Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LpoXdc-FH9GZji05qc30DPbSHxo.roa
File: LpoXdc-FH9GZji05qc30DPbSHxo.roa (raw, json)
Hash identifier: ZefYJ+d5r3syAmaXNcERFXoUW2jiz2cFhrQGHp/FH4U=
Subject key identifier: 2E:9A:17:75:CF:85:1F:D1:99:8E:2D:39:A9:CD:F4:0C:F6:D2:1F:1A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019407F1428F3241548C66C0D66F833E6625
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LpoXdc-FH9GZji05qc30DPbSHxo.roa
Signing time: Fri 27 Dec 2024 11:47:19 +0000
ROA not before: Fri 27 Dec 2024 11:47:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.15.0/24 maxlen: 24
193.124.224.0/23 maxlen: 23
194.58.155.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.214.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:f1:42:8f:32:41:54:8c:66:c0:d6:6f:83:3e:66:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 27 11:47:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e9a1775cf851fd1998e2d39a9cdf40cf6d21f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:14:a5:d2:14:42:1c:43:4e:db:83:17:6c:
cd:f4:cf:88:82:b1:12:a4:99:7b:23:b7:a9:0f:1e:
c8:3c:d9:93:02:42:ce:98:f7:4a:4b:58:58:c9:e5:
36:c9:d2:8d:e8:92:1e:82:f1:26:f0:68:76:15:98:
06:50:09:3a:12:dc:a2:d2:5e:2e:04:9c:24:9d:82:
94:46:3d:fe:86:5a:40:bf:10:b5:fc:49:ef:c0:44:
f7:a3:49:eb:00:54:3e:ee:50:e8:61:19:a0:7c:a9:
89:59:a7:b9:dc:a2:3f:e5:da:d8:57:d4:44:dc:64:
6d:81:dd:6c:71:39:0c:78:3a:c5:16:c1:57:a2:a9:
b5:13:01:02:bc:7b:f0:3d:cc:53:30:8e:3a:d3:26:
32:22:a8:76:03:e3:f7:63:07:19:ce:e7:9f:34:04:
72:18:f1:cc:a2:71:5c:60:36:c5:98:95:9f:a8:ab:
7a:3f:cf:b8:75:dc:13:d1:8f:61:7e:5f:37:69:bd:
60:91:ac:19:c3:b6:62:2d:20:7c:98:41:a8:5b:59:
a5:09:04:b9:20:97:2b:40:d7:6f:f0:47:7e:c8:5c:
49:11:81:2f:16:df:c0:7c:72:23:4d:26:15:b9:5d:
ae:8c:c2:34:2c:61:de:57:04:1f:a1:c6:bb:ec:57:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9A:17:75:CF:85:1F:D1:99:8E:2D:39:A9:CD:F4:0C:F6:D2:1F:1A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LpoXdc-FH9GZji05qc30DPbSHxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.15.0/24
193.124.224.0/23
194.58.155.0/24
194.85.251.0/24
194.87.169.0/24
194.87.224.0/24
194.135.33.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.192.214.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
1c:72:31:fb:4a:9e:ad:64:84:40:06:dc:86:bf:61:7d:74:08:
7f:f1:b9:10:f7:e4:d0:df:99:b6:4a:89:36:68:6d:6c:58:e0:
42:9c:e9:b4:6f:4f:a8:56:db:dc:96:ad:05:1c:36:df:42:da:
20:88:59:53:bd:ff:b0:5e:5d:fd:a7:a5:b5:26:76:78:40:50:
23:7a:30:9a:80:e0:04:f8:70:50:b4:32:36:a4:e8:b1:52:dc:
5a:82:00:4c:99:68:7d:f7:58:35:3d:82:da:7c:cd:cc:df:fd:
0d:eb:af:5d:f8:ef:90:c7:a5:75:15:6a:88:55:71:6a:fe:0d:
58:75:2a:48:c8:12:30:5a:92:18:19:b0:bc:68:ce:e1:53:d3:
92:ed:64:81:53:55:95:ac:eb:d0:4f:5c:16:88:bd:e5:25:89:
0e:d4:58:87:36:7f:d0:3c:60:17:c6:e0:e6:1e:5c:48:4b:05:
5d:9a:46:5d:cf:84:98:62:9a:14:b1:de:c7:ba:64:9d:da:b0:
02:3a:69:ad:d8:5c:55:3b:aa:ef:83:0c:b0:02:c3:e2:cd:ec:
be:27:32:4d:ba:11:26:34:28:5e:15:a8:2e:5c:6c:38:20:e1:
14:74:ba:1e:74:97:a2:72:c2:92:7f:4d:49:c5:1f:28:8b:aa:
89:3b:8e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:10:44 2025 by rpki-client