Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U-0k7DEGwu59smKEjXZGmYbV6Qk.roa
File: U-0k7DEGwu59smKEjXZGmYbV6Qk.roa (raw, json)
Hash identifier: 7m6ihED9fQ4ESG4jbIawHWtO/UVf0FzWlTZUjb9SAHg=
Subject key identifier: 53:ED:24:EC:31:06:C2:EE:7D:B2:62:84:8D:76:46:99:86:D5:E9:09
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190E883BA7A421F5D194800E96835848073
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U-0k7DEGwu59smKEjXZGmYbV6Qk.roa
Signing time: Thu 25 Jul 2024 06:11:05 +0000
ROA not before: Thu 25 Jul 2024 06:11:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.58.95.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.35.18.0/24 maxlen: 24
193.42.32.0/23 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:83:ba:7a:42:1f:5d:19:48:00:e9:68:35:84:80:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 25 06:11:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53ed24ec3106c2ee7db262848d76469986d5e909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:b9:be:42:05:9c:d9:b7:4e:5b:50:f8:4a:
4c:1d:74:e5:8a:db:b6:f3:d3:4b:e1:15:85:89:45:
cd:dd:13:b3:99:4c:c6:71:4c:13:4f:4f:43:35:31:
92:fe:cf:38:cc:9d:b0:e7:d2:e2:93:e9:3b:f2:fd:
98:c4:a9:a3:cd:ad:ac:f1:3e:c6:71:a3:fe:84:be:
9f:d7:74:87:35:18:60:de:89:a8:a8:bf:e0:93:e7:
06:c0:60:02:cc:4d:80:8a:33:27:f7:f3:ac:36:44:
6f:28:5e:74:b6:aa:32:46:be:6c:cb:c6:b1:6e:27:
e2:f3:e2:d4:61:ee:41:8d:92:43:3d:94:f0:b2:6a:
f7:2e:db:43:b0:37:0a:e8:39:e5:36:13:b2:57:9a:
d0:90:ec:1d:57:b2:d4:5c:ad:c4:84:a8:84:95:3a:
f1:66:82:59:cb:0c:1f:7a:0c:e6:d7:64:89:89:74:
f5:38:0e:61:ff:e4:2a:97:69:43:34:61:0f:8f:9a:
e1:13:e9:ff:a1:a7:28:fd:0d:35:c8:46:5a:9e:ff:
65:2f:ef:05:52:cc:05:88:ac:b1:4d:25:56:b9:b6:
d8:e3:7e:28:54:7e:1b:ea:73:6a:6c:e1:47:0e:58:
73:e2:34:c5:6c:ee:58:02:3e:c9:f0:b2:0d:5c:52:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:24:EC:31:06:C2:EE:7D:B2:62:84:8D:76:46:99:86:D5:E9:09
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U-0k7DEGwu59smKEjXZGmYbV6Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
45.8.92.0/24
45.88.90.0/24
45.128.96.0/24
45.128.232.0/24
45.144.154.0/24
45.151.89.0/24
80.76.51.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
84.54.51.0/24
85.31.47.0/24
87.120.87.0/24
87.121.38.0/24
87.121.45.0/24
87.121.58.0/24
87.121.69.0/24
87.121.221.0/24
91.92.16.0/24
92.119.196.0/23
93.123.24.0/24
93.123.39.0/24
94.103.124.0/24
94.154.160.0/22
94.156.2.0/24
94.156.8.0/24
94.156.10.0/23
94.156.79.0/24
141.98.1.0/24
141.98.4.0/24
147.78.102.0/23
171.22.72.0/22
178.215.224.0/24
185.216.70.0/24
185.216.84.0/22
185.218.84.0/22
193.35.18.0/24
193.42.32.0/23
193.222.96.0/24
194.48.251.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7c:7f:16:05:69:f5:f7:66:51:d4:62:ef:cd:db:f2:93:00:
c5:ed:57:54:53:1f:ad:5b:72:a0:ac:f6:33:13:00:3e:9f:a7:
66:6e:dd:13:9a:13:09:47:ed:aa:91:9e:81:fd:ec:3c:49:ad:
a6:2a:08:9c:b2:8b:63:5f:d2:18:7e:05:a3:16:85:d1:bc:e2:
2e:8a:0d:7a:50:77:35:62:da:5b:2f:21:86:b7:29:b4:f8:f6:
3a:1a:3d:d4:07:7f:36:33:bd:16:91:9e:de:6c:7a:6c:b8:60:
f7:a0:4c:58:8d:71:93:94:7f:79:30:8d:39:bd:eb:76:89:c6:
d8:74:57:8a:05:ba:90:38:11:e6:af:20:fd:ad:ec:64:93:2e:
82:72:09:30:5f:cd:1d:4a:bb:38:78:2f:0d:8d:51:81:2b:44:
1a:96:a1:d3:bf:64:c8:20:9f:39:99:4f:ac:58:8f:a7:26:81:
4d:7e:5d:f9:ad:f8:d4:fe:dd:b3:1b:0d:07:de:86:9a:87:88:
8d:fa:fb:c7:29:4f:3e:5a:de:43:a3:b9:17:27:18:57:b5:71:
64:41:01:d0:ea:99:dc:c7:a8:22:63:06:a9:44:02:4b:e2:08:
c6:fb:4e:67:14:88:7d:d8:bd:96:fa:89:3e:4d:b6:dd:87:f1:
be:85:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:12:48 2025 by rpki-client