Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/YcVf_8AJ5Rpw8ym3oibSXRp048k.roa
File: YcVf_8AJ5Rpw8ym3oibSXRp048k.roa (raw, json)
Hash identifier: rMYA9bmPSFmCwwLsgSig+J3ZEpMRPFVn9NOe5B7iylU=
Subject key identifier: 61:C5:5F:FF:C0:09:E5:1A:70:F3:29:B7:A2:26:D2:5D:1A:74:E3:C9
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 01942143FAE4A88A682C331A304F9C2C0214
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/YcVf_8AJ5Rpw8ym3oibSXRp048k.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8399
IP address blocks: 37.97.64.0/19 maxlen: 19
37.97.69.0/24 maxlen: 24
37.97.70.0/24 maxlen: 24
37.97.80.0/23 maxlen: 23
37.97.96.0/20 maxlen: 20
37.139.120.0/21 maxlen: 21
65.39.64.0/19 maxlen: 19
80.251.96.0/20 maxlen: 20
81.93.0.0/19 maxlen: 19
88.213.224.0/19 maxlen: 19
109.235.232.0/21 maxlen: 21
109.235.232.0/24 maxlen: 24
109.235.233.0/24 maxlen: 24
109.235.239.0/24 maxlen: 24
157.143.128.0/17 maxlen: 17
178.157.16.0/20 maxlen: 20
178.157.32.0/20 maxlen: 20
178.174.96.0/20 maxlen: 23
178.255.160.0/21 maxlen: 21
185.6.92.0/22 maxlen: 22
185.8.252.0/22 maxlen: 22
185.24.140.0/22 maxlen: 22
185.32.208.0/22 maxlen: 22
185.42.176.0/22 maxlen: 22
185.65.248.0/22 maxlen: 22
185.76.216.0/22 maxlen: 22
185.218.208.0/22 maxlen: 22
185.249.20.0/22 maxlen: 22
195.135.0.0/17 maxlen: 17
195.135.0.0/18 maxlen: 18
195.135.12.0/23 maxlen: 23
195.135.48.0/20 maxlen: 20
195.135.48.0/24 maxlen: 24
217.74.96.0/20 maxlen: 20
217.181.128.0/17 maxlen: 17
217.181.250.0/23 maxlen: 23
2a02:6e8::/32 maxlen: 32
2a02:c440::/29 maxlen: 29
2a05:5cc0::/29 maxlen: 29
2a0b:e3c0::/29 maxlen: 29
2a0c:600::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fa:e4:a8:8a:68:2c:33:1a:30:4f:9c:2c:02:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61c55fffc009e51a70f329b7a226d25d1a74e3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:ef:52:d0:c0:54:9b:7c:12:c9:3b:ab:74:
ba:02:48:25:28:f3:88:f3:75:ad:23:02:6d:cd:ee:
a6:d2:7b:55:41:03:98:af:f3:2f:4c:c9:68:ed:53:
2c:a6:82:b5:a5:1e:24:5c:df:e4:9a:ed:9a:6b:2a:
97:16:85:2d:9b:e3:f0:15:47:de:ec:a1:b1:d2:51:
5b:c1:43:e9:8e:69:1c:03:44:8e:75:10:bf:b7:fb:
4d:d1:ce:11:af:9a:12:ed:c8:a2:2e:d6:9b:78:f2:
8e:da:bd:13:99:44:e3:e9:8b:a7:fb:83:d1:3b:6e:
eb:7e:16:05:07:8e:cf:86:8d:32:39:c2:74:47:c9:
7e:9f:54:14:15:ea:ca:cb:a6:8f:16:ef:78:0e:82:
fd:d2:4f:20:4d:a1:e1:87:db:b4:3b:40:02:b9:d1:
72:d1:63:71:c4:8f:e9:7f:ce:e2:f2:89:4a:43:cf:
b3:6a:a4:5c:f9:62:49:12:4e:a1:be:75:01:13:10:
58:5b:76:eb:a7:ab:8f:24:52:a8:05:40:21:9e:93:
9e:10:0a:17:2b:c8:f0:3a:1c:9d:f5:ed:bc:e6:d5:
75:67:dc:d6:e9:22:71:d8:17:7f:d8:5a:f9:93:98:
6c:d2:65:ca:bd:11:c3:6e:e2:01:b4:25:08:41:b1:
86:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C5:5F:FF:C0:09:E5:1A:70:F3:29:B7:A2:26:D2:5D:1A:74:E3:C9
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/YcVf_8AJ5Rpw8ym3oibSXRp048k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.64.0-37.97.111.255
37.139.120.0/21
65.39.64.0/19
80.251.96.0/20
81.93.0.0/19
88.213.224.0/19
109.235.232.0/21
157.143.128.0/17
178.157.16.0-178.157.47.255
178.174.96.0/20
178.255.160.0/21
185.6.92.0/22
185.8.252.0/22
185.24.140.0/22
185.32.208.0/22
185.42.176.0/22
185.65.248.0/22
185.76.216.0/22
185.218.208.0/22
185.249.20.0/22
195.135.0.0/17
217.74.96.0/20
217.181.128.0/17
IPv6:
2a02:6e8::/32
2a02:c440::/29
2a05:5cc0::/29
2a0b:e3c0::/29
2a0c:600::/29
Signature Algorithm: sha256WithRSAEncryption
72:53:06:11:f5:ff:2f:46:98:c2:61:b2:4f:e7:5f:70:de:1c:
4a:94:02:22:f4:df:0f:af:15:ba:2b:15:30:4e:fb:02:0b:84:
21:44:f8:b7:19:da:ee:0b:3a:97:e9:ee:ea:df:51:cf:9d:67:
19:fd:f1:f9:e9:13:fe:ff:94:dd:06:94:5a:66:ee:ea:33:e6:
cb:4c:78:9f:2c:d7:0d:cd:07:d0:63:2a:c1:11:6a:f1:10:54:
32:77:a8:ea:69:32:c0:c0:48:44:cd:8f:29:12:74:6b:b9:00:
7b:3b:e7:ef:c7:28:e0:1c:56:60:4a:54:83:fd:4c:c2:75:c5:
88:3c:e3:c4:a1:fa:49:ff:ff:1b:c9:08:7e:9c:a3:51:b6:4b:
42:53:a8:13:32:f6:ee:2e:96:e7:60:bb:74:bc:80:42:90:ea:
ec:26:fa:d3:a7:4f:96:56:03:b3:9c:f4:2c:88:2c:a2:16:b4:
d3:50:6e:e9:6c:25:7d:f2:28:3e:73:3b:89:51:3f:2e:c6:dc:
24:71:57:6b:6a:fb:4d:51:79:07:c1:59:07:82:ee:7a:c1:1a:
71:d4:2e:d2:9b:65:cd:a5:83:35:64:d1:18:7b:ae:aa:46:79:
7f:9f:44:be:c6:74:2b:0a:fa:fe:c5:26:f0:e2:ff:14:72:3e:
b9:42:71:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:02 2025 by rpki-client