Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/Sfd5VwRT-70zNPL_gf2PV2YJUzo.roa
File: Sfd5VwRT-70zNPL_gf2PV2YJUzo.roa (raw, json)
Hash identifier: 0s8m2NJl5XlQTEwBzzFl/5mraq/hjk4dXfN96Eyn1dY=
Subject key identifier: 49:F7:79:57:04:53:FB:BD:33:34:F2:FF:81:FD:8F:57:66:09:53:3A
Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial: 02F964FD
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/Sfd5VwRT-70zNPL_gf2PV2YJUzo.roa
Signing time: Sat 01 Jan 2022 02:59:44 +0000
ROA not before: Sat 01 Jan 2022 02:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35804
IP address blocks: 213.111.128.0/18 maxlen: 18
213.111.128.0/19 maxlen: 19
194.79.60.0/22 maxlen: 22
2a00:ede0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49898749 (0x2f964fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0041ff7980379b798049256868dff39819c2604
Validity
Not Before: Jan 1 02:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49f779570453fbbd3334f2ff81fd8f576609533a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:8f:39:3b:b3:29:fb:3f:d4:25:79:98:6b:
6d:1f:3f:68:de:28:9e:5a:79:97:25:72:07:04:f3:
98:b2:8e:ba:aa:c1:30:85:69:9c:b5:e6:58:95:3a:
1d:be:71:c8:01:dd:9d:a7:08:8d:53:7a:38:90:3f:
58:bc:8d:35:c6:3d:65:1c:df:1c:dd:c9:ed:c0:ed:
1e:e1:2f:b3:aa:d9:37:8e:5b:93:75:4f:34:54:07:
d9:47:0b:74:c0:ff:b7:6b:9c:5c:c1:92:5e:59:55:
17:2f:ca:27:57:ae:0d:ff:e8:f7:1e:2c:0c:b1:73:
58:38:ce:91:31:63:cd:86:ba:23:84:d8:8a:c6:be:
21:00:2e:d1:74:9a:f2:60:d2:f2:c1:f3:ea:3d:d2:
ab:e0:8c:30:58:df:b3:3e:30:b0:be:22:b5:22:8f:
e4:bd:3c:21:d6:62:df:4e:c4:5d:71:4d:1d:06:d7:
eb:9e:ba:12:59:6a:26:34:02:a0:d2:84:ac:65:96:
b8:96:9a:99:fc:a2:66:d8:bb:56:3b:69:6a:3d:f4:
92:b4:e6:01:b2:e3:d6:c2:af:f2:3b:b3:ea:0a:91:
6e:44:b7:c2:09:3c:b5:16:4e:ed:8e:6b:30:55:ed:
c6:10:af:f9:7b:79:5a:98:35:e3:1b:b5:3e:f9:fb:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F7:79:57:04:53:FB:BD:33:34:F2:FF:81:FD:8F:57:66:09:53:3A
X509v3 Authority Key Identifier:
keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/Sfd5VwRT-70zNPL_gf2PV2YJUzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.60.0/22
213.111.128.0/18
IPv6:
2a00:ede0::/32
Signature Algorithm: sha256WithRSAEncryption
74:5f:de:88:a4:92:bf:77:2a:09:88:57:a2:4e:8e:76:50:bd:
0e:9a:4f:79:b7:a9:3a:09:2c:62:c7:f3:64:72:8f:af:cc:cd:
79:80:b9:d9:77:01:ac:1d:1e:01:55:4b:8f:a4:0a:3d:2a:16:
