Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W3SBR_eNsl4erwFkRxbOdLqnYQ8.roa
File: W3SBR_eNsl4erwFkRxbOdLqnYQ8.roa (raw, json)
Hash identifier: 387drX9k2VlXw8W8rvHCCTikybsgrNbgKdFKVkmfZwI=
Subject key identifier: 5B:74:81:47:F7:8D:B2:5E:1E:AF:01:64:47:16:CE:74:BA:A7:61:0F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428245B0E8DDE3F72D948752E59547647
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W3SBR_eNsl4erwFkRxbOdLqnYQ8.roa
Signing time: Thu 02 Jan 2025 17:50:58 +0000
ROA not before: Thu 02 Jan 2025 17:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8866
IP address blocks: 87.121.18.0/24 maxlen: 24
87.121.20.0/23 maxlen: 23
87.121.22.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:5b:0e:8d:de:3f:72:d9:48:75:2e:59:54:76:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b748147f78db25e1eaf01644716ce74baa7610f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:ba:c8:76:4e:e3:90:51:84:ed:9a:2b:64:
9c:7e:7f:cd:c1:30:ed:57:91:4e:66:e4:6b:e8:28:
54:95:da:96:63:73:8b:1e:35:d1:e7:72:0a:6e:37:
c1:65:02:d3:12:25:d0:5b:04:0b:82:19:9a:10:b0:
f5:69:a7:0a:86:2b:6c:6e:75:c2:4e:05:ef:f9:9a:
69:94:8e:3f:75:86:ce:ed:27:6f:42:a3:88:0d:a2:
ff:79:d5:60:dd:6b:a2:85:6d:8b:40:bd:09:83:18:
2c:e5:53:a2:76:d6:a4:c0:43:57:3b:4d:de:f4:df:
7e:60:58:f5:bb:a1:d7:e9:f1:45:bb:77:57:8b:c5:
5c:5e:e6:31:6b:7e:ba:5e:9c:07:3a:31:6b:57:5e:
1a:05:4a:7f:1c:2c:76:85:dd:a4:aa:d9:0c:70:11:
8d:3e:dd:f7:8b:25:d6:44:f3:6d:1a:bb:1c:6b:4e:
16:76:4c:ab:09:f2:f6:69:7b:dd:04:b2:70:88:40:
0f:38:8a:39:9a:8c:40:b8:36:a9:a1:8e:db:37:90:
26:51:ab:e0:43:d2:09:44:eb:2b:98:a1:5e:dd:d0:
60:f5:02:c0:bd:29:b3:16:8d:a9:26:4b:6f:83:c0:
39:1b:82:bc:11:ff:f1:69:f4:b3:24:2f:41:81:43:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:74:81:47:F7:8D:B2:5E:1E:AF:01:64:47:16:CE:74:BA:A7:61:0F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W3SBR_eNsl4erwFkRxbOdLqnYQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.18.0/24
87.121.20.0-87.121.22.255
Signature Algorithm: sha256WithRSAEncryption
41:23:9c:43:0b:1c:56:a7:e7:48:d1:9d:52:5e:cd:8b:57:be:
0b:6f:be:2c:d3:07:1e:21:40:70:63:7d:9c:48:8c:63:7b:0a:
f7:92:79:9d:6f:85:35:a7:b0:b4:c0:d3:6a:18:a4:48:ab:e8:
2a:26:4e:20:87:a1:0e:67:15:13:38:20:0d:89:c5:23:b0:3c:
cd:da:91:a1:a8:71:97:35:ac:6f:17:ee:63:96:b6:be:98:77:
74:ee:93:7c:1e:33:e8:1e:fd:92:fb:c7:49:e0:48:fa:81:54:
70:bc:f9:52:41:fb:4f:25:d1:d0:be:f5:17:ea:89:0a:f1:9c:
83:0e:d6:d1:ff:de:58:8f:e0:28:96:ea:60:16:58:bc:2a:ef:
d5:09:30:45:c8:a9:0e:a8:33:82:f7:3b:f0:25:70:0b:c4:5b:
69:1c:82:b5:d0:63:4f:f1:66:eb:f8:3e:32:80:a9:cd:9b:5a:
64:47:8e:41:74:4b:e7:53:61:8e:a6:8b:83:f7:c9:58:dd:7a:
d9:01:57:50:c1:53:5d:45:db:8d:4e:80:46:2a:43:10:85:ac:
a8:26:e9:bd:f2:f7:f4:45:90:ec:9b:b1:3d:15:01:ac:61:63:
ac:f1:7c:de:7c:9d:0c:18:e4:eb:4f:64:15:bd:cf:76:d8:66:
b1:a0:61:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:30:55 2025 by rpki-client