Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/fBwGRMredShHEASjFAN-S55EVPU.roa
File: fBwGRMredShHEASjFAN-S55EVPU.roa (raw, json)
Hash identifier: I3VpcBD3CCzPow4MUYGvENQgjeW1zOOKcuoQRsKY9OA=
Subject key identifier: 7C:1C:06:44:CA:DE:75:28:47:10:04:A3:14:03:7E:4B:9E:44:54:F5
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 018B00FA4642675666DEC56137FB52FDBA79
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/fBwGRMredShHEASjFAN-S55EVPU.roa
Signing time: Thu 05 Oct 2023 17:54:43 +0000
ROA not before: Thu 05 Oct 2023 17:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 185.217.5.0/24 maxlen: 24
2a12:f8c1:100::/40 maxlen: 40
2a12:f8c3:1000::/36 maxlen: 36
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:fa:46:42:67:56:66:de:c5:61:37:fb:52:fd:ba:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Oct 5 17:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c1c0644cade7528471004a314037e4b9e4454f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:e3:e5:17:e1:08:94:bf:15:ef:11:73:59:
1e:6e:9f:c2:f0:ee:41:4c:1c:4c:dc:70:ea:b4:91:
72:48:1d:17:55:df:d8:a1:d8:2e:4d:82:08:c4:9d:
c9:c3:fa:2e:a1:17:0e:ae:92:b9:86:e3:06:17:11:
b5:ca:64:f0:99:bb:9d:91:c9:f1:c5:87:2b:1f:a0:
0e:bd:ba:fc:5c:bb:d7:83:b4:82:74:31:5b:49:23:
a4:f4:16:5e:8e:98:4d:98:57:e8:66:cd:0d:18:20:
47:83:50:f1:22:af:b6:b0:54:d0:37:34:20:5d:4f:
8a:19:98:0d:c3:aa:a9:ee:27:ce:3d:05:eb:e3:b2:
b9:c4:a8:e9:5f:63:73:be:83:f2:5f:bf:b1:ed:fb:
57:e9:13:07:39:00:f5:0d:4f:d5:a8:e7:a9:ba:98:
db:91:e3:6d:1c:cf:91:4e:52:7b:31:16:7a:5a:3a:
85:d1:3b:ee:48:94:f4:8e:e7:28:6f:49:23:4c:46:
e7:d9:12:32:2d:c8:25:0d:90:b0:ee:83:0c:a8:b4:
3e:06:d4:19:02:a9:8f:33:12:69:10:e6:b0:53:cb:
12:09:35:72:57:00:f6:9c:3c:b6:96:82:e5:3a:5b:
52:b5:e3:00:88:e5:ac:6e:18:00:22:47:2e:e7:c6:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1C:06:44:CA:DE:75:28:47:10:04:A3:14:03:7E:4B:9E:44:54:F5
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/fBwGRMredShHEASjFAN-S55EVPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.5.0/24
IPv6:
2a12:f8c1:100::/40
2a12:f8c3:1000::/36
Signature Algorithm: sha256WithRSAEncryption
a0:56:ab:f9:01:13:1d:8f:c8:7f:42:90:10:a1:20:86:0a:92:
19:8b:9c:3f:b1:c1:01:4c:c7:4e:45:48:b8:d2:14:b7:65:8a:
86:9d:89:fb:1b:da:dd:d5:ce:69:c2:13:fd:b5:28:2d:e2:aa:
b0:0e:17:25:54:13:d7:ff:51:e5:b1:21:8f:c0:8a:c5:d7:9e:
92:48:ea:b3:43:15:53:a2:c7:4d:ef:48:71:6c:74:c5:05:e7:
a4:41:1f:66:5b:ec:4d:bb:d1:61:0a:63:5e:c6:05:26:91:2a:
e7:f8:46:83:38:c7:17:d4:d5:c0:ab:94:db:39:6e:56:54:ee:
5e:cc:f8:9c:ff:91:c4:60:72:29:75:79:61:f3:73:ac:6b:f6:
28:e0:33:b8:05:bc:6e:b1:1f:fe:5c:1d:6c:b0:e6:d4:de:36:
c5:04:d3:5b:e2:2e:70:02:65:5c:31:2c:40:2d:9a:43:00:10:
30:c4:3f:da:42:bd:d8:c6:d1:34:94:17:3e:53:97:5f:10:16:
62:8c:77:41:21:ea:59:d4:9f:91:23:3f:41:78:27:d8:b9:d8:
14:8c:b3:dc:43:b1:c8:88:69:0c:dd:23:84:1b:42:2b:ee:51:
aa:ab:4c:0c:fe:e3:37:eb:85:a9:d1:39:ce:55:16:e6:4f:f8:
f2:c7:e9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:55 2025 by rpki-client