Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xB1VufnhWppvntraRobXLfU56Ag.roa
File: xB1VufnhWppvntraRobXLfU56Ag.roa (raw, json)
Hash identifier: HMzZlrByA1MxGdd3lrjehomLRkguRTk97w4Tea1qUKA=
Subject key identifier: C4:1D:55:B9:F9:E1:5A:9A:6F:9E:DA:DA:46:86:D7:2D:F5:39:E8:08
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BD29D57E1CBF1A5FE7D4BBD82C2CAE127
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xB1VufnhWppvntraRobXLfU56Ag.roa
Signing time: Wed 15 Nov 2023 10:53:28 +0000
ROA not before: Wed 15 Nov 2023 10:53:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 194.87.201.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.150.0/24 maxlen: 24
195.133.24.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
194.87.89.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:9d:57:e1:cb:f1:a5:fe:7d:4b:bd:82:c2:ca:e1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 15 10:53:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c41d55b9f9e15a9a6f9edada4686d72df539e808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:61:d0:c7:10:dc:1b:24:c3:fe:7f:2d:cf:3b:
93:9b:a2:d0:82:47:f2:da:e9:ec:6d:41:dd:f2:c7:
63:06:c1:59:a2:d4:6b:c0:3f:0e:39:07:c9:87:ba:
4a:86:35:ff:41:2e:d6:af:a3:f8:94:09:b7:53:5c:
24:b2:eb:cb:fd:4d:99:6d:6f:ee:82:79:ad:f0:87:
76:57:11:52:36:03:5b:1c:95:ba:1d:ef:d7:e6:b7:
ce:a1:59:29:0f:fe:c7:de:3f:e9:c1:e8:18:f1:22:
3a:46:cd:2d:24:57:77:6f:5d:cd:d4:ab:38:c1:25:
d9:42:a9:6c:f8:de:63:cd:10:d9:12:ea:9f:b4:b4:
28:a1:b8:a1:cb:9b:49:cf:f0:b0:70:ac:21:54:da:
2b:1a:db:c3:c1:6f:d3:67:9f:c5:08:84:a9:70:30:
c0:50:ad:be:fc:8e:c3:ab:20:87:d5:63:b3:23:e2:
56:f0:c2:ae:bc:fa:92:55:19:09:df:40:4e:f5:1b:
82:db:a0:2b:6f:24:36:32:85:23:b9:c4:fa:ce:7e:
63:c3:b3:9f:80:05:55:4a:7a:79:56:90:e4:e4:b2:
84:b1:36:09:6a:61:a0:8f:47:b1:23:a2:80:db:bc:
dd:df:42:81:e0:70:e3:9b:d8:63:fa:25:72:08:ae:
3b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1D:55:B9:F9:E1:5A:9A:6F:9E:DA:DA:46:86:D7:2D:F5:39:E8:08
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xB1VufnhWppvntraRobXLfU56Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.95.0/24
194.87.89.0/24
194.87.128.0/24
194.87.150.0/24
194.87.185.0/24
194.87.201.0/24
195.58.60.0/24
195.133.24.0/24
195.133.72.0/24
195.133.192.0/24
Signature Algorithm: sha256WithRSAEncryption
47:13:08:01:8a:14:ec:3f:3b:ca:eb:7e:e7:a4:05:68:86:9c:
69:bc:5f:57:3e:90:98:74:ac:a7:aa:20:0f:76:58:90:c9:f4:
5f:18:7c:52:62:0c:30:84:3f:ee:f9:e2:ad:40:72:d1:87:dc:
e1:86:ae:d2:e4:9d:a2:4e:0a:d4:ae:14:25:3d:c4:aa:74:d7:
c1:35:a1:43:f0:4a:6b:0c:38:01:13:d3:ed:f1:74:30:88:c5:
18:9c:ad:ff:ff:27:dc:72:66:10:c6:b0:a8:79:3a:62:8b:fe:
d6:35:15:b2:67:07:3d:ec:95:e6:13:a8:bb:57:e5:b6:6d:ae:
83:c1:4d:ff:e9:d0:29:84:50:5c:e9:61:2f:7e:0c:cf:6e:17:
fa:57:d7:11:df:31:7b:ad:42:11:fb:ce:da:24:89:2d:79:82:
23:61:85:df:31:af:3f:8e:25:9a:e1:88:6a:7c:a0:e5:d5:1e:
7b:77:7f:eb:ae:c1:ca:4f:5a:ba:07:7e:13:ce:b8:6b:4a:89:
a8:aa:fd:b8:16:cf:49:9c:d0:58:56:4f:be:5d:ea:f0:30:6f:
47:3d:f2:f5:a7:a6:84:db:7d:e3:d8:8a:01:ed:0e:e9:78:d6:
9b:3b:c4:3d:36:cd:86:f1:58:99:95:3b:4d:b7:9f:4e:bc:78:
f0:c1:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:09:44 2025 by rpki-client