Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rqPzEVCepS4o2AokLHOmlB4UWUI.roa
File: rqPzEVCepS4o2AokLHOmlB4UWUI.roa (raw, json)
Hash identifier: 1L25uxNCADPnKrP6fp6FHYyuUx0n0biFagxfEEygZEc=
Subject key identifier: AE:A3:F3:11:50:9E:A5:2E:28:D8:0A:24:2C:73:A6:94:1E:14:59:42
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019519E52736B75B6AA77F3EA0EE05743C29
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rqPzEVCepS4o2AokLHOmlB4UWUI.roa
Signing time: Tue 18 Feb 2025 16:30:02 +0000
ROA not before: Tue 18 Feb 2025 16:30:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.132.0/22 maxlen: 24
31.13.224.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.120.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.106.0/24 maxlen: 32
94.156.166.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:e5:27:36:b7:5b:6a:a7:7f:3e:a0:ee:05:74:3c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 18 16:30:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aea3f311509ea52e28d80a242c73a6941e145942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:4c:71:dd:79:36:05:84:8c:4e:57:15:70:
23:df:4b:e2:10:76:25:b0:2c:08:8b:18:ab:d2:b0:
09:ee:9c:c0:38:96:c9:6c:e3:1a:ad:93:7a:58:d5:
12:59:1c:5e:bf:95:66:c1:23:98:0c:67:2d:ed:af:
07:10:51:bc:61:4c:ac:78:ff:25:1e:f4:8c:24:5e:
8a:02:6d:90:8e:44:f3:a4:43:8d:ed:83:80:cf:eb:
ba:d5:a4:20:23:3b:32:66:65:8c:90:74:c8:c1:ea:
ba:6d:52:87:3d:99:5f:71:4b:25:41:63:66:c1:28:
c8:f5:a2:b9:24:bb:ab:cd:0f:71:bf:88:5c:3d:92:
f1:31:7d:8d:7a:a5:af:95:1c:cb:28:7a:cc:3e:35:
45:1f:6f:81:f3:ab:70:97:e1:79:75:21:08:00:79:
eb:95:ec:92:b2:ad:5f:b8:3b:55:7f:cc:79:c3:e3:
67:28:9a:52:7b:c6:8b:e5:3d:c0:2b:39:15:f0:f2:
d3:53:88:9d:09:32:00:42:f5:e1:f0:8d:47:bb:e5:
a7:85:b9:a3:0b:32:4c:ef:9d:ce:1f:4d:79:b0:45:
bb:86:e4:cc:21:89:77:f1:8b:4c:f8:63:eb:29:d7:
f1:76:a2:50:e4:d5:67:45:c8:46:85:8a:89:67:fc:
78:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:F3:11:50:9E:A5:2E:28:D8:0A:24:2C:73:A6:94:1E:14:59:42
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rqPzEVCepS4o2AokLHOmlB4UWUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
31.13.224.0/24
45.9.156.0/23
45.14.164.0/24
45.66.228.0/24
45.66.230.0/23
45.88.64.0/24
45.88.88.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/24
45.149.241.0/24
45.151.89.0-45.151.91.255
79.110.50.0/24
79.110.62.0/24
80.76.51.0/24
81.161.230.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.112.0-87.120.117.255
87.120.120.0/23
87.120.125.0-87.120.127.255
87.120.166.0/24
87.121.45.0/24
87.121.86.0/23
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
92.249.50.0/24
93.123.39.0/24
93.123.85.0/24
93.123.109.0/24
94.103.125.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
94.156.104.0-94.156.106.255
94.156.166.0/23
94.156.179.0/24
94.156.248.0/24
109.206.237.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.25.216.0/24
194.48.251.0/24
194.49.94.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
88:24:6f:35:15:16:29:9f:87:d6:26:54:b9:7b:da:fd:5f:a4:
5f:4b:79:68:31:01:71:1a:9d:94:4b:1b:ad:08:db:f7:d2:02:
11:44:43:fa:c0:4f:a1:40:c5:34:13:10:a2:60:d1:19:5e:e8:
a5:04:47:b5:19:45:0c:22:aa:cd:e8:fc:1e:ec:28:48:9b:d7:
70:0b:dc:16:dd:2a:18:e8:7e:72:61:f3:da:6e:0e:92:15:91:
ff:e4:ac:9c:81:2f:ac:27:8c:d6:1e:90:9a:83:53:55:b7:bb:
3f:0d:e9:3e:2e:29:e6:91:a8:0e:2b:59:c5:fe:d6:98:d8:06:
db:53:07:50:4a:8c:f9:c9:dd:84:a7:1c:55:7b:33:27:10:d2:
7b:46:69:0f:bc:03:f6:83:cf:48:bb:40:2f:85:69:1d:88:1a:
2b:63:87:81:3e:be:01:c3:6a:77:a4:33:50:4a:c6:1d:6f:98:
ad:31:f7:0c:07:a0:ba:11:a6:dd:d3:cd:7c:00:8e:46:0b:e6:
06:b8:82:d2:a2:4f:45:08:fa:cb:fb:70:5d:55:30:97:fe:8b:
a2:eb:b0:b4:97:68:67:e6:37:5e:d6:8d:d2:7d:f1:68:ef:4b:
96:cb:c5:1a:97:91:20:ee:fa:e1:28:d9:62:c3:7c:24:c4:7f:
ac:3f:75:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:33:45 2025 by rpki-client