Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TjS8jlfrNBHrODO5vijKsZiNtI4.roa
File: TjS8jlfrNBHrODO5vijKsZiNtI4.roa (raw, json)
Hash identifier: BOTHY+UR9HNQs4fjdKI2OhVlU+GxNt65a3cmHJ8bt8w=
Subject key identifier: 4E:34:BC:8E:57:EB:34:11:EB:38:33:B9:BE:28:CA:B1:98:8D:B4:8E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193D09588A63A15B128C1EAB0BD5A8F5709
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TjS8jlfrNBHrODO5vijKsZiNtI4.roa
Signing time: Mon 16 Dec 2024 17:48:00 +0000
ROA not before: Mon 16 Dec 2024 17:48:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.15.0/24 maxlen: 24
193.124.224.0/23 maxlen: 23
194.58.155.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:95:88:a6:3a:15:b1:28:c1:ea:b0:bd:5a:8f:57:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 16 17:48:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e34bc8e57eb3411eb3833b9be28cab1988db48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:be:bc:3a:f1:9b:15:b1:a3:71:63:bc:a3:
80:60:80:df:26:d3:b4:e0:f6:eb:4c:2a:1a:4e:3e:
0e:ef:95:83:a5:f5:ce:97:cd:c0:7b:32:6a:f7:90:
e9:37:31:6f:fd:f6:85:4c:25:3e:46:ea:0a:4e:26:
3b:0a:45:5f:99:81:f7:45:3c:e4:4f:15:f7:5d:ac:
45:20:df:06:2c:a0:2a:c9:69:b3:14:69:74:4f:41:
0f:0b:d8:cd:b9:74:44:9e:df:f0:10:3f:35:bb:54:
eb:14:4e:06:08:2e:db:d9:8d:09:9b:86:15:20:25:
df:3a:47:99:0f:1f:66:39:e0:4c:56:44:da:b8:d0:
78:27:a8:e9:2b:99:6d:89:d8:ef:b9:73:ff:2b:03:
9c:19:15:91:98:2e:d5:44:84:74:79:08:f8:ca:4c:
d8:ba:8e:6d:af:41:32:2f:17:c5:35:75:b2:f4:57:
bf:41:92:de:e0:c1:fa:79:76:cd:1a:c4:75:ad:c0:
d9:0e:63:15:b6:c1:b1:fb:98:bd:41:83:bc:21:8c:
82:ae:a2:93:48:db:72:c9:bd:3d:79:be:06:ab:15:
f9:c5:67:bb:ee:3d:61:2d:8a:1e:1f:6b:28:a7:9e:
80:63:a4:24:66:8e:73:87:23:93:f4:fd:d3:71:2d:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:34:BC:8E:57:EB:34:11:EB:38:33:B9:BE:28:CA:B1:98:8D:B4:8E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TjS8jlfrNBHrODO5vijKsZiNtI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.15.0/24
193.124.224.0/23
194.58.155.0/24
194.85.251.0/24
194.87.108.0/24
194.87.169.0/24
194.87.224.0/24
194.135.33.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
0f:25:ea:f7:8e:f9:cb:83:9f:80:df:8b:cf:c5:2e:df:29:b4:
c9:ad:c8:ba:96:83:e2:93:1a:a5:1a:ad:d2:c4:df:fc:b5:0b:
95:b0:90:4b:f2:53:70:a9:b8:8c:6c:c6:ac:cc:96:b4:d2:ba:
9a:f1:ce:b3:83:94:2d:5a:02:34:18:bf:71:a4:94:6d:38:bd:
9a:04:e0:b9:5e:f8:55:01:a5:0a:9a:10:37:d5:3a:9d:f6:46:
82:0c:54:fe:eb:c9:d9:02:75:ba:52:26:c2:bd:58:b2:4e:2c:
55:c4:b0:87:79:40:73:38:8c:b2:4d:33:19:0f:14:37:32:b7:
61:7f:53:40:f1:b0:99:23:09:ab:7d:d6:63:8a:77:f9:f8:0b:
7a:7e:94:b0:af:1f:68:d2:88:af:2e:75:f1:71:84:17:4a:4b:
a9:fa:f7:a1:5b:40:22:6d:7a:27:ea:99:f3:6d:ba:31:c3:f9:
7b:6d:ef:0d:20:bb:9e:7d:6a:a6:e7:30:f8:eb:f2:d9:0f:69:
da:7e:2d:f7:2d:8e:c4:ba:d0:74:a2:9e:2a:23:0b:cf:9e:4d:
e9:5e:a0:a4:0d:6c:a5:12:6e:ae:72:53:22:fe:89:61:91:38:
32:0f:9a:da:55:ec:82:ba:a1:a8:3f:62:d9:1e:fa:a2:e4:a4:
c7:f6:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:31:10 2025 by rpki-client