Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/i9CbhPmu6SgkY6LmdIKGPtgTPjQ.roa
File: i9CbhPmu6SgkY6LmdIKGPtgTPjQ.roa (raw, json)
Hash identifier: 9uIHQ14OCcW9MrI9OUbe36wvPN81zk/7EhQqnkoUR4o=
Subject key identifier: 8B:D0:9B:84:F9:AE:E9:28:24:63:A2:E6:74:82:86:3E:D8:13:3E:34
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018E20662AA0E060A7BF3E4426B9B4AB53C3
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/i9CbhPmu6SgkY6LmdIKGPtgTPjQ.roa
Signing time: Fri 08 Mar 2024 23:29:10 +0000
ROA not before: Fri 08 Mar 2024 23:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/22 maxlen: 22
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.92.0/22 maxlen: 22
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
95.164.248.0/23 maxlen: 23
95.164.251.0/24 maxlen: 24
195.214.208.0/21 maxlen: 21
195.214.208.0/22 maxlen: 22
195.214.210.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
2a01:d0::/32 maxlen: 32
2a01:d0:a::/48 maxlen: 48
2a01:d0:3b::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:20:66:2a:a0:e0:60:a7:bf:3e:44:26:b9:b4:ab:53:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Mar 8 23:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bd09b84f9aee9282463a2e67482863ed8133e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:4b:e5:3f:48:96:f1:48:e9:79:a0:75:67:
a7:41:44:7c:9b:fa:73:a8:fc:eb:18:2f:08:c7:7b:
e7:03:8b:1a:47:4f:2b:f7:aa:d6:d3:8f:42:6e:ba:
2c:c1:1a:b5:67:29:08:65:c5:05:33:00:0b:8b:76:
a7:34:f5:ac:1d:16:7c:a6:04:2e:56:83:86:dd:74:
12:5c:2d:44:d4:5f:87:0d:9a:f5:8b:52:c4:04:da:
6b:97:e3:5f:8d:a9:aa:4b:0e:f7:47:71:eb:d8:48:
d6:47:21:32:89:78:f9:b3:7c:89:91:2a:ee:b6:aa:
95:e0:4e:97:96:fe:71:37:fa:37:8d:18:63:17:df:
fb:34:f6:c1:77:13:db:0f:06:ac:9a:54:c6:a1:c0:
3c:9b:45:0b:c4:d8:e3:2f:ba:61:53:2c:f3:5d:fb:
ce:c1:d0:16:fa:2e:c8:dc:4a:f8:93:bd:39:a6:05:
db:4a:72:4d:56:44:64:5e:82:3d:04:75:83:a1:35:
36:38:ea:63:be:27:ef:03:61:f3:b5:74:b9:0f:b5:
74:7e:21:d4:14:46:01:8c:88:de:74:e7:49:47:d7:
12:2c:64:1d:7e:8e:8a:e2:aa:72:ff:a6:15:ee:ad:
ac:37:c1:79:a9:05:7e:cd:49:d8:ca:1b:f8:03:5b:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D0:9B:84:F9:AE:E9:28:24:63:A2:E6:74:82:86:3E:D8:13:3E:34
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/i9CbhPmu6SgkY6LmdIKGPtgTPjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.92.0/22
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
195.214.208.0/21
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
38:29:b1:40:c7:61:11:e6:8c:47:53:87:02:7a:cf:06:de:04:
98:df:03:b4:af:84:4c:5e:d0:95:04:4b:71:3d:b8:00:42:25:
3c:d8:ae:98:d5:85:df:42:70:34:c6:db:5e:ec:8f:f7:5e:14:
38:19:a3:6b:53:c3:44:08:15:3d:be:5c:92:67:61:02:4c:e7:
87:7b:77:ba:44:22:f2:42:8a:82:05:3b:9e:ac:20:3d:64:dd:
4a:fe:a2:b0:bf:89:73:82:f6:84:12:d9:ae:ec:41:c5:7e:3d:
36:2e:a7:97:49:de:e8:9c:5f:33:e6:58:ef:f9:ef:39:ae:16:
77:63:ff:a6:64:c3:55:7c:74:d7:bb:f5:68:dd:3c:ff:fd:32:
61:b7:b3:2a:1c:1e:6d:ef:28:90:08:cb:51:6c:75:42:fc:a8:
21:4f:d1:53:f8:c4:5a:7c:43:26:ff:db:73:77:3d:57:68:cd:
fa:b4:55:c9:7f:3e:af:b3:93:d0:16:90:28:43:4d:6e:1d:c0:
1c:5a:be:88:ee:7c:57:96:e2:a0:11:e7:b3:91:fe:cd:eb:bf:
1d:14:f7:e4:d1:78:51:e5:28:12:63:af:bd:c7:11:c5:6b:0e:
37:86:1c:3c:6f:e8:ce:ac:18:f8:b0:ee:d2:5d:84:90:b6:97:
b5:94:80:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:37 2025 by rpki-client