Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iVzoHjkx_C9_ayqbxh1PgrWfyc4.roa
File: iVzoHjkx_C9_ayqbxh1PgrWfyc4.roa (raw, json)
Hash identifier: rjNzEQc/SFmFLY81ytIMXnhPQy8CXx/rRqkhQDstDX8=
Subject key identifier: 89:5C:E8:1E:39:31:FC:2F:7F:6B:2A:9B:C6:1D:4F:82:B5:9F:C9:CE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195D1B1925F116703E75EA38741D9C7D6AF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iVzoHjkx_C9_ayqbxh1PgrWfyc4.roa
Signing time: Wed 26 Mar 2025 09:03:50 +0000
ROA not before: Wed 26 Mar 2025 09:03:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213511
IP address blocks: 87.121.18.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.156.92.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:b1:92:5f:11:67:03:e7:5e:a3:87:41:d9:c7:d6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 26 09:03:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=895ce81e3931fc2f7f6b2a9bc61d4f82b59fc9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:d0:5a:53:b4:88:00:b2:c6:01:7e:1d:f3:
20:77:f0:08:bc:e6:e5:dc:9d:47:4e:9d:1d:44:92:
1a:e7:01:7c:19:59:f9:b8:e3:67:4c:96:e6:ff:40:
b4:bc:56:c4:72:83:da:8e:b9:ec:ef:db:57:df:70:
1b:99:b0:e7:84:11:da:f8:e8:61:df:2c:9e:fd:3a:
83:c4:65:b0:b6:1d:7d:79:4d:a4:8e:3b:84:ab:f6:
58:2a:82:df:ca:7e:34:eb:31:19:78:d6:12:87:74:
34:f6:48:6c:f9:19:ab:5e:66:5a:b0:d8:a3:2e:c6:
aa:9c:d6:c2:46:b4:07:c5:c2:b9:88:a5:93:84:6c:
ae:24:59:6b:7e:f5:e8:23:9c:ff:78:62:40:6d:85:
a1:e2:9c:e6:c8:d4:83:34:b9:8d:13:63:a7:33:31:
98:a1:3c:ed:0d:06:ca:b6:00:5a:5a:21:c4:9b:4f:
7c:7e:1f:b2:6c:ff:0e:2a:49:fe:b6:b0:98:ab:58:
dd:3a:ca:f9:d2:25:24:89:ef:77:bc:40:13:94:13:
ca:f2:9c:5a:f5:9c:f1:50:a5:33:4e:f1:4b:f5:14:
b9:6b:3a:e8:77:91:11:60:43:d2:dd:84:1f:20:7b:
e0:0e:b5:80:b4:11:cc:f8:ab:17:90:0f:d1:9e:4b:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5C:E8:1E:39:31:FC:2F:7F:6B:2A:9B:C6:1D:4F:82:B5:9F:C9:CE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iVzoHjkx_C9_ayqbxh1PgrWfyc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.18.0/24
92.119.196.0/23
94.156.92.0/24
94.156.167.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1d:12:a4:06:bf:14:de:fe:23:89:fc:94:66:32:85:42:b6:
f1:ee:39:37:25:f8:19:84:ae:ce:0c:f8:37:ab:25:61:ba:83:
7a:54:5d:0b:65:94:de:0b:26:1b:cf:28:09:5a:f5:16:1e:63:
72:53:17:5a:45:43:3c:e2:1a:be:41:98:f0:b2:8c:eb:17:7c:
e9:be:58:30:13:e7:9b:23:f2:ac:96:53:2d:84:0f:49:a3:b3:
f6:f1:83:71:ce:7e:58:7b:1d:f8:af:45:a3:36:15:d5:82:88:
09:5f:70:be:9e:ed:cc:ec:b2:10:5c:6a:f8:05:a9:47:dc:5e:
1e:81:c6:16:34:ac:4d:a9:a2:9c:0a:3a:6f:63:3b:69:51:94:
27:b8:20:17:90:38:bd:8d:e1:f4:6e:6d:02:9c:2d:9e:88:a0:
49:80:82:a6:63:44:e9:67:34:60:23:2d:a5:e2:0e:fb:8d:15:
94:7b:c1:12:3b:44:62:9d:ac:c5:3f:b2:6c:49:b7:da:0c:7a:
02:48:70:4b:f3:74:5e:6b:7d:73:60:0c:fa:e6:bd:1c:91:c5:
28:4c:b2:83:90:ea:c8:ec:6b:01:89:5c:af:d3:9a:3c:f7:04:
8c:21:27:43:ad:6b:a2:21:32:72:3c:89:66:53:ba:bc:ca:8a:
75:9a:49:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:39:58 2025 by rpki-client