Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cTve2haWGDZwLLiXOqp1jSkW0NA.roa
File: cTve2haWGDZwLLiXOqp1jSkW0NA.roa (raw, json)
Hash identifier: gEJ/DtYuJfmd5UM59SgeD7/AhZsE+IEvP9qEpwNwT4A=
Subject key identifier: 71:3B:DE:DA:16:96:18:36:70:2C:B8:97:3A:AA:75:8D:29:16:D0:D0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824FBA3D3614668CD57BB4A5D2DE220
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cTve2haWGDZwLLiXOqp1jSkW0NA.roa
Signing time: Thu 02 Jan 2025 17:51:39 +0000
ROA not before: Thu 02 Jan 2025 17:51:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200239
IP address blocks: 193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:fb:a3:d3:61:46:68:cd:57:bb:4a:5d:2d:e2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=713bdeda16961836702cb8973aaa758d2916d0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:a2:39:60:04:8e:79:8c:de:7b:ff:05:1f:
1c:ea:b2:c7:28:e9:83:d6:84:8d:f4:52:87:d0:b9:
12:9d:b1:0c:88:be:3e:c8:fa:c9:d0:79:ea:60:06:
28:19:aa:1d:bc:0e:6d:bd:39:b5:02:1e:98:8f:87:
1b:09:2e:64:8e:bf:6b:cb:ec:33:c1:ec:7b:ee:93:
46:d1:4e:14:df:f2:13:eb:a5:62:8f:32:80:3d:c0:
9f:23:ce:4e:fd:d4:e2:65:e8:e3:27:a3:c7:b2:74:
2b:41:c3:84:15:72:59:f4:0d:ca:35:aa:e3:05:a8:
a0:ee:18:79:c3:5b:42:b9:7a:df:af:de:9a:3b:ae:
a2:e0:d7:ca:01:dc:19:d3:90:ae:cf:63:70:e6:ee:
f0:c4:6d:a6:f0:2a:fa:92:cf:30:00:ef:11:28:c1:
10:18:6b:48:eb:45:e1:a0:8e:25:e8:66:e4:35:02:
52:4f:1e:60:13:2b:40:14:53:5f:e1:63:4c:5b:09:
63:21:2e:92:15:56:f4:8f:02:d0:18:d9:36:d3:2b:
30:fb:35:bd:a8:6b:4b:16:0e:e2:49:37:75:65:dd:
59:50:2e:f9:1c:65:c8:db:e9:61:ca:54:a3:7f:6f:
a6:fb:02:9f:35:ec:4e:3d:04:2d:aa:83:be:be:f9:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3B:DE:DA:16:96:18:36:70:2C:B8:97:3A:AA:75:8D:29:16:D0:D0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cTve2haWGDZwLLiXOqp1jSkW0NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.80.0/24
193.124.90.0/24
194.87.59.0/24
194.87.64.0/24
194.87.75.0/24
194.87.91.0/24
195.58.63.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ea:f8:b1:13:45:38:c3:cd:c2:c3:5c:26:84:80:66:98:6b:
64:df:3e:00:39:56:fe:7a:77:c3:63:01:91:27:57:93:07:02:
0f:8f:e4:49:f8:c3:56:60:2d:88:39:2d:a7:27:e5:79:d4:bd:
95:51:6b:79:9f:17:15:7f:7e:7d:03:77:b9:22:19:2a:ce:d6:
36:4a:6b:1b:0a:cd:82:83:39:7a:7e:b2:19:c7:ee:b9:42:81:
a1:5b:a2:89:b0:8f:6a:9e:5c:9e:6d:c1:60:02:c6:5f:a5:32:
44:6b:7d:55:bc:30:1d:e4:b6:c9:0a:41:ef:48:7b:9b:01:73:
32:08:50:3b:00:f2:30:7d:26:3f:5a:4f:9e:53:52:8f:58:e7:
3b:f6:c1:58:f5:f7:01:71:fc:7f:51:b6:4d:e4:5f:6a:69:6f:
b3:97:8a:7c:15:72:fa:16:18:bd:21:3c:f4:df:66:c1:48:26:
40:f7:e7:7b:42:08:b5:33:eb:bb:a2:92:8f:68:01:19:10:17:
20:9e:49:bb:d8:f3:d1:01:e0:80:b1:eb:d0:27:18:f0:32:1e:
c4:1b:cb:76:3f:c5:a4:ae:77:1e:02:6e:f0:7c:89:aa:a1:1d:
ad:60:48:47:aa:45:9c:c7:99:e0:72:70:d3:ac:11:2d:9f:50:
0c:f9:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:04:45 2025 by rpki-client