Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3oIcKYI5-IAJKoh0ZN4CMzkdcr4.roa
File: 3oIcKYI5-IAJKoh0ZN4CMzkdcr4.roa (raw, json)
Hash identifier: /T2bSTIi37u4TzmASluZJutdX1UrO9d1PknXij55pF0=
Subject key identifier: DE:82:1C:29:82:39:F8:80:09:2A:88:74:64:DE:02:33:39:1D:72:BE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193C63A803648C9CA5E668250AA98559165
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3oIcKYI5-IAJKoh0ZN4CMzkdcr4.roa
Signing time: Sat 14 Dec 2024 17:32:22 +0000
ROA not before: Sat 14 Dec 2024 17:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 62.76.234.0/24 maxlen: 24
62.76.239.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
192.124.176.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.124.22.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.87.58.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.67.0/24 maxlen: 24
195.133.92.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.221.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:3a:80:36:48:c9:ca:5e:66:82:50:aa:98:55:91:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 14 17:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de821c298239f880092a887464de0233391d72be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:36:e9:07:8f:de:8b:f4:10:b0:f5:b8:32:
9a:ae:bc:53:d9:29:bc:8d:5f:4e:8b:4d:ee:a2:21:
5a:3b:23:36:6c:9a:35:c3:59:8c:97:e6:9b:50:70:
4a:f8:2a:eb:91:7f:a5:f5:02:85:21:a9:04:1a:ef:
fd:02:cc:4a:3a:cb:a6:af:7a:f4:94:57:8a:82:cf:
1b:38:7c:ef:d4:f8:e3:0d:bf:6c:88:4f:86:20:44:
50:20:6e:f5:50:bf:56:bc:bb:ab:f1:e7:e5:cb:bd:
a6:65:03:e5:e1:84:0c:c3:90:e2:39:c0:79:6a:da:
a1:8a:c8:cf:2b:f4:cc:fb:94:48:09:5f:15:00:7c:
c9:42:de:97:c8:3d:2c:5a:03:13:10:b0:af:9b:8f:
f3:eb:36:6b:a6:64:6c:e8:cd:90:a4:f0:1b:5c:6a:
f4:28:ce:1c:a3:22:8b:b6:72:47:48:13:c0:5d:e5:
93:0d:ca:4e:3d:68:fc:32:43:42:0f:4c:d5:f2:87:
03:6e:fe:54:ab:15:b2:7e:bc:3e:ac:c0:8d:23:c1:
79:7e:96:ad:52:3e:4d:41:08:ba:4f:90:b5:3d:49:
13:0d:fa:f0:6c:ff:67:6e:19:0f:b3:e6:f9:26:2a:
e8:0c:7a:d6:a7:dc:96:89:51:c6:5e:c6:fa:95:c8:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:82:1C:29:82:39:F8:80:09:2A:88:74:64:DE:02:33:39:1D:72:BE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3oIcKYI5-IAJKoh0ZN4CMzkdcr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.234.0/24
62.76.239.0/24
185.72.8.0/24
192.124.176.0/24
192.124.209.0/24
193.124.22.0/24
193.124.41.0/24
193.124.46.0/24
193.124.49.0/24
194.58.34.0/24
194.58.38.0-194.58.40.255
194.58.44.0-194.58.46.255
194.58.59.0/24
194.58.66.0/24
194.58.68.0/24
194.87.10.0/24
194.87.17.0-194.87.18.255
194.87.23.0/24
194.87.30.0/24
194.87.39.0/24
194.87.47.0/24
194.87.58.0/24
194.87.82.0/24
194.87.105.0/24
194.87.178.0/24
194.87.198.0/24
194.87.227.0/24
194.87.230.0/24
194.87.245.0/24
195.133.67.0/24
195.133.92.0/24
212.192.215.0/24
212.192.221.0/24
212.192.223.0/24
212.193.1.0-212.193.2.255
212.193.6.0/24
Signature Algorithm: sha256WithRSAEncryption
53:0f:90:4e:19:88:74:e7:b3:d1:b9:12:c6:7d:f2:03:98:79:
fe:5a:2f:f1:b6:80:51:45:d7:fe:78:84:00:d7:21:a7:3c:59:
c7:ac:b7:d4:66:3d:32:8f:9a:fa:f5:b0:40:e6:4b:07:43:28:
d9:48:13:ce:f7:09:fe:c5:03:0f:6b:07:25:ab:1a:c9:0e:58:
b6:45:10:59:9d:46:04:23:62:8e:3f:d8:1a:39:de:4e:6b:29:
fc:fd:bf:9b:5b:20:c6:77:33:39:7c:bb:3c:51:e2:fb:1c:4e:
38:bb:66:d6:37:35:4e:95:3d:33:7c:d8:98:3d:b9:0e:f9:f2:
a1:51:2c:ec:1d:dc:a8:38:f4:e8:49:e0:c0:16:d3:b5:2c:d3:
e1:db:0b:be:65:0d:01:21:cd:10:9c:cc:c4:1f:6d:2c:53:02:
51:ba:48:1a:90:2f:48:dc:c7:df:e8:42:3e:d4:45:62:45:eb:
ab:a5:4a:93:3d:5b:67:86:15:98:27:c4:fe:5d:10:0c:7b:dd:
93:58:5c:a1:01:01:24:47:9a:c6:9d:e2:9a:ef:05:35:de:d3:
a9:69:c9:26:a6:63:15:23:27:a9:f4:80:91:db:74:c4:ad:89:
43:63:ed:ed:48:88:af:e4:88:d1:a8:b8:13:71:b5:6d:74:6f:
cc:a0:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:02:16 2025 by rpki-client