Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/JuwcOk4-w66V_LMPHZi2LGguCng.roa
File: JuwcOk4-w66V_LMPHZi2LGguCng.roa (raw, json)
Hash identifier: 8cWyJlJTYmXssK7kh1P0z787ePlkjRRR6H7SYv+mI70=
Subject key identifier: 26:EC:1C:3A:4E:3E:C3:AE:95:FC:B3:0F:1D:98:B6:2C:68:2E:0A:78
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0198748CE3351C2260BBCEF10BF2E974C422
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/JuwcOk4-w66V_LMPHZi2LGguCng.roa
Signing time: Mon 04 Aug 2025 10:07:26 +0000
ROA not before: Mon 04 Aug 2025 10:07:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 46.102.191.0/24 maxlen: 24
86.105.151.0/24 maxlen: 24
89.40.204.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
94.176.3.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:8c:e3:35:1c:22:60:bb:ce:f1:0b:f2:e9:74:c4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Aug 4 10:07:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26ec1c3a4e3ec3ae95fcb30f1d98b62c682e0a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:4f:22:61:ec:d1:50:23:a7:62:1b:c5:5b:
81:34:08:5e:c6:38:e2:0c:0f:8e:10:ce:2a:43:dc:
90:69:f3:a7:6c:f8:54:b7:f1:ea:c6:0b:44:28:be:
be:0a:b6:0f:b2:1b:e8:7d:29:00:f5:39:58:5c:1d:
df:be:ab:cb:11:a6:b4:1a:65:82:b4:60:98:0d:7e:
9c:2e:b9:48:82:ec:2e:4d:4a:48:c6:0a:de:56:48:
ea:f2:a1:de:d2:90:3e:65:0d:b7:f2:10:76:69:81:
ce:ee:d6:0a:a7:ee:e2:77:4e:ac:d2:a7:a8:27:2c:
0f:e4:59:77:8f:da:33:9f:6c:66:b4:d1:9d:b4:a9:
e2:51:29:db:5b:87:d8:f9:95:1a:d1:ef:f4:69:31:
70:5f:39:6a:82:1c:57:d6:55:97:da:1c:6d:0a:a5:
9c:89:f6:44:52:87:ce:f2:df:c0:b5:0b:55:f3:70:
32:d6:71:33:45:46:a8:3b:8f:80:46:2e:b2:29:92:
a1:48:a0:ea:a1:f4:90:30:53:01:32:ef:01:65:f0:
f8:fb:cf:40:00:89:8f:26:bd:41:97:de:f0:9e:c5:
77:e3:7b:8d:bf:39:b5:fc:cb:de:aa:38:de:26:0b:
8b:6c:d1:f8:2d:22:04:46:54:23:4e:93:f9:61:b5:
26:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EC:1C:3A:4E:3E:C3:AE:95:FC:B3:0F:1D:98:B6:2C:68:2E:0A:78
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/JuwcOk4-w66V_LMPHZi2LGguCng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.191.0/24
86.105.151.0/24
89.40.204.0/24
89.40.233.0/24
94.176.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:ab:a6:1b:c5:1f:44:f6:be:cc:48:bb:b8:5d:d6:1d:38:3f:
0b:98:6a:71:bd:59:7e:94:aa:5b:aa:42:cb:a2:18:b1:a3:a7:
8f:11:1e:d3:b3:b6:6c:a0:8e:00:67:5d:00:89:ab:de:f3:ea:
f0:63:08:fe:f2:ae:1d:c4:29:27:fe:91:4f:0c:54:d8:fa:b2:
a9:81:aa:ad:bc:9b:75:d1:e7:70:14:b4:44:0d:01:c7:37:ec:
8b:19:94:73:53:f2:12:19:8f:d3:2f:ed:9a:95:a1:ff:f3:23:
38:a3:34:38:f0:b1:3f:8e:dc:e6:b0:13:f4:9a:ac:07:14:c7:
86:b9:05:3d:a2:b1:ff:f8:1a:b4:d3:10:de:9b:1c:c6:1e:32:
50:76:75:cb:1f:dc:c3:27:99:2b:f3:6f:c1:fc:fd:4b:0a:2a:
67:aa:5d:7b:d2:62:bf:0d:e6:c1:b6:e4:fd:85:f2:ca:48:86:
82:47:7a:e2:66:6b:fc:56:44:9c:e3:88:74:9a:ea:43:0a:64:
3c:5a:40:cb:90:c3:90:fe:e7:ca:32:ac:36:75:82:27:f1:66:
20:b9:72:af:b9:95:70:fa:6c:c0:e2:5a:f9:ba:22:02:20:35:
c2:5c:70:d9:ad:c3:db:56:e9:e3:82:87:a7:01:07:a2:99:a1:
ad:73:4f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:27:09 2025 by rpki-client