Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/wL0_2X5pmGDYqux0s1HKuIYBaUA.roa
File: wL0_2X5pmGDYqux0s1HKuIYBaUA.roa (raw, json)
Hash identifier: ZDVmpCK/7NbatuO5EraSA7DTARaa0Hvp8jY/0thsq1M=
Subject key identifier: C0:BD:3F:D9:7E:69:98:60:D8:AA:EC:74:B3:51:CA:B8:86:01:69:40
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019423D6FEB1EE6FB9A17E5C9330C92A4295
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/wL0_2X5pmGDYqux0s1HKuIYBaUA.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44285
IP address blocks: 37.32.32.0/21 maxlen: 21
37.32.32.0/22 maxlen: 22
37.32.32.0/24 maxlen: 24
37.32.33.0/24 maxlen: 24
37.32.34.0/24 maxlen: 24
37.32.35.0/24 maxlen: 24
37.32.37.0/24 maxlen: 24
37.32.38.0/24 maxlen: 24
37.32.39.0/24 maxlen: 24
37.75.243.0/24 maxlen: 24
37.75.244.0/22 maxlen: 22
37.75.244.0/24 maxlen: 24
37.75.245.0/24 maxlen: 24
37.75.246.0/24 maxlen: 24
37.75.247.0/24 maxlen: 24
45.9.252.0/22 maxlen: 24
45.9.252.0/24 maxlen: 24
45.9.253.0/24 maxlen: 24
45.9.254.0/24 maxlen: 24
45.87.4.0/22 maxlen: 22
45.140.224.0/22 maxlen: 22
46.28.72.0/21 maxlen: 24
46.28.72.0/24 maxlen: 24
46.28.73.0/24 maxlen: 24
46.28.74.0/24 maxlen: 24
78.110.120.0/22 maxlen: 24
84.47.224.0/21 maxlen: 21
84.47.224.0/22 maxlen: 22
84.47.224.0/24 maxlen: 24
84.47.225.0/24 maxlen: 24
84.47.226.0/24 maxlen: 24
84.47.227.0/24 maxlen: 24
84.47.228.0/22 maxlen: 22
84.47.228.0/24 maxlen: 24
84.47.229.0/24 maxlen: 24
84.47.230.0/24 maxlen: 24
84.47.231.0/24 maxlen: 24
85.198.24.0/22 maxlen: 24
86.57.96.0/20 maxlen: 20
86.57.112.0/23 maxlen: 23
86.57.114.0/23 maxlen: 23
86.57.116.0/22 maxlen: 22
86.57.120.0/23 maxlen: 23
86.57.122.0/23 maxlen: 23
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.121.128.0/22 maxlen: 24
185.121.128.0/24 maxlen: 24
185.121.129.0/24 maxlen: 24
185.121.130.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.182.248.0/22 maxlen: 22
185.182.248.0/23 maxlen: 23
185.182.250.0/23 maxlen: 23
185.182.250.0/24 maxlen: 24
185.182.251.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
195.110.38.0/23 maxlen: 23
195.110.38.0/24 maxlen: 24
195.110.39.0/24 maxlen: 24
217.172.120.0/21 maxlen: 24
217.172.124.0/23 maxlen: 23
217.172.126.0/23 maxlen: 23
217.172.127.0/24 maxlen: 24
2a02:828::/29 maxlen: 29
2a02:828::/32 maxlen: 32
2a02:828::/48 maxlen: 48
2a02:828::/64 maxlen: 64
2a02:828:1::/48 maxlen: 48
2a02:829::/32 maxlen: 32
2a02:82a::/32 maxlen: 32
2a02:82b::/32 maxlen: 32
2a02:82c::/32 maxlen: 32
2a02:82d::/32 maxlen: 32
2a02:82e::/32 maxlen: 32
