Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FlMPeQkZR6t-kc5gi9dqJuIFIaA.roa
File: FlMPeQkZR6t-kc5gi9dqJuIFIaA.roa (raw, json)
Hash identifier: 5sjJCQass1QF1HvhOtT+ZzLDl/TqfAttDQYWOENL9Dc=
Subject key identifier: 16:53:0F:79:09:19:47:AB:7E:91:CE:60:8B:D7:6A:26:E2:05:21:A0
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018654579F3820D88A387E30049D7DE181DD
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FlMPeQkZR6t-kc5gi9dqJuIFIaA.roa
Signing time: Wed 15 Feb 2023 09:11:13 +0000
ROA not before: Wed 15 Feb 2023 09:11:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.210.224.0/22 maxlen: 24
193.138.125.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
77.242.144.0/20 maxlen: 24
88.209.192.0/21 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:57:9f:38:20:d8:8a:38:7e:30:04:9d:7d:e1:81:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 15 09:11:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16530f79091947ab7e91ce608bd76a26e20521a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:68:a7:74:b8:a7:5b:d3:ee:92:d0:88:27:
8a:7e:6d:cf:f9:7b:a0:d4:3c:2a:c9:f1:da:38:88:
78:d3:ca:3c:76:a9:10:1b:88:5f:c6:cc:11:9a:b5:
ac:a6:2a:0b:f1:9b:82:75:17:16:01:56:b0:b2:0f:
10:1c:0c:fd:a2:d3:0e:64:65:6c:6a:2b:3d:09:80:
c1:82:15:21:67:f1:7f:75:c1:c8:c0:6c:ea:ed:12:
7d:b5:90:f9:55:b9:12:dd:9c:f7:49:2f:7d:d2:d4:
fe:37:da:19:bb:27:8f:a0:54:4a:cd:c1:cc:12:24:
94:56:da:ed:2a:7d:0c:41:cf:20:45:54:0f:ef:b5:
ee:b0:0d:2c:99:bc:20:47:5b:58:0b:c2:67:37:bf:
d4:fc:21:98:5f:ce:25:8e:24:34:4a:2b:a2:8f:41:
d5:e1:b1:7e:ee:12:a6:46:89:48:1c:87:73:72:31:
cf:f9:97:f8:0f:8a:42:d0:a5:54:f1:a0:aa:d8:e3:
83:49:e7:84:c0:6f:0d:60:fd:c8:44:31:c0:2c:c9:
dc:8c:95:fa:94:1f:6f:96:19:88:45:2b:63:3f:7a:
e6:24:cf:08:07:fd:d2:2d:23:31:9b:78:c1:01:70:
9d:a9:18:0e:32:80:a8:a5:ce:5c:c1:af:2a:90:d0:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:53:0F:79:09:19:47:AB:7E:91:CE:60:8B:D7:6A:26:E2:05:21:A0
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FlMPeQkZR6t-kc5gi9dqJuIFIaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/24
77.242.144.0/20
88.209.192.0/21
88.209.224.0/23
92.52.208.0/21
92.52.219.0/24
178.210.224.0/22
178.210.236.0/24
178.248.200.0/21
193.138.125.0/24
Signature Algorithm: sha256WithRSAEncryption
53:6e:72:d1:1a:a6:72:ac:34:54:d1:ee:76:5c:f6:6b:8c:bf:
ec:05:55:b4:39:df:48:e8:f8:93:80:27:9b:21:5f:76:c2:f0:
a4:e3:8a:7a:61:1c:0d:b8:18:3d:c4:9b:db:6b:4b:9e:35:52:
a1:99:a9:06:87:00:07:b6:c5:5b:13:2c:66:45:ef:c3:8d:39:
3c:cf:08:e8:a6:54:90:0d:73:c4:c7:bd:26:a2:95:26:94:12:
dc:cd:08:45:2f:d7:59:6a:9d:b8:92:ce:91:88:ad:7d:40:df:
fd:5b:e5:d9:5a:64:fe:96:d7:3c:bf:2a:10:ba:72:e9:16:e9:
f6:09:66:59:40:1e:c4:59:09:48:1f:11:c6:44:09:4f:a9:8f:
62:97:c3:4b:29:0a:22:08:df:59:30:91:af:a4:16:61:c9:61:
cc:65:b8:d0:a8:fa:eb:6f:9b:59:df:60:76:24:f6:28:95:3e:
2c:40:f2:c9:76:43:74:0e:32:e2:0f:85:69:62:fa:30:64:72:
f5:7f:14:63:42:23:26:8f:4d:45:cd:bb:d1:af:ac:f7:25:c2:
0a:12:9d:76:17:d9:1a:5f:df:1b:49:85:99:1e:a2:ef:8a:b2:
5e:a9:17:2d:45:62:3d:e7:63:76:ba:7b:f0:c2:85:d8:c5:40:
ae:52:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:19:42 2025 by rpki-client