Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kwFbaoU8LbZLGKzoMi4JAvH9Ub0.roa
File: kwFbaoU8LbZLGKzoMi4JAvH9Ub0.roa (raw, json)
Hash identifier: hmKUhEkyQQv8gkkCqsfwfMh1yKKM38NjRsczOcN1XBI=
Subject key identifier: 93:01:5B:6A:85:3C:2D:B6:4B:18:AC:E8:32:2E:09:02:F1:FD:51:BD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188E6D67BB712D66555BD8376CB2CF6EB56
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kwFbaoU8LbZLGKzoMi4JAvH9Ub0.roa
Signing time: Fri 23 Jun 2023 05:59:56 +0000
ROA not before: Fri 23 Jun 2023 05:59:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 195.133.18.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.85.250.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.245.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e6:d6:7b:b7:12:d6:65:55:bd:83:76:cb:2c:f6:eb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 23 05:59:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93015b6a853c2db64b18ace8322e0902f1fd51bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:93:47:a7:13:45:1c:ca:0f:4b:cd:f6:4a:
02:0d:c2:c0:bb:ef:fd:cc:c7:79:7c:28:d7:94:9e:
39:0f:66:23:cb:cd:32:c9:1e:ea:12:63:fd:fc:d0:
f7:99:54:74:d0:a1:76:69:8f:39:ca:54:12:db:d5:
95:c1:0e:43:1a:83:7e:90:8a:fc:6b:6c:02:02:13:
06:72:2e:b3:cb:47:9c:ad:b5:32:a5:2c:79:81:c4:
ef:ec:da:e7:f3:9b:6c:8f:6b:66:4b:d9:4d:31:81:
fc:ec:5f:b4:d9:0d:b0:40:fe:4d:59:bb:91:fe:77:
69:69:70:3c:99:fe:d1:cc:13:ed:e1:ed:55:47:6e:
02:06:77:84:bf:85:a4:36:6d:18:d9:98:ad:81:6f:
8e:c4:98:ca:75:fb:f0:91:b3:a0:1a:d3:28:3a:5c:
fe:5c:6b:16:d1:a2:b7:50:4f:f0:ee:43:27:5b:98:
54:ae:e0:10:25:56:bf:83:b8:67:6a:43:2b:ec:4b:
07:08:ee:a4:4c:92:53:89:9a:ee:73:2c:8c:4f:ec:
5b:cd:c5:ff:d3:26:6f:64:68:42:af:1a:ed:e2:63:
fa:ab:0c:08:51:f6:e5:0b:32:d3:b7:83:f1:d5:e6:
48:06:fa:09:74:08:c6:74:67:38:1f:98:68:6e:8b:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:01:5B:6A:85:3C:2D:B6:4B:18:AC:E8:32:2E:09:02:F1:FD:51:BD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kwFbaoU8LbZLGKzoMi4JAvH9Ub0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.46.0/24
194.85.249.0-194.85.250.255
195.133.18.0/24
195.133.39.0/24
212.192.245.0-212.192.246.255
Signature Algorithm: sha256WithRSAEncryption
05:bb:f2:f6:94:ba:0a:22:dc:71:de:80:d8:d9:21:ab:9a:0d:
5d:47:5a:73:91:62:51:94:24:25:28:91:fb:a2:23:d0:da:8e:
71:79:b8:14:b0:a5:a4:d1:2b:00:c4:50:94:53:4d:a3:aa:29:
60:8c:8a:31:6a:47:25:c8:5b:b6:a6:94:54:ff:d4:98:b2:33:
3a:d6:93:1f:36:10:8e:35:e4:fc:a3:95:cb:63:35:37:e2:54:
9f:d8:81:14:f2:a1:2d:82:14:62:03:69:22:dc:fe:51:22:a9:
a2:8c:39:43:eb:98:da:b5:76:6d:c8:27:5c:cf:0d:4f:5f:b2:
57:ae:bf:da:05:2c:f3:11:97:4a:b6:d3:7d:13:a9:42:85:9c:
6a:e3:fa:9e:a6:b9:05:84:94:2f:39:34:f1:6e:18:35:84:08:
fa:96:58:2e:63:89:e2:a7:9b:40:81:18:38:9a:04:71:87:0f:
fa:1f:ba:99:16:78:87:f4:0a:6d:4f:61:d5:77:8a:ef:dd:a1:
c0:a1:c6:03:b6:56:7c:54:c9:4e:c1:70:a9:71:3a:79:81:71:
8f:a0:b3:4b:34:1b:9a:0a:47:3d:bb:98:76:68:60:18:ee:c5:
53:b0:15:73:36:5f:4f:5f:c7:d7:41:84:41:54:f0:82:7d:a7:
d1:0e:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:39:59 2025 by rpki-client