Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7MNPbaACMH-spHMI274CUYfRN3w.roa
File: 7MNPbaACMH-spHMI274CUYfRN3w.roa (raw, json)
Hash identifier: 1KXKl265a8q/5LfHVaCLyBdiw1a385tgTuW42MekQik=
Subject key identifier: EC:C3:4F:6D:A0:02:30:7F:AC:A4:73:08:DB:BE:02:51:87:D1:37:7C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CB0BE1F0FB7C8AC2809ECDFF19D5E5485
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7MNPbaACMH-spHMI274CUYfRN3w.roa
Signing time: Thu 28 Dec 2023 14:04:58 +0000
ROA not before: Thu 28 Dec 2023 14:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206003
IP address blocks: 171.22.31.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
81.161.239.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.248.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:be:1f:0f:b7:c8:ac:28:09:ec:df:f1:9d:5e:54:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 28 14:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecc34f6da002307faca47308dbbe025187d1377c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:5b:5d:26:5d:34:1f:39:14:9f:6b:7c:1f:
c1:08:02:fa:fe:24:9f:d9:67:18:0f:a6:f7:90:51:
d4:53:1f:3c:89:fc:75:83:a7:c0:56:8f:8a:da:80:
3c:66:ed:fe:13:64:45:9e:fb:8c:ea:9f:85:1d:13:
f5:5f:c2:4c:51:27:a7:7c:c1:25:5e:86:1f:73:c3:
fb:a2:6e:82:ba:69:d6:e5:db:89:71:86:b0:86:e0:
57:b5:f0:a9:8b:60:27:dd:0f:0a:ec:0c:bb:74:e5:
53:c9:4f:73:ce:7a:c8:b0:af:c9:a4:10:e4:d3:3b:
61:50:28:01:38:f5:45:0d:88:8b:e8:e9:83:fb:ad:
a1:19:f3:40:8a:e9:5e:5b:44:6f:93:8a:ab:1b:f3:
52:34:05:50:be:8e:73:71:76:cd:ec:ae:61:e0:47:
ba:96:52:49:6b:1f:85:40:66:f3:55:b7:20:a2:58:
f0:25:25:87:5b:cc:30:af:0c:5a:32:c0:8b:0e:d5:
71:06:73:70:48:8c:4c:cc:b5:bd:a8:09:42:f0:2b:
f7:eb:76:af:30:3b:43:7c:a2:b2:a2:0d:9e:b9:ab:
fc:d7:bb:fc:12:d6:cc:4c:fb:ea:04:a8:00:b4:e5:
da:c0:68:b1:b4:c0:fd:9f:f6:e3:21:6c:e9:d7:69:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C3:4F:6D:A0:02:30:7F:AC:A4:73:08:DB:BE:02:51:87:D1:37:7C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7MNPbaACMH-spHMI274CUYfRN3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
45.141.158.0/24
79.110.61.0/24
81.161.239.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
94.154.172.0/24
94.156.248.0/24
171.22.17.0-171.22.18.255
171.22.31.0/24
193.25.216.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c6:d4:8b:13:80:37:9c:13:05:34:30:aa:5a:eb:8c:7e:fb:
f0:a1:7c:e0:6d:03:39:46:6f:7a:66:84:ce:3b:81:e3:c1:f7:
1d:0f:ad:e5:2a:56:49:c7:f6:41:53:e6:7d:10:e0:be:45:da:
57:95:6d:a9:44:78:35:d3:0c:27:a9:a6:f9:d3:c5:b2:38:c5:
99:a2:6f:5b:f2:7e:0f:04:95:7e:e5:9c:89:78:da:6c:e0:71:
67:73:77:f2:9d:a3:33:4d:94:21:de:91:9c:65:e8:05:47:c6:
6e:e0:12:73:67:70:72:07:c4:44:ff:ba:8d:b4:80:94:e9:62:
1f:a1:67:19:66:2c:34:dd:fa:e5:99:0b:a4:a2:9f:f5:8f:c3:
ce:7a:48:a5:8e:54:93:c4:a0:49:36:06:63:cc:2a:d4:08:09:
3e:74:4d:62:83:ba:e4:4e:9e:99:70:59:25:58:67:63:1a:18:
ec:84:80:47:1c:30:23:c0:ec:19:05:63:ca:7e:1a:69:04:77:
a5:fe:2b:ba:cc:6c:e8:ed:0e:d4:55:24:01:21:89:14:0e:ba:
8d:fb:f5:04:ca:ac:db:6c:3c:f0:16:45:57:18:e6:0b:76:a0:
05:51:88:9f:aa:35:c9:04:1c:24:cb:2d:2d:9e:6f:97:aa:d1:
94:a9:99:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:08:08 2025 by rpki-client