Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/OAdxLfbfn-FxxNm8o1-NDUxP0w4.roa
File: OAdxLfbfn-FxxNm8o1-NDUxP0w4.roa (raw, json)
Hash identifier: k2HgMSwRivvlN/NmONmjYzpK8+i0oi+9p0oBCSOJIhc=
Subject key identifier: 38:07:71:2D:F6:DF:9F:E1:71:C4:D9:BC:A3:5F:8D:0D:4C:4F:D3:0E
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 019547F1BD7F5FE082127BEFE20CA5452206
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/OAdxLfbfn-FxxNm8o1-NDUxP0w4.roa
Signing time: Thu 27 Feb 2025 15:06:19 +0000
ROA not before: Thu 27 Feb 2025 15:06:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213031
IP address blocks: 151.216.39.0/24 maxlen: 24
2001:7fc:8::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:f1:bd:7f:5f:e0:82:12:7b:ef:e2:0c:a5:45:22:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Feb 27 15:06:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3807712df6df9fe171c4d9bca35f8d0d4c4fd30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:23:14:a1:57:8a:2b:b2:93:58:05:5b:b1:
b5:00:d2:55:33:43:c5:c0:66:b2:e9:d7:5d:15:e7:
a1:d0:b4:ce:fe:6d:32:4b:1a:f3:07:c6:61:e0:2a:
2a:a6:e3:4c:53:f8:5b:02:f7:43:66:e8:c7:91:44:
16:d5:c0:42:0c:9d:d2:99:c3:0d:81:dc:2f:97:53:
ad:88:24:54:c6:b8:83:c4:c3:52:82:df:22:af:f5:
d9:9b:a4:9c:b4:cd:53:03:ea:75:4f:f9:c5:67:91:
5f:73:7c:81:c8:37:eb:06:8c:2a:73:e8:5d:47:ab:
34:fd:51:e4:b1:86:e1:53:7a:2d:85:7d:14:c5:8b:
3c:bf:95:34:95:15:f6:ea:85:3b:07:36:e3:61:88:
68:07:d2:28:9d:b4:bf:f5:8a:54:1f:73:cf:c4:57:
f2:fa:b2:ba:1d:f9:60:b0:74:1d:24:cc:19:3d:59:
c2:c9:31:8e:77:cb:e4:06:38:f9:eb:fb:48:f6:71:
e2:e9:5c:4b:c2:3f:4a:89:bd:b0:de:7c:91:ee:31:
20:36:a8:39:62:62:f3:07:09:3e:6e:84:07:13:d3:
bf:99:ec:06:72:cb:91:ab:38:5c:8e:90:0b:31:22:
5f:92:1c:25:b3:bd:cd:40:13:2f:f7:9b:b1:36:47:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:07:71:2D:F6:DF:9F:E1:71:C4:D9:BC:A3:5F:8D:0D:4C:4F:D3:0E
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/OAdxLfbfn-FxxNm8o1-NDUxP0w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.39.0/24
IPv6:
2001:7fc:8::/48
Signature Algorithm: sha256WithRSAEncryption
08:fc:6b:34:ed:db:3c:3b:56:30:4c:02:72:71:e2:53:a6:06:
c5:d3:cc:b1:d3:ca:23:e0:17:3e:54:a8:c5:2e:9c:34:d5:a4:
b2:45:66:63:83:ee:4e:1a:51:70:f9:95:42:21:57:31:56:69:
a5:e3:bf:dc:69:56:8b:2d:7b:40:f5:ac:c2:63:f0:f7:65:55:
45:ad:36:9e:d2:fd:28:ee:79:bd:96:8e:25:56:79:9d:45:c8:
ff:3c:73:cc:bf:4c:23:34:6b:f0:57:1c:38:f4:50:ac:a6:40:
6d:3f:41:ce:1b:28:94:a5:f2:4a:f7:87:da:38:af:30:92:78:
62:36:0e:fa:06:4d:20:9f:59:df:10:ec:9e:6c:1b:e6:c1:79:
8a:a2:97:6b:45:50:47:aa:84:85:ce:18:da:17:15:4b:2d:38:
6a:8d:5a:3d:86:54:c5:69:f2:56:95:d5:43:74:5b:72:c8:06:
c0:8a:86:22:1f:6f:ee:06:da:5b:5a:bb:28:d8:b8:53:73:82:
bf:1d:89:21:f1:6e:8d:90:4f:88:a0:00:7a:64:fc:d0:01:0d:
41:fe:5c:8b:da:c2:08:82:20:33:f3:86:46:38:5b:ba:42:ab:
f6:2b:6a:ca:38:be:54:e3:22:72:91:61:6d:fd:ca:53:d9:53:
87:b5:d7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:05:11 2025 by rpki-client