4a:97:25:3b:17:15:53:37:18:91:51:c8:61:12:b4:67:a3:b3:
b5:d2:b5:c9:e3:50:39:26:6e:e6:37:1b:8e:25:c1:49:92:47:
52:c2:28:3f:7b:c9:91:c0:77:5d:ab:ee:fa:4d:f4:f9:7c:46:
90:40:3b:6b:da:f7:ea:09:fe:69:ce:cd:d3:0f:dc:ae:c1:d6:
48:d2:a4:56:3a:59:bd:61:cc:f4:67:eb:27:5e:29:c0:bd:a0:
8a:c6:f0:40:43:e3:1d:e3:72:c3:da:99:df:74:39:d9:9e:c9:
f3:a1:6d:a4:80:32:76:c9:f4:4f:d9:73:ca:8e:0d:72:5b:54:
8d:cb:3a:06:7e:25:a7:50:27:d0:47:72:57:fe:68:57:83:c4:
5a:3d:f1:71:d8:33:0c:da:33:dd:e1:87:ba:7d:87:43:c4:5b:
c6:64:3d:08:a1:4c:1a:6e:b6:35:6d:99:00:f4:79:78:48:e9:
60:db:aa:7b:68:e9:99:97:75:8e:64:a3:9c:dd:a3:d7:ba:21:
4d:97:3b:4c
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEAvlk/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MDA0MWZmNzk4MDM3OWI3OTgwNDkyNTY4NjhkZmYzOTgxOWMyNjA0MB4XDTIyMDEw
MTAyNTk0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDlmNzc5NTcwNDUz
ZmJiZDMzMzRmMmZmODFmZDhmNTc2NjA5NTMzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWOjzk7syn7P9QleZhrbR8/aN4onlp5lyVyBwTzmLKOuqrB
MIVpnLXmWJU6Hb5xyAHdnacIjVN6OJA/WLyNNcY9ZRzfHN3J7cDtHuEvs6rZN45b
k3VPNFQH2UcLdMD/t2ucXMGSXllVFy/KJ1euDf/o9x4sDLFzWDjOkTFjzYa6I4TY
isa+IQAu0XSa8mDS8sHz6j3Sq+CMMFjfsz4wsL4itSKP5L08IdZi307EXXFNHQbX
6566EllqJjQCoNKErGWWuJaamfyiZti7Vjtpaj30krTmAbLj1sKv8juz6gqRbkS3
wgk8tRZO7Y5rMFXtxhCv+Xt5Wpg14xu1Pvn7yuECAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRJ93lXBFP7vTM08v+B/Y9XZglTOjAfBgNVHSMEGDAWgBTQBB/3mAN5t5gE
klaGjf85gZwmBDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBBUWY5NWdEZWJlWUJKSldobzNfT1lHY0pnUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGMvZThmNDUyLWJlNzAtNDE3Ni05ZGEwLWU2ODliZjU3ZGQyNy8x
L1NmZDVWd1JULTcwek5QTF9nZjJQVjJZSlV6by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMv
ZThmNDUyLWJlNzAtNDE3Ni05ZGEwLWU2ODliZjU3ZGQyNy8xLzBBUWY5NWdEZWJl
WUJKSldobzNfT1lHY0pnUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAsJPPAMEBtVvgDANBAIAAjAHAwUA
KgDt4DANBgkqhkiG9w0BAQsFAAOCAQEAdF/eiKSSv3cqCYhXok6OdlC9DppPebep
OgksYsfzZHKPr8zNeYC52XcBrB0eAVVLj6QKPSoWSpclOxcVUzcYkVHIYRK0Z6Oz
tdK1yeNQOSZu5jcbjiXBSZJHUsIoP3vJkcB3Xavu+k30+XxGkEA7a9r36gn+ac7N
0w/crsHWSNKkVjpZvWHM9GfrJ14pwL2gisbwQEPjHeNyw9qZ33Q52Z7J86FtpIAy
dsn0T9lzyo4NcltUjcs6Bn4lp1An0EdyV/5oV4PEWj3xcdgzDNoz3eGHun2HQ8Rb
xmQ9CKFMGm62NW2ZAPR5eEjpYNuqe2jpmZd1jmSjnN2j17ohTZc7TA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 12:26:42 2025 by rpki-client