Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/IUVlrXF8PjtiuRQYKV66znLkvbY.roa
File: IUVlrXF8PjtiuRQYKV66znLkvbY.roa (raw, json)
Hash identifier: 9stSMkcNmu1x0qqssiFUrNK1OCcXRGyd42qkf0GzdM0=
Subject key identifier: 21:45:65:AD:71:7C:3E:3B:62:B9:14:18:29:5E:BA:CE:72:E4:BD:B6
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 0195D1C80ED7F02376E0337BF432BE65E8A0
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/IUVlrXF8PjtiuRQYKV66znLkvbY.roa
Signing time: Wed 26 Mar 2025 09:28:23 +0000
ROA not before: Wed 26 Mar 2025 09:28:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 5.159.208.0/21 maxlen: 24
5.181.72.0/22 maxlen: 24
31.192.96.0/21 maxlen: 24
45.8.100.0/22 maxlen: 24
45.132.108.0/22 maxlen: 24
45.137.44.0/22 maxlen: 24
80.74.240.0/21 maxlen: 24
80.74.248.0/21 maxlen: 24
83.150.252.0/22 maxlen: 24
85.95.96.0/19 maxlen: 24
92.42.120.0/21 maxlen: 24
95.129.64.0/21 maxlen: 24
176.58.0.0/21 maxlen: 24
185.79.184.0/22 maxlen: 24
185.90.0.0/22 maxlen: 24
185.94.204.0/22 maxlen: 24
185.99.76.0/22 maxlen: 24
185.145.88.0/22 maxlen: 24
185.178.216.0/22 maxlen: 24
185.182.200.0/23 maxlen: 24
185.204.212.0/22 maxlen: 24
185.229.4.0/22 maxlen: 24
185.246.132.0/22 maxlen: 24
185.247.200.0/22 maxlen: 24
185.248.252.0/24 maxlen: 24
185.248.253.0/24 maxlen: 24
185.248.254.0/24 maxlen: 24
185.248.255.0/24 maxlen: 24
188.94.16.0/21 maxlen: 24
193.24.3.0/24 maxlen: 24
193.24.6.0/24 maxlen: 24
193.24.13.0/24 maxlen: 24
193.24.31.0/24 maxlen: 24
195.26.32.0/19 maxlen: 24
195.88.8.0/23 maxlen: 24
212.11.68.0/22 maxlen: 24
212.11.72.0/22 maxlen: 24
217.145.128.0/20 maxlen: 24
2a00:f1c0::/32 maxlen: 32
2a0d:7680::/29 maxlen: 29
2a0d:bf80::/29 maxlen: 29
2a0e:a1c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:c8:0e:d7:f0:23:76:e0:33:7b:f4:32:be:65:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Mar 26 09:28:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=214565ad717c3e3b62b91418295ebace72e4bdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:17:eb:ba:0f:64:fb:ca:55:43:a1:16:9d:
87:bb:b4:22:17:73:f5:db:40:a8:e3:33:2b:40:cf:
e3:32:4f:9b:3d:57:1b:a3:be:90:13:0e:60:df:d6:
b9:90:a1:7f:7e:42:82:73:89:13:71:44:68:67:bf:
0d:40:79:73:66:cf:a1:c5:3c:d8:62:02:35:62:e9:
f1:c7:e4:94:35:a7:0f:c8:cd:2d:69:0c:7a:2f:66:
e3:26:46:ef:76:4c:08:25:ae:b1:5d:59:37:77:fa:
00:1a:6d:d0:68:95:05:4b:51:15:c6:26:7c:13:de:
b8:08:6c:6b:b3:bd:e3:6f:f6:a6:bc:4a:06:b0:6d:
f7:ba:2b:e2:86:77:b9:ab:6b:9d:05:fb:ba:0c:2d:
68:9f:91:a1:0c:e7:fb:ab:1a:78:c5:bb:db:7b:e7:
23:4e:fe:7a:8c:49:60:1f:cf:5a:ae:e1:cf:73:f3:
0d:06:41:8e:d8:94:b1:e2:39:05:1e:b5:d1:a8:1b:
61:43:f0:2a:a1:9a:f7:90:d9:9c:90:a2:82:0f:b7:
29:b6:33:3f:aa:13:b5:41:a4:c6:95:fe:a1:a3:33:
44:c6:21:fd:6e:02:f6:6d:b9:c7:57:1c:76:67:6c:
ec:34:cd:77:97:cb:e0:61:cf:a3:40:93:32:b9:a1:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:45:65:AD:71:7C:3E:3B:62:B9:14:18:29:5E:BA:CE:72:E4:BD:B6
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/IUVlrXF8PjtiuRQYKV66znLkvbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.208.0/21
5.181.72.0/22
31.192.96.0/21
45.8.100.0/22
45.132.108.0/22
45.137.44.0/22
