Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/U0NBeyZqBUzUnAQO8Jy_6QWMeB4.roa
File: U0NBeyZqBUzUnAQO8Jy_6QWMeB4.roa (raw, json)
Hash identifier: NfEIkW1BdCdRJKVzVKv2V7pfYEp6HcDuewd7CpmAt98=
Subject key identifier: 53:43:41:7B:26:6A:05:4C:D4:9C:04:0E:F0:9C:BF:E9:05:8C:78:1E
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01877B6EF3D30609C23276AE0A2B6D097249
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/U0NBeyZqBUzUnAQO8Jy_6QWMeB4.roa
Signing time: Thu 13 Apr 2023 16:24:41 +0000
ROA not before: Thu 13 Apr 2023 16:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13285
IP address blocks: 78.144.0.0/13 maxlen: 24
2.96.0.0/13 maxlen: 24
217.68.128.0/20 maxlen: 24
185.173.120.0/22 maxlen: 24
92.0.0.0/11 maxlen: 24
62.24.128.0/17 maxlen: 24
89.240.0.0/14 maxlen: 24
212.139.24.0/24 maxlen: 24
212.139.148.0/22 maxlen: 22
91.146.112.0/21 maxlen: 24
62.241.160.0/19 maxlen: 24
185.173.116.0/22 maxlen: 24
185.112.212.0/22 maxlen: 24
212.139.133.0/24 maxlen: 24
2001:4a00::/27 maxlen: 27
2a00:4340::/32 maxlen: 32
2001:7e0::/32 maxlen: 32
2a0b:e900::/29 maxlen: 29
2a0b:db00::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:6e:f3:d3:06:09:c2:32:76:ae:0a:2b:6d:09:72:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Apr 13 16:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5343417b266a054cd49c040ef09cbfe9058c781e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:a9:4b:32:f0:72:96:8e:92:17:5c:4f:85:
b5:a0:ca:77:d2:db:57:40:e0:16:9f:f4:a5:fd:11:
53:57:43:9e:49:6c:2e:d2:0c:22:7f:8d:17:c6:0a:
74:48:84:09:85:54:69:58:0f:87:9b:a8:3e:9e:fd:
5a:f4:40:f8:78:1f:dc:2b:b9:42:f5:47:ec:6a:ca:
06:fa:33:13:75:da:93:ed:c0:81:b0:f2:8d:df:fb:
21:76:41:38:7d:26:01:ea:4e:28:4e:aa:a9:b1:08:
0c:20:40:a3:ad:14:4f:6d:24:1d:2f:98:bd:78:39:
3e:e7:58:a4:da:de:27:08:89:f8:02:d5:bf:28:04:
ed:3d:cc:f8:49:67:be:b0:87:91:7e:81:db:f3:13:
b3:04:26:e8:0c:ac:12:d3:70:7f:bb:ab:62:ba:17:
fe:66:fc:13:1c:1a:0d:65:60:0d:06:f4:2e:c8:72:
e7:d1:98:f7:10:18:aa:8a:6c:7e:19:fa:5f:5c:04:
d9:47:03:f7:1e:2a:f6:49:e0:5f:fa:93:52:46:b2:
01:fd:5f:bc:69:4a:ee:c5:0a:2f:cf:73:fd:6a:3b:
57:ce:26:45:f7:39:8e:4b:ae:88:47:13:8a:3c:99:
8d:70:79:f9:65:7f:0c:a5:bc:04:4b:7b:4e:57:b0:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:43:41:7B:26:6A:05:4C:D4:9C:04:0E:F0:9C:BF:E9:05:8C:78:1E
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/U0NBeyZqBUzUnAQO8Jy_6QWMeB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
89.240.0.0/14
91.146.112.0/21
92.0.0.0/11
185.112.212.0/22
185.173.116.0-185.173.123.255
212.139.24.0/24
212.139.133.0/24
