Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/v6b2r29AQAjv--oRDAzcsFg6fko.roa
File: v6b2r29AQAjv--oRDAzcsFg6fko.roa (raw, json)
Hash identifier: VZ1nhie3VRlSRfweVHigliYOWvpCc4pOSZoFs00cgEs=
Subject key identifier: BF:A6:F6:AF:6F:40:40:08:EF:FB:EA:11:0C:0C:DC:B0:58:3A:7E:4A
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019483C2E3870EEA17E152514172C5CDD757
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/v6b2r29AQAjv--oRDAzcsFg6fko.roa
Signing time: Mon 20 Jan 2025 12:49:34 +0000
ROA not before: Mon 20 Jan 2025 12:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 94.131.2.0/24 maxlen: 24
94.131.3.0/24 maxlen: 24
94.131.96.0/24 maxlen: 24
94.131.97.0/24 maxlen: 24
94.131.98.0/24 maxlen: 24
94.131.99.0/24 maxlen: 24
94.131.100.0/24 maxlen: 24
94.131.101.0/24 maxlen: 24
94.131.102.0/24 maxlen: 24
94.131.103.0/24 maxlen: 24
94.131.104.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
94.131.108.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
94.131.116.0/24 maxlen: 24
94.131.117.0/24 maxlen: 24
94.131.118.0/24 maxlen: 24
94.131.119.0/24 maxlen: 24
94.131.120.0/22 maxlen: 24
95.164.0.0/22 maxlen: 24
95.164.4.0/22 maxlen: 24
95.164.8.0/22 maxlen: 24
95.164.16.0/22 maxlen: 24
95.164.21.0/24 maxlen: 24
95.164.22.0/24 maxlen: 24
95.164.23.0/24 maxlen: 24
95.164.32.0/21 maxlen: 24
95.164.44.0/22 maxlen: 24
95.164.51.0/24 maxlen: 24
95.164.60.0/22 maxlen: 24
95.164.68.0/24 maxlen: 24
95.164.69.0/24 maxlen: 24
95.164.84.0/22 maxlen: 24
95.164.88.0/24 maxlen: 24
95.164.89.0/24 maxlen: 24
95.164.112.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:c2:e3:87:0e:ea:17:e1:52:51:41:72:c5:cd:d7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 20 12:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfa6f6af6f404008effbea110c0cdcb0583a7e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:3f:45:72:03:29:b0:7a:0c:5a:da:28:8e:
74:f2:f9:82:95:ac:7b:dd:64:85:75:50:aa:15:ef:
5d:c0:d5:22:a3:32:c9:cb:96:64:90:0f:17:7b:15:
e6:db:64:f3:39:6f:e6:f3:bf:4f:09:51:5f:13:35:
46:95:9a:3e:a2:5c:f8:bd:08:1d:b6:cc:ff:95:f3:
44:b2:d2:c6:19:d5:8b:a2:db:4b:7c:37:43:0f:3c:
50:a4:43:60:23:9b:6a:18:67:be:50:18:96:41:40:
c3:b6:4a:65:ff:99:dd:bf:b4:c3:20:29:d8:e7:0b:
ce:aa:52:da:70:cb:1b:91:65:7a:20:fb:52:b5:c9:
cc:ac:18:d2:2c:65:43:68:bf:65:b9:18:f0:ec:87:
c0:00:e2:7b:ba:15:be:ed:ae:4b:ff:1c:39:10:45:
af:ad:4b:fd:6d:c1:65:c1:11:21:6c:91:28:92:ed:
5b:12:46:99:74:c6:74:01:30:95:48:65:d6:53:9e:
76:36:3b:f0:fc:0c:f0:47:cd:83:d6:ba:73:b8:ec:
59:4c:81:70:bc:f6:5c:73:75:e7:30:a6:11:09:b6:
e3:3f:77:6b:a8:75:d4:a8:49:83:e1:bf:70:c7:8a:
87:a2:2d:47:18:3c:fd:45:b8:51:84:ae:10:c4:c6:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A6:F6:AF:6F:40:40:08:EF:FB:EA:11:0C:0C:DC:B0:58:3A:7E:4A
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/v6b2r29AQAjv--oRDAzcsFg6fko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.2.0/23
94.131.96.0/20
94.131.116.0-94.131.123.255
95.164.0.0-95.164.11.255
95.164.16.0/22
95.164.21.0-95.164.23.255
95.164.32.0/21
95.164.44.0/22
95.164.51.0/24
95.164.60.0/22
95.164.68.0/23
95.164.84.0-95.164.89.255
95.164.112.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:2e:ef:6f:cb:e8:9b:04:27:8b:01:7f:c7:12:03:72:69:89:
f1:ef:fa:b6:45:18:0e:6b:a6:fa:1f:64:67:33:9e:fe:97:55:
78:3c:92:12:9b:f6:ab:eb:0a:ca:04:f4:72:6e:0e:bb:a2:7a:
19:62:ba:b8:09:3e:74:06:d7:f8:21:f4:3f:fa:13:ad:a6:09:
6d:3f:a7:2e:0a:70:9c:8f:e8:d4:d7:27:ac:7e:cb:5a:93:92:
09:6c:a7:ab:0e:48:65:3f:64:23:54:ee:55:40:86:71:ec:17:
d8:5a:bd:a3:a1:e7:e9:48:1d:d4:45:11:2c:76:95:93:ad:c8:
a9:29:30:92:7d:ad:f7:66:56:58:48:b4:8f:80:4e:56:47:99:
61:c6:93:3e:a7:c5:d4:2b:e8:61:62:68:49:f9:a6:78:ab:09:
f8:af:8f:4f:07:3b:e4:f1:57:68:a0:95:38:89:75:04:dc:75:
73:a5:8f:2e:ab:94:34:0f:f1:81:12:be:20:44:de:1b:e1:7e:
39:15:6f:60:1d:ef:41:86:c6:41:2a:1b:eb:51:ed:b0:6e:2d:
53:ff:36:44:a9:a2:98:a5:9a:d1:03:a1:2f:d1:c2:c7:08:1c:
a4:5b:00:04:42:c7:99:d4:c5:aa:21:fb:b6:78:0c:7c:80:42:
31:d4:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:09 2025 by rpki-client