Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kjs5MrC63asEtXqRtIG5yzDo_g8.roa
File: kjs5MrC63asEtXqRtIG5yzDo_g8.roa (raw, json)
Hash identifier: VXjjHBB6dyI4QgXnFB7hvMaIsVoFweStlBGgK/PhccA=
Subject key identifier: 92:3B:39:32:B0:BA:DD:AB:04:B5:7A:91:B4:81:B9:CB:30:E8:FE:0F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193A26E5F0F5F7D9FDBE9E72DC2E127A830
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kjs5MrC63asEtXqRtIG5yzDo_g8.roa
Signing time: Sat 07 Dec 2024 18:42:42 +0000
ROA not before: Sat 07 Dec 2024 18:42:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210974
IP address blocks: 212.192.3.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
212.193.8.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a2:6e:5f:0f:5f:7d:9f:db:e9:e7:2d:c2:e1:27:a8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 7 18:42:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=923b3932b0baddab04b57a91b481b9cb30e8fe0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:cc:a5:14:4a:a3:98:91:df:c5:83:21:42:
38:b4:79:1f:0a:90:d6:ed:35:8b:e9:a9:e2:c7:5e:
4e:20:5c:8d:93:f3:bc:e3:59:0e:7c:27:de:a5:b8:
d6:05:bd:7f:a4:ec:53:d6:d1:4c:f5:d2:bb:e3:2a:
56:3d:75:5e:bb:f2:2e:8b:e1:08:ec:51:97:71:a0:
44:92:a8:19:64:87:c5:ae:88:db:49:0a:c5:49:dc:
37:ee:30:0d:81:c0:24:98:f7:2b:dd:a1:dc:c6:69:
1b:ea:25:e8:1f:14:3d:43:f5:8e:dd:0c:ff:2a:c9:
c5:50:09:e3:da:77:47:65:1b:84:dc:16:a3:8c:e0:
10:fc:75:f7:72:89:6c:ae:f0:e4:0d:9b:35:32:cc:
cc:29:15:62:ac:a4:7f:9e:be:47:24:f5:34:86:f2:
1c:55:26:b6:70:2a:3c:47:17:14:d8:95:b6:02:46:
d0:d4:10:79:ff:e9:89:7f:23:c1:d1:95:35:9b:f1:
ca:9a:20:fc:35:fc:ee:7d:9b:b3:78:3e:1d:89:53:
5f:40:ab:d2:51:45:98:36:de:c0:e1:30:32:08:2f:
f9:da:f8:6e:01:86:a1:1b:47:0e:30:7d:41:7a:d0:
1f:8d:ec:ad:7c:ad:c4:8e:f6:93:6a:d5:41:9f:10:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3B:39:32:B0:BA:DD:AB:04:B5:7A:91:B4:81:B9:CB:30:E8:FE:0F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kjs5MrC63asEtXqRtIG5yzDo_g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.3.0/24
212.192.11.0/24
212.193.8.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5c:64:27:48:64:db:31:69:bd:3a:d4:a5:ae:1d:da:68:79:
0a:62:5d:6a:9c:a1:78:8f:b3:b3:2b:c9:0b:3a:4f:f9:00:81:
b2:83:2a:2e:bf:d4:dc:b1:65:40:78:f5:fb:30:33:ba:50:72:
8a:0a:6e:dd:ae:02:3f:0b:9c:36:e2:f7:64:80:bd:e9:5b:f4:
44:18:26:b3:17:e0:a5:02:94:6d:c1:da:fc:07:75:8e:9c:2d:
25:93:00:64:d8:58:71:03:f3:f6:ee:82:cb:0d:d9:12:e1:e2:
ee:b3:c6:33:f0:de:08:eb:27:02:af:fa:b5:f0:82:b5:c3:81:
23:90:3c:a7:87:88:8d:5b:bd:07:45:2e:13:a7:09:b3:c6:dc:
93:2e:82:33:46:e6:48:a5:05:49:b0:5d:ff:41:84:33:3b:6d:
df:23:94:ec:7c:19:79:c7:b4:24:e0:b8:df:4d:4c:3f:6e:ec:
d3:a6:79:31:16:4a:94:95:3b:43:a8:c0:e8:11:01:5e:45:c9:
f2:ca:d5:a8:15:ed:2d:c7:b8:15:c8:9d:24:ae:7b:e0:27:d8:
f0:0b:43:45:51:0a:78:ea:af:a9:47:00:cd:87:d3:6c:e9:48:
1c:c9:07:6a:65:b0:bc:79:0c:6c:0d:c5:91:94:b7:9f:57:12:
86:08:06:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:40:49 2025 by rpki-client