Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EEAFkoYo9dh0FQsOUuT2fInoGdA.roa
File: EEAFkoYo9dh0FQsOUuT2fInoGdA.roa (raw, json)
Hash identifier: GEdrx5OFfrCL3lUzX/eK4Brz19pifjdoKDHtwQw4lQo=
Subject key identifier: 10:40:05:92:86:28:F5:D8:74:15:0B:0E:52:E4:F6:7C:89:E8:19:D0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01948D319F8E69C82E0FE542F9E9A6933B72
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EEAFkoYo9dh0FQsOUuT2fInoGdA.roa
Signing time: Wed 22 Jan 2025 08:47:07 +0000
ROA not before: Wed 22 Jan 2025 08:47:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 31.13.193.0/24 maxlen: 24
31.13.225.0/24 maxlen: 24
37.60.141.0/24 maxlen: 24
87.120.107.0/24 maxlen: 24
87.120.191.0/24 maxlen: 24
87.121.70.0/23 maxlen: 24
87.121.144.0/23 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.46.0/24 maxlen: 24
93.123.47.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.61.0/24 maxlen: 24
94.156.92.0/24 maxlen: 24
94.156.162.0/23 maxlen: 24
94.156.164.0/23 maxlen: 24
141.98.1.0/24 maxlen: 24
212.73.149.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:31:9f:8e:69:c8:2e:0f:e5:42:f9:e9:a6:93:3b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 22 08:47:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=104005928628f5d874150b0e52e4f67c89e819d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:7e:da:0c:a3:e9:de:b6:44:92:75:e0:0c:
ef:40:cd:80:de:3c:d7:13:70:50:9d:4e:2e:5a:f2:
b6:15:58:7a:0c:33:36:ed:ca:35:11:21:41:63:96:
b1:e8:be:1d:ef:6b:ba:ea:fc:fe:47:0c:8c:5e:5c:
2c:39:1c:2e:a5:15:9b:b8:20:b2:44:51:ff:17:94:
13:b6:d6:93:ad:85:d3:ee:a8:22:34:86:7c:3f:30:
3c:53:6e:77:39:62:8a:9d:a0:81:7c:36:b9:6c:fb:
94:0b:77:44:d0:9c:f4:3e:4e:34:66:75:9d:5b:5b:
76:92:28:bd:38:04:f8:a3:17:24:a4:7d:f4:23:ab:
f8:7e:68:c5:83:1c:e2:66:08:1f:a7:9f:13:0d:f9:
d7:9d:da:69:43:83:3d:cb:e3:a8:9c:67:27:ed:7a:
3c:30:0a:90:84:87:bd:bc:bd:e8:d6:b8:2e:d6:3e:
6a:ae:75:13:48:9b:57:85:e7:c8:ac:5d:46:e2:d4:
69:ce:11:1d:d2:ad:c1:b1:17:34:63:3f:e7:bd:45:
8c:c4:66:44:c0:99:c6:97:c4:c3:78:70:a2:df:fc:
9a:cc:c9:da:50:1d:5b:dc:13:f7:19:08:a4:e5:39:
ee:73:c2:d4:5a:7b:3a:13:62:bd:14:02:0f:d0:3f:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:40:05:92:86:28:F5:D8:74:15:0B:0E:52:E4:F6:7C:89:E8:19:D0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EEAFkoYo9dh0FQsOUuT2fInoGdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.193.0/24
31.13.225.0/24
37.60.141.0/24
87.120.107.0/24
87.120.191.0/24
87.121.70.0/23
87.121.144.0/23
93.123.45.0-93.123.47.255
94.156.11.0/24
94.156.61.0/24
94.156.92.0/24
94.156.162.0-94.156.165.255
141.98.1.0/24
212.73.149.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3c:05:49:46:df:10:86:67:9a:5c:ca:80:52:bb:72:e9:d4:
5d:e2:a7:ee:e7:4b:e5:1b:f7:7d:6f:f3:d0:00:67:bd:d8:77:
98:03:fc:2c:4f:3e:54:33:82:5f:28:60:a5:d1:fb:32:b8:0f:
44:18:4c:2d:d0:d1:eb:1f:5a:cf:f6:fa:d1:75:b9:4b:e4:5f:
9d:f1:b8:43:0f:fd:4a:40:19:e1:6f:e4:0d:86:46:16:25:a2:
84:a6:e6:14:77:81:d0:c0:6f:05:05:e1:4e:0a:84:2b:67:20:
b1:4b:8c:7c:28:80:15:30:48:49:97:a9:d1:db:aa:7b:45:c4:
d0:03:e3:ff:c4:37:86:1b:52:03:58:f5:80:71:b0:3e:0d:03:
3d:7b:f1:29:71:91:6f:a1:09:65:a4:3e:3c:45:e5:51:c5:6a:
59:3a:19:2b:a9:eb:d3:64:eb:9c:61:55:f9:a7:db:6e:01:56:
ae:96:e2:e4:e8:22:da:48:18:98:1f:3f:22:d4:09:be:71:a4:
20:fc:48:e4:f2:4e:fe:37:47:3b:fe:8b:ab:10:9e:5c:dc:ab:
ae:8f:d2:b6:88:e5:99:28:73:bc:47:3f:a7:a8:55:3b:8e:35:
be:a6:02:1b:b6:51:03:13:5f:90:8c:6f:77:87:59:e9:44:c2:
62:f1:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:33:48 2025 by rpki-client