Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xe1z0mSl0kBqF0M1GEg_HPVqLW0.roa
File: Xe1z0mSl0kBqF0M1GEg_HPVqLW0.roa (raw, json)
Hash identifier: G9k4K2RrbG/bPX+VtNmwY3A1oMgUwq3X9LvI6Yup/xg=
Subject key identifier: 5D:ED:73:D2:64:A5:D2:40:6A:17:43:35:18:48:3F:1C:F5:6A:2D:6D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187573596C3F02DA706F7854E49DF4986C4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xe1z0mSl0kBqF0M1GEg_HPVqLW0.roa
Signing time: Thu 06 Apr 2023 15:35:42 +0000
ROA not before: Thu 06 Apr 2023 15:35:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 193.124.254.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.133.26.0/23 maxlen: 24
192.124.176.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
195.133.56.0/22 maxlen: 22
195.133.52.0/23 maxlen: 23
195.133.59.0/24 maxlen: 24
194.87.118.0/23 maxlen: 24
195.133.10.0/23 maxlen: 23
195.133.6.0/23 maxlen: 23
194.87.40.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:35:96:c3:f0:2d:a7:06:f7:85:4e:49:df:49:86:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 15:35:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ded73d264a5d2406a17433518483f1cf56a2d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:f0:fe:44:fb:2c:af:19:86:ea:c4:6f:a8:
a3:ce:b8:e3:05:15:81:96:b3:1f:e4:dd:00:03:cd:
83:f3:6c:c6:02:52:b7:3e:11:be:c1:f8:55:68:97:
58:d8:ba:9f:c8:33:d3:e9:a0:e7:59:07:c3:d2:ac:
79:5f:1f:67:8b:cb:8a:1c:74:ad:22:77:47:20:4e:
19:ca:d4:b0:f4:73:9c:c7:99:66:52:19:c6:d9:37:
8d:b0:bf:8f:e9:6c:54:0a:c6:24:b4:4d:48:c4:83:
06:b7:8f:4f:a7:04:66:98:20:1e:52:b9:6f:6e:ff:
5a:9a:ec:6f:79:e0:15:f1:d7:15:d3:82:53:fb:a4:
81:b2:1e:b1:fd:d3:ac:35:11:ec:0e:f9:af:f5:20:
bb:57:8f:02:ff:e3:78:b4:06:14:be:ca:a6:9b:86:
26:9a:64:16:c8:8f:fa:86:ce:8b:c4:6b:28:34:36:
7f:a7:7c:3f:30:59:d7:aa:1d:a8:a5:05:b6:fb:f9:
31:f0:46:9a:25:45:cf:ce:8f:ab:b0:e2:ea:95:0a:
7d:8f:a3:b7:2f:05:77:38:a1:10:ab:43:52:d1:b9:
0d:4f:0c:82:97:8c:f1:d2:65:60:c1:56:8d:91:59:
27:b0:7d:7b:c8:d8:83:ef:a6:a9:1a:b0:0a:95:88:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:ED:73:D2:64:A5:D2:40:6A:17:43:35:18:48:3F:1C:F5:6A:2D:6D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xe1z0mSl0kBqF0M1GEg_HPVqLW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
192.124.176.0/24
193.124.254.0/24
194.58.68.0/24
194.87.40.0/24
194.87.118.0/23
194.135.32.0/24
195.133.6.0/23
195.133.10.0/23
195.133.26.0/23
195.133.52.0/23
195.133.56.0/22
212.192.13.0/24
Signature Algorithm: sha256WithRSAEncryption
52:55:04:5f:54:df:3b:f6:58:e5:71:6e:df:8d:6c:98:9f:d1:
6e:8d:93:00:a6:db:49:f2:b1:a4:41:86:a0:7a:4d:a9:7d:7c:
af:17:c9:d0:59:2d:62:60:81:c6:1f:8d:96:78:84:57:78:19:
81:a4:2a:3e:6e:16:47:9e:66:c2:e5:df:0e:eb:5b:21:1f:85:
ab:1d:d3:3c:bb:f3:64:0d:b2:64:87:50:7b:ba:2b:6f:1a:c6:
6f:b4:27:c6:5a:a7:b5:ad:ed:d4:7d:2c:85:c0:9d:9b:14:7b:
a2:bc:f2:68:0d:27:ce:b8:b7:49:8e:23:23:da:bf:b6:eb:e0:
61:f6:b3:01:a7:57:6d:7b:52:7e:24:69:cc:7d:78:aa:b9:15:
6a:28:3c:c2:f5:64:e5:16:68:1a:3e:50:87:f4:fd:62:87:21:
45:75:e3:0d:41:d1:59:ce:3d:5d:33:ac:84:cb:7e:66:27:ef:
fc:2f:b0:ef:38:62:d2:bc:b3:22:6e:00:0f:26:0d:81:cb:9d:
2e:c6:f2:64:5b:1b:52:00:45:50:0d:97:71:90:47:f8:de:04:
d4:46:07:85:48:89:49:86:b2:be:69:76:83:05:05:0f:b8:a0:
c2:bf:60:ab:62:5f:66:fa:6a:c5:8d:f7:bd:48:da:f5:97:80:
61:f6:36:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:47:36 2025 by rpki-client