Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vCsIkIe25jBEqNdfFvo_GqSgcvg.roa
File: vCsIkIe25jBEqNdfFvo_GqSgcvg.roa (raw, json)
Hash identifier: Lif9GItTS7vgfyDu9aS7R9q1VcibpNsfLAxdpKC9R2c=
Subject key identifier: BC:2B:08:90:87:B6:E6:30:44:A8:D7:5F:16:FA:3F:1A:A4:A0:72:F8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01970275F7A9B8605E536E82CBC775AB6478
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vCsIkIe25jBEqNdfFvo_GqSgcvg.roa
Signing time: Sat 24 May 2025 13:22:54 +0000
ROA not before: Sat 24 May 2025 13:22:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200740
IP address blocks: 45.9.72.0/24 maxlen: 24
45.138.73.0/24 maxlen: 24
46.17.105.0/24 maxlen: 24
80.76.32.0/23 maxlen: 23
80.76.34.0/23 maxlen: 23
91.217.76.0/24 maxlen: 24
92.118.8.0/23 maxlen: 23
94.142.136.0/23 maxlen: 23
94.142.136.0/24 maxlen: 24
94.142.137.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
95.214.10.0/23 maxlen: 23
95.214.10.0/24 maxlen: 24
95.214.11.0/24 maxlen: 24
185.40.7.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.94.164.0/23 maxlen: 23
185.94.164.0/24 maxlen: 24
185.94.165.0/24 maxlen: 24
185.102.136.0/24 maxlen: 24
185.103.252.0/23 maxlen: 23
185.103.252.0/24 maxlen: 24
185.103.253.0/24 maxlen: 24
185.103.254.0/23 maxlen: 23
185.103.254.0/24 maxlen: 24
185.103.255.0/24 maxlen: 24
185.114.72.0/23 maxlen: 23
185.114.72.0/24 maxlen: 24
185.114.73.0/24 maxlen: 24
185.117.116.0/24 maxlen: 24
185.117.119.0/24 maxlen: 24
185.200.190.0/24 maxlen: 24
185.232.170.0/23 maxlen: 23
185.233.80.0/23 maxlen: 23
185.233.82.0/24 maxlen: 24
185.233.202.0/23 maxlen: 23
185.252.144.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.188.0/23 maxlen: 23
193.124.190.0/24 maxlen: 24
193.239.160.0/23 maxlen: 23
193.239.166.0/23 maxlen: 23
194.36.178.0/23 maxlen: 23
2a04:5200:68::/48 maxlen: 48
2a04:5201:2::/48 maxlen: 48
2a04:5201:4::/48 maxlen: 48
2a04:5201:6::/48 maxlen: 48
2a04:5201:7::/48 maxlen: 48
2a04:5201:9::/48 maxlen: 48
2a04:5201:10::/48 maxlen: 48
2a04:5201:8018::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:02:75:f7:a9:b8:60:5e:53:6e:82:cb:c7:75:ab:64:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: May 24 13:22:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc2b089087b6e63044a8d75f16fa3f1aa4a072f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c9:25:20:56:7c:a2:01:7e:b1:89:5f:2a:07:
25:b8:be:2f:00:8f:0c:ea:fc:d6:3b:ba:6e:6a:cb:
93:36:e6:25:9a:97:06:2a:a0:6f:b6:f8:53:f8:fd:
d7:9f:90:3d:61:7b:a1:09:db:f0:c2:65:06:dd:09:
24:8e:bd:54:1f:51:98:9e:fb:8b:5c:41:59:df:48:
4b:a1:36:2a:15:b0:86:78:b4:72:88:d0:af:8a:c9:
ff:d8:63:c2:37:c5:99:b7:91:0f:67:b3:4e:8d:4d:
f7:f8:15:8b:3e:d6:f0:44:90:73:53:98:b6:b6:88:
ad:0c:4d:23:dd:8d:8d:5c:72:52:a8:4d:e0:fe:8a:
28:aa:6e:0c:84:09:f5:fe:69:4a:c8:c6:e3:43:3a:
ff:cf:00:41:bb:50:ac:d6:17:04:70:7d:d0:18:2a:
e2:7d:43:23:bf:9f:0f:15:18:06:95:79:4b:74:b1:
47:b2:9f:67:48:bf:7a:a1:0f:47:02:b1:e1:de:e3:
4a:09:3d:ab:49:b6:3f:bd:86:b9:21:8f:85:75:d7:
4e:29:a2:8c:86:6d:29:73:8b:79:9b:5d:ba:98:83:
3c:aa:10:b1:5a:22:9e:7f:f4:fd:b8:07:d1:56:25:
f1:83:8e:38:3d:05:78:10:07:33:8a:82:53:c3:dc:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2B:08:90:87:B6:E6:30:44:A8:D7:5F:16:FA:3F:1A:A4:A0:72:F8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vCsIkIe25jBEqNdfFvo_GqSgcvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.72.0/24
45.138.73.0/24
46.17.105.0/24
80.76.32.0/22
91.217.76.0/24
92.118.8.0/23
94.142.136.0/23
95.214.9.0-95.214.11.255
185.40.7.0/24
185.58.204.0/24
185.94.164.0/23
185.102.136.0/24
185.103.252.0/22
185.114.72.0/23
185.117.116.0/24
185.117.119.0/24
185.200.190.0/24
185.232.170.0/23
185.233.80.0-185.233.82.255
185.233.202.0/23
185.252.144.0/24
193.124.182.0/23
193.124.188.0-193.124.190.255
193.239.160.0/23
193.239.166.0/23
194.36.178.0/23
IPv6:
2a04:5200:68::/48
2a04:5201:2::/48
2a04:5201:4::/48
2a04:5201:6::/47
2a04:5201:9::/48
2a04:5201:10::/48
2a04:5201:8018::/48
Signature Algorithm: sha256WithRSAEncryption
40:3e:b6:0c:ce:32:46:bd:5e:57:7c:1a:cd:72:13:ce:82:b7:
b3:d5:55:f4:0e:55:8f:92:54:0b:f9:a1:76:b4:cf:c7:04:44:
1c:ee:78:10:ba:4d:d8:4e:fd:8a:15:fe:43:9a:de:2d:2c:30:
35:e4:4d:aa:bc:b7:22:41:5c:da:05:20:ce:91:be:5d:39:3f:
bb:9e:45:b5:e2:09:8d:1b:53:26:91:95:c5:99:85:9d:fd:63:
d7:b7:13:47:ea:fa:f4:6e:2a:db:8b:15:c6:49:b5:dc:d7:82:
d2:1d:24:b0:92:cc:51:52:9f:cc:79:ce:d5:9b:02:9e:01:e8:
c3:c9:e2:2c:27:c5:9e:9c:54:94:67:4e:6c:b9:1a:01:c3:42:
18:7d:9e:c6:fc:7a:31:9f:2a:c7:c6:7e:c8:fe:17:01:1c:60:
2f:d5:bb:5c:fb:23:ba:13:e1:42:4b:78:7f:2d:79:73:99:35:
92:fb:31:20:ba:f7:dd:4b:ae:12:12:84:47:7c:7d:77:9c:ad:
b1:2b:e3:01:a2:3f:f6:5a:99:8f:3c:90:78:60:50:bb:ba:09:
a6:2a:08:34:41:d3:a0:8b:df:a6:6d:b6:4e:85:37:fe:74:30:
d6:0b:7c:d9:d7:fe:93:47:4a:3c:d7:e2:5c:c0:67:4d:ed:e3:
3f:a2:6f:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:58:23 2025 by rpki-client