Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/wkntIsO3ODOzs03R_dPRRuj8LZ4.roa
File: wkntIsO3ODOzs03R_dPRRuj8LZ4.roa (raw, json)
Hash identifier: bFm4MhxroaKPyel+farYabPsJT5CkKQIl0V+HE3eVOA=
Subject key identifier: C2:49:ED:22:C3:B7:38:33:B3:B3:4D:D1:FD:D3:D1:46:E8:FC:2D:9E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0188438F9A32020D35CC9D1CFD6094ABD8EE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/wkntIsO3ODOzs03R_dPRRuj8LZ4.roa
Signing time: Mon 22 May 2023 13:04:24 +0000
ROA not before: Mon 22 May 2023 13:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42864
IP address blocks: 178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
2.58.171.0/24 maxlen: 24
2.58.170.0/24 maxlen: 24
2.58.169.0/24 maxlen: 24
2.58.168.0/24 maxlen: 24
178.210.224.0/22 maxlen: 24
193.138.125.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.151.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:8f:9a:32:02:0d:35:cc:9d:1c:fd:60:94:ab:d8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 22 13:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c249ed22c3b73833b3b34dd1fdd3d146e8fc2d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:42:ef:06:21:1f:73:5e:e9:14:f3:fe:ca:
ce:56:09:d3:b6:8c:fc:09:44:5b:4f:42:28:ae:02:
20:04:cb:93:a7:e4:bd:51:74:6d:d3:47:bc:af:aa:
05:25:03:22:d3:f0:3b:09:2f:0e:97:c9:20:a5:de:
7e:8f:2b:d1:bc:58:24:26:41:22:67:52:1a:8a:e7:
45:48:04:0a:b1:81:ac:20:f9:13:e0:df:33:ea:f8:
a5:f1:5c:f6:26:06:c3:c6:ed:7e:00:f7:05:b5:a6:
46:44:75:e4:f5:4b:d1:1d:97:0b:47:05:cb:ea:e7:
e9:1f:0e:0d:9a:bf:dd:21:4e:e0:eb:a3:d3:02:b8:
0a:45:63:2b:22:71:f4:ee:c3:d1:1d:12:09:8d:cd:
e3:91:2d:3c:2f:2a:b4:1c:01:03:ba:82:34:28:a7:
b4:55:68:60:1d:1d:8d:7e:4c:01:eb:ad:b9:e8:ee:
fb:70:c1:2b:06:a0:93:4c:9e:ec:8e:b2:16:f7:ec:
98:d5:8c:15:82:43:b9:b8:7d:71:31:b3:3d:3b:01:
2f:15:91:36:50:36:82:7c:6e:64:7b:72:c8:59:d0:
dc:3d:f9:c9:eb:8c:f0:e6:fa:cb:7c:f7:2d:1c:dc:
08:ae:87:ae:a7:2f:91:ed:ea:c0:a1:97:5d:68:3c:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:49:ED:22:C3:B7:38:33:B3:B3:4D:D1:FD:D3:D1:46:E8:FC:2D:9E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/wkntIsO3ODOzs03R_dPRRuj8LZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/22
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
77.242.156.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
92.52.208.0/21
92.52.219.0/24
178.210.224.0/22
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
bb:0b:ad:08:4b:b1:ed:0f:00:2f:c9:bb:cf:94:42:73:2c:38:
91:0d:c3:47:27:5c:36:10:d4:ee:cd:88:62:e4:5a:91:b6:ef:
46:cd:48:dc:70:59:36:f4:f4:63:3d:24:5f:78:45:04:b8:9a:
1d:01:61:01:10:96:ae:69:55:2e:60:d9:9a:8e:e9:43:84:cc:
ec:86:6e:43:43:b7:e4:f3:b1:ec:67:36:76:0b:75:ec:cb:27:
d0:a3:d5:55:7d:0c:f2:d2:7b:5a:a1:ba:c6:8a:73:43:f6:f8:
24:ab:5e:d9:d7:01:77:43:67:4d:20:31:8d:a8:ed:c3:bd:f5:
76:bb:9d:94:eb:cf:0c:d4:eb:d8:6d:f4:32:54:49:33:1d:3b:
e8:86:8f:f7:ca:ef:e4:eb:87:80:b5:b2:a8:be:68:ac:63:e8:
4b:5b:43:6a:52:3c:d6:ca:40:c2:5a:b1:8b:af:38:21:73:b0:
e8:aa:ad:e7:3e:72:4f:6d:2e:ea:7f:fe:b2:f3:e4:60:77:42:
6a:fa:bd:8a:f9:18:0e:b9:64:12:91:c9:b7:61:2e:9c:56:2f:
7e:26:45:6c:b2:cc:c6:54:50:c2:26:f4:b2:a4:da:5b:45:41:
21:7a:94:3a:1a:90:4b:81:d4:26:a7:90:66:a3:96:5c:e5:c1:
91:63:3f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:06:33 2025 by rpki-client