212.139.148.0/22
217.68.128.0/20
IPv6:
2001:7e0::/32
2001:4a00::/27
2a00:4340::/32
2a0b:db00::/29
2a0b:e900::/29
Signature Algorithm: sha256WithRSAEncryption
1c:86:b9:b1:da:11:70:38:67:19:fa:d7:e1:82:7d:62:4d:63:
8c:52:b2:b2:12:f5:e8:9b:9f:5d:33:77:39:3e:05:cf:b8:e0:
59:6d:a7:a4:75:ec:43:06:13:1e:d2:ff:f5:84:45:4a:1f:a2:
f7:80:74:ea:c9:e9:8c:bd:42:c1:08:d4:8d:89:91:fe:42:8c:
d7:46:6a:54:c0:2e:fe:14:d2:e9:14:ae:b8:c5:0c:58:c2:ae:
4c:c1:17:6e:aa:46:54:e7:46:21:c3:8b:cc:96:a8:e6:3a:b9:
36:b1:a4:f1:0b:a6:6c:56:4f:14:0c:9d:ad:ca:f5:8c:0b:09:
fa:10:29:fc:c6:a4:8f:3e:d1:fc:d2:46:7c:f4:92:38:84:68:
95:23:95:ad:6c:d2:da:8a:64:74:be:25:3c:5c:ec:fe:3e:de:
70:74:dd:d2:23:b8:11:29:bf:75:2e:2b:32:e1:4e:3f:73:9c:
a3:fd:ba:bf:c9:8b:e3:58:90:1c:3b:cc:be:c0:1e:cf:2f:f7:
ad:d2:53:51:81:57:10:51:e7:8c:66:76:38:8c:2f:2d:43:5f:
fe:0c:da:02:5a:db:c8:24:c2:03:8e:3c:7e:cd:5c:9e:27:7c:
9c:08:f4:8c:93:70:b4:3d:69:11:b8:0d:68:46:50:85:24:f9:
b0:c7:79:46
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYd7bvPTBgnCMnauCittCXJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh
ZGIzZWMwHhcNMjMwNDEzMTYyNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzQzNDE3YjI2NmEwNTRjZDQ5YzA0MGVmMDljYmZlOTA1OGM3ODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTupSzLwcpaOkhdcT4W1oMp30ttX
QOAWn/Sl/RFTV0OeSWwu0gwif40Xxgp0SIQJhVRpWA+Hm6g+nv1a9ED4eB/cK7lC
9UfsasoG+jMTddqT7cCBsPKN3/shdkE4fSYB6k4oTqqpsQgMIECjrRRPbSQdL5i9
eDk+51ik2t4nCIn4AtW/KATtPcz4SWe+sIeRfoHb8xOzBCboDKwS03B/u6tiuhf+
ZvwTHBoNZWANBvQuyHLn0Zj3EBiqimx+GfpfXATZRwP3Hir2SeBf+pNSRrIB/V+8
aUruxQovz3P9ajtXziZF9zmOS66IRxOKPJmNcHn5ZX8MpbwES3tOV7D+GwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFFNDQXsmagVM1JwEDvCcv+kFjHgeMB8GA1UdIwQY
MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt
MGQ4ZjdkZDhjY2U2LzEvVTBOQmV5WnFCVXpVbkFRTzhKeV82UVdNZUI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2
LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTBYBAIAATBSAwMDAmAD
BAc+GIADBAU+8aADAwNOkAMDAlnwAwQDW5JwAwMFXAADBAK5cNQwDAMEArmtdAME
ArmteAMEANSLGAMEANSLhQMEAtSLlAMEBNlEgDApBAIAAjAjAwUAIAEH4AMFBSAB
SgADBQAqAENAAwUDKgvbAAMFAyoL6QAwDQYJKoZIhvcNAQELBQADggEBAByGubHa
EXA4Zxn61+GCfWJNY4xSsrIS9eibn10zdzk+Bc+44Fltp6R17EMGEx7S//WERUof
oveAdOrJ6Yy9QsEI1I2Jkf5CjNdGalTALv4U0ukUrrjFDFjCrkzBF26qRlTnRiHD
i8yWqOY6uTaxpPELpmxWTxQMna3K9YwLCfoQKfzGpI8+0fzSRnz0kjiEaJUjla1s
0tqKZHS+JTxc7P4+3nB03dIjuBEpv3UuKzLhTj9znKP9ur/Ji+NYkBw7zL7AHs8v
963SU1GBVxBR54xmdjiMLy1DX/4M2gJa28gkwgOOPH7NXJ4nfJwI9IyTcLQ9aRG4
DWhGUIUk+bDHeUY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 01:25:49 2025 by rpki-client