Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/LQuF9bmB6GTQwfBTX4-Aq7b2Wec.roa
File: LQuF9bmB6GTQwfBTX4-Aq7b2Wec.roa (raw, json)
Hash identifier: YY/gB+5PIMFJA0r3UbblUvKsxEW+bVAW0+5Elad63Xc=
Subject key identifier: 2D:0B:85:F5:B9:81:E8:64:D0:C1:F0:53:5F:8F:80:AB:B6:F6:59:E7
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 018D6231EFA0A366BF8FA4F4EDD64EBE1F26
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/LQuF9bmB6GTQwfBTX4-Aq7b2Wec.roa
Signing time: Thu 01 Feb 2024 01:04:16 +0000
ROA not before: Thu 01 Feb 2024 01:04:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58067
IP address blocks: 176.114.16.0/20 maxlen: 20
176.114.16.0/24 maxlen: 24
176.114.17.0/24 maxlen: 24
176.114.18.0/24 maxlen: 24
176.114.19.0/24 maxlen: 24
176.114.20.0/24 maxlen: 24
176.114.21.0/24 maxlen: 24
176.114.22.0/24 maxlen: 24
176.114.23.0/24 maxlen: 24
176.114.24.0/24 maxlen: 24
176.114.25.0/24 maxlen: 24
176.114.26.0/24 maxlen: 24
176.114.27.0/24 maxlen: 24
176.114.28.0/24 maxlen: 24
176.114.29.0/24 maxlen: 24
176.114.30.0/24 maxlen: 24
176.114.31.0/24 maxlen: 24
185.214.76.0/22 maxlen: 22
185.214.76.0/24 maxlen: 24
185.214.77.0/24 maxlen: 24
185.214.78.0/24 maxlen: 24
185.214.79.0/24 maxlen: 24
2a0b:97c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:62:31:ef:a0:a3:66:bf:8f:a4:f4:ed:d6:4e:be:1f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Feb 1 01:04:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d0b85f5b981e864d0c1f0535f8f80abb6f659e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:b8:0e:ef:ff:f9:19:61:6e:65:55:90:6c:
46:3e:ef:8f:fb:a5:aa:e7:61:9e:35:eb:a5:e1:f6:
a7:ba:06:81:16:89:35:f3:44:b1:51:22:e7:2e:bc:
bf:45:0a:a6:32:26:d6:1e:7d:9e:4d:04:39:50:33:
0a:08:2b:50:f6:9b:b1:d7:c7:3f:a8:a7:5a:fd:55:
79:61:70:75:10:a7:f2:e0:34:b0:67:a7:a7:b7:2f:
3f:db:95:ad:a9:9a:c3:73:b5:ae:bc:06:a1:3e:f6:
0f:c8:c9:66:c0:0e:ab:de:4c:52:d6:f5:51:95:a2:
98:51:94:09:8b:1b:9a:0e:70:da:ac:d5:db:10:a9:
53:4f:57:19:1b:96:fe:17:6e:36:4e:ff:d2:6b:51:
74:3c:fe:9b:b2:d2:97:ba:ae:25:7b:b9:8f:86:a4:
92:d6:51:bd:cd:0e:6d:52:74:d9:e1:67:2c:77:e3:
13:e4:2e:c4:a8:1a:93:57:77:1b:85:15:7b:79:6a:
ee:80:c8:b0:07:a3:12:1a:80:82:d3:70:a3:03:ef:
6e:84:56:84:29:da:bb:56:74:fb:dd:32:da:33:bd:
1e:4d:26:f6:e5:05:a8:27:14:b5:79:0d:4f:e9:88:
51:2c:52:be:00:3a:cb:61:28:02:dc:c6:63:60:2f:
a4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0B:85:F5:B9:81:E8:64:D0:C1:F0:53:5F:8F:80:AB:B6:F6:59:E7
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/LQuF9bmB6GTQwfBTX4-Aq7b2Wec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.16.0/20
