Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/wb0LX50QvTbUoT3EE1nEUQZQljc.roa
File: wb0LX50QvTbUoT3EE1nEUQZQljc.roa (raw, json)
Hash identifier: kZ/GEr9bWMMDCNZ3MZ2+YZTMtxWmWt75BJRjscJnqMI=
Subject key identifier: C1:BD:0B:5F:9D:10:BD:36:D4:A1:3D:C4:13:59:C4:51:06:50:96:37
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 018CC56EB3827E525C8162642DE7ACCF862C
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/wb0LX50QvTbUoT3EE1nEUQZQljc.roa
Signing time: Mon 01 Jan 2024 14:30:15 +0000
ROA not before: Mon 01 Jan 2024 14:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207044
IP address blocks: 94.156.228.0/22 maxlen: 24
94.156.28.0/22 maxlen: 24
91.92.28.0/22 maxlen: 24
88.151.24.0/21 maxlen: 24
109.106.120.0/23 maxlen: 23
109.106.120.0/22 maxlen: 22
94.156.204.0/22 maxlen: 24
213.133.64.0/21 maxlen: 24
185.167.196.0/22 maxlen: 24
89.184.60.0/22 maxlen: 24
46.183.108.0/22 maxlen: 24
87.121.252.0/22 maxlen: 24
37.128.192.0/21 maxlen: 24
94.156.148.0/22 maxlen: 24
87.120.240.0/22 maxlen: 24
89.184.36.0/22 maxlen: 24
87.120.248.0/22 maxlen: 24
87.120.48.0/21 maxlen: 24
2a0b:ae00::/29 maxlen: 29
2a0b:ae00:1800::/38 maxlen: 38
2a0b:ae00:1400::/38 maxlen: 38
2a0b:ae00:1000::/38 maxlen: 38
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b3:82:7e:52:5c:81:62:64:2d:e7:ac:cf:86:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Jan 1 14:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1bd0b5f9d10bd36d4a13dc41359c45106509637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:c0:fb:dd:bb:40:a5:93:19:a0:c6:73:c0:
f8:cf:0c:6e:9a:19:6f:14:ce:e1:6f:2e:2d:55:e0:
c2:ec:e9:73:20:0e:62:0a:9b:5b:06:cf:87:6d:ab:
0b:36:3f:10:c4:88:5f:86:1b:7a:5a:dd:e7:d0:12:
41:62:97:c9:64:94:94:ff:a1:a5:4e:25:1d:3a:31:
86:f4:12:6e:df:cf:04:dc:7e:c5:11:8c:4f:3e:95:
29:a5:56:8f:ca:92:3b:3f:34:22:8e:8c:25:84:8b:
c5:bd:81:fa:68:11:ee:2b:99:b3:ce:df:23:39:69:
14:40:27:61:fc:41:0a:6b:bb:1f:39:40:71:f1:19:
72:d8:be:59:87:af:88:f3:4a:73:00:47:50:2f:76:
ba:97:14:84:71:4b:d2:b9:d3:23:e8:2c:21:ae:9d:
c3:4d:c9:31:f3:bf:62:6c:14:eb:3e:70:b8:a6:85:
64:c9:4c:df:d1:7d:de:98:e6:43:23:65:3d:c2:6e:
ff:3a:ec:c0:24:ff:a6:0b:97:05:12:a0:1e:5a:4b:
3c:ee:d2:f9:86:b5:e5:aa:3b:b9:90:51:db:35:98:
ae:5a:bc:1c:0a:af:f1:0f:f3:7e:10:d8:1a:b3:24:
11:bf:16:25:01:d6:42:75:1a:b0:86:10:f4:56:cb:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BD:0B:5F:9D:10:BD:36:D4:A1:3D:C4:13:59:C4:51:06:50:96:37
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/wb0LX50QvTbUoT3EE1nEUQZQljc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.192.0/21
46.183.108.0/22
87.120.48.0/21
87.120.240.0/22
87.120.248.0/22
87.121.252.0/22
88.151.24.0/21
89.184.36.0/22
89.184.60.0/22
91.92.28.0/22
94.156.28.0/22
94.156.148.0/22
94.156.204.0/22
94.156.228.0/22
109.106.120.0/22
185.167.196.0/22
213.133.64.0/21
IPv6:
2a0b:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
6e:b8:2e:8d:9d:a8:7e:6e:44:c2:f1:15:8e:81:c4:50:71:64:
ce:b2:16:65:03:e3:73:9f:44:3b:6c:54:b1:77:59:ec:88:58:
4e:d4:6b:c3:bb:75:9a:cb:79:4e:b2:88:e4:af:d8:de:59:d0:
62:dd:4d:89:80:d3:dd:99:0c:ef:13:da:63:47:90:fe:5c:72:
af:95:cf:07:42:b0:f8:68:2e:72:25:8f:a2:64:9f:e9:a0:d1:
4a:24:6c:a4:b1:3a:8a:18:a0:09:a6:ec:5d:3e:0a:26:a0:77:
1a:d5:89:f2:89:0f:45:ea:a0:ce:6b:c9:93:d3:ff:a1:c9:d7:
94:6a:91:63:bb:45:cc:b4:ea:9c:cd:21:25:4d:b1:a0:c2:3f:
ad:f2:a1:e7:50:3e:6a:40:5d:b5:c1:be:18:ce:97:df:8a:4a:
bd:5d:a5:53:ca:d7:5c:62:c9:cf:29:6f:d9:c0:c1:e6:a1:d6:
f1:d3:01:3d:f2:cc:dd:0b:64:66:4e:9d:69:70:8e:24:7d:e2:
aa:77:6d:0a:c4:04:53:b3:98:32:67:87:29:e1:57:d0:14:c8:
2b:d7:57:ec:4d:d8:66:dd:f9:a7:5b:c1:ac:36:91:09:f0:a7:
e3:b8:be:42:df:bf:4f:ed:fb:9e:49:da:57:c0:02:ad:ac:18:
53:8a:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:19:28 2025 by rpki-client