Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/wYDh5juBGiu69Fom2QCBUZnR6xA.roa
File: wYDh5juBGiu69Fom2QCBUZnR6xA.roa (raw, json)
Hash identifier: oEO5CateKbr/M/WrqaSB6UelcawhDZvLuQB+rHvgzT0=
Subject key identifier: C1:80:E1:E6:3B:81:1A:2B:BA:F4:5A:26:D9:00:81:51:99:D1:EB:10
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 019424B2C963D0F4AA1B7920BC4AFBA91DD8
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/wYDh5juBGiu69Fom2QCBUZnR6xA.roa
Signing time: Thu 02 Jan 2025 01:48:04 +0000
ROA not before: Thu 02 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203936
IP address blocks: 45.144.248.0/22 maxlen: 22
89.40.238.0/24 maxlen: 24
89.43.72.0/24 maxlen: 24
89.43.198.0/24 maxlen: 24
89.44.145.0/24 maxlen: 24
109.205.136.0/22 maxlen: 24
185.128.60.0/22 maxlen: 22
185.237.136.0/22 maxlen: 24
185.237.138.0/24 maxlen: 24
185.249.232.0/24 maxlen: 24
185.253.144.0/22 maxlen: 22
185.253.145.0/24 maxlen: 24
185.253.146.0/24 maxlen: 24
185.253.147.0/24 maxlen: 24
193.39.92.0/22 maxlen: 22
193.39.92.0/24 maxlen: 24
193.39.93.0/24 maxlen: 24
193.39.94.0/24 maxlen: 24
194.15.219.0/24 maxlen: 24
194.15.232.0/24 maxlen: 24
194.15.236.0/24 maxlen: 24
194.26.1.0/24 maxlen: 24
2a03:6280::/29 maxlen: 29
2a0c:1380::/29 maxlen: 29
2a0c:3cc0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:c9:63:d0:f4:aa:1b:79:20:bc:4a:fb:a9:1d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Jan 2 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c180e1e63b811a2bbaf45a26d900815199d1eb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:fd:24:08:d0:75:d8:f8:e0:4f:f3:cd:a4:
20:b1:16:19:23:e1:d4:fc:0f:d3:c5:6e:a2:4e:9e:
88:f1:09:18:15:f5:9e:08:8d:ac:b6:4b:36:4e:36:
49:cf:da:fc:12:3d:85:9b:b6:2b:11:0f:b4:43:43:
55:3d:ae:0d:a7:4f:9c:e0:de:c1:f5:f9:af:e8:91:
1e:32:28:32:d1:d8:be:91:2e:94:5f:31:96:4e:da:
93:ea:e9:23:ff:84:26:54:c8:57:91:e9:7c:00:d0:
bf:b1:49:7c:70:c6:99:b4:a3:2f:e5:64:61:52:04:
e2:0c:ec:9e:2d:fc:21:bf:04:80:da:7a:a3:93:a9:
2e:ed:37:eb:42:25:f4:25:bc:08:fd:ac:db:1f:1e:
38:8a:0b:d6:bd:9f:ef:ab:a5:e7:c3:67:26:55:03:
e5:d2:13:02:ae:7f:20:8c:48:b1:a3:6d:8c:56:ec:
8a:13:2e:b0:74:ae:4d:f6:bb:42:a9:44:18:ae:fb:
8f:bc:d1:5a:2d:f3:f0:2d:1d:f6:95:c9:57:f6:0e:
99:47:bd:db:1a:5b:ec:54:52:bf:2c:70:00:07:a9:
89:86:68:7a:37:09:2d:22:4b:6b:3b:f2:e8:cf:c4:
84:a0:da:3b:fd:42:ad:1a:a5:fd:a7:61:33:c5:ac:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:80:E1:E6:3B:81:1A:2B:BA:F4:5A:26:D9:00:81:51:99:D1:EB:10
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/wYDh5juBGiu69Fom2QCBUZnR6xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.248.0/22
89.40.238.0/24
89.43.72.0/24
89.43.198.0/24
89.44.145.0/24
109.205.136.0/22
185.128.60.0/22
185.237.136.0/22
185.249.232.0/24
185.253.144.0/22
193.39.92.0/22
194.15.219.0/24
194.15.232.0/24
194.15.236.0/24
194.26.1.0/24
IPv6:
2a03:6280::/29
2a0c:1380::/29
2a0c:3cc0::/32
Signature Algorithm: sha256WithRSAEncryption
a3:21:7c:ed:4e:b9:2f:7f:e3:3c:c6:23:62:92:e3:1b:de:02:
22:ee:44:2e:65:10:bb:c8:81:54:61:77:aa:4a:ea:1d:2a:4a:
7a:bb:0e:38:c6:7e:5e:d5:7c:bf:87:8e:54:03:de:f1:ff:7c:
65:27:d7:af:20:d0:56:0f:29:69:0b:0e:3c:29:37:45:e4:7a:
9e:81:7a:40:b3:c9:df:7f:91:bd:d8:8a:4f:b4:a7:26:34:0e:
2c:1a:bc:d4:91:eb:f0:c8:91:aa:b7:5d:3b:38:2b:c0:f7:8e:
d8:0c:05:ef:24:ee:4c:cd:6c:82:8c:6b:e6:95:a9:60:9a:09:
99:11:d1:47:e7:23:f6:38:f4:3d:74:2c:2e:79:bf:f8:83:00:
0e:dc:7a:08:66:ed:59:0b:74:78:c8:38:97:90:af:2e:d8:7a:
7d:db:38:ef:c9:7b:55:c5:2c:7c:28:e7:11:49:ac:1c:69:15:
b5:24:c5:1a:24:d9:f3:29:48:95:57:06:3d:60:b3:d0:2f:b5:
e5:ee:00:bb:aa:9c:c1:f8:c5:5d:a5:72:70:52:74:c3:3d:69:
26:b6:63:17:13:fe:43:8e:69:4f:d3:33:95:25:0f:0e:56:2a:
e1:5c:e9:7c:20:70:75:46:8b:3c:4c:2d:b2:fd:4e:ec:d6:8e:
98:8e:b8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:04:21 2025 by rpki-client