Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PX3SNOIygltqOyo7u1_Fg02dQLk.roa
File: PX3SNOIygltqOyo7u1_Fg02dQLk.roa (raw, json)
Hash identifier: /fc6mzoOBWZ3GAMizVTXugkosiQiEo9sIIBJIpPXknM=
Subject key identifier: 3D:7D:D2:34:E2:32:82:5B:6A:3B:2A:3B:BB:5F:C5:83:4D:9D:40:B9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188527DF192E150FB015B6E2A0273088C58
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PX3SNOIygltqOyo7u1_Fg02dQLk.roa
Signing time: Thu 25 May 2023 10:39:25 +0000
ROA not before: Thu 25 May 2023 10:39:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206003
IP address blocks: 45.9.156.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
87.120.130.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
185.246.223.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
82.115.210.0/23 maxlen: 24
45.139.104.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.248.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
94.156.250.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:7d:f1:92:e1:50:fb:01:5b:6e:2a:02:73:08:8c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 25 10:39:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d7dd234e232825b6a3b2a3bbb5fc5834d9d40b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:6a:6e:92:7f:f5:c1:76:20:8c:23:c3:ed:
5e:99:f5:d1:01:50:fa:83:fa:de:e8:3a:b6:e6:0b:
57:36:05:1e:2b:41:95:ac:8f:ca:ad:0a:49:7e:17:
ca:f7:73:d1:0e:1a:a1:67:88:79:cf:a4:43:af:9e:
54:1d:83:18:93:cb:cd:6d:dd:f5:61:f2:9a:fc:65:
a2:3f:1a:e9:2c:c1:bb:4b:7b:2f:b5:48:99:82:16:
da:14:6a:e7:4c:6d:ac:70:ec:3c:e4:b2:75:77:82:
b5:b7:a9:80:33:04:89:2c:19:b0:7d:6c:14:c1:b1:
93:31:24:23:91:7d:49:8a:08:c4:1f:3d:35:fb:2b:
0d:12:86:65:33:6a:60:08:7c:50:7b:c0:ae:89:44:
20:3a:d9:1c:12:ca:2e:64:09:23:ab:b9:62:2c:a4:
4a:4e:5d:41:a3:00:f0:92:fb:76:31:f7:67:aa:3d:
f2:db:20:c7:b0:18:7f:e5:88:14:04:dc:a2:7b:07:
d6:04:3b:1b:40:f1:a8:eb:db:2e:1c:58:51:44:72:
2f:46:be:af:26:86:f4:84:e0:a5:d5:2a:96:7d:98:
b2:95:dd:e0:cf:36:af:c1:15:c1:78:8c:4e:ca:b3:
18:4e:fe:93:94:49:70:a5:24:d8:1e:ce:9d:84:a4:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7D:D2:34:E2:32:82:5B:6A:3B:2A:3B:BB:5F:C5:83:4D:9D:40:B9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PX3SNOIygltqOyo7u1_Fg02dQLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.12.255.0/24
45.66.228.0/24
45.129.84.0/24
45.129.86.0/24
45.139.104.0/24
45.141.158.0/24
81.161.230.0/24
81.161.239.0/24
82.115.210.0/23
83.219.97.0/24
87.120.130.0/24
87.121.124.0/23
87.121.162.0/24
87.121.220.0/24
91.200.192.0/22
93.123.39.0/24
94.154.172.0/24
94.156.160.0/24
94.156.248.0/24
94.156.250.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
171.22.31.0/24
178.215.226.0/24
178.215.238.0/24
185.246.223.0/24
193.35.19.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:cd:5c:75:20:77:41:a8:e3:64:10:20:bb:ed:4a:ee:5a:38:
3f:f7:32:33:39:19:64:07:c3:fa:c1:f1:ff:06:4d:e1:c9:c7:
f8:b6:48:3b:56:b3:34:43:82:74:1c:d4:ce:9b:b2:d6:67:b2:
e8:3b:f3:eb:ca:e7:fc:98:0f:cf:bd:6f:12:cf:62:9d:2d:a6:
29:b9:30:18:48:9a:5c:9b:a4:8e:52:52:67:1f:3c:14:31:5f:
a5:3d:67:ab:e8:2e:3c:16:8b:8f:35:02:fe:32:f1:0e:c7:fe:
42:6d:70:72:3d:44:2c:67:fe:78:d0:ac:49:ff:ec:48:e7:81:
2d:a6:f2:51:07:9c:76:12:8c:b7:00:27:e4:ff:70:53:84:02:
8a:75:c5:36:7a:3a:bf:34:a9:79:aa:77:8d:f9:eb:2a:5a:d5:
50:ae:43:71:95:06:0c:f5:54:e6:6e:09:8e:cd:81:9b:ed:1b:
ad:27:20:27:cd:a2:92:86:2d:8e:2a:f4:dc:b0:a3:1f:c3:f0:
18:40:13:8f:6f:ca:37:48:d4:35:44:ad:70:06:74:09:a4:1e:
c6:3f:01:73:84:62:5f:7a:f9:f1:af:57:8d:b8:35:c6:3a:67:
47:7c:18:4a:bf:b0:8c:e6:43:49:f3:9d:86:12:0c:b1:8b:af:
e6:f8:73:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:31:31 2025 by rpki-client