Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/RvtEfftaVdfSJq9wVdr6bNNsTFg.roa
File: RvtEfftaVdfSJq9wVdr6bNNsTFg.roa (raw, json)
Hash identifier: ssP9XmGCHdw9fgNTOtkUosh+X6pmdbhzeYNxwG/yYac=
Subject key identifier: 46:FB:44:7D:FB:5A:55:D7:D2:26:AF:70:55:DA:FA:6C:D3:6C:4C:58
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 019424B2C9383947E981C8F9B87C620B719C
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/RvtEfftaVdfSJq9wVdr6bNNsTFg.roa
Signing time: Thu 02 Jan 2025 01:48:03 +0000
ROA not before: Thu 02 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203614
IP address blocks: 185.128.60.0/22 maxlen: 22
185.128.60.0/24 maxlen: 24
185.128.61.0/24 maxlen: 24
185.128.62.0/24 maxlen: 24
185.128.63.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:c9:38:39:47:e9:81:c8:f9:b8:7c:62:0b:71:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Jan 2 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46fb447dfb5a55d7d226af7055dafa6cd36c4c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:fc:cc:63:07:0a:82:97:8f:00:c0:74:ea:
33:eb:e0:f3:f1:97:33:01:ca:d1:1e:52:91:1d:42:
e2:bc:3f:d9:d7:2a:d9:22:12:a6:ca:24:0e:a6:ab:
a2:4f:d8:dc:38:61:a6:0a:53:a8:45:1e:64:0f:90:
48:be:ed:9c:d9:3e:41:9a:4e:79:98:c9:f3:e4:66:
9e:b1:80:18:28:1c:a0:80:a4:77:e7:44:29:56:83:
a0:c1:b2:ef:69:09:8e:9a:f4:ab:4e:e9:ad:f1:31:
c2:9d:e4:f1:b0:b1:7c:74:c7:bc:b3:f4:57:bf:e1:
d5:9e:5c:3f:ca:6b:38:38:76:3e:dc:06:17:96:74:
67:56:55:7a:9b:c9:eb:3b:1b:d5:08:66:05:c4:b5:
1f:1a:e6:0f:3e:f1:be:98:e8:8e:03:a7:7c:fe:eb:
56:ae:7e:a8:90:05:f5:c7:fe:c8:25:3f:37:ec:11:
c0:4a:9c:25:13:e6:72:35:20:36:57:44:27:6d:92:
31:5e:bd:b5:47:e5:9c:43:12:dc:a4:f6:fa:b2:e1:
d6:91:9e:30:87:3d:dc:69:50:09:92:3a:20:8f:f0:
cf:92:7c:d3:47:80:6c:c2:07:33:30:ff:0d:10:d9:
e5:98:4a:5a:08:35:48:49:52:df:39:9f:72:c7:ce:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:44:7D:FB:5A:55:D7:D2:26:AF:70:55:DA:FA:6C:D3:6C:4C:58
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/RvtEfftaVdfSJq9wVdr6bNNsTFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.60.0/22
Signature Algorithm: sha256WithRSAEncryption
40:e1:4e:13:43:c6:75:f0:5a:fe:1a:ed:f2:d9:74:cc:5c:9e:
3e:9a:f0:59:68:2b:1d:3b:b8:2a:96:e8:0d:e4:a5:41:51:f9:
03:1b:12:aa:0f:44:2c:3c:2d:a9:70:2f:57:83:ae:b0:05:84:
d5:b6:01:05:c5:97:31:90:f6:fc:67:bc:43:3e:f6:d8:c0:26:
9c:ee:97:61:f2:2d:df:83:88:08:af:eb:d4:28:d3:6c:a6:a1:
43:58:f6:47:b0:8e:36:67:19:5b:a3:5d:83:52:5b:9e:7b:84:
dd:1f:14:01:9b:a7:01:ea:bd:c4:c1:f5:c1:50:c7:1a:08:9f:
92:71:df:a9:2e:1f:aa:72:44:8c:43:b0:df:14:b2:bf:db:56:
b7:64:60:1b:24:39:b9:d4:53:81:82:c9:8a:59:26:c9:0d:30:
c2:a3:44:86:28:fe:dd:e5:4e:5d:02:e0:ec:5e:6e:9f:e1:21:
77:db:1c:d2:45:0d:14:c9:e6:94:19:57:7f:f9:ff:9b:3d:40:
28:2f:02:34:35:2d:5c:5e:dd:10:ca:8c:48:72:d0:cb:32:7d:
58:d8:af:c4:51:6c:2e:54:b2:11:7a:cf:15:e9:f9:31:4e:ab:
5e:68:2e:d1:6b:a3:94:e4:bf:76:a6:ca:ca:48:59:8d:cc:5c:
3e:44:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:46:52 2025 by rpki-client