Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IDkLkJuxQXz7jQt8pqPa5LcU82M.roa
File: IDkLkJuxQXz7jQt8pqPa5LcU82M.roa (raw, json)
Hash identifier: 8SeQv8567BQyiU/zm09j/BSUDjkZKobEvLrQd21mHw8=
Subject key identifier: 20:39:0B:90:9B:B1:41:7C:FB:8D:0B:7C:A6:A3:DA:E4:B7:14:F3:63
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194087603B383C139667814F12542163513
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IDkLkJuxQXz7jQt8pqPa5LcU82M.roa
Signing time: Fri 27 Dec 2024 14:12:19 +0000
ROA not before: Fri 27 Dec 2024 14:12:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.157.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.90.88.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.48.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.179.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
176.125.254.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:76:03:b3:83:c1:39:66:78:14:f1:25:42:16:35:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 27 14:12:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20390b909bb1417cfb8d0b7ca6a3dae4b714f363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:5b:66:1c:5a:0a:8b:e2:3a:2e:e3:1d:af:
c1:f0:5a:40:3f:0e:bc:f5:9c:fc:b4:5d:1b:e4:11:
5a:79:b9:95:ac:22:0f:7d:eb:27:8f:01:24:36:7b:
70:01:ea:71:10:86:d2:f5:f9:ee:1a:77:d9:be:07:
0a:af:7f:26:14:88:1f:e6:18:96:c1:6b:b9:69:f3:
58:82:e1:c4:92:58:3c:24:6b:3b:91:90:54:17:e1:
d1:ac:5d:b5:5e:c1:2e:a8:47:2b:f0:c9:81:78:d3:
d8:6d:59:b4:cc:ed:8f:ed:0a:4c:30:cc:df:ff:49:
f4:b7:0d:1c:75:e1:64:42:86:59:bf:7f:92:13:6d:
86:4d:7b:c4:ec:fc:a8:8a:a3:bb:74:f6:73:8d:d9:
46:06:ed:5f:fb:89:c5:4c:a3:bc:2f:33:d3:1e:74:
4c:78:59:f1:0e:ca:83:4e:cf:63:f2:5f:b5:21:b7:
82:20:2a:c1:3a:cf:e2:67:6b:f2:cf:da:78:11:d5:
36:01:d8:7c:d5:4d:d5:fa:f8:d9:93:ea:2c:39:7e:
26:e3:3f:1a:d2:6b:41:3c:ff:78:1b:db:ce:d5:73:
84:5e:f9:0b:29:d6:a2:3b:c8:b2:94:43:97:00:47:
07:3a:b3:57:c0:36:fc:9e:8f:61:18:9b:c8:af:30:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:39:0B:90:9B:B1:41:7C:FB:8D:0B:7C:A6:A3:DA:E4:B7:14:F3:63
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IDkLkJuxQXz7jQt8pqPa5LcU82M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.157.0/24
45.12.255.0/24
45.14.164.0/24
45.66.228.0/24
45.88.64.0/24
45.90.88.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.62.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.48.0/24
93.123.84.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.179.0/24
94.156.248.0/24
141.98.1.0/24
147.78.100.0/24
171.22.72.0/22
176.125.254.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.49.94.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0e:31:32:70:84:e5:e0:92:c6:46:42:bb:ad:ef:cb:3b:80:
5b:eb:b4:12:62:8b:26:d4:03:19:ac:62:0d:68:bf:00:88:f2:
2e:84:9b:15:21:d0:44:65:f5:66:bf:9f:a2:14:a7:5c:a7:6e:
10:b8:07:90:63:a0:d1:d8:a6:5b:ba:f5:91:dc:eb:03:bd:77:
e6:6b:ba:5d:a2:84:d3:73:2f:19:51:10:ac:15:e6:ec:06:7b:
9a:4b:52:1d:3d:51:52:56:5c:62:6a:d0:26:df:93:96:1f:3b:
c5:40:9a:87:eb:fe:9c:7a:ed:92:63:a8:56:40:e2:44:db:d7:
b4:e5:e1:dd:0e:45:46:0b:d7:7f:7f:f5:67:d7:bd:46:47:03:
51:89:9a:2c:f5:78:10:8d:bc:35:69:b7:b8:25:55:37:d2:a7:
b1:f4:29:02:92:79:d1:47:6a:b5:3e:4f:82:2a:fb:7c:76:4d:
f6:82:ba:9a:2b:18:75:4f:ff:81:40:5f:44:c6:b1:d4:55:54:
38:84:e4:45:f9:fe:41:8c:e5:9f:b5:82:4d:30:fc:f1:de:34:
0d:d1:55:9c:52:30:3d:9d:ea:b3:60:99:8f:d5:01:4b:bd:59:
eb:78:34:46:8e:1f:5f:bf:e2:dc:bf:7a:5d:6a:02:20:5d:5d:
b4:0f:e9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:35:53 2025 by rpki-client