Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iixnJSzBi0H-ZpddKP0VmjSM8oM.roa
File: iixnJSzBi0H-ZpddKP0VmjSM8oM.roa (raw, json)
Hash identifier: /Z6KkY8xfMWhR/MdrgEXjrI0XfWgEJp7Eh5AAivQnqo=
Subject key identifier: 8A:2C:67:25:2C:C1:8B:41:FE:66:97:5D:28:FD:15:9A:34:8C:F2:83
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188E77222E94C0570883ECBFE91381BE7F2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iixnJSzBi0H-ZpddKP0VmjSM8oM.roa
Signing time: Fri 23 Jun 2023 08:49:56 +0000
ROA not before: Fri 23 Jun 2023 08:49:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
94.156.239.0/24 maxlen: 24
194.113.36.0/22 maxlen: 24
141.98.4.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
45.95.0.0/22 maxlen: 24
94.103.124.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
94.103.126.0/24 maxlen: 24
195.178.121.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
194.169.173.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:72:22:e9:4c:05:70:88:3e:cb:fe:91:38:1b:e7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 23 08:49:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a2c67252cc18b41fe66975d28fd159a348cf283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:ff:09:ea:31:61:97:93:bd:db:da:b9:4c:
34:1a:53:a4:91:ad:cb:14:ba:e6:cd:81:15:a8:72:
4e:95:60:e8:3e:cf:14:79:d4:96:ef:de:1a:0c:57:
83:79:35:36:48:cb:f2:74:53:dc:6d:29:ba:d1:a5:
e7:3d:83:d9:cc:5a:69:ac:23:e0:28:3f:0a:da:34:
52:89:c9:5d:a7:a5:01:fc:76:f2:c2:04:a3:c7:74:
99:81:13:b5:10:00:e1:65:d2:04:0b:e5:8a:fe:d0:
cf:bc:4b:65:3e:78:12:65:1a:21:7c:78:53:69:da:
c6:88:d9:a6:06:a2:b0:ba:9d:33:b0:6a:66:37:22:
e7:05:17:0b:d2:6b:93:6d:74:d4:31:72:a5:68:26:
3b:6e:ae:12:35:f1:b0:bc:e1:05:03:b5:85:06:28:
d1:7e:28:ef:37:02:a1:18:0b:df:15:49:25:6f:5a:
af:73:15:b8:d0:11:8f:57:39:83:06:1f:8b:b4:b0:
57:e0:a6:c8:60:93:ca:2b:ce:77:c0:a8:98:eb:5c:
d2:e5:4b:11:96:65:2b:f2:51:4c:25:7e:ba:a8:a6:
cd:19:6c:10:9d:57:1d:88:77:6b:77:ab:ac:f9:d3:
b7:2c:79:78:33:42:23:a2:df:11:5f:82:cc:48:4a:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2C:67:25:2C:C1:8B:41:FE:66:97:5D:28:FD:15:9A:34:8C:F2:83
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iixnJSzBi0H-ZpddKP0VmjSM8oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.0.0/22
45.151.89.0/24
92.119.196.0/23
94.103.124.0/24
94.103.126.0/24
94.154.161.0-94.154.163.255
94.156.239.0/24
141.98.4.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
194.55.227.0/24
194.113.36.0/22
194.169.173.0-194.169.174.255
195.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
86:00:61:b5:6e:9c:41:4b:6a:bf:ce:d0:e9:2d:78:fc:a9:64:
5f:db:ca:c3:1f:84:14:27:0e:c9:08:df:a3:c6:b5:cc:97:f6:
78:46:db:c4:b6:f9:6e:35:15:ae:81:ba:ba:42:39:64:6c:e6:
82:29:0e:9c:26:17:55:b0:e5:99:d3:a5:3e:30:42:39:80:78:
b6:25:af:5e:d2:8a:fd:be:f8:e8:3f:d3:f9:94:17:cf:02:e8:
63:f3:ef:be:75:8f:b0:0f:03:5a:e9:26:d4:8e:6e:c2:81:87:
18:63:6d:49:ed:f8:52:3a:6b:ca:20:01:6c:44:d7:b0:bf:33:
22:30:0b:cd:b7:3e:d8:95:16:ac:ae:2f:d3:c9:ca:c3:1f:e6:
81:83:c9:25:f1:f9:f5:08:aa:9b:26:98:cb:3c:49:fe:fd:56:
87:4d:9e:75:0f:19:51:6a:6d:01:d8:3f:0f:88:1c:87:7e:56:
9c:16:19:9a:d4:1a:cf:08:9b:69:34:99:68:dc:e0:68:f2:4b:
8e:f1:cc:f0:9e:77:e8:a5:8c:75:9e:6b:ee:21:c5:e9:59:34:
84:96:e6:78:0d:d4:b7:ad:9d:1b:aa:e1:7c:22:8e:37:ed:55:
89:d6:a6:a4:13:f4:1e:81:e9:47:b8:61:e1:f5:a0:0c:a2:44:
9c:8a:8a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:45:40 2025 by rpki-client