Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w90haNXtJJDDU9p_-e0qZTdkovU.roa
File: w90haNXtJJDDU9p_-e0qZTdkovU.roa (raw, json)
Hash identifier: hXXOMqZrvTO6nW3nBBD3f3x0FVArqyZlxFxSsIcbYX0=
Subject key identifier: C3:DD:21:68:D5:ED:24:90:C3:53:DA:7F:F9:ED:2A:65:37:64:A2:F5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018900A987D6185B17D76F376239E7D04F5D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w90haNXtJJDDU9p_-e0qZTdkovU.roa
Signing time: Wed 28 Jun 2023 06:20:57 +0000
ROA not before: Wed 28 Jun 2023 06:20:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
94.156.239.0/24 maxlen: 24
194.113.36.0/22 maxlen: 24
194.55.227.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
45.95.0.0/22 maxlen: 24
94.103.124.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
195.178.121.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
194.169.173.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:00:a9:87:d6:18:5b:17:d7:6f:37:62:39:e7:d0:4f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 28 06:20:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3dd2168d5ed2490c353da7ff9ed2a653764a2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:20:d0:bd:18:37:83:e6:3d:cf:65:70:5e:46:
25:96:89:c5:59:07:4a:fc:70:60:48:06:54:86:9a:
66:a0:ed:5c:be:ce:09:a8:1f:78:49:38:8c:78:2e:
f4:21:ab:8d:ac:37:1b:ff:e5:f6:9f:13:c0:db:76:
eb:d5:64:87:b0:63:b1:b6:fa:9b:15:b3:ca:70:86:
38:f5:1e:cf:63:e3:2d:3b:cb:37:a8:65:45:18:28:
fd:b5:5b:57:f6:41:ac:b1:27:05:c4:d9:ea:93:2f:
c3:f3:94:6d:32:e1:cd:4d:f2:28:db:85:fd:d0:a1:
83:be:cb:16:ff:48:03:14:62:01:ae:2d:a8:b4:8b:
01:30:b4:3c:4f:4c:85:8d:50:40:cf:fb:9b:23:b2:
57:a3:ea:6e:a7:0a:ee:6b:2f:16:39:8f:41:10:2f:
1c:39:ac:aa:b4:81:77:46:db:41:0c:69:cd:c8:3f:
4a:90:69:df:ac:05:d5:79:b9:73:49:4d:32:11:7d:
72:eb:b1:1e:5a:b6:0f:a0:6a:86:17:b8:b3:1a:24:
8e:fa:06:7d:7f:ee:04:98:8c:5e:63:89:77:d1:15:
a9:31:1b:3a:1d:89:6e:bf:fd:ba:bd:e8:ae:67:e5:
f8:f7:ce:54:3e:1a:12:c8:64:2a:f3:21:98:5c:46:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DD:21:68:D5:ED:24:90:C3:53:DA:7F:F9:ED:2A:65:37:64:A2:F5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w90haNXtJJDDU9p_-e0qZTdkovU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.0.0/22
45.151.89.0/24
92.119.196.0/23
94.103.124.0/24
94.154.161.0-94.154.163.255
94.156.239.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.252.176.0/24
194.55.227.0/24
194.113.36.0/22
194.169.173.0-194.169.174.255
195.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
63:df:06:df:7e:00:04:83:b2:48:4b:50:1e:46:2b:b0:24:a5:
39:96:a1:89:af:22:90:04:c0:f0:9d:85:ce:84:74:97:02:ec:
55:dd:fa:6d:64:d6:03:c7:9b:3b:40:1f:ea:e7:ec:50:b2:a6:
42:9c:d6:92:bf:82:6a:cd:dc:b1:76:79:a9:23:bf:75:13:d9:
e5:b2:7d:0c:5b:5f:2b:ec:b0:29:f8:37:41:13:ae:8e:82:3b:
93:43:1d:2b:9a:df:64:5b:06:da:41:7e:f1:41:b9:d6:76:f7:
07:43:15:df:2b:50:b8:82:11:d7:a4:e0:c6:e2:68:47:7f:b0:
8e:4a:5b:01:28:ec:63:01:29:f9:c5:b3:a0:ff:c3:3d:6f:a3:
41:5f:38:45:d2:1e:64:2f:e3:2e:4c:ac:e1:5b:7b:a4:99:53:
dd:83:91:d1:4d:61:78:54:ad:e6:b0:36:05:da:a4:ce:18:13:
06:b5:84:b1:a7:a7:c3:98:25:ca:40:e2:f2:5b:63:6b:4f:66:
e9:c6:d0:01:31:0f:95:bf:a0:f1:89:55:3e:e6:ec:57:ed:7a:
0c:6f:78:71:5b:bd:12:02:52:fa:4c:98:a8:90:88:74:3a:e4:
20:73:28:60:0c:e1:93:b8:6b:0d:30:9d:f4:98:71:b5:75:5c:
d8:61:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:16:14 2025 by rpki-client