Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ejp-BNvkxO33l5GjwpioPIc5ngA.roa
File: ejp-BNvkxO33l5GjwpioPIc5ngA.roa (raw, json)
Hash identifier: j2pa7/JDgqY89E0ClQTNwlfYfgUld6q1wxtF+0lFfcs=
Subject key identifier: 7A:3A:7E:04:DB:E4:C4:ED:F7:97:91:A3:C2:98:A8:3C:87:39:9E:00
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 018AB1ECCA1FDEBC5E0D885D6FA5835243A1
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ejp-BNvkxO33l5GjwpioPIc5ngA.roa
Signing time: Wed 20 Sep 2023 09:30:00 +0000
ROA not before: Wed 20 Sep 2023 09:30:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61220
IP address blocks: 193.31.118.0/24 maxlen: 24
193.31.117.0/24 maxlen: 24
193.31.119.0/24 maxlen: 24
89.43.78.0/24 maxlen: 24
84.54.14.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
213.226.117.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
185.81.154.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:ec:ca:1f:de:bc:5e:0d:88:5d:6f:a5:83:52:43:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Sep 20 09:30:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a3a7e04dbe4c4edf79791a3c298a83c87399e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:54:8c:bd:43:e4:6c:4e:0b:81:75:dc:7f:
41:1f:d3:73:ed:11:9c:01:44:88:b4:ee:29:6d:ba:
e2:4e:1b:66:f1:b7:4f:93:fc:6f:eb:9c:aa:15:96:
fc:cf:69:70:15:b4:67:22:90:c8:3b:94:0c:69:12:
e4:8f:cd:33:32:38:33:f0:98:a6:cf:c9:e6:7b:0d:
8f:94:1d:ec:cd:34:d1:66:a0:1b:a5:99:12:00:a3:
82:1a:2a:d6:4b:12:3f:33:3f:40:e2:25:da:e0:cd:
48:68:94:1a:51:b9:e7:19:e9:0c:ec:98:da:2a:e1:
3e:36:1a:71:98:c2:d5:e2:dd:94:00:d6:b8:35:53:
19:2c:3a:5e:1e:55:57:63:59:d1:d9:e6:d9:ed:89:
7e:dd:c7:18:60:c3:c7:e2:f0:8c:63:3f:00:64:bf:
85:fd:6a:3f:d3:59:0c:b6:0a:13:14:31:3f:14:77:
c5:bc:b3:1b:82:ce:c5:c8:09:c2:41:6d:d7:1b:74:
ba:bc:e3:3f:40:2e:c3:61:1e:fc:e1:55:2d:68:6e:
fe:bb:a0:55:23:09:25:a1:b8:4b:31:4b:88:4e:94:
49:68:9d:c1:85:59:a3:78:2f:8b:6e:91:33:2e:96:
50:0b:4e:a7:90:f5:b0:9c:dc:b0:20:a5:e1:6b:0b:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:7E:04:DB:E4:C4:ED:F7:97:91:A3:C2:98:A8:3C:87:39:9E:00
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ejp-BNvkxO33l5GjwpioPIc5ngA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.14.0/24
86.104.14.0/24
89.43.78.0/24
176.98.42.0/23
185.81.152.0/22
193.31.117.0-193.31.119.255
213.226.117.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7f:15:c6:24:35:06:a0:23:66:ff:15:52:bc:96:1d:cc:0c:
9e:2f:93:b7:b9:dd:e7:3c:02:0d:67:bb:ab:a8:7c:60:93:42:
08:89:35:b9:6b:2e:b9:bf:88:ca:01:97:cf:6b:5c:63:44:80:
ad:f2:93:c9:6e:71:e7:b9:5c:97:60:56:d5:c6:e5:06:00:e1:
39:37:2a:77:ad:ac:51:b5:a9:c9:a3:97:a4:42:45:97:da:05:
c1:a6:a1:bc:fc:42:cd:fb:53:26:6a:b7:69:81:39:2b:31:fd:
3a:79:05:14:b7:95:50:48:74:ca:29:ef:03:30:b4:3c:ef:ef:
19:99:1d:fe:2d:01:ee:64:3a:fe:61:94:92:39:89:80:ed:b5:
f0:cc:c7:3b:29:bf:d3:e3:cb:56:10:ed:45:03:71:5b:6a:e9:
46:bf:bf:22:85:69:9c:56:d9:ee:41:60:ab:56:a4:b5:59:a6:
47:ce:9d:34:9c:dc:79:b3:b5:e8:e1:cd:b5:45:f8:e3:47:e1:
0f:f7:ab:62:ed:0c:59:7f:87:39:32:09:61:93:b6:81:7b:b4:
83:3b:cd:72:9e:0f:86:58:a5:83:bd:5b:47:37:29:e3:2e:fd:
ce:9d:31:a1:9e:4b:cf:24:a0:9f:dc:a9:df:56:67:f9:53:e2:
a0:28:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:52:02 2025 by rpki-client