Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BtuqqSp7iyUwUa8t07OIRBaBd5s.roa
File: BtuqqSp7iyUwUa8t07OIRBaBd5s.roa (raw, json)
Hash identifier: KWIsGs3GnRIJT6FChjnEu+hcnC6OXhdHdfl6B2e9ch4=
Subject key identifier: 06:DB:AA:A9:2A:7B:8B:25:30:51:AF:2D:D3:B3:88:44:16:81:77:9B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018847D5AAF8AF3EC8FCC55E2D8EB461C524
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BtuqqSp7iyUwUa8t07OIRBaBd5s.roa
Signing time: Tue 23 May 2023 08:59:25 +0000
ROA not before: Tue 23 May 2023 08:59:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 195.133.73.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:d5:aa:f8:af:3e:c8:fc:c5:5e:2d:8e:b4:61:c5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 23 08:59:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06dbaaa92a7b8b253051af2dd3b388441681779b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:da:a7:cb:69:0b:5f:57:50:ef:84:38:32:
3e:03:ec:f4:8a:0f:08:57:63:a9:ae:cb:6a:71:78:
6b:d5:aa:a6:4a:34:a0:9e:8c:05:74:78:ca:5c:52:
f1:30:24:ac:c4:fd:16:12:c8:8f:0a:df:27:54:b3:
c6:85:c4:a8:fd:2a:b9:56:a4:f0:de:fd:37:23:90:
0c:49:c8:96:eb:30:fd:d3:6b:ad:ae:b0:ec:c3:ef:
db:38:f3:38:03:30:0e:2c:c1:42:f8:2c:30:a0:02:
d5:82:a4:2c:cb:dc:7f:89:ed:37:c5:14:a7:55:48:
f8:24:a3:f7:24:31:57:7e:a9:72:3d:d5:f9:a2:0e:
ed:23:1f:e5:0b:b2:c7:59:8d:d6:f4:e0:49:5b:fa:
04:d0:9b:75:ad:a3:c9:3d:73:f0:73:83:67:7f:64:
7a:91:97:c3:04:38:6b:8b:ce:92:2e:e4:82:9f:76:
45:29:5c:18:a7:85:97:a8:06:02:b8:21:b5:72:1a:
aa:c7:f9:ef:49:b4:67:ba:ad:f9:40:45:09:fe:47:
7d:ae:0a:39:9d:e1:92:5c:90:39:c1:39:87:6b:e8:
ad:d4:d6:a8:d8:ef:67:15:a9:b7:a9:80:39:e7:0a:
7f:49:ca:98:7b:77:d2:fe:d4:59:43:a1:3c:35:a7:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DB:AA:A9:2A:7B:8B:25:30:51:AF:2D:D3:B3:88:44:16:81:77:9B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BtuqqSp7iyUwUa8t07OIRBaBd5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.73.0/24
195.133.81.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9d:0e:ae:fa:bb:fe:a9:cf:f1:e6:0e:be:78:9a:37:d4:03:
70:a0:c5:42:1d:67:50:31:83:95:fb:f0:db:ae:04:b4:ff:48:
d4:32:b9:2e:a8:dd:a2:9a:88:16:f1:f3:f1:87:e9:ae:60:f8:
c7:43:57:e6:52:ff:2b:33:97:a4:78:56:88:e2:56:60:fc:95:
f8:0d:5f:12:0a:ad:46:47:0d:9b:62:91:80:98:ea:e9:14:b4:
d5:af:c7:5c:ac:f8:8f:69:cc:40:7c:cf:55:2b:d2:4b:4d:22:
6f:4c:60:ce:6f:37:b4:eb:8b:9d:99:70:f5:2b:f7:f7:b9:3d:
d5:9c:3a:33:0d:85:3a:9f:10:e2:d3:bd:59:33:bd:e6:a2:7b:
f1:cd:67:2b:f7:31:5c:ab:8c:9e:78:bf:f2:c9:94:f7:90:39:
86:4c:c8:07:63:ea:04:05:d2:ae:b0:5b:cb:ec:2a:06:b5:b2:
62:9d:67:e3:5a:5d:ba:8d:0b:59:69:cf:a2:e2:13:34:74:0b:
0a:56:70:94:5b:c0:9e:aa:69:89:f6:ce:01:b8:87:62:72:f3:
09:8a:8a:9b:61:be:1c:9c:74:1b:10:a4:b1:c0:44:3c:00:61:
e6:79:a4:e3:04:a1:bc:4b:8a:3a:ae:ed:aa:40:6e:d0:f3:e8:
0c:0a:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:46:55 2025 by rpki-client