Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/O6Fu9UAisaHuNPvpGySIDPuV5XY.roa
File: O6Fu9UAisaHuNPvpGySIDPuV5XY.roa (raw, json)
Hash identifier: W+fg9pLd4TQXxPve+6as02OJJD9zz2lx5wZHBS46HSI=
Subject key identifier: 3B:A1:6E:F5:40:22:B1:A1:EE:34:FB:E9:1B:24:88:0C:FB:95:E5:76
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0196AA831A1C01255DE5A60187E336D28445
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/O6Fu9UAisaHuNPvpGySIDPuV5XY.roa
Signing time: Wed 07 May 2025 11:30:40 +0000
ROA not before: Wed 07 May 2025 11:30:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199242
IP address blocks: 31.222.234.0/24 maxlen: 24
37.72.142.0/24 maxlen: 24
62.3.11.0/24 maxlen: 24
62.106.90.0/24 maxlen: 24
62.233.61.0/24 maxlen: 24
80.71.144.0/24 maxlen: 24
80.71.145.0/24 maxlen: 24
91.241.55.0/24 maxlen: 24
91.246.50.0/24 maxlen: 24
146.19.4.0/24 maxlen: 24
146.19.74.0/24 maxlen: 24
146.19.199.0/24 maxlen: 24
146.19.203.0/24 maxlen: 24
146.19.208.0/24 maxlen: 24
176.97.217.0/24 maxlen: 24
176.97.219.0/24 maxlen: 24
176.126.101.0/24 maxlen: 24
185.234.12.0/24 maxlen: 24
188.244.119.0/24 maxlen: 24
193.9.51.0/24 maxlen: 24
193.162.132.0/24 maxlen: 24
193.162.133.0/24 maxlen: 24
194.9.180.0/24 maxlen: 24
194.26.230.0/24 maxlen: 24
194.26.231.0/24 maxlen: 24
194.99.158.0/24 maxlen: 24
195.96.130.0/24 maxlen: 24
195.96.131.0/24 maxlen: 24
195.96.145.0/24 maxlen: 24
212.52.14.0/24 maxlen: 24
212.52.28.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:83:1a:1c:01:25:5d:e5:a6:01:87:e3:36:d2:84:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: May 7 11:30:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ba16ef54022b1a1ee34fbe91b24880cfb95e576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:9e:8f:34:f9:07:d1:dd:a3:96:14:4b:4e:
52:10:9a:94:a8:c6:7e:fb:dd:c7:52:12:63:1a:f8:
fa:a1:c6:b9:59:c3:ae:bc:84:16:ce:7b:d9:99:bc:
39:ed:4a:8a:ad:94:82:1e:a3:c7:88:f4:7f:f0:e9:
4b:f9:96:a1:6c:78:9c:7d:46:58:1c:5e:04:10:6e:
d1:29:19:23:ca:58:b5:55:26:0d:8c:88:46:de:8a:
d8:e2:42:e1:68:94:ef:9b:17:76:5f:0c:c2:bd:6a:
77:ae:20:94:5e:96:66:30:00:4d:d8:a7:c8:29:67:
de:32:8c:c2:8d:59:2d:69:9a:fe:57:b7:a4:4f:8f:
a4:f3:2c:0c:73:4a:69:0e:a3:db:d5:aa:bd:f9:6f:
40:8b:ae:d5:f2:b2:a4:11:8c:6d:95:9f:b0:91:fb:
4b:02:5c:a0:48:13:4e:b5:52:81:ef:b2:33:df:af:
ea:d2:7e:ff:f7:79:22:2f:66:aa:f0:2f:dd:8e:60:
98:ed:84:d1:e7:4f:f6:17:70:39:75:ec:ab:3e:a5:
c0:7a:28:a7:a1:14:c6:23:95:83:4c:4f:67:02:94:
b1:92:8b:ff:da:48:8e:48:e8:ac:59:84:d8:9c:05:
c0:07:67:ca:75:cb:86:85:e1:43:34:5a:0a:ce:b3:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A1:6E:F5:40:22:B1:A1:EE:34:FB:E9:1B:24:88:0C:FB:95:E5:76
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/O6Fu9UAisaHuNPvpGySIDPuV5XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.234.0/24
37.72.142.0/24
62.3.11.0/24
62.106.90.0/24
62.233.61.0/24
80.71.144.0/23
91.241.55.0/24
91.246.50.0/24
146.19.4.0/24
146.19.74.0/24
146.19.199.0/24
146.19.203.0/24
146.19.208.0/24
176.97.217.0/24
176.97.219.0/24
176.126.101.0/24
185.234.12.0/24
188.244.119.0/24
193.9.51.0/24
193.162.132.0/23
194.9.180.0/24
194.26.230.0/23
194.99.158.0/24
195.96.130.0/23
195.96.145.0/24
212.52.14.0/24
212.52.28.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7d:c2:25:b6:59:67:7e:2f:91:34:f9:08:5f:af:60:5b:3c:
3b:0d:2e:9b:2e:6e:83:d1:1d:e5:10:2d:f1:08:9a:3f:bf:50:
92:56:51:b0:08:d5:80:f7:8e:e4:4d:aa:4a:d5:ae:25:d3:5a:
98:3f:ba:2e:a8:59:7e:71:f8:1b:37:10:78:ac:4d:70:93:1d:
6d:63:b5:85:a6:83:3b:08:95:34:11:08:03:3b:cd:91:8d:71:
76:48:37:24:bb:f0:b0:8d:ad:4d:f8:b7:55:68:65:02:86:38:
04:85:e0:c2:f1:63:94:50:d8:46:1b:b3:e9:ea:a0:4c:9a:9e:
dd:ab:8d:55:0b:17:15:e9:f8:38:15:50:f6:07:cb:d6:44:fd:
ca:36:31:af:d8:8d:a2:71:ff:37:3d:b0:72:e4:9e:c1:0a:0b:
1e:10:13:33:94:83:06:b0:0b:97:46:af:49:b9:d7:c2:8d:ce:
7c:24:b8:15:3b:5c:f1:52:9d:ac:32:56:07:ab:28:8b:a0:62:
aa:c0:6b:35:9f:16:b1:a1:51:46:22:88:9c:6e:ac:c1:62:37:
a6:89:d8:fb:0e:ac:9f:c3:6a:3d:ea:3f:33:f9:55:8d:9a:6b:
3a:a4:0a:60:0b:84:fa:23:01:81:ea:32:56:74:64:fa:36:60:
01:5f:c0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:20:04 2025 by rpki-client