Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/4blYQFsXq9I7_D179Ka8cfv7EL8.roa
File: 4blYQFsXq9I7_D179Ka8cfv7EL8.roa (raw, json)
Hash identifier: HJ1JODErWz3bb/fFvk4U0fwUbnK7m8/aRtsUFKSmiaI=
Subject key identifier: E1:B9:58:40:5B:17:AB:D2:3B:FC:3D:7B:F4:A6:BC:71:FB:FB:10:BF
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 01856DC1A1413B813233C134C566591B9E4B
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/4blYQFsXq9I7_D179Ka8cfv7EL8.roa
Signing time: Sun 01 Jan 2023 14:34:44 +0000
ROA not before: Sun 01 Jan 2023 14:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206405
IP address blocks: 37.122.192.0/21 maxlen: 24
37.122.198.0/23 maxlen: 23
37.122.196.0/22 maxlen: 22
37.122.196.0/23 maxlen: 24
185.156.190.0/23 maxlen: 23
185.156.188.0/23 maxlen: 23
185.156.188.0/22 maxlen: 22
185.156.189.0/24 maxlen: 24
185.224.252.0/22 maxlen: 22
2a00:9e40::/34 maxlen: 34
2a00:9e40:8000::/33 maxlen: 33
2a00:9e40:1000::/36 maxlen: 36
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:a1:41:3b:81:32:33:c1:34:c5:66:59:1b:9e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Jan 1 14:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1b958405b17abd23bfc3d7bf4a6bc71fbfb10bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:8a:15:4d:67:e9:6f:86:ea:be:09:7f:82:
68:9b:1b:14:ea:d5:2a:2d:df:2c:52:9a:dc:87:84:
08:f8:32:dd:eb:1d:bd:70:03:2d:0a:3b:6d:e3:95:
98:8d:d3:57:24:36:fe:d3:84:04:aa:0c:b4:6d:a0:
40:46:0f:55:5f:21:c2:65:12:4b:fe:6d:a6:21:76:
d8:5d:bb:0d:f5:3f:58:ad:88:1c:de:6b:9d:b4:45:
39:14:18:33:5c:76:1c:ed:6b:9b:8e:b4:fb:b9:e7:
1f:8f:8d:58:81:fb:30:2f:6e:51:bd:c9:59:6f:fe:
e0:4f:32:77:cb:24:66:d0:94:cb:77:48:5b:b3:9d:
59:30:24:18:d3:1a:b8:54:cd:f0:8f:91:7e:61:00:
f5:be:4d:26:46:6c:d6:d3:7b:4b:7f:c5:8e:85:9f:
cd:e0:4a:2b:37:11:7c:cb:99:e0:19:e0:b6:bd:a8:
65:cd:4c:82:2d:d5:a9:d8:cb:2a:8f:25:aa:dc:ab:
4b:9d:d2:a2:cc:73:ca:6a:24:35:63:e7:3c:f7:5e:
3d:74:26:71:58:5e:fb:b1:92:c7:e1:3d:69:e9:44:
41:2b:b1:33:e5:13:12:ee:a1:02:36:e8:ab:20:8a:
03:23:0a:15:95:8c:d7:27:36:83:fd:1e:4b:74:ed:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B9:58:40:5B:17:AB:D2:3B:FC:3D:7B:F4:A6:BC:71:FB:FB:10:BF
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/4blYQFsXq9I7_D179Ka8cfv7EL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.192.0/21
185.156.188.0/22
185.224.252.0/22
IPv6:
2a00:9e40::/34
2a00:9e40:8000::/33
Signature Algorithm: sha256WithRSAEncryption
2a:d3:73:0c:68:71:e3:2f:49:ad:3c:d2:43:89:87:db:c7:10:
f0:cc:52:3d:e2:11:c8:b0:e1:09:58:c6:fc:13:65:06:e6:1b:
47:38:67:12:8a:20:fe:b3:ac:ea:8f:36:85:da:b2:49:64:75:
f9:7f:29:71:3e:39:20:5c:19:12:fe:4e:11:e9:fc:b2:c8:99:
18:12:7b:95:60:b4:d9:7c:c9:85:a6:b9:d4:6d:8d:08:61:9e:
3c:86:f9:78:80:f5:73:9a:11:1e:b0:82:0e:e9:bc:00:de:fb:
43:19:99:8d:54:ce:47:0d:18:39:0a:ae:fd:8c:7b:73:65:12:
e4:2f:f2:72:a1:f2:61:1c:7d:58:43:8e:6a:5b:3e:5c:da:d4:
5c:5e:28:73:37:f3:be:7e:10:6a:bb:8e:15:7a:f2:22:82:ce:
e9:6b:74:49:f5:83:24:76:96:39:1d:5e:e2:01:76:9e:f4:0e:
58:c1:bd:7f:db:dd:d9:8b:64:29:c5:8e:76:63:5a:4a:66:18:
8b:64:a2:8c:1c:80:b7:d0:7b:93:2d:ec:4c:0e:eb:11:f2:73:
1b:64:56:25:c9:4d:9e:03:69:f9:ac:c9:82:1e:96:c7:d4:95:
18:51:c5:17:eb:3d:54:4c:6a:94:d9:a3:e9:8f:57:65:47:3c:
74:23:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:40:18 2025 by rpki-client