Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IMldHNUiq0NBQbv79MmtTG-W54U.roa
File: IMldHNUiq0NBQbv79MmtTG-W54U.roa (raw, json)
Hash identifier: GQTF1Oc57o6+13A2mNXjieUnqfsgSn/f1cQDohTl9bs=
Subject key identifier: 20:C9:5D:1C:D5:22:AB:43:41:41:BB:FB:F4:C9:AD:4C:6F:96:E7:85
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019571133A154E09204F290F3BE0B6341710
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IMldHNUiq0NBQbv79MmtTG-W54U.roa
Signing time: Fri 07 Mar 2025 14:47:20 +0000
ROA not before: Fri 07 Mar 2025 14:47:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.106.0/24 maxlen: 32
94.156.119.0/24 maxlen: 24
94.156.166.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:13:3a:15:4e:09:20:4f:29:0f:3b:e0:b6:34:17:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 7 14:47:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20c95d1cd522ab434141bbfbf4c9ad4c6f96e785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:d5:41:cc:ac:5d:0f:d9:1f:aa:ff:70:2d:
50:90:43:9b:33:5e:7b:53:ea:71:bf:2d:b5:fd:c7:
aa:bf:76:9e:c5:5b:5c:2d:8d:61:63:98:01:d6:2b:
dc:82:e7:b5:21:79:44:48:45:3a:61:63:9f:39:9f:
23:ca:eb:1e:42:81:bb:8b:45:ba:62:21:8b:91:16:
15:53:ff:38:3a:56:b4:91:bf:a5:78:b8:f1:74:ca:
e3:05:13:f1:9f:a6:f1:e9:29:63:dd:6e:d5:36:a1:
8a:b5:bd:18:9b:a6:8a:7a:e3:2f:b1:8b:ea:b2:56:
1e:0d:62:8f:e8:8f:51:7e:77:a0:0f:d8:9a:14:60:
6e:d8:06:26:a0:ab:f8:03:cc:98:71:54:6e:9e:6c:
f9:19:b2:6f:5f:28:2a:1b:66:ca:02:72:4b:b9:fc:
09:e6:cc:ac:61:94:09:ae:0e:d5:fa:d3:d3:b2:52:
fb:d4:f4:ab:f3:fb:f6:c6:f1:51:49:9e:b1:fc:be:
dc:ba:b7:b1:30:33:1d:ca:ed:55:ba:a8:10:df:d6:
16:f5:fe:0c:6d:c4:12:7f:5b:4a:08:d6:9d:17:71:
20:f6:a4:04:6b:ce:d5:26:70:3f:01:5c:49:ae:4a:
86:55:b8:20:cc:d2:a0:3f:ba:40:a2:46:53:51:65:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C9:5D:1C:D5:22:AB:43:41:41:BB:FB:F4:C9:AD:4C:6F:96:E7:85
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IMldHNUiq0NBQbv79MmtTG-W54U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.9.156.0/23
45.14.164.0/24
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/24
45.149.241.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
79.110.62.0/24
81.161.230.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0-87.120.127.255
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.50.0/24
93.123.109.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.104.0-94.156.106.255
94.156.119.0/24
94.156.166.0/23
94.156.179.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.49.94.0/24
194.55.186.0/24
194.55.224.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6a:f5:36:de:ab:03:9d:c7:af:e4:46:04:46:ae:66:0b:7f:
27:69:d9:0a:2a:f2:98:92:cf:42:56:30:e0:28:6c:85:88:31:
97:4a:a7:4b:15:45:9f:a0:60:85:34:ec:6b:72:6d:88:26:d8:
d2:79:32:b1:4b:21:ad:4e:15:8a:f5:a1:2f:01:55:8e:ae:41:
d7:5c:72:7c:91:c7:52:7a:83:98:b1:b4:d6:f3:df:40:2b:6c:
f0:1a:e0:f4:fc:fb:1d:bb:b2:f0:d7:4e:22:0b:7b:59:68:6e:
cc:23:e3:f8:6a:f8:6b:35:61:dd:db:3e:fc:cc:0a:d5:3e:ea:
a9:6b:90:f2:55:78:7f:2a:a2:1b:49:76:e9:62:20:38:29:8a:
0a:c2:8a:ec:c8:f1:ac:5e:54:85:eb:7f:11:24:d2:a9:f6:e1:
8a:9e:04:19:82:fd:a1:99:a5:86:f3:d3:b4:7b:29:3e:7b:3e:
60:9e:17:16:8d:c4:2a:f0:3b:48:6f:b4:6e:33:d5:d8:60:1f:
f4:34:cb:08:f6:a7:c4:cb:a1:82:ed:3a:23:06:6d:50:26:a0:
87:14:b2:44:bc:e5:4c:27:4c:c8:84:9b:bb:e4:8b:53:ac:c6:
ae:c1:10:d1:f2:3f:c6:76:9d:b0:b7:66:6b:07:95:92:b5:b2:
ab:d2:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:37:04 2025 by rpki-client