Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/IN6DvexMZdW1RQSeKzS1lZHBMjU.roa
File: IN6DvexMZdW1RQSeKzS1lZHBMjU.roa (raw, json)
Hash identifier: qrqfr/yssNjCBa2MM4Zrgs75uip51XPFPP7p2RjXVsM=
Subject key identifier: 20:DE:83:BD:EC:4C:65:D5:B5:45:04:9E:2B:34:B5:95:91:C1:32:35
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019777922C5F4BB1A522C19B63CE7A30907B
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/IN6DvexMZdW1RQSeKzS1lZHBMjU.roa
Signing time: Mon 16 Jun 2025 07:09:17 +0000
ROA not before: Mon 16 Jun 2025 07:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216300
IP address blocks: 77.105.129.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.132.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
185.225.202.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:92:2c:5f:4b:b1:a5:22:c1:9b:63:ce:7a:30:90:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jun 16 07:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20de83bdec4c65d5b545049e2b34b59591c13235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:d4:18:76:90:71:2b:56:aa:a4:6e:6a:55:
f0:c2:07:f9:28:b4:9d:7f:c9:8e:08:64:58:71:7a:
ae:9e:e1:fe:57:67:03:ad:10:a2:7a:cf:1b:9a:07:
e0:eb:e1:54:e7:b8:fd:d7:32:e5:e7:4e:c0:00:7a:
2a:7a:44:06:61:27:84:97:a1:32:e8:1a:02:36:95:
c3:95:fc:b7:6e:cc:92:80:6b:08:9c:87:0f:a9:39:
d8:0b:bf:19:5d:4e:eb:57:e7:c4:d2:4c:1a:a8:f0:
1f:58:66:8b:0d:13:ff:13:a3:3a:90:ca:b0:c4:f8:
43:89:ee:52:22:3e:ad:50:8f:5f:7f:c8:10:a4:b8:
44:41:36:0f:bb:41:49:fe:22:fc:6c:1f:47:18:e2:
a0:98:9c:00:ab:60:d7:c6:a5:2d:ea:41:41:9a:15:
7d:f9:2d:eb:67:8e:a9:92:c9:3e:4a:b3:17:f8:7c:
d8:c5:4b:c7:55:87:2e:92:b8:12:9b:45:20:c6:17:
c8:92:11:ee:0e:80:00:03:25:a2:2e:ba:cf:19:6e:
2d:26:c5:a8:2e:9a:88:e3:46:93:22:12:8e:46:7e:
a5:26:7b:8d:bb:b8:98:77:5b:41:d6:98:6f:c6:ab:
16:bf:54:f6:92:1d:35:08:f1:cc:12:35:7d:da:08:
70:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DE:83:BD:EC:4C:65:D5:B5:45:04:9E:2B:34:B5:95:91:C1:32:35
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/IN6DvexMZdW1RQSeKzS1lZHBMjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.129.0-77.105.130.255
77.105.132.0/24
77.105.134.0/23
77.105.160.0/24
185.225.202.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:77:2d:e4:25:97:ea:41:fd:33:d0:37:20:bf:98:11:82:7e:
87:82:b6:bb:31:f6:9b:10:94:c5:14:47:36:f7:d9:3f:68:40:
63:17:d3:a3:cb:ea:53:a6:ed:ec:1d:44:e1:ea:27:1e:67:1f:
e7:78:a6:cc:a0:40:00:1d:d4:6e:14:12:d1:6e:e4:b2:b1:1e:
41:fe:15:4d:5f:a5:14:53:6c:a9:9f:67:55:b0:bd:a7:82:90:
74:c2:41:18:77:62:15:8e:5f:d3:a9:33:10:7f:f7:6f:96:83:
04:a0:8d:c5:f5:2c:24:47:f1:fd:62:e2:d2:f7:cb:c3:72:cb:
df:64:98:a6:b7:f3:14:a1:ad:33:97:88:39:d8:24:1b:01:a6:
9d:06:94:67:a4:19:8f:f5:5f:5d:18:6b:f9:40:1f:23:b9:2a:
78:45:1e:5b:82:2c:48:f5:0d:b6:f5:22:a4:00:0a:94:e5:75:
90:f7:62:7c:90:90:71:30:6f:da:80:f6:aa:44:ba:45:86:fb:
72:ad:3e:4f:5c:63:b2:bc:9e:01:bc:6e:dc:0d:fe:cb:5c:14:
65:ca:2f:58:28:cf:00:9f:1a:a8:d9:c3:79:19:40:55:b5:f1:
1f:a8:a7:5e:48:0a:c6:4c:54:3e:8d:68:fa:f0:e0:8c:5a:c7:
cc:40:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:05:23 2025 by rpki-client