Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/1y-pysT2KXg-MB1mMyHAi_LtHgM.roa
File: 1y-pysT2KXg-MB1mMyHAi_LtHgM.roa (raw, json)
Hash identifier: F4Ez0ER1gL8Ah0DWjuYOO5W1ZcyWqdcsPhCMczZHj6U=
Subject key identifier: D7:2F:A9:CA:C4:F6:29:78:3E:30:1D:66:33:21:C0:8B:F2:ED:1E:03
Certificate issuer: /CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Certificate serial: 019726F22E7B25E17B5BC27476563B5006DD
Authority key identifier: 54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/1y-pysT2KXg-MB1mMyHAi_LtHgM.roa
Signing time: Sat 31 May 2025 15:24:54 +0000
ROA not before: Sat 31 May 2025 15:24:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39233
IP address blocks: 45.155.28.0/22 maxlen: 22
185.237.52.0/22 maxlen: 22
193.202.90.0/24 maxlen: 24
193.202.112.0/24 maxlen: 24
193.202.114.0/24 maxlen: 24
193.203.4.0/24 maxlen: 24
194.213.29.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:f2:2e:7b:25:e1:7b:5b:c2:74:76:56:3b:50:06:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Validity
Not Before: May 31 15:24:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d72fa9cac4f629783e301d663321c08bf2ed1e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:f0:73:bd:fa:ed:47:3b:f7:b5:b9:eb:c9:
49:54:08:6a:bf:d0:aa:37:78:7d:fe:67:c0:b1:89:
24:17:e0:b8:76:2a:57:1e:70:18:8c:0b:7b:6c:b5:
7c:31:ab:42:52:e6:8e:ea:fb:13:30:60:3d:78:45:
5c:08:ac:63:65:dc:4d:43:51:68:78:e0:56:14:7a:
74:5c:76:5b:a1:65:15:a6:2f:73:72:be:d1:a9:4a:
91:83:ea:86:52:7c:4f:1e:6d:3f:b1:b3:e7:4d:b5:
8f:02:cd:7c:cd:69:a0:d9:db:63:20:85:69:bc:11:
ce:bc:2b:f0:46:1f:51:61:d8:e1:c8:fb:6d:e2:3c:
60:ae:1a:12:22:d6:64:ee:62:0a:f0:f2:9b:ec:49:
b9:68:e1:75:26:34:61:91:03:26:76:43:ae:f4:47:
9b:3c:1c:8b:fa:c6:d8:91:16:35:62:34:4d:32:5d:
5e:18:31:1d:51:a2:c0:3e:36:14:fd:90:d3:41:05:
19:8f:54:08:30:51:81:52:9b:a3:eb:42:68:d6:2d:
2f:81:c2:4a:f2:ea:cb:15:51:5b:db:90:62:88:3f:
95:29:6e:cf:4f:5f:ab:7c:df:0f:c0:6b:84:10:89:
75:21:63:3d:b6:30:a5:c1:8c:a5:f9:ac:50:a9:ce:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2F:A9:CA:C4:F6:29:78:3E:30:1D:66:33:21:C0:8B:F2:ED:1E:03
X509v3 Authority Key Identifier:
keyid:54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/1y-pysT2KXg-MB1mMyHAi_LtHgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.28.0/22
185.237.52.0/22
193.202.90.0/24
193.202.112.0/24
193.202.114.0/24
193.203.4.0/24
194.213.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a1:83:3f:b5:b0:ae:59:fe:0f:a0:be:fc:64:a3:4c:74:9b:
