Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/x5pJvoIsJ4hzZZoSRRKhUC0ZIIQ.roa
File: x5pJvoIsJ4hzZZoSRRKhUC0ZIIQ.roa (raw, json)
Hash identifier: t5mzGNYNTTcxh2kg8fMMjzhxAdoVXFhQJEbwUyoF5qc=
Subject key identifier: C7:9A:49:BE:82:2C:27:88:73:65:9A:12:45:12:A1:50:2D:19:20:84
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 01942143FBE394F59AC767E7F9388E2915C1
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/x5pJvoIsJ4hzZZoSRRKhUC0ZIIQ.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51057
IP address blocks: 109.235.232.0/21 maxlen: 21
109.235.232.0/23 maxlen: 23
109.235.233.0/24 maxlen: 24
109.235.234.0/23 maxlen: 23
109.235.234.0/24 maxlen: 24
109.235.238.0/24 maxlen: 24
109.235.239.0/24 maxlen: 24
217.181.250.0/23 maxlen: 23
2a0c:600::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fb:e3:94:f5:9a:c7:67:e7:f9:38:8e:29:15:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c79a49be822c278873659a124512a1502d192084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:64:51:df:e8:cd:19:ed:56:f4:ed:f3:ff:
fb:11:8b:7d:02:41:67:88:d2:25:40:74:6d:10:ff:
80:16:d8:ab:c7:60:76:a4:dc:bb:f1:e7:24:1e:7a:
f2:d8:5f:f1:aa:f9:02:02:5d:06:8a:db:b3:f1:03:
98:42:95:62:f6:c9:aa:3a:fa:06:c9:fd:4a:85:aa:
8c:a6:33:a3:05:22:52:a1:5d:ad:63:65:a6:a3:92:
f1:a2:57:f7:6e:f3:b7:d7:35:75:ee:c0:51:34:b1:
84:a3:8b:32:c8:0d:21:f1:99:bd:2b:8d:9b:3a:d1:
73:42:b7:54:99:2d:e2:c9:ad:47:58:69:57:c4:36:
b3:11:e1:da:40:86:8b:85:09:6e:02:13:97:0c:17:
2c:bd:02:e2:88:7f:23:ba:ba:12:a8:ca:fc:f5:ad:
06:61:9c:e8:88:14:74:d3:cf:83:3e:6b:ee:be:a4:
28:15:42:6c:7d:7b:58:7f:72:42:99:ee:e7:be:bf:
3b:18:31:69:14:6f:b9:8a:12:3c:46:66:7b:56:b0:
f0:59:db:57:98:cb:ce:02:ad:d4:e4:e9:97:a3:48:
0c:d8:cd:83:f9:8f:ff:13:46:2c:6b:6f:fe:71:fa:
c6:bd:61:53:9a:ea:63:7e:68:9b:7d:a7:67:48:99:
de:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9A:49:BE:82:2C:27:88:73:65:9A:12:45:12:A1:50:2D:19:20:84
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/x5pJvoIsJ4hzZZoSRRKhUC0ZIIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.232.0/21
217.181.250.0/23
IPv6:
2a0c:600::/29
Signature Algorithm: sha256WithRSAEncryption
56:51:85:a8:f1:7f:80:d5:a8:26:ed:f0:3e:47:0d:28:81:37:
9b:aa:2d:c8:46:d0:ec:f6:da:73:ca:c0:40:0e:f0:6d:3d:e3:
77:b5:99:a6:1b:fa:91:76:96:28:8d:ce:00:38:59:02:5a:45:
09:fb:27:40:f5:3e:52:da:22:51:70:e8:6d:4a:e3:fc:2e:3e:
04:65:39:18:59:95:36:7e:e4:8c:57:52:e2:06:cd:61:5d:89:
95:90:0e:15:50:82:6c:6a:f1:8d:6f:6e:e9:4b:3e:de:fb:a4:
01:ff:d7:fb:72:55:13:3d:2e:15:bb:58:66:4b:80:3a:aa:70:
cd:0c:d7:b6:e2:3b:61:86:0f:53:fb:6c:75:35:42:c6:7f:75:
cd:ba:87:58:8e:c7:c3:c8:06:b9:36:72:b8:2c:cc:2d:eb:a7:
4a:38:83:da:4c:7a:66:9a:16:e1:ee:9a:25:b8:ed:26:cb:cf:
05:46:19:19:fb:fe:7a:6c:a2:db:64:89:5e:37:3a:2b:ed:f3:
b9:e3:bd:aa:6b:23:de:26:9c:81:63:eb:b4:ac:87:49:03:d1:
0d:9a:5a:b3:5e:96:a6:8e:9e:e9:d6:3f:cb:ab:c1:68:f9:2b:
b5:ab:12:f7:8c:f2:a8:40:2e:12:29:ba:a9:32:a0:3a:64:9d:
6d:8e:bb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:18 2025 by rpki-client