Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/dT3UvO0W7sfPeHOxmg9Wzz2ftfQ.roa
File: dT3UvO0W7sfPeHOxmg9Wzz2ftfQ.roa (raw, json)
Hash identifier: KRbp3Oq6eYFqpjR+2ogObGTsI+yyqkp5NWrdx3OpTVA=
Subject key identifier: 75:3D:D4:BC:ED:16:EE:C7:CF:78:73:B1:9A:0F:56:CF:3D:9F:B5:F4
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018E20662B0E9A7C6C27A26F8CDC8D429836
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/dT3UvO0W7sfPeHOxmg9Wzz2ftfQ.roa
Signing time: Fri 08 Mar 2024 23:29:10 +0000
ROA not before: Fri 08 Mar 2024 23:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29632
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.128.0/20 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/22 maxlen: 22
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.92.0/22 maxlen: 22
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
195.214.208.0/21 maxlen: 21
195.214.208.0/22 maxlen: 22
195.214.210.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
2a01:d0::/32 maxlen: 32
2a01:d0:a::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:20:66:2b:0e:9a:7c:6c:27:a2:6f:8c:dc:8d:42:98:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Mar 8 23:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=753dd4bced16eec7cf7873b19a0f56cf3d9fb5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:a1:b2:35:e5:f7:a1:4e:19:ba:b8:c4:c8:
7f:b4:7b:d2:a6:35:36:cf:29:bd:c8:7d:8e:8a:73:
7a:f7:70:9a:fd:07:64:77:8f:11:b3:d3:1e:0e:63:
d8:ca:68:a3:84:37:6b:09:11:0e:64:6c:a2:71:f6:
69:0c:79:f9:a7:83:3d:86:21:d1:b1:4c:ef:b1:08:
b5:2f:c4:92:36:37:69:2a:33:c5:24:c3:69:72:f5:
6d:a2:bd:dc:47:dd:2b:08:42:20:95:f3:1d:70:fc:
80:61:43:6a:7f:44:99:06:5a:9b:20:98:2c:a7:20:
a7:77:33:77:1d:85:30:b9:3f:c9:3c:36:42:21:28:
79:f7:1e:7a:bc:41:fa:2c:95:3b:83:f8:20:d0:9c:
f0:dd:c9:fd:df:7a:93:b5:04:d4:d8:cd:30:99:05:
3c:68:a8:9a:80:6c:ab:bb:d5:35:d5:3e:73:79:5e:
53:8e:ba:3c:2a:9f:84:df:48:a1:93:d9:91:6f:6b:
da:6c:a5:3d:c7:5e:a8:b2:7c:5e:9b:94:09:15:13:
df:2b:a3:9d:ba:aa:8e:e3:09:29:65:08:82:50:0d:
aa:db:65:83:8c:13:7c:da:d7:21:29:8a:92:55:bb:
70:1c:50:71:78:81:42:93:6d:d6:df:47:70:da:36:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:D4:BC:ED:16:EE:C7:CF:78:73:B1:9A:0F:56:CF:3D:9F:B5:F4
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/dT3UvO0W7sfPeHOxmg9Wzz2ftfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.92.0/22
95.164.170.0-95.164.175.255
195.214.208.0/21
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
a4:03:c3:17:5a:76:8f:14:c1:b2:cb:05:f9:66:7c:85:fa:f5:
0b:1c:45:45:29:ae:db:7c:4e:06:16:fb:5c:9e:84:21:ce:e0:
e7:72:e5:3d:ab:88:94:09:a5:64:e4:6f:9d:0b:95:07:2c:ea:
88:01:c9:fc:56:78:95:38:8c:8b:28:7a:87:da:8d:a4:44:25:
1f:11:ef:a5:71:f0:9b:09:08:fb:d6:b7:32:32:44:d3:78:bf:
16:5c:f3:f5:45:19:08:43:92:dd:2a:13:c3:94:2e:8b:03:5e:
35:bc:d1:66:ef:03:08:73:5a:0e:b4:4c:84:62:63:49:1f:16:
d6:a1:da:2a:f9:b8:3b:ec:4d:14:02:3b:4a:1c:e2:33:0b:e8:
7c:02:7a:52:3d:b7:1b:17:38:a8:bc:c0:bf:45:62:9b:7b:9c:
40:b7:57:a8:ba:07:44:ec:09:54:64:58:5d:e2:5f:68:0f:90:
ae:96:48:ab:86:bc:73:15:63:3f:56:b8:cf:8c:a8:eb:a2:2c:
d1:b2:74:1b:af:08:42:57:80:8e:58:f6:8a:f6:ab:7e:4d:54:
81:f3:ed:6b:71:d9:f8:0e:0c:30:a5:3e:14:8e:55:41:ee:2b:
21:9b:92:e3:e0:c8:a2:94:50:f9:3e:23:2c:a3:5b:d4:ae:bc:
d4:a5:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:30:50 2025 by rpki-client