Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EV4E20lyPjZVNUKSIOTsOvD34Gw.roa
File: EV4E20lyPjZVNUKSIOTsOvD34Gw.roa (raw, json)
Hash identifier: uK7jIUte/UCUgdl1kJ5tft9dw/YR0rWOPWA9RhDWPn0=
Subject key identifier: 11:5E:04:DB:49:72:3E:36:55:35:42:92:20:E4:EC:3A:F0:F7:E0:6C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194282513D548419CF88AEED27A7B26D879
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EV4E20lyPjZVNUKSIOTsOvD34Gw.roa
Signing time: Thu 02 Jan 2025 17:51:46 +0000
ROA not before: Thu 02 Jan 2025 17:51:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215433
IP address blocks: 192.124.172.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:13:d5:48:41:9c:f8:8a:ee:d2:7a:7b:26:d8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=115e04db49723e365535429220e4ec3af0f7e06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:fc:43:5a:fe:12:2c:2d:69:13:e3:60:bc:
a3:a2:b6:23:bf:e9:bc:47:63:a5:2a:5c:85:a5:b1:
84:2f:79:cd:80:6e:14:5b:43:c2:ad:6b:24:1c:be:
33:f2:13:20:cd:f1:00:e3:4f:e2:c8:e3:89:db:f4:
d3:93:7e:7f:d4:71:65:d0:50:a1:5e:25:2a:89:a9:
b0:7a:61:42:5b:b1:92:d2:4d:9b:bb:78:7a:34:b5:
9c:7b:43:11:11:f4:70:97:b6:5d:1a:1c:f0:94:bf:
8d:95:fa:2c:5f:9c:ef:45:66:b5:bc:4b:7b:75:30:
a2:49:79:64:8e:fb:f6:ce:56:41:54:44:91:43:08:
2f:8c:d3:f6:45:db:94:65:f7:99:f8:5c:46:27:6d:
a8:09:70:a4:cd:b8:ae:71:94:bc:2e:fd:40:4f:0e:
80:57:6b:dc:4c:d4:d8:9f:25:2b:c6:b9:0c:a2:3e:
18:40:48:86:ad:e8:35:32:b6:aa:4b:e3:c9:fd:d5:
4d:89:f5:9c:e0:bd:e9:19:72:43:c6:2b:c5:6d:f5:
15:b8:85:08:18:f2:84:8e:8f:e7:d5:20:82:18:0d:
ca:8c:91:8f:1c:99:f7:8a:dd:d8:22:47:e0:64:a8:
6a:12:97:f8:97:7b:ca:38:e1:31:96:8c:53:2f:40:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5E:04:DB:49:72:3E:36:55:35:42:92:20:E4:EC:3A:F0:F7:E0:6C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EV4E20lyPjZVNUKSIOTsOvD34Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:25:2c:81:d4:1b:78:f4:97:9f:e2:46:0b:87:b0:3a:91:7e:
fb:79:95:14:99:16:b0:26:5a:72:30:3c:51:72:ee:35:2b:94:
e4:e5:e6:67:ad:23:15:08:9e:fc:ce:43:cf:b0:79:95:a9:41:
d2:3d:a8:69:2e:68:fe:d3:26:7c:60:7a:23:15:4a:9e:61:f4:
23:b4:d5:4e:b9:26:da:ab:46:4f:49:bc:08:d0:4e:f7:1c:44:
36:e6:42:19:37:19:4d:b3:3e:bf:07:f3:14:ee:9b:bb:0c:23:
97:d4:89:9c:36:8f:bb:32:ba:9d:bd:aa:ea:c3:80:bd:06:96:
67:a2:46:c2:dd:06:3e:34:41:05:7c:6c:9c:00:5b:d1:21:15:
98:2e:22:1e:2b:a7:ff:b4:43:d2:8d:ff:8d:42:c3:db:d1:ce:
51:4e:dc:92:3c:1e:29:e1:c7:b1:34:b0:34:91:eb:1a:da:12:
4f:10:79:33:48:5c:0a:80:70:57:0c:43:20:47:df:1e:5b:94:
26:d0:06:23:de:6c:8a:f8:d0:f6:06:f3:12:bd:e1:67:bc:0a:
f6:45:0e:1b:44:4f:de:24:31:91:de:5e:80:4c:7b:1e:bd:23:
fb:9f:dc:b0:fe:e5:61:3a:2a:9f:33:5a:92:b3:8d:94:2c:c4:
7a:a5:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:18:02 2025 by rpki-client