Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/lqV_ccfWYIZxOFWKkmcdX3wDYYA.roa
File: lqV_ccfWYIZxOFWKkmcdX3wDYYA.roa (raw, json)
Hash identifier: juGGN5lgmZHDH96FkstZTu2M3uHN6o38rGK+Jij/Lyw=
Subject key identifier: 96:A5:7F:71:C7:D6:60:86:71:38:55:8A:92:67:1D:5F:7C:03:61:80
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0186DBD28C19360D66E2C7184839D1C23599
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/lqV_ccfWYIZxOFWKkmcdX3wDYYA.roa
Signing time: Mon 13 Mar 2023 16:34:13 +0000
ROA not before: Mon 13 Mar 2023 16:34:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 185.81.183.0/24 maxlen: 24
185.81.182.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:d2:8c:19:36:0d:66:e2:c7:18:48:39:d1:c2:35:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Mar 13 16:34:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96a57f71c7d660867138558a92671d5f7c036180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:33:c9:67:95:d9:18:89:5d:de:e3:0e:71:
d0:e0:0f:fe:31:f8:3e:a8:c2:14:36:3e:60:58:8a:
e1:40:48:a5:b5:c0:98:01:39:08:89:dc:b5:cd:44:
8d:fa:33:3a:d6:19:48:c3:4a:5c:37:4f:1f:e7:52:
b5:d7:a1:a1:31:68:59:1e:db:ef:52:c3:92:98:56:
f1:13:fe:05:0d:3a:d9:d7:c8:dc:7a:f8:51:c4:71:
65:8f:ec:30:14:e3:43:3a:c1:08:01:9b:75:6d:a5:
f2:f5:e3:08:b3:73:76:39:ed:e8:20:c6:f2:0c:8f:
d9:7d:11:84:cf:ce:2e:d5:b4:a6:44:dd:13:1d:93:
11:b0:ea:e9:8c:12:ad:17:f2:60:e8:ca:bd:83:96:
55:d3:48:40:92:42:f5:81:31:ce:ea:b2:c7:28:b0:
b2:32:b9:e1:4e:7a:54:e4:ff:72:2f:8b:67:e5:b7:
26:30:4c:1c:89:a8:05:ee:33:0e:66:88:60:e1:c1:
08:1c:f8:f1:ce:ae:18:bd:05:77:7e:19:29:13:53:
be:36:37:a0:55:a9:30:8e:b8:e4:70:69:f0:4f:e5:
bf:e2:28:63:16:64:f2:07:cc:c2:9d:44:7b:e1:31:
9e:66:b0:5c:11:c0:f1:6a:31:7b:63:cd:94:d7:ab:
df:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A5:7F:71:C7:D6:60:86:71:38:55:8A:92:67:1D:5F:7C:03:61:80
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/lqV_ccfWYIZxOFWKkmcdX3wDYYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.182.0/23
Signature Algorithm: sha256WithRSAEncryption
87:60:52:e5:7f:96:f3:45:46:5b:d7:72:cd:46:ad:b8:99:a5:
7b:d6:50:72:98:9d:d1:2e:50:c0:a2:76:20:98:ba:9d:51:5a:
78:f6:4c:c3:3a:d6:11:44:f2:b2:59:25:e6:72:9a:fc:ff:13:
36:75:78:d7:2d:0b:4f:bf:bb:6a:ad:e3:2e:78:09:71:45:19:
99:65:6b:34:7e:43:b0:95:1a:49:56:00:ba:91:41:ad:e2:86:
ee:68:e4:f8:68:49:38:e8:0d:18:08:9e:96:57:6a:9c:f5:25:
86:3c:a9:fa:c2:4e:34:87:62:e6:eb:6b:b8:a7:57:7d:6a:5e:
0a:37:1a:ba:60:a7:18:d2:3a:9e:75:cc:31:83:e7:66:e8:18:
d8:b2:bd:f6:28:73:43:4f:61:69:e9:62:d7:64:4a:22:0b:2a:
46:79:c1:e6:ca:d8:ef:8c:ac:ce:ac:ce:c8:a3:81:d5:98:7f:
3f:1c:fe:4e:72:db:80:9b:02:1c:7d:9c:07:82:f6:d4:7a:9e:
f1:6e:84:82:40:4b:b7:ab:20:39:b6:8c:71:2f:84:a2:13:35:
74:ff:69:ce:3a:ab:94:90:f2:23:0e:86:79:27:a4:90:a5:dc:
8d:2f:e1:53:0b:9c:4a:d1:75:c7:f0:9a:9c:e9:ac:7f:86:69:
84:cb:d8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:54 2025 by rpki-client