Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OvtQ27wiWstJcfbfB6ntbK4bXjc.roa
File: OvtQ27wiWstJcfbfB6ntbK4bXjc.roa (raw, json)
Hash identifier: SWJEwAtMOtXm4VkrSOoo9G53OaRYqgHyE0Rf+QbBfIk=
Subject key identifier: 3A:FB:50:DB:BC:22:5A:CB:49:71:F6:DF:07:A9:ED:6C:AE:1B:5E:37
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193B0903EE74199921EE745E1254EBC3B34
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OvtQ27wiWstJcfbfB6ntbK4bXjc.roa
Signing time: Tue 10 Dec 2024 12:34:22 +0000
ROA not before: Tue 10 Dec 2024 12:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 31.13.193.0/24 maxlen: 24
31.13.225.0/24 maxlen: 24
37.60.141.0/24 maxlen: 24
87.120.107.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.120.191.0/24 maxlen: 24
87.121.70.0/23 maxlen: 24
87.121.88.0/23 maxlen: 24
87.121.144.0/23 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.46.0/24 maxlen: 24
93.123.47.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.61.0/24 maxlen: 24
94.156.92.0/24 maxlen: 24
94.156.162.0/23 maxlen: 24
94.156.164.0/23 maxlen: 24
94.156.170.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
212.73.149.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:90:3e:e7:41:99:92:1e:e7:45:e1:25:4e:bc:3b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 10 12:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3afb50dbbc225acb4971f6df07a9ed6cae1b5e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d0:77:d1:03:d9:12:c1:8c:ad:40:74:fa:95:
8c:78:38:b6:ac:68:cd:ae:d3:8c:c5:1a:75:c7:19:
be:64:b6:98:da:b1:78:c5:ae:95:31:f5:89:8a:30:
83:12:13:9a:b8:87:f7:34:ab:bf:92:7d:93:cf:db:
e5:31:99:8d:e5:46:48:df:a1:05:54:fd:16:2f:c2:
4c:63:16:cf:7e:6e:2e:66:35:3d:6f:6f:bf:27:f1:
eb:41:bb:bc:42:3a:2b:fd:9a:25:85:7f:83:f5:fb:
5a:f9:20:59:58:c7:f1:a8:72:d7:81:3c:36:05:3d:
e9:45:b2:99:67:a2:eb:db:2a:9d:01:10:fe:1d:a3:
07:2a:9d:b2:48:2b:93:d3:78:89:25:e5:90:6e:25:
d8:c9:09:36:6b:ea:a2:ae:fa:b8:6f:af:d2:fa:5e:
a2:a6:72:c0:43:ee:bd:97:f9:9f:b8:a1:c5:47:42:
b4:4f:95:18:bd:ba:67:c5:15:8a:71:a7:c7:4a:83:
a9:98:78:37:3e:59:f8:24:54:aa:35:d2:16:9b:ef:
30:77:90:2b:34:c3:7f:5b:12:47:0d:75:83:35:ba:
fa:24:a4:8d:37:f6:6d:94:cc:e4:04:e8:04:46:b0:
ad:4c:d1:23:12:a0:77:47:95:6b:cc:06:0d:97:0a:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:50:DB:BC:22:5A:CB:49:71:F6:DF:07:A9:ED:6C:AE:1B:5E:37
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OvtQ27wiWstJcfbfB6ntbK4bXjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.193.0/24
31.13.225.0/24
37.60.141.0/24
87.120.107.0/24
87.120.187.0/24
87.120.191.0/24
87.121.70.0/23
87.121.88.0/23
87.121.144.0/23
93.123.45.0-93.123.47.255
94.156.11.0/24
94.156.61.0/24
94.156.92.0/24
94.156.162.0-94.156.165.255
94.156.170.0/24
141.98.1.0/24
212.73.149.0/24
Signature Algorithm: sha256WithRSAEncryption
56:08:25:93:20:da:fc:c9:ac:b1:ec:8f:e9:9f:90:49:99:d9:
68:b1:ee:35:b0:25:3d:1c:b8:8f:28:6d:bd:ad:ec:5e:14:38:
17:b4:6f:3c:2c:32:35:07:10:c8:a5:c2:28:54:cc:43:6c:63:
98:3b:f4:1c:46:eb:3f:a3:2d:4c:56:26:17:24:3e:5a:65:c1:
1b:20:a6:c7:58:b2:e1:bf:f0:0a:16:64:a6:f8:19:1e:30:8a:
fb:f9:20:94:c7:9b:50:38:c3:54:b0:f8:0c:b7:6a:cd:59:63:
c0:17:4b:a2:20:f6:e0:9a:f0:41:e7:4d:73:d7:b5:ac:48:7b:
da:ee:f1:52:78:4d:62:5c:ae:19:87:50:ce:0f:7c:30:2e:21:
34:aa:23:94:c4:09:0d:52:2e:9e:e6:7b:ee:fd:0c:16:b7:eb:
60:9c:d1:56:e2:67:cf:ef:c8:a8:a1:61:a9:16:89:24:e5:38:
37:2e:ec:04:fa:7a:fa:27:2f:54:70:b3:2a:f5:f0:4d:a5:89:
9b:f8:d0:f0:89:49:4f:61:6f:71:3d:e0:dc:46:55:51:5f:f8:
9c:82:75:00:ee:a7:5e:3a:18:c6:6c:dd:4b:ac:9b:b7:be:96:
ab:c7:48:54:dc:26:1a:17:a9:92:20:63:72:36:46:f7:a5:a0:
f8:54:e6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:18:14 2025 by rpki-client