6f:c4:fe:7d:84:19:f7:dd:f8:c1:d9:2a:ca:25:4a:a2:06:58:
05:53:86:5a:d0:d6:02:af:15:e3:af:10:9b:e0:ac:5d:0b:df:
c2:5c:33:10:32:d7:26:33:ba:b1:d8:9f:51:dd:0a:88:f3:fd:
a5:e0:8c:41:36:af:5a:1a:0c:c4:4e:6d:b0:6f:8a:fb:c0:a1:
0e:6c:b7:06:41:82:ff:a9:df:92:06:79:00:88:22:56:5e:61:
9b:d2:3b:e8:00:1b:96:6a:5e:21:19:b5:cb:97:e5:eb:3f:33:
b3:27:00:40:45:4c:ce:38:26:4e:19:03:f5:1c:9f:8f:92:be:
c4:ad:6c:ee:13:01:91:0d:7e:2a:bf:a2:90:6a:19:88:c5:62:
de:0c:ca:40:6e:49:9e:a9:4c:26:2c:7f:2d:cb:67:ed:1f:82:
80:f0:22:2a:f1:6a:59:23:6f:d9:e8:b5:da:4d:9d:25:a7:ab:
4c:79:d6:eb:52:03:d9:15:c4:8b:80:f0:db:d5:e0:9b:49:56:
af:58:4c:0c:fe:cf:00:dd:22:0e:77:14:75:fb:ec:90:93:95:
eb:07:e1:6c:d3:03:98:50:87:6a:3f:18:d4:0f:63:86:09:f8:
da:4a:e4:86
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZcm8i57JeF7W8J0dlY7UAbdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YWEzMWE5Zjc0YmI4NTUyZDcxNGEwZDE4NWQxM2M3MDQw
NjQ0ZWUwHhcNMjUwNTMxMTUyNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzJmYTljYWM0ZjYyOTc4M2UzMDFkNjYzMzIxYzA4YmYyZWQxZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxPwc7367Uc797W568lJVAhqv9Cq
N3h9/mfAsYkkF+C4dipXHnAYjAt7bLV8MatCUuaO6vsTMGA9eEVcCKxjZdxNQ1Fo
eOBWFHp0XHZboWUVpi9zcr7RqUqRg+qGUnxPHm0/sbPnTbWPAs18zWmg2dtjIIVp
vBHOvCvwRh9RYdjhyPtt4jxgrhoSItZk7mIK8PKb7Em5aOF1JjRhkQMmdkOu9Eeb
PByL+sbYkRY1YjRNMl1eGDEdUaLAPjYU/ZDTQQUZj1QIMFGBUpuj60Jo1i0vgcJK
8urLFVFb25BiiD+VKW7PT1+rfN8PwGuEEIl1IWM9tjClwYyl+axQqc6/IQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFNcvqcrE9il4PjAdZjMhwIvy7R4DMB8GA1UdIwQY
MBaAFFSqMan3S7hVLXFKDRhdE8cEBkTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktveHFmZEx1RlV0Y1VvTkdGMFR4d1FHUk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zZGIwOGItMDFhOC00MDE2LWIyNDAt
MDM1MDc4YWQxOWFlLzEvMXktcHlzVDJLWGctTUIxbU15SEFpX0x0SGdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zZGIwOGItMDFhOC00MDE2LWIyNDAtMDM1MDc4YWQxOWFl
LzEvVktveHFmZEx1RlV0Y1VvTkdGMFR4d1FHUk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLZscAwQC
ue00AwQAwcpaAwQAwcpwAwQAwcpyAwQAwcsEAwQAwtUdMA0GCSqGSIb3DQEBCwUA
A4IBAQA+oYM/tbCuWf4PoL78ZKNMdJtvxP59hBn33fjB2SrKJUqiBlgFU4Za0NYC
rxXjrxCb4KxdC9/CXDMQMtcmM7qx2J9R3QqI8/2l4IxBNq9aGgzETm2wb4r7wKEO
bLcGQYL/qd+SBnkAiCJWXmGb0jvoABuWal4hGbXLl+XrPzOzJwBARUzOOCZOGQP1
HJ+Pkr7ErWzuEwGRDX4qv6KQahmIxWLeDMpAbkmeqUwmLH8ty2ftH4KA8CIq8WpZ
I2/Z6LXaTZ0lp6tMedbrUgPZFcSLgPDb1eCbSVavWEwM/s8A3SIOdxR1++yQk5Xr
B+Fs0wOYUIdqPxjUD2OGCfjaSuSG
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:11:26 2025 by rpki-client