Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p73WH2oWXKEe7fUhB1F4_ZdSQt8.roa
File: p73WH2oWXKEe7fUhB1F4_ZdSQt8.roa (raw, json)
Hash identifier: lvtllWGPj8ZxHRsjVGw2yp2zZ3BYDLyn1wZSNfzlLmE=
Subject key identifier: A7:BD:D6:1F:6A:16:5C:A1:1E:ED:F5:21:07:51:78:FD:97:52:42:DF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019428251A9144C25305FF0A73E03D32B439
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p73WH2oWXKEe7fUhB1F4_ZdSQt8.roa
Signing time: Thu 02 Jan 2025 17:51:47 +0000
ROA not before: Thu 02 Jan 2025 17:51:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393521
IP address blocks: 212.192.209.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:1a:91:44:c2:53:05:ff:0a:73:e0:3d:32:b4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7bdd61f6a165ca11eedf521075178fd975242df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:84:1f:a2:e9:b4:2a:67:a6:94:9b:89:61:
64:f9:ab:4d:17:7c:61:73:bc:be:2b:96:f4:55:51:
0a:20:b5:fa:7c:21:14:e1:b6:df:f2:f2:85:12:1a:
84:65:e6:90:b9:5c:53:ab:d0:32:82:0b:2c:73:5e:
e5:98:39:a2:e9:e1:c4:c7:eb:2a:9d:71:bd:c1:19:
7b:72:0a:6f:8b:c0:4b:cd:0f:c8:5e:33:50:07:19:
f2:30:4e:a3:c2:0b:81:a0:91:56:e2:6c:9a:5c:16:
52:8a:c0:8d:5c:d0:6e:16:db:56:8a:11:8a:32:4f:
80:8b:fc:64:7a:8c:7d:49:03:4b:b6:11:8b:e4:2b:
d6:90:3d:a1:b1:a9:04:29:4c:d3:ba:5d:7e:19:bf:
49:e4:8b:06:f0:81:58:77:9c:ed:09:e0:18:7f:cd:
6c:34:13:f9:98:37:da:b5:c3:35:1c:7e:ba:c2:78:
2a:00:6f:ac:af:25:03:71:9d:1d:b2:fd:80:6b:dd:
c0:59:4e:b1:d5:18:c9:bf:78:8d:79:7e:c4:e4:fa:
c3:83:82:5e:9a:a2:25:f0:29:d4:59:dc:cd:88:1c:
92:05:66:ea:cb:ac:aa:c4:c0:0c:e9:a3:ea:ac:42:
65:a9:b9:3d:b6:90:74:2d:40:23:ea:e5:d8:1c:4b:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BD:D6:1F:6A:16:5C:A1:1E:ED:F5:21:07:51:78:FD:97:52:42:DF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p73WH2oWXKEe7fUhB1F4_ZdSQt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.209.0/24
Signature Algorithm: sha256WithRSAEncryption
05:12:71:17:db:bf:62:b9:25:fb:e5:27:51:6a:81:69:86:66:
25:63:f4:07:71:84:e9:56:0f:4c:00:b5:64:6b:d5:f0:96:3c:
68:76:59:8b:50:34:eb:65:19:9a:48:ee:42:be:32:3c:ea:d5:
53:8d:ec:e8:54:b6:37:fa:17:3f:e4:b5:a2:98:2c:75:2c:b4:
03:86:6d:34:2a:3f:63:95:61:43:6b:ff:dc:9b:24:b5:94:27:
a8:ef:36:4b:d9:a6:68:25:c4:08:aa:b4:81:85:d2:98:13:a3:
3a:fb:f3:b3:58:72:8d:25:75:28:2a:c0:d4:b6:3b:3d:4a:5d:
2d:59:9e:f1:ce:cf:bc:8a:f0:06:9c:c8:18:31:1a:98:a1:dc:
a5:63:24:6c:af:cc:72:a0:c2:9f:d0:8d:05:db:74:e2:c2:2a:
f4:b3:1b:b3:6f:7d:31:71:3c:4c:10:28:00:d6:bc:b1:4b:65:
4d:43:3d:a0:c4:d6:4d:22:11:ab:84:f4:f5:62:82:ab:5d:e5:
e4:03:17:0d:71:d4:65:12:e9:c9:40:ed:94:0c:d6:54:9d:c3:
15:bd:1b:47:3a:45:50:ba:22:94:ea:b1:63:43:67:f8:30:2e:
41:8d:c3:d2:72:30:d4:d6:1d:36:90:9c:d8:d2:a1:a5:30:73:
73:46:d7:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJRqRRMJTBf8Kc+A9MrQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwMTAyMTc1MTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2JkZDYxZjZhMTY1Y2ExMWVlZGY1MjEwNzUxNzhmZDk3NTI0MmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVKEH6LptCpnppSbiWFk+atNF3xh
c7y+K5b0VVEKILX6fCEU4bbf8vKFEhqEZeaQuVxTq9Ayggssc17lmDmi6eHEx+sq
nXG9wRl7cgpvi8BLzQ/IXjNQBxnyME6jwguBoJFW4myaXBZSisCNXNBuFttWihGK
Mk+Ai/xkeox9SQNLthGL5CvWkD2hsakEKUzTul1+Gb9J5IsG8IFYd5ztCeAYf81s
NBP5mDfatcM1HH66wngqAG+sryUDcZ0dsv2Aa93AWU6x1RjJv3iNeX7E5PrDg4Je
mqIl8CnUWdzNiBySBWbqy6yqxMAM6aPqrEJlqbk9tpB0LUAj6uXYHEtBCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKe91h9qFlyhHu31IQdReP2XUkLfMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvcDczV0gyb1dYS0VlN2ZVaEIxRjRfWmRTUXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MDRMA0G
CSqGSIb3DQEBCwUAA4IBAQAFEnEX279iuSX75SdRaoFphmYlY/QHcYTpVg9MALVk
a9XwljxodlmLUDTrZRmaSO5CvjI86tVTjezoVLY3+hc/5LWimCx1LLQDhm00Kj9j
lWFDa//cmyS1lCeo7zZL2aZoJcQIqrSBhdKYE6M6+/OzWHKNJXUoKsDUtjs9Sl0t
WZ7xzs+8ivAGnMgYMRqYodylYyRsr8xyoMKf0I0F23Tiwir0sxuzb30xcTxMECgA
1ryxS2VNQz2gxNZNIhGrhPT1YoKrXeXkAxcNcdRlEunJQO2UDNZUncMVvRtHOkVQ
uiKU6rFjQ2f4MC5BjcPScjDU1h02kJzY0qGlMHNzRtfk
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:45 2025 by rpki-client