Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/fl7M_A-8vINlAAo1kKrDPyh94Bo.roa
File: fl7M_A-8vINlAAo1kKrDPyh94Bo.roa (raw, json)
Hash identifier: GWL2f3YpYzhZrOEDy3D6qT4y1I2fe5sKIl5KSGC6Wkk=
Subject key identifier: 7E:5E:CC:FC:0F:BC:BC:83:65:00:0A:35:90:AA:C3:3F:28:7D:E0:1A
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 0187C73AA31776D78D51CD9FCE036CE62AB7
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/fl7M_A-8vINlAAo1kKrDPyh94Bo.roa
Signing time: Fri 28 Apr 2023 09:38:41 +0000
ROA not before: Fri 28 Apr 2023 09:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8399
IP address blocks: 37.97.64.0/19 maxlen: 19
185.24.140.0/22 maxlen: 22
185.218.208.0/22 maxlen: 22
88.213.224.0/19 maxlen: 19
37.97.69.0/24 maxlen: 24
37.97.70.0/24 maxlen: 24
217.181.128.0/17 maxlen: 17
37.97.80.0/23 maxlen: 23
185.6.92.0/22 maxlen: 22
178.255.160.0/21 maxlen: 21
37.97.96.0/20 maxlen: 20
195.135.0.0/17 maxlen: 17
217.74.96.0/20 maxlen: 20
195.135.0.0/18 maxlen: 18
185.65.248.0/22 maxlen: 22
157.143.128.0/17 maxlen: 17
81.93.0.0/19 maxlen: 19
217.181.250.0/23 maxlen: 23
109.235.232.0/21 maxlen: 21
109.235.232.0/24 maxlen: 24
109.235.239.0/24 maxlen: 24
185.32.208.0/22 maxlen: 22
80.251.96.0/20 maxlen: 20
178.157.16.0/20 maxlen: 20
195.135.48.0/24 maxlen: 24
178.157.32.0/20 maxlen: 20
65.39.64.0/19 maxlen: 19
185.8.252.0/22 maxlen: 22
185.42.176.0/22 maxlen: 22
2a0c:600::/29 maxlen: 29
2a02:c440::/29 maxlen: 29
2a02:6e8::/32 maxlen: 32
2a0b:e3c0::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:3a:a3:17:76:d7:8d:51:cd:9f:ce:03:6c:e6:2a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Apr 28 09:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e5eccfc0fbcbc8365000a3590aac33f287de01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:bc:9d:76:ad:1d:85:5a:0e:9b:bf:7a:16:
89:af:10:50:7b:91:da:1f:56:f3:49:eb:41:9e:13:
d6:77:69:57:d9:65:64:a0:f4:32:77:e2:0a:3d:f8:
bf:32:6b:34:a7:35:cf:1b:3c:56:6c:e0:f1:a2:39:
2e:7f:e7:11:00:11:c4:85:ea:0c:73:e0:1b:ee:10:
f2:d0:12:15:41:9a:d0:ba:43:40:b3:a0:ef:06:9f:
15:db:f7:b8:bb:f5:ca:b8:2f:87:f2:ea:ef:9a:46:
68:f6:25:d9:42:a2:c2:de:4c:2b:04:7e:14:eb:d5:
f8:27:ec:86:cd:6c:a1:27:d0:9e:c0:d0:bb:52:35:
ad:3b:63:24:c2:94:75:bf:92:98:ff:75:91:14:40:
0f:20:65:1e:29:c2:74:94:9a:81:46:e2:34:6f:79:
62:d3:d9:89:f9:a5:ce:eb:9f:1c:94:84:89:e4:56:
27:44:93:55:96:aa:00:76:03:46:f9:0d:11:d4:bb:
51:8a:d4:bf:5f:bb:de:de:9c:6a:0b:be:b9:a6:24:
02:e5:c8:32:1a:63:be:1e:e1:0b:da:88:1e:05:8a:
5c:d8:e9:43:89:e8:67:ce:72:52:0b:f6:4d:27:ce:
64:66:10:58:6a:a8:df:0b:11:23:e9:7e:18:73:2c:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5E:CC:FC:0F:BC:BC:83:65:00:0A:35:90:AA:C3:3F:28:7D:E0:1A
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/fl7M_A-8vINlAAo1kKrDPyh94Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.64.0-37.97.111.255
65.39.64.0/19
80.251.96.0/20
81.93.0.0/19
88.213.224.0/19
109.235.232.0/21
157.143.128.0/17
178.157.16.0-178.157.47.255
178.255.160.0/21
185.6.92.0/22
185.8.252.0/22
185.24.140.0/22
185.32.208.0/22
185.42.176.0/22
185.65.248.0/22
185.218.208.0/22
195.135.0.0/17
217.74.96.0/20
217.181.128.0/17
IPv6:
2a02:6e8::/32
2a02:c440::/29
2a0b:e3c0::/29
2a0c:600::/29
Signature Algorithm: sha256WithRSAEncryption
48:33:9b:0d:19:0a:67:79:39:53:e6:02:e6:39:a6:cd:cf:fb:
ea:ce:d8:df:1e:7d:2f:fa:a3:d3:20:17:1f:75:00:aa:db:0b:
b1:31:a6:34:ab:db:e3:a1:95:3a:01:c3:a7:01:9e:d5:aa:0b:
c3:1c:86:23:f6:0b:05:1a:e4:ba:29:f2:c9:8b:44:ba:75:02:
6c:bf:d8:8a:ea:9b:b9:07:28:b3:6e:43:87:22:c3:15:71:a1:
3d:ad:9f:f3:63:88:cc:f1:80:5a:01:b2:89:db:ff:f6:56:49:
55:2c:f4:a0:fe:f1:c3:c4:bd:27:af:ac:2c:9c:88:6c:c7:0b:
2b:1d:e0:2c:7d:0e:10:70:75:c3:5c:56:39:a7:76:f0:11:fc:
59:08:0b:ac:af:4a:bb:45:1d:d3:9d:52:ca:a9:5f:61:bc:7a:
53:49:93:e8:b7:c0:57:da:ca:d8:8a:a5:99:ab:c7:14:87:34:
dc:11:62:fd:44:39:a5:20:28:6b:c4:3e:22:ac:f1:2b:08:ee:
64:8a:71:be:2e:34:6c:a6:37:32:f6:0c:bf:33:b8:4c:62:9c:
40:65:47:be:15:f6:ed:1b:30:11:c4:ef:82:5f:ee:07:5d:34:
f4:39:a2:c0:3e:1c:4c:e8:0f:37:3f:3d:36:9d:ef:96:a1:a6:
8b:25:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:05 2025 by rpki-client