Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/lMAOjh6DmiSRUFe78i4wU5btyHk.roa
File: lMAOjh6DmiSRUFe78i4wU5btyHk.roa (raw, json)
Hash identifier: eNLBYRF/OJQj/VMp6qoMHYlASukNdxHl/j0ztm4t90I=
Subject key identifier: 94:C0:0E:8E:1E:83:9A:24:91:50:57:BB:F2:2E:30:53:96:ED:C8:79
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 01856EB9042630DF22C4D4BE2AF32E7224C3
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/lMAOjh6DmiSRUFe78i4wU5btyHk.roa
Signing time: Sun 01 Jan 2023 19:04:56 +0000
ROA not before: Sun 01 Jan 2023 19:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28952
IP address blocks: 37.58.0.0/20 maxlen: 20
46.34.224.0/19 maxlen: 19
37.152.96.0/19 maxlen: 19
91.191.69.0/24 maxlen: 24
91.191.80.0/22 maxlen: 22
31.3.32.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:04:26:30:df:22:c4:d4:be:2a:f3:2e:72:24:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: Jan 1 19:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94c00e8e1e839a24915057bbf22e305396edc879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e9:8a:b4:62:aa:ba:da:c0:22:03:f7:04:51:
93:1c:e2:e1:fe:ad:a7:f7:4b:3a:c4:f4:45:e8:8e:
ff:b4:23:c6:b5:b7:ac:94:6f:10:4e:d7:d4:4c:86:
57:f9:5b:f3:e1:d5:07:39:40:57:7f:78:1a:ea:b3:
18:d9:8d:de:fb:c1:82:22:ca:3d:68:07:4f:18:51:
40:78:42:fe:25:d8:e8:79:68:a5:05:b6:cd:74:16:
1e:80:e4:8c:00:dc:f0:12:30:74:8a:7d:7b:bb:d9:
4f:2f:6f:b0:98:f4:80:3b:75:f4:f4:3c:4a:6e:67:
8c:73:91:75:a6:20:fc:16:ad:e8:bc:cc:ed:bd:3e:
6e:26:ae:a9:bf:00:84:a1:4a:1b:cc:3d:80:bc:9d:
96:49:b7:89:17:c5:cd:ec:e6:11:e5:61:0a:b6:c7:
9c:ee:3b:32:c4:cc:18:a4:08:08:56:57:b6:83:61:
b5:01:9f:9b:11:ee:a3:75:57:c7:40:5a:69:6c:d8:
d1:5a:be:5e:f9:a3:2a:33:46:5a:8e:c5:4f:e7:1e:
53:ae:ba:18:94:44:42:5c:cb:9d:2a:e5:c8:80:73:
a8:4a:be:bf:98:f8:21:3f:b8:7d:5c:77:a9:62:9c:
05:83:f5:c6:e0:f4:8c:b9:29:b5:1a:74:bc:d9:a2:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C0:0E:8E:1E:83:9A:24:91:50:57:BB:F2:2E:30:53:96:ED:C8:79
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/lMAOjh6DmiSRUFe78i4wU5btyHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.32.0/19
37.58.0.0/20
37.152.96.0/19
46.34.224.0/19
91.191.69.0/24
91.191.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:2b:44:c2:fc:23:64:9e:a2:cb:3d:8d:4b:2b:1b:a8:7b:ec:
88:de:99:22:35:ac:68:f0:79:25:da:b1:c5:b4:45:2c:21:2f:
ab:9a:79:53:40:fc:da:2e:a1:30:55:3f:91:ca:0f:8b:d0:4e:
44:63:85:2d:68:d5:e1:13:61:b0:bc:fa:a4:87:03:92:41:3b:
be:e4:cb:f3:68:5a:ab:e3:a8:14:da:35:8c:3c:ed:76:d9:67:
45:c6:3f:25:df:6b:63:1f:6b:40:84:da:4f:fa:a7:8b:dc:ce:
5b:ee:3a:f3:a5:8e:b6:a0:81:2c:c1:cd:2c:14:2a:9f:27:4a:
e1:69:78:43:1e:3e:6f:94:24:d7:cb:2e:4f:dd:48:c3:d5:28:
4c:75:e8:74:d5:b2:1b:72:e8:8f:b5:2e:60:e2:b2:d8:d2:b1:
62:67:df:ad:26:18:13:38:60:0d:31:00:33:55:51:88:f9:c4:
19:f8:b3:b6:4c:7a:5e:de:b4:83:36:3b:18:e7:07:e1:bc:39:
cc:80:0a:13:fb:38:82:b2:ae:ae:60:2e:e4:a1:f8:3e:00:c3:
d5:32:17:3a:19:a5:9c:44:25:c6:f4:7d:1d:ad:3f:fa:24:0e:
b7:cc:15:9a:94:9f:54:cc:13:b2:81:91:9d:09:e1:cb:35:c2:
44:85:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:34 2025 by rpki-client