185.214.76.0/22
IPv6:
2a0b:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:19:94:47:08:b8:bb:6f:88:c8:15:60:dc:51:e9:f1:6c:a6:
44:2c:9e:cb:6f:18:2d:0a:05:a1:a5:4a:2e:a3:43:1d:24:b0:
ac:54:3a:bf:a5:79:e3:cd:59:c0:92:68:97:42:dc:a0:57:50:
2b:89:ea:c4:81:2d:12:a1:73:44:82:93:4d:21:24:16:c1:ff:
6f:e7:f2:80:12:0f:2c:ea:d9:9b:77:9a:88:79:6a:89:d7:ca:
f9:c5:4e:00:41:47:c1:1b:dc:2c:90:2b:83:45:3e:41:a2:35:
50:5e:65:90:f2:24:e7:db:f3:06:ea:ff:18:09:8f:e5:b2:05:
e0:3b:0c:61:aa:aa:50:bb:3e:d6:0d:8b:f9:9f:69:66:41:b0:
45:5d:d0:c3:df:ea:55:47:ba:71:bb:cc:e8:96:81:91:49:3b:
58:42:39:fa:34:ff:26:81:63:d2:c6:2e:4a:ea:d2:59:45:dd:
66:e0:ff:f8:6e:13:61:35:35:49:e7:31:c6:58:82:62:ff:6e:
8f:45:af:72:f7:b9:e1:92:48:dd:e1:87:94:d7:6c:6f:a8:c2:
5c:9a:7a:54:f2:16:d9:8f:27:1b:77:63:7b:02:6c:1a:89:ca:
75:a5:ca:65:f9:9a:91:75:db:bb:da:30:9f:ab:25:73:a9:cd:
3d:c5:49:c5
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAY1iMe+go2a/j6T07dZOvh8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTAyNGEwYmRmYmFkOTVmMDEwNjRkNTE4Y2Y2ZWE5NjZi
NDQ4OGEwHhcNMjQwMjAxMDEwNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDBiODVmNWI5ODFlODY0ZDBjMWYwNTM1ZjhmODBhYmI2ZjY1OWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+K4Du//+RlhbmVVkGxGPu+P+6Wq
52GeNeul4fanugaBFok180SxUSLnLry/RQqmMibWHn2eTQQ5UDMKCCtQ9pux18c/
qKda/VV5YXB1EKfy4DSwZ6enty8/25WtqZrDc7WuvAahPvYPyMlmwA6r3kxS1vVR
laKYUZQJixuaDnDarNXbEKlTT1cZG5b+F242Tv/Sa1F0PP6bstKXuq4le7mPhqSS
1lG9zQ5tUnTZ4Wcsd+MT5C7EqBqTV3cbhRV7eWrugMiwB6MSGoCC03CjA+9uhFaE
Kdq7VnT73TLaM70eTSb25QWoJxS1eQ1P6YhRLFK+ADrLYSgC3MZjYC+kLwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFC0LhfW5gehk0MHwU1+PgKu29lnnMB8GA1UdIwQY
MBaAFGwQJKC9+62V8BBk1RjPbqlmtEiKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZDU4YjUtNGYxMy00N2IyLWE1N2Ut
MjgzYmIwOTIzODE3LzEvTFF1RjlibUI2R1RRd2ZCVFg0LUFxN2IyV2VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZDU4YjUtNGYxMy00N2IyLWE1N2UtMjgzYmIwOTIzODE3
LzEvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEsHIQAwQC
udZMMA0EAgACMAcDBQMqC5fAMA0GCSqGSIb3DQEBCwUAA4IBAQArGZRHCLi7b4jI
FWDcUenxbKZELJ7LbxgtCgWhpUouo0MdJLCsVDq/pXnjzVnAkmiXQtygV1ArierE
gS0SoXNEgpNNISQWwf9v5/KAEg8s6tmbd5qIeWqJ18r5xU4AQUfBG9wskCuDRT5B
ojVQXmWQ8iTn2/MG6v8YCY/lsgXgOwxhqqpQuz7WDYv5n2lmQbBFXdDD3+pVR7px
u8zoloGRSTtYQjn6NP8mgWPSxi5K6tJZRd1m4P/4bhNhNTVJ5zHGWIJi/26PRa9y
97nhkkjd4YeU12xvqMJcmnpU8hbZjycbd2N7Amwaicp1pcpl+ZqRddu72jCfqyVz
qc09xUnF
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:27 2025 by rpki-client