Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cKu7v9ZaBF6jG0378pcgrwYrROw.roa
File: cKu7v9ZaBF6jG0378pcgrwYrROw.roa (raw, json)
Hash identifier: tlzgmDrdvYwjNXxyezQ4nh6NtWew/yb6Lk8wJQATsTs=
Subject key identifier: 70:AB:BB:BF:D6:5A:04:5E:A3:1B:4D:FB:F2:97:20:AF:06:2B:44:EC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193C63A7FA02EAAEC2C30101577122FC321
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cKu7v9ZaBF6jG0378pcgrwYrROw.roa
Signing time: Sat 14 Dec 2024 17:32:22 +0000
ROA not before: Sat 14 Dec 2024 17:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.15.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
193.124.224.0/23 maxlen: 23
194.58.155.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.37.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:3a:7f:a0:2e:aa:ec:2c:30:10:15:77:12:2f:c3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 14 17:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70abbbbfd65a045ea31b4dfbf29720af062b44ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:78:46:3c:3e:a7:0c:d3:ff:2f:55:34:37:
37:5d:bb:aa:c2:59:77:ad:08:7b:b5:13:53:b8:e4:
d6:2f:dd:2c:47:5c:c4:d9:50:10:05:4a:08:4c:ea:
b0:50:4e:a6:68:9a:d9:13:93:43:4c:94:5b:20:8a:
d8:ca:45:43:6e:8c:f0:77:d3:2e:dd:cb:4c:2d:f4:
a6:15:e1:9e:eb:d5:c1:06:96:bb:a9:55:76:37:1a:
46:b8:a8:4c:f4:a5:e1:c6:fa:5f:74:bc:d1:3e:12:
35:5d:33:49:65:d1:43:20:95:47:5b:2e:f0:c4:53:
40:2c:95:f5:ca:13:d8:09:34:9c:d0:7f:d7:01:b2:
2b:7f:41:ec:b9:0a:fd:9a:e7:d1:7b:4a:fc:f3:74:
12:8c:3b:4b:c1:5a:52:eb:99:17:6b:a6:74:95:95:
0c:6a:7a:b1:ea:07:b3:4a:16:ae:97:60:61:5f:6f:
e6:7f:37:9a:67:89:5f:9b:88:ab:55:e3:ec:52:9f:
dc:0d:9f:80:25:fe:62:a7:9a:20:b2:a9:24:0f:59:
21:50:12:17:c6:23:75:c7:92:f8:f9:ed:f5:d6:56:
f0:76:06:06:74:ba:a6:6d:24:06:82:a0:d2:52:b2:
e3:51:ea:83:75:bc:79:66:8b:ce:dc:12:41:a9:36:
eb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AB:BB:BF:D6:5A:04:5E:A3:1B:4D:FB:F2:97:20:AF:06:2B:44:EC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cKu7v9ZaBF6jG0378pcgrwYrROw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.15.0/24
193.124.89.0/24
193.124.224.0/23
194.58.155.0/24
194.85.251.0/24
194.87.108.0/24
194.87.169.0/24
194.87.224.0/24
194.135.33.0/24
195.133.24.0/23
195.133.37.0/24
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
3e:01:14:20:98:4f:8b:25:32:51:9f:4b:c6:8b:72:42:94:45:
c0:70:fc:a6:87:c6:b1:de:b6:1a:ef:c8:ce:19:57:ac:ff:97:
53:6c:29:9a:b9:90:a6:25:c5:38:69:0b:b9:f9:1b:5b:5e:6d:
79:0d:d8:5d:4e:43:d7:6a:5d:2b:be:0a:8a:2a:4b:ad:d4:07:
99:83:b7:37:0d:f1:ba:10:64:e9:11:ef:ec:75:e1:f0:8c:34:
7a:9a:fd:63:d5:d3:5d:7b:3f:5e:64:21:b1:f4:bb:29:09:31:
3a:b3:03:db:54:06:f0:cb:94:30:78:3e:e4:7c:4e:68:7d:cf:
24:8a:26:2c:6e:fa:ae:56:eb:34:ff:bb:49:a6:68:e8:f7:a0:
f4:b6:5f:46:2f:e6:66:8f:ab:8a:00:1e:41:05:9f:b1:d2:21:
52:73:63:0f:e0:79:f7:b0:de:75:75:88:ed:2c:07:1d:2d:b5:
04:70:b5:ec:ff:8e:9a:84:3b:0b:06:ef:19:17:5d:56:37:59:
76:a3:7e:67:f1:f6:93:06:d6:1f:5c:66:6b:51:94:12:01:68:
d1:81:6a:a8:89:92:4c:81:52:b7:87:a1:90:58:9e:8f:da:72:
42:b6:d8:de:7c:30:7b:c3:5e:d8:d9:dd:2f:21:ce:3e:a1:bc:
61:94:9e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:36:31 2025 by rpki-client