Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/fB6RnXaPI-X9vR8sxHo47vXXuLg.roa
File: fB6RnXaPI-X9vR8sxHo47vXXuLg.roa (raw, json)
Hash identifier: BLCbMomJ8wAZGABp42e6d739flKss/vvgvsWtiibZNE=
Subject key identifier: 7C:1E:91:9D:76:8F:23:E5:FD:BD:1F:2C:C4:7A:38:EE:F5:D7:B8:B8
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0197786E85FA09604C4A87AD1BBE8FE22EF4
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/fB6RnXaPI-X9vR8sxHo47vXXuLg.roa
Signing time: Mon 16 Jun 2025 11:09:58 +0000
ROA not before: Mon 16 Jun 2025 11:09:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 46.102.191.0/24 maxlen: 24
77.81.183.0/24 maxlen: 24
86.105.151.0/24 maxlen: 24
86.107.47.0/24 maxlen: 24
86.107.184.0/24 maxlen: 24
86.107.244.0/23 maxlen: 24
89.33.87.0/24 maxlen: 24
89.35.26.0/24 maxlen: 24
89.35.51.0/24 maxlen: 24
89.35.172.0/24 maxlen: 24
89.37.142.0/24 maxlen: 24
89.40.65.0/24 maxlen: 24
89.40.204.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
89.42.158.0/23 maxlen: 24
92.114.104.0/23 maxlen: 24
94.176.3.0/24 maxlen: 24
94.177.58.0/24 maxlen: 24
188.240.17.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:6e:85:fa:09:60:4c:4a:87:ad:1b:be:8f:e2:2e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jun 16 11:09:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c1e919d768f23e5fdbd1f2cc47a38eef5d7b8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cd:5b:9e:7e:64:25:aa:be:3d:06:58:d7:ea:
c1:37:c5:fa:4c:d3:f0:71:72:59:e3:bf:1b:b9:ab:
5c:e1:9c:14:c5:dd:3a:c5:04:f1:b3:dc:f0:ef:6f:
cf:32:2e:22:dc:4d:bf:6c:dc:fd:99:73:97:c9:35:
f6:24:94:a9:20:46:e6:fe:c0:45:ec:62:cf:a8:71:
45:2e:78:73:8e:4a:21:9b:20:4d:9c:a1:09:b6:12:
df:65:f8:2a:7a:b6:57:04:a5:6e:1c:8a:0c:02:2d:
19:52:bd:47:bb:3c:67:70:4b:a5:5f:2a:98:b2:dd:
96:4f:f3:ee:be:64:f4:38:84:ad:79:e3:6c:1a:5d:
02:7f:18:c9:6a:f1:67:86:b7:34:d0:c9:b2:e4:3a:
b7:61:25:83:0c:31:02:a9:4e:73:05:68:63:3e:1c:
1b:c9:3d:8c:76:12:d0:b4:41:e9:38:cb:f7:11:91:
3e:91:27:a3:9f:ee:cb:19:f0:8d:f6:a6:e4:f6:14:
14:e8:76:ca:b7:91:fb:96:59:44:07:4a:09:c7:43:
bf:a0:12:6d:6a:71:0f:11:b8:f7:f3:24:79:18:e9:
d2:31:7a:93:30:63:c4:6f:e3:3b:32:5f:02:4a:e6:
e4:fc:7c:b9:2a:5d:62:da:0b:48:02:2c:e7:9d:f8:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1E:91:9D:76:8F:23:E5:FD:BD:1F:2C:C4:7A:38:EE:F5:D7:B8:B8
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/fB6RnXaPI-X9vR8sxHo47vXXuLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.191.0/24
77.81.183.0/24
86.105.151.0/24
86.107.47.0/24
86.107.184.0/24
86.107.244.0/23
89.33.87.0/24
89.35.26.0/24
89.35.51.0/24
89.35.172.0/24
89.37.142.0/24
89.40.65.0/24
89.40.204.0/24
89.40.233.0/24
89.42.158.0/23
92.114.104.0/23
94.176.3.0/24
94.177.58.0/24
188.240.17.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4f:48:23:a4:2c:d5:de:c7:e0:02:e5:3c:a6:ff:53:6c:7d:
fb:72:b3:34:05:55:1d:7f:c8:62:35:6c:28:37:75:50:10:1c:
bb:70:a2:f0:dd:1e:3b:8d:04:f0:18:53:c8:08:df:7b:88:5e:
e2:21:ee:ef:4e:33:a8:bc:d0:f9:0f:ca:8b:22:65:52:6b:3a:
3b:e0:3a:6e:b5:28:88:5c:65:9a:61:f2:9c:4d:02:c9:78:e0:
f6:11:b6:e3:83:6c:47:ec:3d:a5:e4:f9:ef:99:85:66:a9:4b:
f8:cb:87:32:37:54:58:1b:75:bd:dd:fa:00:c8:01:c0:d5:cf:
1a:24:b2:53:3d:93:80:4b:c0:f2:d6:ae:c1:ad:dc:07:80:10:
27:cc:89:3f:a4:ee:8b:c2:8d:fe:17:48:db:4c:c2:41:a3:55:
7f:ef:b8:9c:99:2c:5e:22:14:24:b9:07:b0:55:08:52:f9:5a:
7e:71:4a:61:69:ff:9b:af:b3:2a:5e:fc:5b:ed:07:73:f6:cf:
8d:ba:3b:43:bf:1e:1b:36:75:2a:a8:9b:a7:b0:cb:01:15:02:
c6:25:f0:3f:d4:ed:19:d6:01:b3:2b:a5:bd:e8:a5:c8:b3:17:
92:43:a2:ab:4a:36:d7:e3:23:9d:a8:98:9f:33:04:ae:a9:61:
e6:5d:1d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 20:47:33 2025 by rpki-client