Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/38h7PmzGRTLWM55OU9Glv6kZ1OE.roa
File: 38h7PmzGRTLWM55OU9Glv6kZ1OE.roa (raw, json)
Hash identifier: nQNg4xv6tgXUZpaBkFx6QRf8CywA2J1wyqFeUjwjzPs=
Subject key identifier: DF:C8:7B:3E:6C:C6:45:32:D6:33:9E:4E:53:D1:A5:BF:A9:19:D4:E1
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018CF3AB05A8F89D5343052F89D3C219E106
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/38h7PmzGRTLWM55OU9Glv6kZ1OE.roa
Signing time: Wed 10 Jan 2024 13:58:40 +0000
ROA not before: Wed 10 Jan 2024 13:58:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 195.242.243.0/24 maxlen: 24
185.81.180.0/23 maxlen: 23
93.114.61.0/24 maxlen: 24
89.46.10.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:ab:05:a8:f8:9d:53:43:05:2f:89:d3:c2:19:e1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 10 13:58:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfc87b3e6cc64532d6339e4e53d1a5bfa919d4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:2f:e5:ff:16:49:50:64:ea:c8:0d:4a:c5:
d4:3c:16:13:75:0d:38:95:3d:ac:65:13:17:71:fc:
b3:dc:51:f5:8c:92:9e:f1:00:6c:64:40:e7:bf:a6:
b9:ec:5b:3c:0d:f8:fc:c9:ff:e4:bf:a1:db:87:09:
bf:70:6e:06:5e:46:49:98:2f:8f:94:c1:c8:a0:66:
93:86:0d:51:ff:58:8f:5f:81:19:31:28:0a:71:b2:
45:0d:09:e4:05:5c:63:ab:16:55:37:7a:81:60:b0:
4c:98:a0:4e:b2:95:56:17:55:5f:83:d0:e3:48:45:
0d:89:0e:15:a4:5f:48:f2:89:64:52:36:8b:7c:56:
58:9d:99:62:93:05:e0:b1:6e:bd:0b:57:e1:8f:c0:
2c:95:5c:db:95:1e:f7:00:8b:e8:65:01:65:44:48:
85:4a:d4:7b:fd:94:b2:f4:0b:42:42:c4:3b:7c:7d:
dd:35:13:14:7a:42:41:4d:15:5d:e6:1f:09:04:da:
5c:1f:f7:ac:2a:5e:67:b1:06:90:ea:07:74:d4:65:
9f:f5:47:e7:e4:33:c0:04:0c:c0:36:af:0b:ef:b0:
52:30:4b:b1:31:68:54:0d:16:3a:bd:1d:cb:b8:96:
67:66:e6:0a:28:c6:d3:f7:51:f6:aa:93:dc:57:d2:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C8:7B:3E:6C:C6:45:32:D6:33:9E:4E:53:D1:A5:BF:A9:19:D4:E1
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/38h7PmzGRTLWM55OU9Glv6kZ1OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
93.114.61.0/24
185.81.180.0/23
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f9:e9:8e:8e:e9:92:03:4f:db:76:83:51:46:f6:7c:58:96:
c1:b5:cc:1b:1e:ac:9a:4a:97:c0:fd:4b:40:a4:10:8e:ef:68:
91:29:3e:89:27:68:8d:a7:e9:34:d3:eb:8c:5b:cd:40:ef:be:
c0:56:50:05:73:48:4d:6c:71:91:06:27:b1:42:76:15:c2:06:
b1:d7:39:02:63:9a:9e:28:79:bb:d3:44:8f:72:ec:04:fa:19:
dd:b0:6a:ee:0e:80:e6:b2:00:62:0c:85:97:54:7f:97:8a:47:
9d:fc:96:54:62:76:54:92:4e:e0:09:65:9d:f4:0a:2a:8c:bc:
cd:5d:9f:f6:7b:c4:a4:a2:8a:ad:1c:f4:1c:27:b4:1c:6d:9c:
8d:f3:8a:c0:f2:a9:d4:77:08:07:ab:3c:11:73:a1:4d:52:cf:
57:62:22:d6:db:b8:2b:ae:3c:c6:0d:62:eb:64:f4:75:8c:57:
47:ec:b0:d2:f6:49:e6:9b:f3:02:7c:fa:79:67:e5:1d:2d:45:
59:a2:de:9b:58:6f:de:ee:03:40:42:4e:3d:9a:38:73:a9:b4:
0b:dd:68:a8:3e:53:ad:9d:4d:11:d0:93:5d:1e:bc:10:b0:51:
09:24:5b:7d:1e:e2:cd:02:ef:e3:5e:f0:7b:58:09:ba:39:78:
ab:08:c7:62
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzzqwWo+J1TQwUvidPCGeEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjQwMTEwMTM1ODQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmM4N2IzZTZjYzY0NTMyZDYzMzllNGU1M2QxYTViZmE5MTlkNGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFUv5f8WSVBk6sgNSsXUPBYTdQ04
lT2sZRMXcfyz3FH1jJKe8QBsZEDnv6a57Fs8Dfj8yf/kv6Hbhwm/cG4GXkZJmC+P
lMHIoGaThg1R/1iPX4EZMSgKcbJFDQnkBVxjqxZVN3qBYLBMmKBOspVWF1Vfg9Dj
SEUNiQ4VpF9I8olkUjaLfFZYnZlikwXgsW69C1fhj8AslVzblR73AIvoZQFlREiF
StR7/ZSy9AtCQsQ7fH3dNRMUekJBTRVd5h8JBNpcH/esKl5nsQaQ6gd01GWf9Ufn
5DPABAzANq8L77BSMEuxMWhUDRY6vR3LuJZnZuYKKMbT91H2qpPcV9I5UwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFN/Iez5sxkUy1jOeTlPRpb+pGdThMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvMzhoN1BtekdSVExXTTU1T1U5R2x2NmtaMU9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWS4KAwQA
XXI9AwQBuVG0AwQAw/LzMA0GCSqGSIb3DQEBCwUAA4IBAQAi+emOjumSA0/bdoNR
RvZ8WJbBtcwbHqyaSpfA/UtApBCO72iRKT6JJ2iNp+k00+uMW81A777AVlAFc0hN
bHGRBiexQnYVwgax1zkCY5qeKHm700SPcuwE+hndsGruDoDmsgBiDIWXVH+Xiked
/JZUYnZUkk7gCWWd9AoqjLzNXZ/2e8SkooqtHPQcJ7QcbZyN84rA8qnUdwgHqzwR
c6FNUs9XYiLW27grrjzGDWLrZPR1jFdH7LDS9knmm/MCfPp5Z+UdLUVZot6bWG/e
7gNAQk49mjhzqbQL3WioPlOtnU0R0JNdHrwQsFEJJFt9HuLNAu/jXvB7WAm6OXir
CMdi
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:50 2025 by rpki-client