Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aoDDVSnvFslSHmUGpvz0jfOgL3M.roa
File: aoDDVSnvFslSHmUGpvz0jfOgL3M.roa (raw, json)
Hash identifier: VlMbhXcsgAHj1umXludNiGFLMAv+1axACOzW58tgRmc=
Subject key identifier: 6A:80:C3:55:29:EF:16:C9:52:1E:65:06:A6:FC:F4:8D:F3:A0:2F:73
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194B5E1957ECA15FE9CC1B77FB1F642E899
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aoDDVSnvFslSHmUGpvz0jfOgL3M.roa
Signing time: Thu 30 Jan 2025 06:24:07 +0000
ROA not before: Thu 30 Jan 2025 06:24:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2.59.253.0/24 maxlen: 24
5.252.132.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.179.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:e1:95:7e:ca:15:fe:9c:c1:b7:7f:b1:f6:42:e8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 30 06:24:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a80c35529ef16c9521e6506a6fcf48df3a02f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:60:48:11:2f:7c:c8:1f:36:b3:1c:82:2f:
e1:1e:9c:81:c0:20:d7:be:4d:d8:93:f2:1c:cb:50:
45:a9:e7:ea:4e:91:1e:b2:6d:61:70:54:15:74:17:
0e:23:f7:54:06:01:df:2d:9a:35:a1:7a:58:6c:b6:
ea:27:dc:34:e6:48:a8:32:d2:7e:19:6f:fe:5c:fe:
6e:13:df:13:b2:7d:23:6a:96:bf:29:b8:6f:fb:e5:
e7:0a:5a:5c:71:e6:a9:d1:ff:0c:2e:8b:46:7a:9b:
64:5b:31:35:e3:74:23:75:82:22:3e:da:bc:f3:a1:
1b:f6:39:fe:47:a2:cb:55:98:d4:58:bc:18:2f:f8:
4f:f6:6a:5d:45:17:10:c8:cf:9e:1b:aa:09:c4:8f:
2c:e4:ff:bd:9c:66:ba:e4:8d:22:11:30:16:fd:c4:
9b:a2:0c:c9:ac:37:9b:33:15:71:5d:5c:56:db:f2:
8e:9a:65:c7:18:63:d2:f2:55:c9:48:c8:68:0a:29:
8b:9b:67:78:3f:01:ca:3c:44:3a:90:64:af:ff:34:
fb:a7:b8:19:20:25:0d:78:21:58:51:49:1f:95:41:
49:a8:9a:54:31:42:49:70:67:0d:a5:58:c5:a7:ff:
e2:6d:b3:93:69:d2:3f:f9:91:8b:03:38:07:d5:bd:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:80:C3:55:29:EF:16:C9:52:1E:65:06:A6:FC:F4:8D:F3:A0:2F:73
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aoDDVSnvFslSHmUGpvz0jfOgL3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
5.252.132.0/22
45.9.156.0/23
45.14.164.0/24
45.66.228.0/24
45.66.230.0/24
45.88.64.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
79.110.62.0/24
83.219.97.0/24
84.54.48.0/24
85.209.133.0/24
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.48.0/24
92.249.50.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.179.0/24
94.156.248.0/24
95.214.27.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.49.94.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
