Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-Ta9WuMlp-R8UxOJmgtvQWBM3Dk.roa
File: 1-Ta9WuMlp-R8UxOJmgtvQWBM3Dk.roa (raw, json)
Hash identifier: ShT7jq7HYZAVnxl4T4BNi3yYdOV2OWzMiSRhYtPk3RE=
Subject key identifier: F9:36:BD:5A:E3:25:A7:E4:7C:53:13:89:9A:0B:6F:41:60:4C:DC:39
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194282516B5F878F14D05D691DC8B2C1679
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-Ta9WuMlp-R8UxOJmgtvQWBM3Dk.roa
Signing time: Thu 02 Jan 2025 17:51:46 +0000
ROA not before: Thu 02 Jan 2025 17:51:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216127
IP address blocks: 194.58.33.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
195.58.39.0/24 maxlen: 24
195.133.64.0/24 maxlen: 24
195.133.65.0/24 maxlen: 24
212.193.4.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:16:b5:f8:78:f1:4d:05:d6:91:dc:8b:2c:16:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f936bd5ae325a7e47c5313899a0b6f41604cdc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:0d:e2:20:75:dc:e5:ae:3e:d1:ca:2b:5e:
37:8f:4a:9f:98:f4:9c:74:8d:f1:07:98:4c:9c:af:
83:2f:8b:0b:07:43:6e:88:66:01:8b:9b:c7:04:b8:
dd:0f:f8:91:7e:a5:2d:af:08:08:b9:b2:2a:a0:42:
1d:35:ef:f5:b0:81:f3:ae:0a:b0:16:7c:34:91:58:
1f:12:b6:de:be:45:78:69:78:4f:5f:18:4c:1f:f5:
1f:f0:94:a5:9f:ad:26:7f:f5:a2:60:22:c2:31:34:
76:e9:fd:b4:70:ae:18:7e:11:bf:41:d9:ad:30:7e:
fd:18:7d:d9:9b:d2:ea:c6:0c:21:a4:19:d7:4d:08:
b0:2a:13:51:67:38:44:40:f8:b3:0c:91:12:46:e1:
0e:0c:f8:26:77:ac:9e:02:80:ac:00:01:df:3b:07:
e7:a7:50:a6:36:d3:ee:15:56:cd:83:27:92:03:85:
5b:34:09:8d:98:5c:c9:c7:64:d5:f6:91:7b:9e:c7:
68:a7:02:f7:a6:9d:e1:8e:8f:2c:5f:4e:b3:25:5f:
8b:30:01:b1:66:3b:ad:73:2f:cf:1d:33:56:80:d1:
74:22:4f:11:f5:a8:a7:b3:43:f1:3f:60:55:15:0c:
86:a4:99:a0:e9:c9:ec:8f:8c:74:88:a8:84:58:bc:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:BD:5A:E3:25:A7:E4:7C:53:13:89:9A:0B:6F:41:60:4C:DC:39
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-Ta9WuMlp-R8UxOJmgtvQWBM3Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.33.0/24
194.87.54.0/23
195.58.38.0/23
195.133.64.0/23
212.193.4.0/23
Signature Algorithm: sha256WithRSAEncryption
40:39:c4:e4:81:da:61:c2:ab:26:82:81:26:f9:b1:26:0f:66:
8b:52:04:db:28:4b:b7:88:b3:71:ac:0f:2d:21:4a:06:5c:74:
9f:be:3e:b4:a2:06:9f:14:ea:02:57:89:b3:c6:e1:9c:16:44:
0b:d1:17:cb:5a:11:7e:e4:05:ea:8d:ba:07:56:0b:b6:c5:80:
9e:32:cf:2c:bd:26:f5:38:07:69:42:c0:f5:6a:1d:f1:dc:50:
78:7c:17:16:d4:f2:4f:75:f1:12:55:53:bd:fd:5b:f8:75:a5:
e9:bd:59:98:ab:21:72:38:a9:f9:7e:9c:62:00:10:ab:71:17:
1a:b9:6e:8a:85:e2:cc:48:05:3a:7d:55:91:0f:6a:31:28:86:
61:3f:d7:3d:ee:7f:97:bc:6a:33:37:aa:fb:f2:58:08:dd:d9:
b5:7c:a6:75:76:cf:b5:ea:a2:56:69:75:2d:86:29:db:e2:bc:
4f:86:27:4d:24:22:4a:c8:32:c3:93:ca:7b:56:7c:36:a3:30:
90:85:4b:4f:73:af:74:1e:55:c9:2d:79:fd:6f:0c:cb:68:7a:
0e:be:df:28:fe:20:fc:0d:47:13:19:2a:e2:72:84:3e:d2:8d:
87:58:cf:a4:8f:7a:49:51:7f:cc:46:be:b3:99:63:64:31:63:
e3:b7:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:32:13 2025 by rpki-client