Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/3gXK4A3qsSmM_wnHODDJgMTgu6g.roa
File: 3gXK4A3qsSmM_wnHODDJgMTgu6g.roa (raw, json)
Hash identifier: iuZE33Hwa3EwRj6OlxtGVvY2Na2G/52hZxTb8jAjrSA=
Subject key identifier: DE:05:CA:E0:0D:EA:B1:29:8C:FF:09:C7:38:30:C9:80:C4:E0:BB:A8
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 01856E78CFDD37C9CAEDE0E56AA34059B995
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/3gXK4A3qsSmM_wnHODDJgMTgu6g.roa
Signing time: Sun 01 Jan 2023 17:54:49 +0000
ROA not before: Sun 01 Jan 2023 17:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200577
IP address blocks: 193.228.3.0/24 maxlen: 24
193.228.123.0/24 maxlen: 24
193.228.60.0/24 maxlen: 24
193.228.101.0/24 maxlen: 24
2001:67c:201c::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:cf:dd:37:c9:ca:ed:e0:e5:6a:a3:40:59:b9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Jan 1 17:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de05cae00deab1298cff09c73830c980c4e0bba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:90:d5:22:61:73:a2:07:8e:bc:80:9a:24:2c:
71:ba:be:7d:6d:c4:7b:00:67:75:d3:94:2f:d9:48:
47:4c:22:21:01:1f:b2:a3:18:14:d4:6c:15:98:dd:
55:9a:3d:45:35:54:3a:7b:fd:e4:c8:1b:4c:85:ff:
af:49:99:fb:be:c9:3a:20:04:51:91:e2:ab:de:dc:
18:80:80:6f:4d:29:88:58:61:17:eb:53:79:20:cb:
2b:fc:81:ef:15:4f:a7:7e:8b:9d:f1:0a:28:2d:b3:
0d:98:94:8e:24:de:79:f9:d7:fe:ba:fc:d0:9b:0a:
84:00:b2:3c:91:d3:a0:38:b9:bf:32:00:39:77:77:
24:e5:f5:e7:ef:7c:c4:cf:55:8a:f7:4c:6c:90:17:
2d:fb:d2:34:e7:b4:a0:c8:1e:c1:13:6e:8e:1a:9a:
5e:82:5f:95:b0:91:59:4d:72:c0:7c:8c:cc:38:83:
05:49:3d:ce:97:a6:54:1a:16:ea:99:63:4f:c3:62:
35:07:0c:b5:3b:83:48:05:39:b9:1a:b5:29:f9:57:
f9:0c:eb:71:4d:1c:28:d0:61:95:88:c7:1f:ec:bf:
3c:96:77:08:a2:6f:cb:8d:cf:ff:a2:65:0c:90:b2:
79:fb:02:1f:44:9e:70:98:4f:07:26:37:75:28:86:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:05:CA:E0:0D:EA:B1:29:8C:FF:09:C7:38:30:C9:80:C4:E0:BB:A8
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/3gXK4A3qsSmM_wnHODDJgMTgu6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.3.0/24
193.228.60.0/24
193.228.101.0/24
193.228.123.0/24
IPv6:
2001:67c:201c::/48
Signature Algorithm: sha256WithRSAEncryption
10:82:76:ac:da:eb:6e:19:1b:1e:ec:d7:9b:1e:4a:d3:ed:84:
13:7c:13:ab:c0:d2:6d:8b:8b:85:e5:d0:a3:78:3c:ca:a9:0f:
a7:45:3b:80:cf:eb:e3:47:74:96:36:76:3b:5e:03:9f:2a:64:
0c:10:1b:68:b1:45:e1:80:c9:d7:6a:72:f8:86:ca:ac:80:41:
17:be:d8:ad:52:e2:67:f0:c0:59:26:8e:de:f2:c3:4d:1a:fc:
c8:1c:98:e1:d0:b5:29:7c:cf:0b:88:32:62:62:05:2b:92:e9:
4a:64:f0:a2:8a:5b:f7:e4:07:bb:88:1f:83:b2:5d:a7:97:23:
8e:3f:07:ef:4e:85:1d:e3:d1:b9:94:a8:db:a6:ad:e2:93:e6:
90:66:d7:c3:ce:5e:6c:f5:29:cd:f7:e7:da:a7:bc:01:35:c8:
5a:53:89:f2:fa:02:3a:8c:a5:f6:87:ad:25:a3:4b:e6:1e:00:
d7:57:d3:ce:06:6e:bd:25:ce:db:ed:ad:4f:01:b0:61:7f:12:
84:23:70:fe:ca:08:7e:5d:7d:e5:4e:0a:3d:17:e8:3e:9a:1a:
99:62:d5:aa:56:8d:d2:19:01:aa:f1:e0:4a:32:13:fc:60:c1:
c4:b1:a8:95:a6:c2:6a:99:99:5d:ae:fe:14:49:0f:06:d7:6f:
e9:46:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:56 2025 by rpki-client