94:03:0e:da:d6:d0:35:cc:5e:c4:92:e8:37:80:05:2a:72:63:
f0:4f:76:89:94:36:62:5a:e6:ff:e4:1f:d1:be:8e:17:bf:32:
47:0b:aa:c5:dd:46:3e:52:d6:3d:66:9f:6a:ab:58:20:00:22:
26:73:bc:9b:86:5f:b5:8c:2f:20:ac:49:33:d0:d9:7e:9e:8b:
38:39:27:f2:6b:6b:1a:a3:08:f8:1e:4d:34:19:6d:58:32:ea:
49:d3:fa:24:80:a2:3f:39:30:c9:ef:9c:d4:4d:97:08:5b:a8:
d5:b7:e8:b9:ad:dd:99:c8:df:e4:bb:e5:39:dd:e4:f5:90:7c:
06:12:70:39:58:13:cd:97:80:94:a4:be:1a:3a:4e:8d:ff:c4:
ff:b5:fe:7f:73:e1:ea:68:a2:87:3f:eb:33:a9:3c:9b:10:c8:
b2:eb:c2:eb:5d:f9:89:7a:ba:53:86:27:d7:67:89:fb:85:25:
68:74:64:98:2c:80:4b:55:c5:b3:2f:46:d9:90:3c:1c:11:b0:
f5:a7:1e:fe:ee:27:5a:c6:34:89:d9:1f:bc:af:c9:40:c6:c3:
ab:f0:90:03:62:87:d0:f9:90:d7:cb:11:d3:50:00:3c:30:26:
4c:09:82:ed:03:ee:ba:c7:71:5b:7f:e2:a7:86:fc:84:d6:6b:
9b:e0:b4:a8
-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgISAZS14ZV+yhX+nMG3f7H2QuiZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTMwMDYyNDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTgwYzM1NTI5ZWYxNmM5NTIxZTY1MDZhNmZjZjQ4ZGYzYTAyZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOlgSBEvfMgfNrMcgi/hHpyBwCDX
vk3Yk/Icy1BFqefqTpEesm1hcFQVdBcOI/dUBgHfLZo1oXpYbLbqJ9w05kioMtJ+
GW/+XP5uE98Tsn0japa/Kbhv++XnClpcceap0f8MLotGeptkWzE143QjdYIiPtq8
86Eb9jn+R6LLVZjUWLwYL/hP9mpdRRcQyM+eG6oJxI8s5P+9nGa65I0iETAW/cSb
ogzJrDebMxVxXVxW2/KOmmXHGGPS8lXJSMhoCimLm2d4PwHKPEQ6kGSv/zT7p7gZ
ICUNeCFYUUkflUFJqJpUMUJJcGcNpVjFp//ibbOTadI/+ZGLAzgH1b0RrwIDAQAB
o4IDFzCCAxMwHQYDVR0OBBYEFGqAw1Up7xbJUh5lBqb89I3zoC9zMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvYW9ERFZTbnZGc2xTSG1VR3B2ejBqZk9nTDNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBKwYIKwYBBQUHAQcBAf8EggEaMIIBFjCCARIEAgABMIIB
CgMEAAI7/QMEAgX8hAMEAS0JnAMEAC0OpAMEAC1C5AMEAC1C5gMEAC1YQAMEAC1a
WQMEAC2LagMEAC2NnjAMAwQALZdZAwQCLZdYAwQAT24yAwQAT24+AwQAU9thAwQA
VDYwAwQAVdGFAwQAV3hXAwQAV3imAwQAV3ktAwQAV3lXAwQBV3l8AwQAV3miAwQA
V3mlAwQEW1zwAwQBXHfEAwQAXPkwAwQAXPkyAwQCXpqgAwQAXpwLAwQDXpxAAwQA
XpyzAwQAXpz4AwQAX9YbAwQAjWIBAwQAjWIGAwQAk05kAwQCqxZIAwQCudhUAwQC
udpUAwQAwRnYAwQAwjFeAwQAwje6AwQAwqmvMA0GCSqGSIb3DQEBCwUAA4IBAQCU
Aw7a1tA1zF7Ekug3gAUqcmPwT3aJlDZiWub/5B/Rvo4XvzJHC6rF3UY+UtY9Zp9q
q1ggACImc7ybhl+1jC8grEkz0Nl+nos4OSfya2saowj4Hk00GW1YMupJ0/okgKI/
OTDJ75zUTZcIW6jVt+i5rd2ZyN/ku+U53eT1kHwGEnA5WBPNl4CUpL4aOk6N/8T/
tf5/c+HqaKKHP+szqTybEMiy68LrXfmJerpThifXZ4n7hSVodGSYLIBLVcWzL0bZ
kDwcEbD1px7+7idaxjSJ2R+8r8lAxsOr8JADYofQ+ZDXyxHTUAA8MCZMCYLtA+66
x3Fbf+KnhvyE1mub4LSo
-----END CERTIFICATE-----
Generated at Tue May 13 17:25:14 2025 by rpki-client