Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xNxdY7YTwb5ZiG83GofqtN0Zo_I.roa
File: xNxdY7YTwb5ZiG83GofqtN0Zo_I.roa (raw, json)
Hash identifier: AxIL8HuwsyeyltdGx2ZZIbvdeWtKzm/GB4BM7lGoaNM=
Subject key identifier: C4:DC:5D:63:B6:13:C1:BE:59:88:6F:37:1A:87:EA:B4:DD:19:A3:F2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019471016E727A7D579C48C6750059D104FB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xNxdY7YTwb5ZiG83GofqtN0Zo_I.roa
Signing time: Thu 16 Jan 2025 21:25:06 +0000
ROA not before: Thu 16 Jan 2025 21:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 194.58.155.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.55.0/24 maxlen: 24
195.133.59.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:71:01:6e:72:7a:7d:57:9c:48:c6:75:00:59:d1:04:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 16 21:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4dc5d63b613c1be59886f371a87eab4dd19a3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:2c:c1:7d:0a:6a:92:e2:05:73:6f:3d:7b:
2f:0e:2c:d7:d5:23:73:9b:d9:5a:f1:65:f5:12:c6:
4a:f3:e4:14:27:79:6d:04:12:a3:a4:ea:02:96:90:
c0:f5:99:1c:cd:5c:5c:e8:6a:57:7d:4b:06:b4:90:
ea:e9:b8:9d:1b:44:5e:1e:69:5a:4c:82:c8:19:68:
8c:41:98:84:e9:bd:59:d5:fb:eb:01:4b:a4:22:30:
61:15:35:95:60:b1:c0:d7:f6:9d:a5:92:53:11:cb:
b3:dd:5b:f3:fe:b9:14:e4:d8:e5:19:6a:07:d1:66:
99:45:55:44:ca:af:d9:77:8f:4a:70:f6:a9:34:40:
81:9e:1e:e9:1c:bd:c7:12:d9:73:df:ee:a6:b2:25:
e9:e3:e6:11:64:0c:1e:2e:86:df:67:9d:41:27:ef:
9d:b9:24:8b:ac:52:4c:f8:d2:7b:34:80:8c:df:72:
c4:5f:e5:69:bd:d6:a4:cf:73:5d:fd:53:75:e6:d4:
c2:e5:7b:b4:f8:26:52:ae:11:f4:04:96:76:23:fb:
76:dd:74:75:a9:6c:8c:6d:af:e7:49:26:e1:43:f2:
90:b7:d0:96:04:ed:95:ea:f0:d7:38:40:b1:87:e1:
3e:d1:3a:69:8a:14:58:57:90:4e:c5:82:2e:35:c9:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DC:5D:63:B6:13:C1:BE:59:88:6F:37:1A:87:EA:B4:DD:19:A3:F2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xNxdY7YTwb5ZiG83GofqtN0Zo_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.155.0/24
194.85.251.0/24
194.87.169.0/24
194.87.224.0/24
194.135.33.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.55.0/24
195.133.59.0/24
195.133.92.0/23
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
6d:9d:f1:71:35:21:7a:e4:2f:0a:d3:f0:fa:9e:3c:31:60:d3:
52:f2:b8:5b:ce:54:6d:65:f2:ac:b4:61:48:0e:7a:3f:58:bf:
f3:6f:e5:29:09:8f:43:73:ab:d2:d8:a9:bd:e7:df:a2:54:db:
99:4d:0d:fe:ea:78:e2:15:50:24:06:2f:31:f3:77:0c:9e:ef:
a3:51:01:14:a6:8b:4a:23:24:64:be:2d:09:9e:c0:ff:25:46:
a9:31:b4:16:9d:d9:fa:74:20:e9:f9:88:ce:92:9e:e5:a2:be:
2e:30:fc:4a:85:3e:dd:d3:a2:33:ea:52:c2:54:3b:b8:b9:1c:
7f:68:ad:f8:e4:ec:a2:f2:d3:3d:4f:eb:41:3d:3a:06:11:aa:
21:f4:57:24:dc:37:62:3e:06:37:36:50:41:9e:76:84:a0:58:
2a:67:41:4f:f3:a8:1d:5c:14:ac:63:13:2d:5a:a4:98:90:a9:
be:1a:f7:af:e2:2d:1b:7c:38:fc:81:41:f0:ed:77:56:1a:9c:
ec:12:d6:af:a0:6a:ae:76:c0:eb:6f:56:e5:b6:a6:b1:8e:26:
89:4f:e4:d5:49:9c:ba:5c:ed:23:19:9e:f4:0d:dd:80:4a:96:
6a:84:ce:93:0a:eb:c8:0f:b5:4a:0f:d2:b3:bc:07:f0:59:5d:
c7:fa:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:31:18 2025 by rpki-client