRMfw8ZWfUfwbFZ4o2Vbi5+I0t8D
EeaHA32zf1ljAOSDfqUpFLa7cs4wXdM/PuT61qrGuMARJjsowvqkoceVTQIDAQAB
o4IDcTCCA20wHQYDVR0OBBYEFPZOeOALb1L6SB474o8pX7wvs1TQMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvOWs1NDRBdHZVdnBJSGp2aWp5bGZ2Qy16Vk5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBhQYIKwYBBQUHAQcBAf8EggF0MIIBcDCCAWwEAgABMIIB
ZAMEAgX8hAMEAB8N4AMEAS0JnAMEAC0OpAMEAC1C5AMEAS1C5gMEAC1YQAMEAC1Z
9wMEAC1aWQMEAC2LagMEAC2NngMEAC2V8TAMAwQALZdZAwQCLZdYAwQAT24yAwQA
T24+AwQAUaHmAwQAUaHuAwQAU9thAwQAVDYwAwQAVR8vAwQAV3hXMAwDBARXeHAD
BAFXeHQDBAFXeHgwDAMEAFd4fQMEB1d4AAMEAFd4pgMEAFd5LQMEAFd5VwMEAVd5
fAMEAFd5ogMEAFd5pQMEBFtc8AMEAVx3xAMEAFz5MgMEAF17bQMEAl6aoAMEAF6c
CwMEA16cQDAMAwQDXpxoAwQAXpxqAwQBXpymAwQAXpyzAwQAbc7tAwQAjWIBAwQA
jWIGAwQAk05kAwQCqxZIAwQAstfgAwQCudhUAwQCudpUAwQAwRnYAwQAwjD7AwQA
wjFeAwQAwje6AwQAwqmvAwQAwrQkMA0GCSqGSIb3DQEBCwUAA4IBAQBR1qdNxTcg
BcAApcdeKWfrFFm/D5qTvuU1JwbcuPyiCj//QV6B7y8z3Rc1+TUR+16oq7esx6Ef
/JAjXhDS943OTNLEcsAGKpRUu7GLh9KvvYJuq1SeZYyeJaWNiXjXRRzMcJ1VzM9H
ktq0Rrjn5DeCKgywa7IL5/+Jl4gfwA3oh5aayjHSmzGWFnzfe3csvl2wyDptxNZb
voUo3BepeNFsZy57ifwxrvn2itXqM3RvDSKiFQWRQ278BBBAUSCAzNNmvrY9CjS8
UGwLYrQHVDwBE2xMclPBTyMWL+IwdH/oEZ9nTdhPaHLJk8JIeqRojuEFcE3p6CIZ
6P1VtlAmNDyi
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:35:18 2025 by rpki-client