Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oJCSewGAWp4ZWVqzj-ogIJs5fkc.roa
File: oJCSewGAWp4ZWVqzj-ogIJs5fkc.roa (raw, json)
Hash identifier: BeHkA7uSOR4mRkguIST7HwRsmCuUMww7DktbELBr9WI=
Subject key identifier: A0:90:92:7B:01:80:5A:9E:19:59:5A:B3:8F:EA:20:20:9B:39:7E:47
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194186B17C05BA3C244F925118C40922867
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oJCSewGAWp4ZWVqzj-ogIJs5fkc.roa
Signing time: Mon 30 Dec 2024 16:34:19 +0000
ROA not before: Mon 30 Dec 2024 16:34:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.224.0/23 maxlen: 23
194.58.155.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.214.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:6b:17:c0:5b:a3:c2:44:f9:25:11:8c:40:92:28:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 30 16:34:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a090927b01805a9e19595ab38fea20209b397e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:fd:7b:57:4c:92:b5:67:37:24:02:70:91:
56:f2:16:a8:20:f3:46:ba:fc:6f:b3:09:7a:50:22:
50:a3:db:f6:80:3b:4c:aa:0c:cd:2e:71:3b:54:59:
1e:32:84:93:a7:1e:b7:3e:c3:4e:7e:7e:64:e9:17:
7e:61:29:41:fc:ed:43:9a:04:c5:d8:53:67:dd:78:
26:d4:50:18:0b:30:d6:fb:31:f2:9f:f1:44:b3:c5:
fc:4c:da:88:16:b3:cf:ae:62:bc:cc:3a:9e:f9:ce:
df:42:a4:a5:12:50:d6:5d:a2:21:cc:03:d8:a8:39:
42:8d:04:bb:00:07:d9:74:65:1f:e9:f1:81:ad:6e:
c0:5b:26:2a:b4:81:ca:c7:96:3f:06:86:32:11:68:
34:90:b4:6a:94:15:8d:d1:20:b1:c3:d8:8b:fb:61:
5c:94:b4:2c:d3:53:84:9c:92:ee:17:cf:8a:c4:83:
93:7a:0d:f7:65:55:5d:ee:a0:34:a2:af:c2:7b:cd:
b7:07:c0:82:a7:68:32:db:0c:3e:34:8e:6c:1e:7d:
40:0e:71:1b:b8:06:dd:b3:3d:76:a5:af:8d:3b:d3:
2f:94:ea:b3:39:14:1e:21:33:7b:67:fd:e2:fd:db:
ad:3a:f7:db:c7:cb:26:73:34:0c:77:c0:4c:f9:bf:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:90:92:7B:01:80:5A:9E:19:59:5A:B3:8F:EA:20:20:9B:39:7E:47
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oJCSewGAWp4ZWVqzj-ogIJs5fkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.224.0/23
194.58.155.0/24
194.85.251.0/24
194.87.169.0/24
194.87.224.0/24
194.135.33.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.192.214.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
46:f1:a9:9e:bb:b4:1c:e7:c4:8c:16:e0:30:32:c7:9e:bb:13:
94:b0:eb:11:13:de:b0:96:89:cb:eb:02:92:06:6c:e2:38:3f:
74:48:8e:cb:c0:99:8c:ee:ac:28:26:4a:e2:ab:4e:f6:96:bd:
c0:9f:c6:56:58:10:c2:56:06:57:ef:28:a0:f4:b1:be:13:15:
b1:59:ea:62:75:fa:41:46:86:11:aa:95:12:b6:c8:8f:64:c5:
50:e8:57:1b:19:11:12:2d:ae:2e:d8:a6:a3:e0:71:55:7f:11:
81:d2:43:83:ed:da:41:4f:19:3d:00:0b:cd:ec:37:0a:cc:7d:
26:ec:12:27:1d:b6:fd:85:72:bc:20:c1:f3:62:2b:74:7a:30:
ef:ad:34:e0:c6:ae:eb:34:ed:4a:a4:07:b6:33:fe:3c:4d:82:
5e:b9:11:16:0e:07:71:5b:08:3a:14:da:c2:21:66:ac:4d:8a:
6d:25:ad:ce:7c:80:37:0f:bd:75:5a:1e:69:26:fe:56:e5:aa:
82:6b:99:89:d7:db:2c:1e:52:2c:6a:8d:d0:bd:0a:bb:7f:ac:
04:d7:af:c0:03:a6:36:ab:01:90:b5:e4:9a:ee:32:92:e8:e5:
92:a4:3a:61:39:5e:f0:11:b8:0a:47:b8:ec:85:01:e3:3b:fd:
6a:45:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:39:14 2025 by rpki-client