Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6EhPkFlPzuOxjACw3kGFweyWUNU.roa
File: 6EhPkFlPzuOxjACw3kGFweyWUNU.roa (raw, json)
Hash identifier: tgo/5LQqOp1cMdbuZPIOWkP2WUJeMOHR1MQiU0XGOD0=
Subject key identifier: E8:48:4F:90:59:4F:CE:E3:B1:8C:00:B0:DE:41:85:C1:EC:96:50:D5
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01958570290745FF5FF88E443FB6763431C1
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6EhPkFlPzuOxjACw3kGFweyWUNU.roa
Signing time: Tue 11 Mar 2025 13:41:15 +0000
ROA not before: Tue 11 Mar 2025 13:41:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 37.156.35.0/24 maxlen: 24
77.81.183.0/24 maxlen: 24
84.247.36.0/22 maxlen: 24
85.204.241.0/24 maxlen: 24
86.105.151.0/24 maxlen: 24
86.105.224.0/24 maxlen: 24
86.107.77.0/24 maxlen: 24
86.107.184.0/24 maxlen: 24
86.107.244.0/23 maxlen: 24
89.33.81.0/24 maxlen: 24
89.33.87.0/24 maxlen: 24
89.34.90.0/24 maxlen: 24
89.34.174.0/24 maxlen: 24
89.35.26.0/24 maxlen: 24
89.35.51.0/24 maxlen: 24
89.35.172.0/24 maxlen: 24
89.37.142.0/24 maxlen: 24
89.39.64.0/23 maxlen: 24
89.39.80.0/24 maxlen: 24
89.39.90.0/24 maxlen: 24
89.39.214.0/24 maxlen: 24
89.40.65.0/24 maxlen: 24
89.40.69.0/24 maxlen: 24
89.40.104.0/23 maxlen: 24
89.40.204.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
89.42.158.0/23 maxlen: 24
92.114.104.0/23 maxlen: 24
93.113.98.0/23 maxlen: 24
93.113.214.0/23 maxlen: 24
93.115.56.0/23 maxlen: 24
93.117.175.0/24 maxlen: 24
94.176.3.0/24 maxlen: 24
176.223.163.0/24 maxlen: 24
188.212.131.0/24 maxlen: 24
188.215.68.0/23 maxlen: 24
188.215.78.0/24 maxlen: 24
188.240.17.0/24 maxlen: 24
188.241.66.0/23 maxlen: 24
188.241.127.0/24 maxlen: 24
188.241.132.0/23 maxlen: 24
188.241.138.0/23 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:70:29:07:45:ff:5f:f8:8e:44:3f:b6:76:34:31:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Mar 11 13:41:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8484f90594fcee3b18c00b0de4185c1ec9650d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:3e:b9:aa:8a:e2:39:db:3f:c6:6d:c8:69:
38:dd:7a:2a:35:8d:41:a4:3d:86:23:2f:c5:e7:da:
fc:42:3c:9e:f4:37:4a:d3:63:4e:fc:3e:8f:b3:c6:
fd:6e:f3:13:3d:de:9c:71:8a:1c:00:8f:78:fb:4d:
a4:94:75:1c:1f:f9:bf:70:8e:9b:0e:32:bc:6d:62:
11:53:3e:cf:d1:38:c4:06:eb:83:ef:f9:26:ab:63:
8f:41:33:cd:f7:fb:ed:83:be:48:d1:de:21:43:6f:
e5:0b:86:6f:5d:61:ea:f3:05:b3:1d:a4:69:e3:75:
d6:5f:27:e2:4e:c8:15:45:ad:70:1f:77:ee:62:c3:
c5:18:e3:de:64:cb:d3:de:ee:54:b3:41:54:63:79:
08:34:f5:59:75:07:ee:ed:aa:92:84:f9:8f:b5:34:
60:9d:31:74:a7:10:ec:88:0f:cf:3f:df:ec:7a:ba:
c2:c1:ee:8e:71:ca:72:a0:86:3f:20:12:93:5e:42:
7a:9f:57:71:6b:10:2c:54:52:18:3a:3e:6b:c5:aa:
c2:21:4d:11:10:53:68:bd:3d:9a:64:b6:b1:68:c4:
83:da:23:62:cb:1b:34:1b:c2:64:49:75:29:84:77:
29:b0:95:35:f7:78:26:20:4d:9b:f8:9a:6d:9a:19:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:48:4F:90:59:4F:CE:E3:B1:8C:00:B0:DE:41:85:C1:EC:96:50:D5
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6EhPkFlPzuOxjACw3kGFweyWUNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.35.0/24
77.81.183.0/24
84.247.36.0/22
85.204.241.0/24
86.105.151.0/24
86.105.224.0/24
86.107.77.0/24
86.107.184.0/24
86.107.244.0/23
89.33.81.0/24
89.33.87.0/24
89.34.90.0/24
89.34.174.0/24
89.35.26.0/24
89.35.51.0/24
89.35.172.0/24
89.37.142.0/24
89.39.64.0/23
89.39.80.0/24
89.39.90.0/24
89.39.214.0/24
89.40.65.0/24
89.40.69.0/24
89.40.104.0/23
89.40.204.0/24
89.40.233.0/24
89.42.158.0/23
92.114.104.0/23
93.113.98.0/23
93.113.214.0/23
93.115.56.0/23
93.117.175.0/24
94.176.3.0/24
176.223.163.0/24
188.212.131.0/24
188.215.68.0/23
188.215.78.0/24
188.240.17.0/24
188.241.66.0/23
188.241.127.0/24
188.241.132.0/23
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:0b:04:8f:eb:03:37:7b:6e:95:13:c9:96:ab:82:2e:f9:ea:
58:b8:2e:53:7b:e2:6c:a8:e1:f7:bf:cd:d8:97:b3:b3:7c:e4:
0e:3d:42:38:bf:ac:07:5d:e0:c2:a1:0f:cd:01:83:88:f3:04:
0f:40:1b:98:17:f4:03:f3:15:b9:36:af:bc:e1:a4:ca:1a:61:
cb:9a:48:d0:09:41:ac:fd:fd:23:ae:97:98:2e:d7:52:e0:b6:
4c:f2:c9:84:06:9b:17:ab:fd:b3:a3:a8:71:42:bd:38:fd:9b:
e7:51:83:8d:eb:99:25:f0:0e:3d:19:75:01:c9:dc:42:35:f3:
19:51:59:9d:e8:6f:a5:ef:a2:07:bb:e1:96:ee:e3:7e:08:b1:
f5:1c:f3:33:2f:a5:6e:7a:e3:78:c6:02:14:6c:ea:f7:b8:ed:
c5:ac:25:49:a8:75:74:6f:ca:ac:99:42:e5:9d:6e:2b:7b:6b:
84:2e:26:00:88:71:ba:bb:76:e2:92:d0:37:0b:59:d8:04:0e:
1d:19:ed:6c:a3:40:a3:13:56:49:bb:de:c5:94:9d:5a:2b:30:
a1:be:a3:b2:87:38:b0:68:ed:59:ca:e5:5b:c8:16:e2:dd:b4:
74:d7:0d:8b:fc:89:3e:76:1d:a5:a9:f3:95:62:18:63:dd:45:
ec:15:c0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 12:30:16 2025 by rpki-client