Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/6AHMirgBGzbAAGx8sJo52hRF3XQ.roa
File: 6AHMirgBGzbAAGx8sJo52hRF3XQ.roa (raw, json)
Hash identifier: mI5KBnPkoCYwhUImYF17r6Cj2mYKNcscMRaJnLrmmAs=
Subject key identifier: E8:01:CC:8A:B8:01:1B:36:C0:00:6C:7C:B0:9A:39:DA:14:45:DD:74
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019423D6FE58E800E5C1CF7439BDFDD0A812
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/6AHMirgBGzbAAGx8sJo52hRF3XQ.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 78.110.120.0/24 maxlen: 24
78.110.122.0/24 maxlen: 24
78.110.123.0/24 maxlen: 24
86.57.0.0/17 maxlen: 32
88.135.36.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
152.89.44.0/24 maxlen: 24
152.89.46.0/24 maxlen: 24
152.89.47.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.58.240.0/24 maxlen: 24
185.58.241.0/24 maxlen: 24
185.58.242.0/24 maxlen: 24
185.58.243.0/24 maxlen: 24
185.112.151.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
185.141.105.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
185.141.107.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
188.209.153.0/24 maxlen: 24
195.110.38.0/24 maxlen: 24
195.211.45.0/24 maxlen: 24
195.211.46.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fe:58:e8:00:e5:c1:cf:74:39:bd:fd:d0:a8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e801cc8ab8011b36c0006c7cb09a39da1445dd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:b8:cf:e7:b0:fc:d6:11:e8:62:1b:0f:07:
d6:5e:e7:33:64:de:31:24:3e:5c:84:e5:36:47:51:
7d:bb:42:f3:ae:dc:92:79:7e:5f:35:c4:8a:34:bc:
e9:f9:b6:92:d6:26:73:bc:6e:5f:4f:5c:b0:86:09:
b9:6a:27:04:c8:b6:f6:54:5c:3e:06:9a:47:9d:db:
45:84:df:50:dc:17:9d:c3:29:c7:d1:4e:d0:0b:a4:
23:c3:05:de:80:d2:98:c9:7e:4b:41:7e:5b:75:7c:
69:36:b3:ea:59:e5:ae:75:47:e7:ed:0b:15:88:6d:
75:08:1d:f8:3c:4e:cf:cd:4f:4c:76:5b:b6:ff:42:
dc:b8:cc:0a:0d:57:a4:c7:4d:0a:86:5b:b6:19:1f:
af:53:08:34:fc:f2:2a:4e:42:f0:09:65:02:59:76:
2c:b1:8a:96:7a:71:ec:3c:64:9e:f7:92:df:21:09:
eb:d2:52:16:8e:22:ad:2c:5d:93:87:cf:7e:89:36:
5e:10:c5:0b:89:a2:41:7f:80:75:b6:dd:fe:87:5d:
60:d4:e5:55:08:77:ac:f5:3e:8b:53:17:c0:e7:d8:
0a:df:c6:24:ad:18:17:b4:38:0c:ad:a2:60:3f:8d:
c9:d1:e7:d9:87:af:e9:4e:1d:08:d1:92:36:6b:15:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:CC:8A:B8:01:1B:36:C0:00:6C:7C:B0:9A:39:DA:14:45:DD:74
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/6AHMirgBGzbAAGx8sJo52hRF3XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.120.0/24
78.110.122.0/23
86.57.0.0/17
88.135.36.0/22
91.236.168.0/23
152.89.44.0/24
152.89.46.0/23
185.18.213.0-185.18.214.255
185.51.200.0/22
185.58.240.0/22
185.112.151.0/24
185.128.136.0/24
185.141.105.0-185.141.107.255
185.141.132.0/24
185.141.135.0/24
188.209.153.0/24
195.110.38.0/24
195.211.45.0-195.211.46.255
Signature Algorithm: sha256WithRSAEncryption
b1:30:49:5b:b2:d0:82:90:93:2b:a7:44:30:73:00:f2:78:b0:
8f:21:dc:9d:2a:a3:e1:d2:7c:9c:83:a8:a0:30:3d:a6:4c:89:
ac:34:03:5c:aa:4c:a6:b9:2f:3a:bd:b7:1d:e1:83:3a:e5:11:
64:ce:f8:8d:cd:11:10:5e:f6:9d:4f:32:34:23:97:94:ad:03:
f4:28:c6:13:54:49:b3:ad:c3:9a:90:80:b2:2a:8a:46:34:9d:
b6:e5:b9:13:40:4f:c3:ac:ea:b6:53:1a:9b:bf:0f:79:ea:65:
6c:43:97:cd:d5:ba:ba:d9:dc:c3:06:94:71:26:61:a6:33:ac:
fe:2a:39:d0:f4:1b:e5:94:0f:43:ab:cb:bb:c0:3d:78:db:58:
ca:f8:e4:03:0a:6c:f1:98:87:f7:10:b2:40:78:25:f6:94:e9:
5c:8d:41:3c:40:70:a0:e0:a5:b7:17:4f:22:6d:07:a5:ba:4b:
ac:75:4e:30:7e:9f:4e:5b:61:6c:ee:3a:01:82:bf:70:5f:8c:
1d:dd:c2:5c:ce:d7:66:24:09:58:40:96:a1:6b:67:5c:02:2d:
89:d3:33:6e:b1:5e:86:70:0d:d4:4c:f8:5e:9f:95:27:5c:88:
85:19:fe:37:de:94:4e:68:64:a4:ef:27:7f:c3:c0:fc:72:cc:
97:3b:be:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:19:05 2025 by rpki-client