Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WJ0Ro2xdJ4QNEN4H-ZVlGb4KMRQ.roa
File: WJ0Ro2xdJ4QNEN4H-ZVlGb4KMRQ.roa (raw, json)
Hash identifier: CTWrFvyFBcntiNOjvNiEC0DQLC4a6MoqccS9DNx9yjY=
Subject key identifier: 58:9D:11:A3:6C:5D:27:84:0D:10:DE:07:F9:95:65:19:BE:0A:31:14
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019082DA3D3FE46DDF906B30E969D0B828E7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WJ0Ro2xdJ4QNEN4H-ZVlGb4KMRQ.roa
Signing time: Fri 05 Jul 2024 12:24:18 +0000
ROA not before: Fri 05 Jul 2024 12:24:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.161.0/24 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:da:3d:3f:e4:6d:df:90:6b:30:e9:69:d0:b8:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 12:24:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=589d11a36c5d27840d10de07f9956519be0a3114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:17:d3:fb:b8:26:d0:ca:0d:81:2c:ab:e8:
0f:78:14:a9:10:ae:83:7f:0b:c3:a8:e6:cb:8f:cd:
5d:7e:da:43:17:0f:bb:71:40:20:f1:7f:5d:2c:94:
8d:7f:53:8b:57:61:86:56:29:a5:88:47:20:98:2f:
09:96:99:48:e9:4f:c3:88:05:68:05:24:e1:b6:1a:
1b:63:a9:b2:21:7c:42:6b:28:a5:51:5e:a3:46:b9:
1c:62:1e:89:5e:41:13:2f:d4:fa:90:60:b3:4a:6a:
21:fb:d0:96:9c:ce:63:00:f6:9e:02:43:66:c2:9a:
99:e0:dc:2f:59:f4:80:34:d2:73:b5:08:9d:7e:5a:
ae:82:1c:92:b2:90:8d:fa:e8:f5:f0:2e:a5:ea:25:
4e:5e:89:69:38:e9:63:a6:ab:fc:30:07:26:67:1b:
36:c8:0a:b2:2a:8f:0c:4b:58:6b:76:82:e1:d6:77:
c4:6d:ad:e0:e1:10:79:14:61:6a:ab:b5:ff:c3:b4:
35:8e:d6:d4:62:cd:21:c0:3e:03:f5:c4:60:d0:38:
89:b4:79:ba:95:4f:8b:62:fb:5e:1c:06:9b:21:34:
11:46:3f:61:31:e2:a6:e8:79:02:03:78:0c:27:db:
92:f7:dc:b8:12:23:31:e5:73:0a:5c:89:81:8b:26:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9D:11:A3:6C:5D:27:84:0D:10:DE:07:F9:95:65:19:BE:0A:31:14
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WJ0Ro2xdJ4QNEN4H-ZVlGb4KMRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
141.98.5.0/24
147.78.102.0/24
171.22.17.0/24
171.22.31.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
185.222.161.0/24
193.42.32.0/23
193.149.2.0/23
194.55.224.0/23
Signature Algorithm: sha256WithRSAEncryption
60:99:28:8b:07:bb:65:ef:5a:95:93:8b:de:ee:6e:2f:b0:a4:
6e:3f:67:c5:19:e0:9b:d6:26:97:e8:88:ab:39:85:79:6e:2f:
81:c7:5a:27:7b:d0:db:e9:46:98:cb:32:ef:da:e9:dc:9e:ea:
f6:4b:c8:c0:e6:f9:10:b6:18:e7:b3:96:0f:31:e2:62:c9:15:
b7:2f:23:07:1e:49:8e:5a:fb:e4:50:ff:8d:2f:17:62:6d:6c:
11:41:e4:13:6e:32:46:11:ab:bd:de:e1:76:d6:25:f0:99:ec:
6a:f1:af:35:0e:74:a3:97:fe:bd:c8:e2:41:6e:a8:96:fa:07:
0c:d0:3c:44:e4:c0:9f:4c:3f:f0:f2:80:31:1b:a0:09:89:c7:
ff:0b:b3:64:6d:f5:80:56:aa:06:6b:71:97:af:25:51:2f:9f:
82:7c:52:bf:c7:4c:a5:fa:69:aa:ed:dc:e5:d3:c2:9f:a9:61:
99:b6:bd:64:86:a0:e1:a5:10:44:ed:e9:7b:5e:0f:45:6e:25:
f9:59:17:6b:f2:d4:a1:e8:c0:52:9f:31:32:81:cb:b1:02:25:
8c:d7:ce:f6:2a:74:6e:9b:a9:e4:61:0e:df:72:35:11:0c:0e:
e7:ee:31:38:00:ff:a2:c6:5e:fd:bd:a0:0a:2c:fd:73:4c:94:
34:b2:b8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:55:08 2025 by rpki-client