Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sYDkiwtTDOTx9ABbyWZ5kb8PagY.roa
File: sYDkiwtTDOTx9ABbyWZ5kb8PagY.roa (raw, json)
Hash identifier: KO5cf/xJikiRMA5UJm8W3fALhR5BAS/bJc4XFK1Kq+8=
Subject key identifier: B1:80:E4:8B:0B:53:0C:E4:F1:F4:00:5B:C9:66:79:91:BF:0F:6A:06
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019407F142C6B0F507FE3FADB096CA6D7659
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sYDkiwtTDOTx9ABbyWZ5kb8PagY.roa
Signing time: Fri 27 Dec 2024 11:47:19 +0000
ROA not before: Fri 27 Dec 2024 11:47:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 62.76.234.0/24 maxlen: 24
62.76.239.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
192.124.176.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.124.22.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.87.58.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.67.0/24 maxlen: 24
195.133.92.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.221.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:f1:42:c6:b0:f5:07:fe:3f:ad:b0:96:ca:6d:76:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 27 11:47:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b180e48b0b530ce4f1f4005bc9667991bf0f6a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:6e:d8:52:32:b9:34:8a:34:f7:0b:59:9f:
1c:ab:87:6d:53:be:7a:46:ab:09:17:11:ad:6b:1b:
94:bd:31:a4:0e:12:5d:56:9a:54:10:e8:da:29:bd:
5b:c9:a4:f2:f9:ba:f9:16:7c:eb:19:4c:31:90:4f:
80:ac:d2:11:71:50:e0:92:a9:e7:15:3d:5a:a6:e9:
ef:4c:2c:80:3b:dd:55:2b:04:21:14:91:2b:9c:0a:
a0:87:5e:43:69:60:67:c2:ab:48:dd:e3:3b:7c:5c:
a2:0e:55:01:ac:44:38:e6:7e:cd:a6:26:cc:68:58:
ef:c5:de:ba:0b:ea:3f:f8:bd:3b:f6:5a:94:c7:7b:
6a:b2:83:9f:7e:23:00:13:82:0e:87:58:a4:7f:89:
4c:c0:6a:3b:9c:6f:ff:bb:3e:6f:4d:3f:57:d1:e3:
a7:47:65:c8:39:67:c6:2d:e3:ae:31:bf:81:d4:fa:
9a:c0:70:77:e5:0f:21:cd:79:25:2c:41:14:c9:f0:
d5:82:a8:af:cc:7e:4a:a0:ef:4f:ff:65:ac:9f:fa:
cd:8a:1f:c6:e6:e8:42:67:eb:40:99:c5:9c:00:2d:
1d:65:10:fb:2b:45:c2:36:ac:6d:3d:6f:c6:f9:14:
6c:0c:c4:5a:21:a0:2e:27:68:12:33:ad:98:1a:c2:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:80:E4:8B:0B:53:0C:E4:F1:F4:00:5B:C9:66:79:91:BF:0F:6A:06
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sYDkiwtTDOTx9ABbyWZ5kb8PagY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.234.0/24
62.76.239.0/24
185.72.8.0/24
192.124.176.0/24
192.124.209.0/24
193.124.22.0/24
193.124.41.0/24
193.124.46.0/24
193.124.49.0/24
194.58.34.0/24
194.58.38.0-194.58.40.255
194.58.44.0-194.58.46.255
194.58.59.0/24
194.58.66.0/24
194.58.68.0/24
194.87.10.0/24
194.87.17.0-194.87.18.255
194.87.23.0/24
194.87.30.0/24
194.87.39.0/24
194.87.47.0/24
194.87.58.0/24
194.87.82.0/24
194.87.105.0/24
194.87.108.0/24
194.87.178.0/24
194.87.198.0/24
194.87.227.0/24
194.87.230.0/24
194.87.240.0/24
194.87.245.0/24
195.133.67.0/24
195.133.92.0/24
212.192.215.0/24
212.192.221.0/24
212.192.223.0/24
212.193.1.0-212.193.2.255
212.193.6.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:48:aa:4d:04:78:a2:4b:e6:13:d4:c7:31:42:ee:9e:26:e0:
d0:be:4c:88:ca:ae:d9:de:e1:56:7f:4c:a2:ec:b6:4f:56:76:
5c:0b:d0:e3:51:c8:7e:df:34:84:5a:9a:38:dd:e1:29:c1:22:
d5:ec:f4:4c:b3:4b:d5:b5:a2:3b:8c:2c:6e:cc:84:54:bc:0f:
2d:84:b2:08:f3:ea:0e:e8:89:88:0c:fb:d3:68:dd:c1:72:90:
ca:01:7e:28:ff:54:e3:a1:a7:57:66:1a:ca:bc:b8:be:b9:fe:
6d:25:d7:e7:da:4c:bb:7b:a6:c3:55:77:a4:c8:c8:df:ee:a0:
ac:99:d9:98:bc:d6:58:ec:99:c0:db:ae:9f:4d:9a:39:a2:05:
4e:c3:0f:a0:fb:4b:a2:3e:54:6a:d5:cf:5d:84:82:ce:db:71:
2b:1f:44:85:ba:79:71:fa:ff:e7:84:17:02:c2:17:9c:0e:42:
d9:20:18:0f:e1:a8:c1:5c:83:01:fb:80:04:16:65:a2:6d:a0:
33:8f:a4:95:d6:d6:de:4b:d6:37:00:71:cc:ed:0e:b7:b0:f1:
bc:3e:c8:76:97:d8:d1:d5:5e:6b:5b:c6:47:c8:e7:e6:9c:d6:
f9:92:98:80:5e:4d:51:97:36:5e:65:ec:1b:2c:fd:35:d5:71:
73:8f:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:27:10 2025 by rpki-client