Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r7L6e40BGYV6qTBcFmeDzgxBNPs.roa
File: r7L6e40BGYV6qTBcFmeDzgxBNPs.roa (raw, json)
Hash identifier: Zp15TJOh4AIDWZbRKV19+HGRP2d2D8FPwQrqpqItJiI=
Subject key identifier: AF:B2:FA:7B:8D:01:19:85:7A:A9:30:5C:16:67:83:CE:0C:41:34:FB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824DA5B64F8A7C7647ACEC2F92EE12D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r7L6e40BGYV6qTBcFmeDzgxBNPs.roa
Signing time: Thu 02 Jan 2025 17:51:31 +0000
ROA not before: Thu 02 Jan 2025 17:51:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401110
IP address blocks: 81.161.230.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:da:5b:64:f8:a7:c7:64:7a:ce:c2:f9:2e:e1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afb2fa7b8d0119857aa9305c166783ce0c4134fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:32:a0:7c:38:03:ea:94:66:31:37:e4:57:
ab:76:aa:c2:47:9a:3b:ec:98:af:fc:65:4c:79:80:
f1:a7:87:81:ed:b3:03:2d:6c:9a:de:23:db:ee:47:
08:91:3a:33:90:48:d7:29:ea:bc:ad:c7:23:9a:bc:
f3:2b:35:10:00:9d:3d:bd:51:cf:c5:e5:13:ff:ae:
e2:c5:22:e7:bf:09:fb:4f:aa:ee:d2:35:9a:b3:05:
e0:28:0c:d0:07:fa:24:dc:d1:c9:e7:a9:90:b0:43:
c0:99:e7:87:25:9b:9e:3d:fc:1a:f1:b0:c2:f2:10:
2c:1c:ba:90:29:3b:ba:f5:86:30:8c:cd:07:80:e2:
fd:cf:bb:92:76:e8:9c:f1:bb:5d:5a:f6:05:4a:00:
04:e2:4d:f2:65:bd:ac:34:5c:a5:e6:f2:e5:ae:eb:
1b:d1:c9:0f:be:66:15:e1:78:09:f8:56:78:ed:0a:
4c:79:3b:ac:5c:8e:a1:f3:e5:0e:df:e4:23:a4:71:
88:69:a6:4e:83:ce:ba:e9:f6:89:42:b3:ea:3c:59:
03:4a:c4:53:f2:20:f1:59:56:cc:32:41:1b:e4:4b:
c2:8a:14:35:a6:ee:fb:7d:c7:60:79:94:b1:15:9c:
6a:c3:5f:87:d2:47:c8:89:70:be:15:ad:ea:75:0a:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B2:FA:7B:8D:01:19:85:7A:A9:30:5C:16:67:83:CE:0C:41:34:FB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r7L6e40BGYV6qTBcFmeDzgxBNPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.230.0/24
109.206.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:90:6f:31:91:8c:76:6b:99:68:4c:2f:73:ce:6b:b1:6c:5e:
46:3b:fc:b0:8d:b5:d5:dc:56:dc:87:a3:df:b4:91:2d:f1:19:
df:f0:77:06:c5:7d:81:dc:31:b3:0c:38:8f:be:0a:a3:f3:ab:
70:3e:48:6b:85:52:c6:a4:fb:fa:f1:f8:ae:b1:67:55:c5:07:
30:dc:a4:09:f6:42:fe:33:8c:85:1c:24:3d:9a:3a:f7:c1:c4:
f5:65:51:a3:55:89:1e:d4:12:5f:33:4e:af:cd:af:b1:93:2f:
34:10:05:42:d9:f4:e7:79:83:b7:44:c3:e9:51:fa:b3:67:81:
e7:58:b0:b7:da:91:7f:25:b9:4f:7f:9d:f9:33:96:a4:4e:a3:
82:24:dd:83:f0:1e:a3:96:f0:f7:e6:36:d1:8f:b0:a8:d6:bd:
ca:eb:83:ee:ac:77:bc:8f:c2:3b:f4:53:28:12:5c:87:39:36:
28:a2:c8:17:6b:36:94:23:5f:da:79:c8:a2:16:a4:1e:64:de:
c7:af:bc:b4:83:39:fa:66:7c:0d:26:d6:ed:38:35:84:2f:29:
d0:c8:74:22:88:c3:11:76:94:1d:a4:27:62:f2:0b:4e:c6:01:
40:03:61:86:2e:a1:c1:19:61:26:6d:e8:46:e5:54:4b:e7:98:
74:d9:62:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJNpbZPinx2R6zsL5LuEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmIyZmE3YjhkMDExOTg1N2FhOTMwNWMxNjY3ODNjZTBjNDEzNGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX8yoHw4A+qUZjE35FerdqrCR5o7
7Jiv/GVMeYDxp4eB7bMDLWya3iPb7kcIkTozkEjXKeq8rccjmrzzKzUQAJ09vVHP
xeUT/67ixSLnvwn7T6ru0jWaswXgKAzQB/ok3NHJ56mQsEPAmeeHJZuePfwa8bDC
8hAsHLqQKTu69YYwjM0HgOL9z7uSduic8btdWvYFSgAE4k3yZb2sNFyl5vLlrusb
0ckPvmYV4XgJ+FZ47QpMeTusXI6h8+UO3+QjpHGIaaZOg8666faJQrPqPFkDSsRT
8iDxWVbMMkEb5EvCihQ1pu77fcdgeZSxFZxqw1+H0kfIiXC+Fa3qdQorUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK+y+nuNARmFeqkwXBZng84MQTT7MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcjdMNmU0MEJHWVY2cVRCY0ZtZUR6Z3hCTlBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUaHmAwQA
bc7tMA0GCSqGSIb3DQEBCwUAA4IBAQCckG8xkYx2a5loTC9zzmuxbF5GO/ywjbXV
3Fbch6PftJEt8Rnf8HcGxX2B3DGzDDiPvgqj86twPkhrhVLGpPv68fiusWdVxQcw
3KQJ9kL+M4yFHCQ9mjr3wcT1ZVGjVYke1BJfM06vza+xky80EAVC2fTneYO3RMPp
UfqzZ4HnWLC32pF/JblPf535M5akTqOCJN2D8B6jlvD35jbRj7Co1r3K64PurHe8
j8I79FMoElyHOTYoosgXazaUI1/aeciiFqQeZN7Hr7y0gzn6ZnwNJtbtODWELynQ
yHQiiMMRdpQdpCdi8gtOxgFAA2GGLqHBGWEmbehG5VRL55h02WL0
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:35:48 2025 by rpki-client