Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A9TaWmpvsyoNWr_aVbdGziIXmMI.roa
File: A9TaWmpvsyoNWr_aVbdGziIXmMI.roa (raw, json)
Hash identifier: ne6iHbDuP7FgO9nMeSarEdzeF7kHWDAe7ULPmz87QGM=
Subject key identifier: 03:D4:DA:5A:6A:6F:B3:2A:0D:5A:BF:DA:55:B7:46:CE:22:17:98:C2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01881F5D517459F290A14771766410868837
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A9TaWmpvsyoNWr_aVbdGziIXmMI.roa
Signing time: Mon 15 May 2023 12:23:09 +0000
ROA not before: Mon 15 May 2023 12:23:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 87.120.192.0/23 maxlen: 24
185.147.100.0/22 maxlen: 24
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.219.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
45.9.208.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
45.143.100.0/22 maxlen: 24
94.156.237.0/24 maxlen: 24
193.8.184.0/23 maxlen: 24
193.8.186.0/23 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
93.123.68.0/22 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.80.0/24 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
194.48.249.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
93.123.26.0/23 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.26.0/23 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
94.156.152.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
37.139.130.0/23 maxlen: 24
212.87.205.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
87.121.163.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
45.95.2.0/23 maxlen: 24
45.95.0.0/23 maxlen: 24
5.253.58.0/23 maxlen: 24
5.253.56.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:5d:51:74:59:f2:90:a1:47:71:76:64:10:86:88:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 15 12:23:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03d4da5a6a6fb32a0d5abfda55b746ce221798c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:f1:6b:e5:26:e2:b9:02:3d:6a:e9:96:81:
e5:df:aa:bc:e2:a0:61:cc:13:cc:21:a5:23:d3:bf:
b7:b8:a8:ff:34:82:3a:d9:3c:a5:4b:d2:f8:ff:7a:
18:3a:7c:bd:f2:09:8b:06:33:b4:c1:df:31:9b:7f:
59:3e:bc:f0:cf:26:5f:42:8f:db:a3:db:b2:57:1f:
d8:2d:c2:aa:ee:43:0c:93:1b:50:cd:77:c0:f2:fd:
21:f2:fa:17:e3:4d:6b:29:78:76:7b:35:90:9e:91:
3a:a5:14:e4:61:7e:cf:b4:f2:68:ea:6e:e2:61:2b:
6f:62:cf:7c:c5:4e:79:2d:16:e9:c3:ef:3d:aa:ee:
f8:6f:bb:a5:db:c0:db:b8:56:2e:b8:18:bf:1f:36:
93:18:13:9a:79:2a:4e:04:fd:8b:ff:73:14:60:02:
5b:8a:b4:4c:4b:e5:57:ba:62:cc:b2:17:5d:6b:8e:
06:90:82:fd:fb:ca:da:5f:5b:73:e5:85:50:59:36:
57:9e:15:79:66:d3:6c:b6:1b:cd:a2:02:3c:f1:6e:
b8:c3:c5:dc:39:9a:d9:69:6d:a5:53:10:b2:5b:71:
60:c9:0e:07:2a:b8:24:e2:d7:41:c1:23:ce:92:5d:
54:57:5f:8c:8c:b7:60:89:f0:7e:46:7c:c2:f4:0c:
19:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:DA:5A:6A:6F:B3:2A:0D:5A:BF:DA:55:B7:46:CE:22:17:98:C2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/A9TaWmpvsyoNWr_aVbdGziIXmMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
37.139.130.0/23
45.8.92.0/24
45.9.208.0/22
45.95.0.0/22
45.139.123.0/24
45.143.100.0/22
87.120.192.0/23
87.120.219.0/24
87.121.36.0-87.121.38.255
87.121.60.0/22
87.121.103.0-87.121.104.255
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.26.0/23
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.68.0/22
93.123.76.0-93.123.80.255
93.123.112.0/22
93.123.117.0/24
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.176.0-94.156.181.255
94.156.237.0-94.156.238.255
185.147.100.0/22
185.207.14.0/23
185.252.177.0/24
193.8.184.0/22
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
194.48.249.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
15:18:20:51:30:03:11:39:87:5d:b0:e7:3f:94:83:17:2a:20:
43:d7:77:78:43:fd:e8:a0:53:6b:01:4a:b6:26:7c:33:72:24:
ae:a2:35:44:56:da:18:d6:0b:43:a4:b3:4b:b9:0c:da:81:f6:
67:71:e7:f2:b2:3e:64:0e:15:88:d1:3d:e7:3e:7c:ed:1f:0f:
c4:40:4a:b0:ae:0e:34:fc:36:f5:69:fb:31:59:98:81:65:01:
7a:fd:3f:8d:d3:db:13:be:fc:e0:39:63:fc:de:0d:01:8d:cd:
87:4c:aa:92:ae:75:e3:95:d0:56:60:28:59:30:32:2c:ea:fb:
a7:e5:99:22:f5:91:3b:9c:db:c5:82:40:03:83:32:71:6d:bc:
bf:15:0c:88:11:ba:52:af:e1:38:a8:63:c5:86:51:a3:36:b6:
8b:3a:3c:0e:74:01:d0:88:af:ef:f2:8d:91:d0:cd:f6:63:10:
d6:50:8a:06:45:75:86:50:90:03:29:7f:2f:e6:bf:53:4b:f1:
ce:49:6f:9c:4b:d2:bd:41:26:b5:5b:c5:55:d4:98:fb:3e:a8:
d7:c9:5b:6c:e8:5b:ad:27:81:f4:c9:f3:6c:be:c7:1f:aa:62:
02:05:b7:c9:60:dd:e2:69:68:0e:fb:b0:e0:bd:18:9a:3d:66:
2d:e2:18:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:38:11 2025 by rpki-client