Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/jg_6WFRcnQnYzNcOPf81zfxyb6M.roa
File: jg_6WFRcnQnYzNcOPf81zfxyb6M.roa (raw, json)
Hash identifier: R/GrFpqb+TK1H1IXcu1e76VVF7/aPFjLIuAXZdHYInQ=
Subject key identifier: 8E:0F:FA:58:54:5C:9D:09:D8:CC:D7:0E:3D:FF:35:CD:FC:72:6F:A3
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0186B84600B0C0A8212D09A0C53074669078
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/jg_6WFRcnQnYzNcOPf81zfxyb6M.roa
Signing time: Mon 06 Mar 2023 18:54:00 +0000
ROA not before: Mon 06 Mar 2023 18:54:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 94.131.96.0/24 maxlen: 24
94.131.98.0/24 maxlen: 24
94.131.97.0/24 maxlen: 24
94.131.99.0/24 maxlen: 24
94.131.102.0/24 maxlen: 24
94.131.100.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.108.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
94.131.114.0/24 maxlen: 24
94.131.2.0/24 maxlen: 24
94.131.3.0/24 maxlen: 24
94.131.8.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:46:00:b0:c0:a8:21:2d:09:a0:c5:30:74:66:90:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Mar 6 18:54:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e0ffa58545c9d09d8ccd70e3dff35cdfc726fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:01:98:70:37:fb:e7:8f:b3:c0:40:68:cd:97:
99:2b:36:ee:ac:0e:bf:99:71:8f:9a:3e:86:39:6c:
e2:9d:8b:bf:a8:64:ab:26:3d:ee:34:1b:a2:20:0d:
17:b2:d8:bf:03:c3:f8:bb:68:42:f8:33:44:01:06:
ce:99:70:ff:6a:2e:16:3c:cf:bd:b5:c4:d3:8d:7e:
f4:00:cc:12:c5:18:5b:6e:29:a1:c3:bf:1f:13:3e:
da:fe:a1:27:bc:bc:8c:cb:50:a8:56:01:16:f7:92:
16:16:fc:f1:5b:46:b1:db:71:3f:e5:ff:7e:22:bb:
55:42:19:ac:55:1a:88:f9:98:a8:b4:90:72:24:bf:
d7:68:1d:14:ba:e3:96:94:3d:3e:0d:41:9f:ec:38:
3c:55:06:1a:9a:08:96:9e:a4:be:60:1e:85:55:da:
f5:0f:9e:55:12:1c:5c:45:fd:62:5c:a3:68:b5:77:
28:be:80:05:a6:c0:02:96:37:d7:52:a1:2a:c6:ad:
86:d1:84:d4:d3:10:94:0c:6d:e5:9b:06:0a:22:96:
60:57:30:93:ee:60:f5:d0:a8:e9:99:4c:9d:4d:2b:
95:48:88:40:2e:ec:ba:c4:26:b1:a5:d7:29:2b:24:
43:0f:8e:5a:7f:91:16:f9:99:3e:1d:8f:21:35:01:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0F:FA:58:54:5C:9D:09:D8:CC:D7:0E:3D:FF:35:CD:FC:72:6F:A3
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/jg_6WFRcnQnYzNcOPf81zfxyb6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.2.0/23
94.131.8.0/21
94.131.96.0-94.131.100.255
94.131.102.0/24
94.131.105.0-94.131.108.255
94.131.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:34:e4:91:b9:59:24:7b:4d:11:20:cc:e7:0e:5d:e3:df:aa:
b9:89:6a:0b:72:2b:01:db:09:74:83:95:ec:67:b2:67:d9:97:
0d:d9:08:28:95:36:06:b4:03:fd:78:9d:21:5c:7f:a4:c1:e8:
2e:3f:6b:6a:54:48:1a:d1:f7:f9:f8:1a:ca:14:22:78:ff:49:
18:fe:d2:51:90:b3:c8:fb:a1:f1:c9:23:98:b4:3a:c6:d4:fc:
0c:fb:62:a5:b6:99:88:39:50:93:8c:56:ee:da:96:1f:7e:3d:
bc:aa:72:a9:ed:b3:62:36:b5:b4:32:d0:a9:a3:25:cb:8c:8e:
97:bf:00:6c:07:e1:5a:d3:21:aa:1d:c5:6b:bc:f2:db:a6:82:
ac:7e:e0:6c:ed:49:23:15:f9:39:71:f9:9d:57:1d:ec:52:62:
59:39:81:90:a2:fc:00:ef:d4:bc:82:82:c2:62:d6:5e:fc:36:
b2:c6:6d:4a:5d:70:61:50:d1:dd:24:8c:65:7d:9c:99:ac:c6:
b8:ed:10:ba:70:96:35:b0:41:6d:69:b7:25:af:15:22:73:3c:
a3:ef:14:b3:09:9a:17:be:12:4c:61:41:53:98:fe:7b:1a:9f:
bb:eb:95:a6:79:12:84:ed:fa:95:29:8f:b3:3a:37:6f:80:8d:
d3:3b:23:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:30:06 2025 by rpki-client