Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/QDQEZeZS8fjjs2At_ruat9biiNM.roa
File: QDQEZeZS8fjjs2At_ruat9biiNM.roa (raw, json)
Hash identifier: 8uq+ozNbLevqbnvIeGubGDxtUXzmNenchd8P6WS/Yqk=
Subject key identifier: 40:34:04:65:E6:52:F1:F8:E3:B3:60:2D:FE:BB:9A:B7:D6:E2:88:D3
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 0182BBE7A12C6B6C3AE8A3D69D164DF646F6
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/QDQEZeZS8fjjs2At_ruat9biiNM.roa
Signing time: Sat 20 Aug 2022 15:38:15 +0000
ROA not before: Sat 20 Aug 2022 15:38:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47787
IP address blocks: 193.109.184.0/21 maxlen: 24
185.162.183.0/24 maxlen: 24
2001:b18::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bb:e7:a1:2c:6b:6c:3a:e8:a3:d6:9d:16:4d:f6:46:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Aug 20 15:38:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40340465e652f1f8e3b3602dfebb9ab7d6e288d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:a6:a4:ce:e0:eb:f5:48:cd:e5:72:2d:d9:
31:7e:d3:a9:d5:71:a1:83:00:39:a5:81:b6:b5:17:
48:a2:ea:d8:b7:bc:89:8f:f3:df:85:67:f0:4d:97:
97:ec:4d:3c:1b:c9:83:47:df:5b:55:c2:da:17:71:
c2:9d:9d:04:d6:00:af:94:4f:f6:0d:76:64:db:1f:
1a:df:a8:5d:48:f4:9f:07:4b:86:ff:a6:79:ba:fb:
03:04:3f:02:5d:e2:33:5b:1b:12:ad:d3:1f:d6:65:
5f:ca:ec:e4:15:e0:0e:56:fd:51:54:03:1e:3c:99:
e1:9d:97:c0:2b:4d:99:88:a9:72:be:ff:c6:7d:2b:
df:dc:4d:8b:8f:c0:5c:ef:d5:27:00:4e:be:80:c3:
6d:ec:a5:6f:4d:93:49:58:b2:3c:db:15:36:c7:2b:
72:bd:60:97:69:69:d1:01:91:47:5c:11:44:59:30:
17:05:ed:a6:52:df:0c:b2:3a:ba:17:c8:80:1e:d1:
d9:ee:05:6f:55:86:7a:cf:15:c8:55:44:9f:2b:cc:
fa:b1:51:b3:10:80:4e:dd:78:27:96:59:f0:27:85:
6c:12:de:00:8e:32:12:72:15:e0:ba:78:20:b4:e2:
4b:76:d2:33:b0:a1:a0:ed:e4:dd:54:3c:99:59:f4:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:34:04:65:E6:52:F1:F8:E3:B3:60:2D:FE:BB:9A:B7:D6:E2:88:D3
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/QDQEZeZS8fjjs2At_ruat9biiNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.183.0/24
193.109.184.0/21
IPv6:
2001:b18::/32
Signature Algorithm: sha256WithRSAEncryption
7b:8d:05:3f:8f:79:53:06:ca:a3:ff:7e:4d:df:20:71:14:45:
a8:19:9f:e3:19:5e:ce:2e:14:7a:2b:7d:bc:2b:0e:48:e6:fc:
e1:f0:a5:39:0f:19:93:84:34:c6:9c:0b:11:ea:5b:5e:c4:7a:
32:36:e1:2a:ee:73:a4:1e:15:f7:56:ec:c8:c0:f5:78:f7:f2:
37:f5:90:4b:0a:f4:0a:39:cd:01:8c:b5:ea:dd:43:34:39:28:
39:e3:fb:d1:51:e5:9d:a0:81:21:10:33:21:49:ae:e3:1f:74:
b8:ef:85:a8:aa:9c:2c:84:dd:de:9f:01:6d:2c:5b:25:05:30:
ca:71:6d:4b:7d:2c:8e:92:9d:04:33:00:3b:fc:b1:f2:d8:23:
ce:93:ec:45:c8:ce:59:c3:ca:27:10:2d:70:00:d2:45:8a:af:
c0:09:37:bb:2e:fb:06:fc:4d:f0:63:48:ec:41:87:a5:7c:17:
a5:8f:85:e5:14:cc:d2:1b:e1:e2:e4:9f:be:a7:81:a2:05:6f:
a0:eb:de:e4:b2:cc:fd:c7:05:f1:8f:99:71:97:72:6b:ab:dd:
2e:b3:39:4a:72:a3:dc:bf:14:9f:19:f7:ba:8f:e1:f7:3c:1c:
43:32:87:e2:16:29:c3:bc:2f:60:d9:67:02:e5:cb:14:a1:ae:
0e:ba:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:59:27 2025 by rpki-client