Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/iUixf4LmICqjeElYN7sy_YZu37Y.roa
File: iUixf4LmICqjeElYN7sy_YZu37Y.roa (raw, json)
Hash identifier: COqpmbHOwEdm+m+ZTQ6rhbo2WQT2fODwXPi81l72Md4=
Subject key identifier: 89:48:B1:7F:82:E6:20:2A:A3:78:49:58:37:BB:32:FD:86:6E:DF:B6
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 01857169E734757897950F24834E404E39C1
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/iUixf4LmICqjeElYN7sy_YZu37Y.roa
Signing time: Mon 02 Jan 2023 07:37:23 +0000
ROA not before: Mon 02 Jan 2023 07:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 185.132.124.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:e7:34:75:78:97:95:0f:24:83:4e:40:4e:39:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 2 07:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8948b17f82e6202aa378495837bb32fd866edfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:00:03:e5:ed:7b:f5:c6:f2:3c:93:74:b2:
bd:74:5b:fc:c2:fa:4b:b0:01:25:c3:9f:bf:80:f7:
11:d4:25:ad:99:9a:15:c5:f2:fd:41:23:20:b1:91:
5a:e7:a2:7b:36:91:3b:3b:2f:45:cb:89:b9:fb:c7:
4a:cb:38:dd:51:9f:91:dc:18:c6:b5:55:6b:0f:88:
df:f7:78:1e:3c:3f:f8:77:45:99:bb:02:cb:c2:eb:
d2:a4:f1:1e:82:84:b9:3f:fc:b7:e3:2f:5f:fe:18:
89:0d:77:cd:3a:a1:e8:be:38:d8:b3:8b:33:a5:cb:
d1:39:ea:27:73:6c:2b:00:e4:48:2b:cf:06:ec:87:
e5:48:b0:ca:e8:8a:8c:6f:be:69:8f:ac:30:d1:62:
98:e4:58:df:b4:25:20:42:34:43:67:ef:06:a3:1e:
41:67:6d:24:be:8d:0e:13:d3:f5:9c:c9:7b:d8:2a:
80:b2:78:af:f2:3d:d5:2c:08:1b:11:87:6d:d2:c4:
76:c4:8f:79:e0:99:c6:73:c3:a8:14:ad:18:02:33:
95:f6:e2:e8:26:d4:85:1b:de:1e:dd:00:18:95:c5:
75:f6:67:a0:8b:9b:93:1a:61:38:22:74:02:e0:85:
2c:27:52:f8:09:a5:7b:94:a8:78:e9:8f:45:5b:76:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:48:B1:7F:82:E6:20:2A:A3:78:49:58:37:BB:32:FD:86:6E:DF:B6
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/iUixf4LmICqjeElYN7sy_YZu37Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.124.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:4f:ef:a3:77:41:ce:1b:ae:04:c7:95:b7:c8:07:3d:50:16:
5f:be:e8:43:9a:89:1c:45:0f:09:28:c0:d7:78:73:4b:65:06:
aa:c5:e6:a2:e6:b1:2a:85:ef:c2:77:0e:ed:22:da:9b:ed:4f:
2d:67:e5:3a:69:8c:30:d8:52:c7:bb:d7:f8:98:c7:ea:88:83:
ba:95:d6:43:67:05:1b:33:00:bb:85:bb:7c:46:f2:dc:21:e9:
98:1c:14:3b:13:36:04:9d:02:68:b1:7a:a5:e8:96:aa:ad:37:
48:9d:83:79:9e:83:f1:aa:7c:c9:88:7e:fe:2b:4d:50:f1:3b:
de:7c:d4:f6:dd:07:4f:b4:0a:1f:ff:b1:16:81:1d:2d:3d:ec:
4d:ad:ce:e6:b6:81:5b:04:a3:f3:a2:5b:5b:26:08:0e:e8:fb:
a0:ef:3a:37:06:f1:74:8a:f6:0f:16:ad:fc:4c:58:9c:ab:c3:
7b:fb:a9:94:2a:6a:fa:1e:74:a6:e8:e1:59:ae:05:24:4d:b8:
30:1a:77:09:25:22:c5:d0:c0:5c:a5:d5:19:75:88:a4:dc:3a:
a7:4a:c2:6a:45:dd:2a:45:3a:37:49:12:94:69:e8:e8:8a:c5:
25:3e:58:15:03:81:56:21:5a:ca:83:64:26:64:34:34:1e:6e:
1c:68:ae:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxaec0dXiXlQ8kg05ATjnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx
NzgzZDAwHhcNMjMwMTAyMDczNzIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTQ4YjE3ZjgyZTYyMDJhYTM3ODQ5NTgzN2JiMzJmZDg2NmVkZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJwAA+Xte/XG8jyTdLK9dFv8wvpL
sAElw5+/gPcR1CWtmZoVxfL9QSMgsZFa56J7NpE7Oy9Fy4m5+8dKyzjdUZ+R3BjG
tVVrD4jf93gePD/4d0WZuwLLwuvSpPEegoS5P/y34y9f/hiJDXfNOqHovjjYs4sz
pcvROeonc2wrAORIK88G7IflSLDK6IqMb75pj6ww0WKY5FjftCUgQjRDZ+8Gox5B
Z20kvo0OE9P1nMl72CqAsniv8j3VLAgbEYdt0sR2xI954JnGc8OoFK0YAjOV9uLo
JtSFG94e3QAYlcV19megi5uTGmE4InQC4IUsJ1L4CaV7lKh46Y9FW3YaPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIlIsX+C5iAqo3hJWDe7Mv2Gbt+2MB8GA1UdIwQY
MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt
NjI2NTUyMWY2ZGY3LzEvaVVpeGY0TG1JQ3FqZUVsWU43c3lfWVp1MzdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3
LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYR8MA0G
CSqGSIb3DQEBCwUAA4IBAQC3T++jd0HOG64Ex5W3yAc9UBZfvuhDmokcRQ8JKMDX
eHNLZQaqxeai5rEqhe/Cdw7tItqb7U8tZ+U6aYww2FLHu9f4mMfqiIO6ldZDZwUb
MwC7hbt8RvLcIemYHBQ7EzYEnQJosXql6JaqrTdInYN5noPxqnzJiH7+K01Q8Tve
fNT23QdPtAof/7EWgR0tPexNrc7mtoFbBKPzoltbJggO6Pug7zo3BvF0ivYPFq38
TFicq8N7+6mUKmr6HnSm6OFZrgUkTbgwGncJJSLF0MBcpdUZdYik3DqnSsJqRd0q
RTo3SRKUaejoisUlPlgVA4FWIVrKg2QmZDQ0Hm4caK6E
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:55:29 2025 by rpki-client