2a02:82f::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fe:b1:ee:6f:b9:a1:7e:5c:93:30:c9:2a:42:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0bd3fd97e699860d8aaec74b351cab886016940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:3a:10:19:34:18:fa:1e:ad:37:a0:28:ce:
50:05:45:1d:04:ce:4b:8b:04:5e:2a:d1:26:e1:55:
c6:3b:bf:b6:22:ec:3f:69:9a:fb:2a:37:b3:df:f3:
09:aa:9f:5a:03:cd:95:0b:5d:27:89:d6:9c:15:74:
ac:49:26:ac:4d:7d:7e:e3:31:52:86:9c:d1:4c:18:
25:29:ef:b2:a1:5f:c1:7f:76:a0:3a:d2:ae:cf:cc:
9e:25:5b:17:a8:44:c1:1b:7f:f6:17:7b:2c:c6:d6:
14:49:20:3f:04:2e:10:a1:2c:33:c8:9c:f9:2e:63:
57:94:33:05:e3:03:a7:73:65:59:44:62:3c:24:c0:
b4:f3:6c:cc:19:d5:0f:e0:93:f9:a3:fd:a5:32:49:
02:b6:47:27:ee:46:f3:99:21:db:fa:13:22:8e:bf:
77:9c:d2:55:ac:a2:b6:2b:ed:07:b7:1a:f9:65:8c:
f4:46:74:e4:2b:9d:0e:05:ce:72:0e:ef:e9:85:04:
bb:e7:74:78:13:17:05:2a:0f:08:4e:d5:7a:86:00:
13:76:fb:8f:ea:9f:73:91:9c:0b:7f:26:db:ff:17:
ec:61:38:2a:38:c0:c3:43:23:8a:fe:de:bb:9b:3f:
43:bb:1a:16:84:e4:04:29:f0:d7:b1:5f:e4:57:01:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BD:3F:D9:7E:69:98:60:D8:AA:EC:74:B3:51:CA:B8:86:01:69:40
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/wL0_2X5pmGDYqux0s1HKuIYBaUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.32.0/21
37.75.243.0-37.75.247.255
45.9.252.0/22
45.87.4.0/22
45.140.224.0/22
46.28.72.0/21
78.110.120.0/22
84.47.224.0/21
85.198.24.0/22
86.57.96.0-86.57.123.255
88.135.37.0-88.135.39.255
91.236.168.0/23
185.18.212.0/22
185.51.200.0/22
185.121.128.0/22
185.128.136.0/22
185.141.132.0/22
185.182.248.0/22
188.209.152.0/23
195.110.38.0/23
217.172.120.0/21
IPv6:
2a02:828::/29
Signature Algorithm: sha256WithRSAEncryption
b0:30:95:8e:31:ef:bf:8a:d5:53:af:a9:17:06:e0:58:48:5b:
73:8a:a7:61:d7:36:72:6a:5b:87:57:bb:c3:95:4e:7a:36:d1:
af:3b:ce:09:36:db:8f:49:04:e7:cf:2b:4d:a4:ea:ed:78:d0:
b2:14:df:d1:16:d6:83:a3:c0:ba:73:f9:ed:77:bf:92:a5:d5:
12:fa:4d:87:76:d8:ca:d7:a8:f5:88:06:7b:cb:63:1a:3c:2d:
bf:29:46:0f:29:0c:09:9c:f0:a1:e3:f7:11:a3:15:d8:08:61:
c0:35:2e:e0:37:ac:b0:85:72:89:ce:00:11:11:d5:48:57:81:
e4:62:ba:29:fb:74:d9:5f:11:73:bb:42:2d:24:5b:9d:90:0e:
53:d3:d6:85:25:b0:2f:91:18:1d:46:46:c4:25:e9:0f:09:df:
5b:15:dc:e5:39:01:67:4c:a9:f6:35:d6:57:26:0b:4e:67:d5:
56:38:51:f5:71:71:67:f8:0d:ab:52:d7:54:90:da:e2:a1:a3:
1e:c9:57:ae:79:d7:2f:98:6e:36:e9:03:e8:62:45:5d:40:09:
18:4b:bf:3e:dc:93:c8:2a:56:3b:7d:39:21:38:ed:9f:54:37:
a8:5b:65:28:fd:e2:f9:cb:fd:6a:d6:7c:33:e2:a6:c9:ff:34:
c3:6c:a3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 23:12:32 2025 by rpki-client