80.74.240.0/20
83.150.252.0/22
85.95.96.0/19
92.42.120.0/21
95.129.64.0/21
176.58.0.0/21
185.79.184.0/22
185.90.0.0/22
185.94.204.0/22
185.99.76.0/22
185.145.88.0/22
185.178.216.0/22
185.182.200.0/23
185.204.212.0/22
185.229.4.0/22
185.246.132.0/22
185.247.200.0/22
185.248.252.0/22
188.94.16.0/21
193.24.3.0/24
193.24.6.0/24
193.24.13.0/24
193.24.31.0/24
195.26.32.0/19
195.88.8.0/23
212.11.68.0-212.11.75.255
217.145.128.0/20
IPv6:
2a00:f1c0::/32
2a0d:7680::/29
2a0d:bf80::/29
2a0e:a1c0::/29
Signature Algorithm: sha256WithRSAEncryption
86:09:72:31:89:8b:09:1a:27:64:ae:81:09:c7:6e:4f:02:bd:
65:60:09:7c:5a:03:f2:36:06:4b:70:a6:e3:f5:65:c2:7b:ca:
fb:24:7b:57:ec:28:a1:b3:a1:e6:a5:be:8f:e4:f8:80:d5:c5:
4f:78:dc:10:b1:9f:ea:fc:15:0d:9e:f3:97:0c:82:2d:f2:ad:
b2:a4:19:9a:06:f6:31:78:cb:4e:41:e6:8d:fa:29:6f:cc:20:
29:92:75:af:0b:67:cd:5b:29:26:c7:23:41:7a:6b:86:c6:f3:
b9:e5:2b:a4:6a:6a:89:3e:5f:aa:55:92:67:b5:2d:27:1d:c0:
06:61:85:72:70:41:6b:76:af:66:b5:f3:9d:57:0e:62:1a:43:
74:4e:ce:97:e8:1c:77:75:ac:66:e2:fb:fe:17:29:08:ff:a5:
d8:8c:40:43:1b:2a:b7:5d:d0:af:a5:33:04:e3:d6:9f:a1:fa:
b6:a9:19:8e:46:b5:bc:7b:5b:9e:78:c6:a4:53:22:c6:28:89:
e8:66:29:bd:2c:0a:72:22:a6:2f:51:d7:78:0e:ae:18:7e:c2:
7b:f1:4a:63:b8:77:51:a6:04:06:d7:82:ff:59:f8:36:a4:d0:
5f:dd:18:5f:cf:04:ae:6c:a2:75:8c:30:40:fb:36:86:06:2f:
b7:94:07:4b
-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgISAZXRyA7X8CN24DN79DK+ZeigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz
ZTc4N2MwHhcNMjUwMzI2MDkyODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTQ1NjVhZDcxN2MzZTNiNjJiOTE0MTgyOTVlYmFjZTcyZTRiZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE8X67oPZPvKVUOhFp2Hu7QiF3P1
20Co4zMrQM/jMk+bPVcbo76QEw5g39a5kKF/fkKCc4kTcURoZ78NQHlzZs+hxTzY
YgI1Yunxx+SUNacPyM0taQx6L2bjJkbvdkwIJa6xXVk3d/oAGm3QaJUFS1EVxiZ8
E964CGxrs73jb/amvEoGsG33uivihne5q2udBfu6DC1on5GhDOf7qxp4xbvbe+cj
Tv56jElgH89aruHPc/MNBkGO2JSx4jkFHrXRqBthQ/AqoZr3kNmckKKCD7cptjM/
qhO1QaTGlf6hozNExiH9bgL2bbnHVxx2Z2zsNM13l8vgYc+jQJMyuaH7GwIDAQAB
o4IC+zCCAvcwHQYDVR0OBBYEFCFFZa1xfD47YrkUGCleus5y5L22MB8GA1UdIwQY
MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt
MDk3ODdmMTUyYWRlLzEvSVVWbHJYRjhQanRpdVJRWUtWNjZ6bkxrdmJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl
LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDwYIKwYBBQUHAQcBAf8Egf8wgfwwgdUEAgABMIHOAwQD
BZ/QAwQCBbVIAwQDH8BgAwQCLQhkAwQCLYRsAwQCLYksAwQEUErwAwQCU5b8AwQF
VV9gAwQDXCp4AwQDX4FAAwQDsDoAAwQCuU+4AwQCuVoAAwQCuV7MAwQCuWNMAwQC
uZFYAwQCubLYAwQBubbIAwQCuczUAwQCueUEAwQCufaEAwQCuffIAwQCufj8AwQD
vF4QAwQAwRgDAwQAwRgGAwQAwRgNAwQAwRgfAwQFwxogAwQBw1gIMAwDBALUC0QD
BALUC0gDBATZkYAwIgQCAAIwHAMFACoA8cADBQMqDXaAAwUDKg2/gAMFAyoOocAw
DQYJKoZIhvcNAQELBQADggEBAIYJcjGJiwkaJ2SugQnHbk8CvWVgCXxaA/I2Bktw
puP1ZcJ7yvske1fsKKGzoealvo/k+IDVxU943BCxn+r8FQ2e85cMgi3yrbKkGZoG
9jF4y05B5o36KW/MICmSda8LZ81bKSbHI0F6a4bG87nlK6Rqaok+X6pVkme1LScd
wAZhhXJwQWt2r2a1851XDmIaQ3ROzpfoHHd1rGbi+/4XKQj/pdiMQEMbKrdd0K+l
MwTj1p+h+rapGY5Gtbx7W554xqRTIsYoiehmKb0sCnIipi9R13gOrhh+wnvxSmO4
d1GmBAbXgv9Z+Dak0F/dGF/PBK5sonWMMED7NoYGL7eUB0s=
-----END CERTIFICATE-----
Generated at Fri May 2 16:46:11 2025 by rpki-client