Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/rvp5GpKdo5JRqYD5AChZ0jA-UMg.roa
File: rvp5GpKdo5JRqYD5AChZ0jA-UMg.roa (raw, json)
Hash identifier: J4GGlzzVunpaRRq+ZBJW+Paw3XLK4oQbeWAEKt4ai/U=
Subject key identifier: AE:FA:79:1A:92:9D:A3:92:51:A9:80:F9:00:28:59:D2:30:3E:50:C8
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 0AADFB16
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/rvp5GpKdo5JRqYD5AChZ0jA-UMg.roa
Signing time: Thu 17 Mar 2022 20:36:04 +0000
ROA not before: Thu 17 Mar 2022 20:36:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 185.132.124.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179174166 (0xaadfb16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Mar 17 20:36:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aefa791a929da39251a980f9002859d2303e50c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:e8:de:45:49:f8:b0:30:06:23:f3:19:41:
da:f9:04:9c:0a:f3:6a:c6:4e:09:8a:a5:e8:70:a5:
ff:ed:f8:54:39:27:8e:07:c0:b0:ac:a8:7d:6c:f7:
9d:6e:34:7a:14:b6:00:2a:10:b8:10:23:59:02:91:
d3:85:a9:59:54:fd:b7:ef:30:af:61:98:0d:2d:c5:
18:6c:8e:e1:9c:9a:b8:57:c1:6d:21:32:94:16:53:
11:d1:53:8c:83:2e:12:27:34:65:ab:86:51:1b:c2:
44:84:08:2b:39:64:60:04:b5:a4:24:39:e8:d0:45:
9b:2a:b5:73:65:99:ed:18:12:ee:35:e6:9c:02:b0:
01:d7:14:28:09:30:d2:28:15:64:99:92:19:49:f1:
8c:57:a3:27:8b:89:3c:f6:95:f5:ba:48:a4:4f:89:
a9:2b:9f:f6:b1:7a:8f:b5:f4:2d:df:78:bf:e1:8b:
95:92:b1:3e:21:da:0b:64:01:a4:c3:a1:43:d0:d3:
55:81:26:4d:d5:d2:7c:ca:7e:13:7d:c1:e4:4a:b3:
01:97:db:a4:a2:15:ad:6d:ca:2e:50:75:92:20:bf:
90:18:07:4b:fa:22:2d:ff:e6:39:be:a0:7e:97:3f:
44:02:fe:b6:12:5f:1d:0c:cf:31:b1:91:6d:7a:a0:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FA:79:1A:92:9D:A3:92:51:A9:80:F9:00:28:59:D2:30:3E:50:C8
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/rvp5GpKdo5JRqYD5AChZ0jA-UMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.124.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8a:34:2d:2d:10:87:49:fd:e1:f3:10:9c:d8:0e:1a:0a:78:
40:9e:49:68:39:8c:d5:07:0b:d1:e1:65:41:85:51:5f:3f:37:
13:37:bd:23:4c:d3:4d:87:32:ae:26:c1:c6:e5:60:4f:8b:e2:
4d:b1:e9:bd:dc:98:41:7f:73:cd:00:aa:88:e7:a5:da:25:87:
67:f6:e5:df:fd:76:cd:ff:33:01:a5:38:04:90:6f:11:0e:23:
1c:0a:0b:fc:1a:0a:35:48:c9:2d:9f:af:40:67:3f:77:9c:b6:
47:15:7b:ad:76:9b:04:ac:30:a8:20:3c:c3:59:f0:af:69:60:
78:9c:26:86:59:82:c7:74:b2:ae:87:66:22:ec:46:1b:46:1e:
52:02:95:a7:9b:90:70:a6:40:7b:f4:01:dc:c4:e7:50:7d:17:
f3:49:04:3c:6b:b9:cb:92:2e:f8:0a:8b:04:fb:fb:6a:56:5a:
6d:e6:09:7b:2d:19:ab:e9:fe:36:e5:21:a7:f5:58:9d:3d:df:
66:7c:51:e4:a7:5f:c9:6b:e1:34:9b:3a:e5:b3:af:0e:8b:0b:
41:9d:94:c5:d2:f0:e4:c8:64:6e:cc:79:cb:c6:68:f5:5d:63:
05:94:8a:11:fe:95:91:44:48:68:f0:79:fa:25:95:c5:97:a3:
4a:c6:90:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:24 2025 by rpki-client