Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/fQfomphDNyE6dPWgsqhMwxfgQYU.roa
File: fQfomphDNyE6dPWgsqhMwxfgQYU.roa (raw, json)
Hash identifier: GVHODS4lCFEIcMWxqUtCsxexL0YuPQ2q+lAH859xH8U=
Subject key identifier: 7D:07:E8:9A:98:43:37:21:3A:74:F5:A0:B2:A8:4C:C3:17:E0:41:85
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018907A5DB5D3DF23F6A29B5DC6172D798F3
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/fQfomphDNyE6dPWgsqhMwxfgQYU.roa
Signing time: Thu 29 Jun 2023 14:54:17 +0000
ROA not before: Thu 29 Jun 2023 14:54:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 95.164.56.0/22 maxlen: 22
95.164.52.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.72.0/22 maxlen: 22
195.214.212.0/22 maxlen: 22
195.214.208.0/22 maxlen: 22
195.214.208.0/21 maxlen: 21
195.214.210.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.92.0/22 maxlen: 22
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
62.205.128.0/19 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
2a01:d0:8000::/33 maxlen: 33
2a01:d0::/32 maxlen: 32
2a01:d0:3b::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:ffff::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:a5:db:5d:3d:f2:3f:6a:29:b5:dc:61:72:d7:98:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jun 29 14:54:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d07e89a984337213a74f5a0b2a84cc317e04185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:95:b6:9e:71:66:01:07:17:96:5a:09:57:
ef:a6:d7:03:25:0d:8e:3d:64:e9:21:c4:13:03:13:
bf:86:52:f5:8d:9a:2a:b6:4c:0a:0a:41:e5:c5:7d:
57:0d:01:d2:d5:86:9b:8f:49:94:34:09:9b:6d:3d:
7b:60:eb:62:dc:1a:c6:1e:ea:b3:79:ec:a9:c3:a4:
7d:04:d7:62:4e:a6:16:a5:0d:1a:02:76:8d:e4:98:
f7:1e:91:2d:56:e5:d3:dc:72:6a:52:a6:3b:4d:5d:
ad:d5:1f:1a:b8:17:4e:b3:c9:4a:fd:d2:dc:a7:dc:
b3:a1:81:8c:68:2f:b3:25:8c:f2:c0:dd:f0:71:6e:
42:ef:0b:33:1a:d7:16:04:b1:9d:bc:96:e1:4a:59:
ab:86:87:d2:93:8c:92:69:15:cf:2a:8a:98:60:4e:
0e:a7:10:72:82:a2:de:ca:35:66:9a:d0:6e:9b:d0:
07:7b:84:d3:b5:98:ac:19:53:d1:00:17:33:6c:a5:
0f:67:39:5d:d0:ca:1a:f0:e3:a4:08:fd:10:24:3d:
54:18:63:48:7e:73:f3:83:64:7f:17:db:0f:8f:10:
75:48:e0:f4:b6:14:cc:2b:94:f7:0b:02:4b:dc:d5:
3c:02:d8:47:17:89:38:2d:78:12:c8:a8:02:4e:a0:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:07:E8:9A:98:43:37:21:3A:74:F5:A0:B2:A8:4C:C3:17:E0:41:85
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/fQfomphDNyE6dPWgsqhMwxfgQYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.92.0/22
95.164.170.0-95.164.175.255
195.214.208.0/21
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
64:81:f5:f3:48:05:b8:0e:52:12:6b:27:4c:23:44:c4:4a:ee:
0f:5f:67:dd:29:71:09:bc:e1:5e:c7:5a:30:62:ef:2b:70:d7:
b5:e7:39:e0:38:0f:b1:46:70:4f:8e:5f:7a:d5:63:3b:09:8f:
06:c6:d4:6f:f2:4e:1a:a0:00:7d:a2:5e:e6:a9:ee:44:db:0f:
a7:e8:de:e0:9d:51:41:06:46:ed:27:f4:26:d1:16:b7:e0:e0:
48:22:ff:e4:de:c8:41:15:f5:86:7b:49:44:c6:d9:17:0e:22:
a2:8f:8c:35:79:4b:f3:e3:93:25:39:2d:e1:92:5f:d7:eb:49:
7c:15:7d:0f:5a:db:69:b3:ac:15:f7:83:1f:70:bd:3b:89:cd:
e6:88:90:e6:93:99:59:25:15:94:34:b1:9e:75:b2:dd:fe:02:
82:14:f9:b6:db:66:e3:63:1b:2b:a0:26:38:d1:16:2d:a7:24:
fe:da:76:fe:b5:a0:52:c8:b2:79:3e:7f:bb:db:36:52:36:e0:
0c:66:35:b2:03:e7:3e:b7:1f:6a:72:8f:a0:80:9b:b8:2a:84:
80:53:6b:44:1c:81:dc:c3:11:51:d6:13:b0:f6:9a:94:cb:73:
ae:39:fc:38:54:b5:5c:12:7b:bc:66:69:3e:c8:00:3f:c4:7a:
ad:1e:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:44 2025 by rpki-client