Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RlsQD52b_ALZqI-HBFJdz1jAdQI.roa
File: RlsQD52b_ALZqI-HBFJdz1jAdQI.roa (raw, json)
Hash identifier: +L2iaAhnLwL1vTREhA1NsJKXablxMQOGcKf6/K4DJjE=
Subject key identifier: 46:5B:10:0F:9D:9B:FC:02:D9:A8:8F:87:04:52:5D:CF:58:C0:75:02
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193BEF27BBFF9B5B009F51BCA5258493CCD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RlsQD52b_ALZqI-HBFJdz1jAdQI.roa
Signing time: Fri 13 Dec 2024 07:36:22 +0000
ROA not before: Fri 13 Dec 2024 07:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.15.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
193.124.224.0/23 maxlen: 23
194.58.155.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.37.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.192.2.0/24 maxlen: 24
212.192.16.0/21 maxlen: 21
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:be:f2:7b:bf:f9:b5:b0:09:f5:1b:ca:52:58:49:3c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 13 07:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=465b100f9d9bfc02d9a88f8704525dcf58c07502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:7c:fd:7f:13:53:0e:55:da:7e:f2:37:45:
05:b9:cc:4e:04:d8:5f:08:c4:5c:d1:25:74:a4:31:
51:ac:ad:43:b2:7c:95:74:54:83:76:90:76:33:30:
b2:79:43:ca:6e:89:91:4d:cd:07:e6:14:53:01:47:
7d:c9:ef:7a:1c:33:38:10:fb:17:57:94:6f:50:a1:
77:52:2c:50:af:74:4c:b0:99:45:db:98:ce:30:cb:
96:9e:96:75:2d:5d:19:39:30:09:70:51:9e:7a:62:
8a:39:82:db:ca:57:99:8f:c6:4a:1e:e2:fe:bd:a6:
da:b5:75:28:cb:e6:3d:3f:3a:ee:29:0f:69:61:ad:
6c:b8:8f:f3:7a:27:50:e9:9c:69:8f:2f:16:b0:41:
b7:56:8b:c0:75:d9:7d:d8:fa:f3:c1:e0:ed:97:0e:
cb:2c:72:c7:5c:be:3c:3a:c0:28:79:35:a4:ac:3c:
0a:9a:f7:10:6a:67:9c:d7:2a:ac:f8:67:c0:98:97:
fc:db:47:5a:c7:28:c3:95:16:81:ab:8f:d0:57:71:
dc:21:af:6f:8f:cb:ae:0a:e3:f0:6c:57:20:a6:b1:
e8:4b:16:6d:5a:3a:eb:51:a0:e4:6e:f3:79:69:d3:
74:21:33:6a:18:57:fc:ce:4f:bc:2e:c2:55:e8:c8:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5B:10:0F:9D:9B:FC:02:D9:A8:8F:87:04:52:5D:CF:58:C0:75:02
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RlsQD52b_ALZqI-HBFJdz1jAdQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.15.0/24
193.124.89.0/24
193.124.224.0/23
194.58.155.0/24
194.85.251.0/24
194.87.17.0/24
194.87.23.0/24
194.87.105.0/24
194.87.108.0/24
194.87.169.0/24
194.87.224.0/24
194.135.33.0/24
195.133.24.0/23
195.133.37.0/24
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.192.1.0-212.192.2.255
212.192.16.0/21
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
80:8a:f8:5a:e9:b1:7c:f8:30:34:d9:5c:61:20:9c:c6:1e:db:
d1:1a:2f:9d:79:20:2e:1d:a4:56:79:76:e7:11:db:8c:2f:2a:
bd:39:8f:7d:1a:e2:41:4b:b7:87:ff:da:a7:64:07:fb:05:e6:
40:ea:0f:81:80:06:71:6a:53:fa:9a:89:9b:17:a9:9c:1e:3b:
53:c9:b2:83:84:d4:70:4b:84:2d:13:2e:af:6a:95:23:5b:a1:
6c:a1:0e:40:3f:5e:6d:cb:b0:b4:19:1e:a5:e8:0b:70:5c:b6:
df:9e:9f:87:56:f8:b2:01:ce:80:d1:67:f1:02:d0:5d:fb:48:
e6:47:38:b2:db:51:db:ed:d2:83:ef:8a:0c:4f:a9:f7:2e:b9:
68:5d:16:1d:35:8b:dc:2d:a2:05:2d:f9:95:fe:67:78:70:74:
f0:a9:70:f9:06:b5:af:9d:64:9e:b3:e3:b1:9f:6e:94:27:4f:
cf:36:55:09:47:e4:10:ec:46:92:17:1e:15:32:4a:a6:55:e4:
e2:8f:35:87:0c:f7:a6:2b:3f:a6:a3:1a:a8:a5:e0:16:49:fb:
b4:ed:4e:fe:21:94:46:46:a3:e7:a1:19:3c:fa:35:83:43:0b:
fa:f0:82:03:93:82:2c:1a:55:8a:27:0c:8c:02:1a:b1:e2:e1:
db:68:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:31:50 2025 by rpki-client