Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/YKYB-Nxhve_jYmT1BOaww8DsFT8.roa
File: YKYB-Nxhve_jYmT1BOaww8DsFT8.roa (raw, json)
Hash identifier: AFReXm5sziTUzoBZKHwiIq/53Zs0/KMzr7kkklvHNco=
Subject key identifier: 60:A6:01:F8:DC:61:BD:EF:E3:62:64:F5:04:E6:B0:C3:C0:EC:15:3F
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018CC64AD3772E241845FF8B2DA5FF82A1F6
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/YKYB-Nxhve_jYmT1BOaww8DsFT8.roa
Signing time: Mon 01 Jan 2024 18:30:41 +0000
ROA not before: Mon 01 Jan 2024 18:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 95.164.56.0/22 maxlen: 22
95.164.52.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
195.214.208.0/22 maxlen: 22
195.214.208.0/21 maxlen: 21
95.164.72.0/22 maxlen: 22
195.214.210.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.92.0/22 maxlen: 22
95.164.248.0/23 maxlen: 23
95.164.251.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
62.205.132.0/24 maxlen: 24
62.205.128.0/19 maxlen: 20
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
2a01:d0:8000::/33 maxlen: 33
2a01:d0::/32 maxlen: 32
2a01:d0:3b::/48 maxlen: 48
2a01:d0:ffff::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:d3:77:2e:24:18:45:ff:8b:2d:a5:ff:82:a1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 18:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60a601f8dc61bdefe36264f504e6b0c3c0ec153f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:38:95:b8:d2:dd:5e:26:97:66:f4:d0:87:
2b:2d:6f:40:89:68:ff:06:f2:2b:72:13:d7:63:a0:
13:0c:81:3d:62:ff:f9:53:13:7d:09:a1:bb:2f:4f:
58:87:3e:4d:21:22:24:21:2a:3e:2f:28:85:7c:92:
b6:4d:27:ec:ed:63:62:1d:4a:0f:d8:7d:c7:2e:97:
8a:9d:e0:4e:d0:d9:0d:3e:cc:fc:8d:fc:ce:32:59:
58:cb:f7:0f:f3:12:53:09:bf:8f:26:d6:66:65:4f:
b4:df:30:c2:e9:b7:b6:b2:2e:de:b8:22:17:88:f4:
70:15:2a:ab:dc:fe:62:ea:e0:3b:b5:01:3d:1c:6d:
a0:7a:8a:ad:7f:9f:95:65:9e:f3:4b:fe:18:87:c5:
2e:b1:d9:68:13:fc:aa:a6:9e:14:90:b5:3e:cc:29:
10:92:dd:e2:4c:76:42:0a:da:e8:35:44:d5:ef:15:
52:bc:2b:a0:48:2e:db:4b:2a:fa:73:d4:ac:b1:6d:
30:08:01:95:ea:1d:46:df:57:ac:15:3c:6c:b0:86:
cb:7d:8e:59:9a:03:f8:4b:4f:d7:26:bd:3a:a3:d8:
8a:d0:34:3e:18:d5:53:cc:eb:1e:13:e8:d3:bf:17:
7a:ee:9a:26:9f:e1:c2:c1:b6:df:9b:29:7e:8d:63:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A6:01:F8:DC:61:BD:EF:E3:62:64:F5:04:E6:B0:C3:C0:EC:15:3F
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/YKYB-Nxhve_jYmT1BOaww8DsFT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.92.0/22
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
195.214.208.0/21
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
a5:84:e7:b0:d5:b8:34:23:7c:3b:07:4d:3f:26:90:ac:42:e4:
99:56:87:60:5b:a3:74:6d:d6:bf:dd:04:42:72:85:f9:90:9b:
ef:0f:75:b3:ec:7a:9f:a4:99:46:37:42:71:06:2d:15:06:fe:
e5:39:1d:50:d2:dc:36:55:41:15:6d:e2:da:a9:ac:3d:3d:bc:
a0:2f:4e:75:ef:e3:06:dc:f2:bf:3e:51:48:fe:17:7c:c3:2c:
a9:bc:94:12:5e:69:ed:f9:91:11:e5:db:a8:e1:37:0e:10:34:
14:65:ee:36:48:49:77:37:c5:6e:fd:fc:cc:a0:25:55:33:6c:
97:fb:3c:e3:c4:ea:b5:2a:4e:86:5e:bd:f4:9c:ab:77:f1:f6:
87:f1:87:c2:58:4a:3a:06:0d:51:c6:76:fb:b0:be:0b:ac:74:
fa:20:b3:bb:13:08:45:d8:ce:c7:36:e9:3c:57:e8:d8:3b:7b:
5a:33:a2:81:9e:9c:8f:68:02:44:a7:2f:60:cb:21:f4:77:29:
08:5f:0f:b5:e7:d8:43:d7:8b:93:1c:40:c7:d0:ff:79:e6:75:
29:df:59:10:ec:61:f0:77:b4:08:19:a7:ac:1a:88:6a:3e:1f:
2d:44:24:2b:0a:63:62:ff:a6:4e:f1:f4:15:66:e1:42:75:ae:
d6:f4:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:54:17 2025 by rpki-client