Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/fcBJdYE3PKsZMOhFTQxqmeXCWYo.roa
File: fcBJdYE3PKsZMOhFTQxqmeXCWYo.roa (raw, json)
Hash identifier: swjNbpnnpkomQyYZsTBJ/1NW+v3Io0ZtwUl8IkQ+XcY=
Subject key identifier: 7D:C0:49:75:81:37:3C:AB:19:30:E8:45:4D:0C:6A:99:E5:C2:59:8A
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018B70E9DB4C130C6F30D5C593F79060ECD1
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/fcBJdYE3PKsZMOhFTQxqmeXCWYo.roa
Signing time: Fri 27 Oct 2023 11:34:16 +0000
ROA not before: Fri 27 Oct 2023 11:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 95.164.60.0/22 maxlen: 24
95.164.69.0/24 maxlen: 24
95.164.68.0/24 maxlen: 24
95.164.84.0/22 maxlen: 24
95.164.89.0/24 maxlen: 24
95.164.88.0/24 maxlen: 24
94.131.2.0/24 maxlen: 24
94.131.3.0/24 maxlen: 24
94.131.8.0/21 maxlen: 24
94.131.96.0/24 maxlen: 24
94.131.98.0/24 maxlen: 24
94.131.97.0/24 maxlen: 24
94.131.99.0/24 maxlen: 24
94.131.103.0/24 maxlen: 24
94.131.102.0/24 maxlen: 24
94.131.101.0/24 maxlen: 24
94.131.100.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.108.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
94.131.112.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
94.131.113.0/24 maxlen: 24
94.131.116.0/24 maxlen: 24
94.131.115.0/24 maxlen: 24
94.131.114.0/24 maxlen: 24
94.131.118.0/24 maxlen: 24
94.131.117.0/24 maxlen: 24
94.131.119.0/24 maxlen: 24
95.164.8.0/22 maxlen: 24
95.164.16.0/22 maxlen: 24
95.164.23.0/24 maxlen: 24
95.164.22.0/24 maxlen: 24
95.164.21.0/24 maxlen: 24
95.164.32.0/21 maxlen: 24
95.164.44.0/22 maxlen: 24
95.164.51.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:e9:db:4c:13:0c:6f:30:d5:c5:93:f7:90:60:ec:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Oct 27 11:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dc0497581373cab1930e8454d0c6a99e5c2598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:08:ac:6f:a9:ae:6a:e9:be:04:2a:41:a0:
69:73:34:b9:e4:43:3e:89:c7:85:5e:17:6e:4c:0f:
f6:0c:6e:4b:ef:7c:14:a3:42:b9:0b:46:ea:ee:be:
67:71:7b:fe:f2:f9:5e:e1:c9:39:37:d8:1d:83:47:
0e:83:9c:6e:6d:0a:24:e5:ed:81:27:d6:20:0c:33:
27:6d:e7:40:b0:06:02:bf:86:2f:fe:fa:ae:b3:a7:
3e:f9:fa:79:78:f3:17:2d:99:10:4a:69:56:e6:f7:
7e:60:f3:f7:ec:6c:6c:6f:0a:dd:df:6c:6c:3a:ea:
bc:95:75:77:9f:68:94:6e:d9:04:81:d5:f8:2a:d3:
db:49:b6:56:9f:65:dd:62:32:b7:d0:b5:79:bf:22:
b2:fd:b7:f7:62:49:53:85:08:32:0f:4d:cd:05:1d:
18:90:1d:12:59:bf:9b:29:c8:d6:4c:ac:ab:f0:8f:
b2:2e:04:10:d9:ab:f9:52:dd:95:bc:03:47:11:5f:
20:ea:05:89:cb:03:fa:dc:a6:f6:7f:03:b6:23:92:
01:91:14:23:8d:e9:5e:4f:4a:fe:ed:a0:60:a2:14:
0d:7e:11:a6:52:83:3c:75:3d:07:aa:2e:2f:cd:de:
aa:e7:4b:08:ae:d6:ab:b5:58:75:7e:cb:a0:90:8e:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C0:49:75:81:37:3C:AB:19:30:E8:45:4D:0C:6A:99:E5:C2:59:8A
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/fcBJdYE3PKsZMOhFTQxqmeXCWYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.2.0/23
94.131.8.0/21
94.131.96.0-94.131.119.255
95.164.8.0/22
95.164.16.0/22
95.164.21.0-95.164.23.255
95.164.32.0/21
95.164.44.0/22
95.164.51.0/24
95.164.60.0/22
95.164.68.0/23
95.164.84.0-95.164.89.255
Signature Algorithm: sha256WithRSAEncryption
27:8b:4f:52:3b:23:eb:04:37:fb:f3:69:3c:8a:b6:b4:be:8f:
30:eb:78:8c:c3:f0:16:b5:89:ed:57:5a:72:a8:45:76:ff:67:
e1:f6:7f:a7:13:62:8f:77:1a:98:82:51:a2:5e:83:b7:3c:97:
a5:cc:ca:67:15:1b:ab:3d:90:16:e5:65:44:d7:ba:e8:3a:e5:
ef:4b:df:52:71:d2:1a:59:5b:fd:80:c5:38:f1:a6:fc:22:e9:
9a:f0:b0:9e:03:11:74:57:23:51:80:96:fd:97:11:65:7f:b0:
8f:81:c8:5e:87:31:fc:f0:fb:35:12:9b:a1:2e:2d:5f:f4:dc:
e7:52:fa:eb:36:03:2b:66:d9:ae:26:3e:fe:33:dd:45:8d:9f:
75:fc:3b:ac:b4:47:d2:5a:0f:84:ad:26:0f:28:b2:49:a7:8c:
51:96:62:aa:1a:b1:15:a2:c8:0c:31:ac:32:59:2a:03:ee:72:
ed:a7:d2:85:d8:64:3f:85:e6:a3:b4:40:77:d9:29:74:97:eb:
55:95:c1:45:07:2d:d3:0f:fc:28:dc:3e:10:96:5c:ec:6e:d7:
95:8b:23:5a:57:25:a2:9d:7d:e2:3f:e3:66:cc:18:65:f1:e1:
20:69:5a:32:1f:fc:c7:50:ec:d7:16:ef:21:89:53:89:8b:6b:
0f:77:af:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:22:35 2025 by rpki-client