Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/axSHVvToPb-S39XkSKlnDEumW2E.roa
File: axSHVvToPb-S39XkSKlnDEumW2E.roa (raw, json)
Hash identifier: pS1kz2furI3PqJHb6kyj9nLgGl5068s0X9qgJvze20w=
Subject key identifier: 6B:14:87:56:F4:E8:3D:BF:92:DF:D5:E4:48:A9:67:0C:4B:A6:5B:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188527DF0842E5EF1FEBDB02C0CD6D639D4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/axSHVvToPb-S39XkSKlnDEumW2E.roa
Signing time: Thu 25 May 2023 10:39:25 +0000
ROA not before: Thu 25 May 2023 10:39:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 45.9.156.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
87.120.130.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
185.246.223.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
45.139.104.0/24 maxlen: 24
82.115.210.0/23 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
171.22.31.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.250.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
94.156.160.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:7d:f0:84:2e:5e:f1:fe:bd:b0:2c:0c:d6:d6:39:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 25 10:39:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b148756f4e83dbf92dfd5e448a9670c4ba65b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:06:1f:8e:fd:94:e4:fe:ad:1d:82:91:c3:
df:53:dd:aa:17:dc:19:0a:3f:e3:76:bf:c8:df:0c:
92:0c:1e:d8:71:20:90:c2:ce:a1:0a:bd:22:85:41:
0b:2e:ee:65:6a:d0:2c:a4:81:3f:d5:a4:d6:ef:21:
57:45:00:92:bf:f4:f8:53:12:87:e7:5e:95:59:b5:
f2:cb:83:f9:f7:40:8d:34:37:27:55:4a:53:2c:3a:
f8:24:0d:13:38:f5:cb:ca:7b:43:60:2b:6d:ec:49:
13:7d:76:33:66:09:68:e5:74:93:5f:c3:ff:76:5d:
3a:4e:78:de:8b:90:89:80:8a:e6:71:f2:f2:cd:a6:
b6:6c:05:75:43:20:14:b6:de:53:35:01:5d:f7:b1:
47:fe:39:ae:4f:33:d4:e6:bb:2e:96:63:d1:07:90:
5b:ae:cb:ec:20:99:c1:a9:0f:c2:e3:78:8d:cc:f6:
96:ca:58:f9:81:72:e2:4a:9d:35:31:be:11:11:b6:
9c:9d:45:db:cb:d5:94:e2:e2:75:0e:b6:18:a2:ee:
8a:71:aa:76:2c:ce:e0:2a:1f:6e:b0:9d:58:fe:30:
8d:ca:7c:2b:e6:af:8b:fa:72:70:91:c1:ea:ee:b1:
d4:6b:a4:d7:98:15:2e:5b:3a:86:e6:16:be:19:f6:
0a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:14:87:56:F4:E8:3D:BF:92:DF:D5:E4:48:A9:67:0C:4B:A6:5B:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/axSHVvToPb-S39XkSKlnDEumW2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.12.255.0/24
45.66.228.0/24
45.129.84.0/24
45.129.86.0/24
45.139.104.0/24
45.141.158.0/24
81.161.230.0/24
81.161.239.0/24
82.115.210.0/23
83.219.97.0/24
87.120.130.0/24
87.121.124.0/23
87.121.162.0/24
87.121.220.0/24
91.200.192.0/22
93.123.39.0/24
94.154.172.0/24
94.156.160.0/24
94.156.248.0/24
94.156.250.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
171.22.31.0/24
178.215.226.0/24
178.215.238.0/24
185.246.223.0/24
193.35.19.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f8:d1:9f:95:63:27:1b:6e:0e:93:17:aa:92:a8:5f:eb:e5:
5e:df:82:46:44:7b:4f:bf:41:29:d5:27:7c:71:7a:21:d5:e8:
5b:7d:9c:92:63:db:ec:41:fb:8c:07:ed:69:17:fc:02:dc:68:
1d:e1:51:94:1e:15:6e:f5:6c:1c:0a:d5:59:68:ed:b7:9e:db:
26:16:8a:65:42:74:ff:7f:37:21:97:eb:d1:3b:33:a4:07:f3:
d6:96:1a:6d:3d:e4:6e:31:84:98:1a:0b:6b:b9:d0:c5:17:e0:
e0:f9:3b:5a:06:ff:23:1b:10:f8:7a:11:99:25:fb:23:c1:5e:
f2:83:8e:e4:49:85:56:f1:09:7a:07:94:3d:60:fe:79:95:be:
a0:5a:0a:97:0d:54:c9:d1:45:cc:8e:24:cd:78:c6:e5:d9:fa:
75:98:b8:0e:ff:d8:9b:6e:13:60:1d:c9:ba:98:90:67:98:e2:
f5:2a:d1:39:af:03:27:73:b2:5d:a8:a4:90:e6:51:36:28:0c:
b8:a2:12:5d:89:f7:1e:3e:07:73:d1:68:79:79:68:0c:ef:c1:
22:4e:bd:67:69:4d:10:5d:c8:bf:3b:c8:6e:7b:84:3a:7d:98:
7f:51:d6:15:e1:c4:9b:5c:92:dc:bb:9a:df:63:78:50:51:16:
6b:6f:ae:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:02:56 2025 by rpki-client