Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/mpu6oJASAp8kWs_bYdO7ZU7TR40.roa
File: mpu6oJASAp8kWs_bYdO7ZU7TR40.roa (raw, json)
Hash identifier: aoSyuH8kxf9V12Eyzoy6VyRYqpEVFpMPc1oNJsrY0l8=
Subject key identifier: 9A:9B:BA:A0:90:12:02:9F:24:5A:CF:DB:61:D3:BB:65:4E:D3:47:8D
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 04EE4DC6
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/mpu6oJASAp8kWs_bYdO7ZU7TR40.roa
Signing time: Sat 01 Jan 2022 12:55:19 +0000
ROA not before: Sat 01 Jan 2022 12:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206405
IP address blocks: 37.122.192.0/21 maxlen: 24
37.122.198.0/23 maxlen: 23
37.122.196.0/22 maxlen: 22
37.122.196.0/23 maxlen: 24
185.156.190.0/23 maxlen: 23
185.156.188.0/23 maxlen: 23
185.156.188.0/22 maxlen: 22
185.156.189.0/24 maxlen: 24
185.224.252.0/22 maxlen: 22
2a00:9e40::/34 maxlen: 34
2a00:9e40:8000::/33 maxlen: 33
2a00:9e40:1000::/36 maxlen: 36
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82726342 (0x4ee4dc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Jan 1 12:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a9bbaa09012029f245acfdb61d3bb654ed3478d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:4b:15:ca:da:cc:e3:b3:ab:ad:f3:08:80:
c6:75:63:4e:e0:f3:b4:1a:ee:2f:ed:dc:c5:a0:f4:
e6:fb:0d:e8:39:08:27:b4:87:81:73:c1:88:a3:a5:
1a:0c:a7:e1:f3:6e:6d:05:eb:4c:c4:c5:cd:eb:17:
67:ca:88:4c:40:23:b7:59:87:9c:5f:96:4f:35:37:
c9:69:df:b3:ca:58:70:73:dc:23:8d:c5:c8:4b:1a:
8c:5c:a6:94:01:57:6d:af:3f:a4:87:12:a7:19:65:
d8:48:90:63:ef:95:b9:94:b1:83:8a:30:34:4a:87:
c9:8d:ab:9c:2c:7d:ae:0e:bc:dd:9d:00:29:69:c4:
3d:2c:fb:f0:d2:45:dd:12:65:c7:e4:05:4f:78:9c:
4d:39:74:87:71:76:fd:db:cf:d7:65:6c:9e:aa:3c:
83:55:16:87:ec:15:c7:20:6f:2f:d7:22:90:ea:67:
60:e1:2c:49:1a:2e:ae:9c:e6:26:27:34:47:a6:5a:
21:8d:70:a5:bf:f8:57:2f:dd:2b:79:62:4f:70:7d:
eb:06:8e:94:84:fe:39:ae:d0:17:a4:a7:55:50:71:
af:c8:d6:0e:bd:c6:91:6f:2e:bb:f4:ff:d4:06:98:
33:b4:08:db:37:6a:99:83:25:3e:c2:fb:b3:f1:c9:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:BA:A0:90:12:02:9F:24:5A:CF:DB:61:D3:BB:65:4E:D3:47:8D
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/mpu6oJASAp8kWs_bYdO7ZU7TR40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.192.0/21
185.156.188.0/22
185.224.252.0/22
IPv6:
2a00:9e40::/34
2a00:9e40:8000::/33
Signature Algorithm: sha256WithRSAEncryption
90:4d:77:a0:1b:85:c8:ba:e8:96:7a:2a:6b:ee:ab:54:fa:83:
e7:90:6c:68:7d:9e:23:c3:3c:98:21:db:07:d5:6c:15:bc:cd:
cf:84:94:8a:42:db:2d:b4:75:6c:12:84:8f:f6:21:80:44:4a:
27:70:2a:19:e5:ac:49:42:27:72:97:bf:a1:db:5d:7a:a3:f3:
0d:4d:a3:e3:f9:01:bf:c8:11:74:b5:48:c8:b1:6a:50:4f:fe:
20:3e:35:36:73:31:68:39:05:07:0d:42:b0:91:09:ac:1a:86:
ff:4d:58:da:9c:23:d7:00:82:dc:42:fc:25:d9:b4:fb:91:e7:
fd:0e:3b:41:0e:de:3b:61:80:fd:09:97:a7:f3:79:ce:3d:74:
6d:31:56:00:50:ec:bb:33:7c:74:80:63:ef:7d:a6:8b:c4:7b:
a1:0b:cf:56:1b:27:b0:3d:4c:67:ab:bd:2e:b0:5f:fd:c9:4b:
fb:29:21:3e:5d:87:cb:86:d0:97:78:8c:78:3b:2b:2e:91:d9:
3c:e0:48:cb:31:87:41:42:84:7a:c3:8b:af:3e:71:64:ba:e1:
3f:bd:a0:a7:9d:fb:2f:cf:c7:27:6b:fe:fd:46:69:ee:1d:45:
5c:ac:55:56:78:31:cd:f5:ae:8e:4b:d6:3e:00:78:d5:79:0c:
b5:c7:4f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:21 2025 by rpki-client