Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/n3sI_lTKKDI2SAkqKJSvcmDgajA.roa
File: n3sI_lTKKDI2SAkqKJSvcmDgajA.roa (raw, json)
Hash identifier: XXwxwoDonSPqizfO16RAd7LP5XeaTXc3uEdLigN5ejc=
Subject key identifier: 9F:7B:08:FE:54:CA:28:32:36:48:09:2A:28:94:AF:72:60:E0:6A:30
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 018CC56EEFC28E54B68064AD0AC9B1CE7929
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/n3sI_lTKKDI2SAkqKJSvcmDgajA.roa
Signing time: Mon 01 Jan 2024 14:30:31 +0000
ROA not before: Mon 01 Jan 2024 14:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48095
IP address blocks: 185.228.216.0/22 maxlen: 22
194.15.104.0/23 maxlen: 23
77.83.164.0/23 maxlen: 23
194.15.106.0/23 maxlen: 23
195.242.208.0/22 maxlen: 22
212.115.60.0/23 maxlen: 23
212.115.62.0/23 maxlen: 23
77.83.166.0/23 maxlen: 23
185.254.64.0/22 maxlen: 22
185.210.40.0/22 maxlen: 22
185.224.140.0/22 maxlen: 22
80.65.220.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ef:c2:8e:54:b6:80:64:ad:0a:c9:b1:ce:79:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Jan 1 14:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f7b08fe54ca28323648092a2894af7260e06a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:db:14:67:ce:db:34:92:df:d0:23:24:03:
94:0c:b4:af:84:a7:8e:e9:bf:0a:21:98:8c:78:bf:
e4:fb:80:13:04:67:06:75:ad:d5:2a:7a:ad:c1:08:
5c:6b:cd:6b:0c:a0:71:72:2f:6f:87:17:45:92:14:
10:31:09:3d:4d:29:85:1a:63:bf:1e:b9:dd:57:91:
d6:be:82:08:ae:f2:34:9c:48:5d:30:e5:41:c7:be:
55:0f:de:b8:86:8a:22:9d:6d:c0:55:2c:11:f7:19:
43:d6:fe:c6:95:fd:e4:d4:3d:8c:3b:c1:1d:72:37:
c1:65:15:1e:8c:20:83:77:a5:4d:50:0a:9e:52:fe:
8d:d7:b9:88:f5:3e:cb:c2:c4:91:ee:be:73:9e:02:
c2:30:10:35:2b:f2:42:04:fa:08:58:55:7e:7b:ed:
21:3b:15:15:17:89:11:c7:25:a8:f1:bd:91:dd:ca:
f6:66:3a:ef:ae:64:22:b2:f0:2d:68:c4:52:bf:e3:
62:70:92:50:8f:ef:03:98:f8:fe:c2:91:8f:34:c4:
0e:ad:b0:9f:6d:5c:c9:29:2a:b3:6c:b0:21:82:36:
7a:f4:c4:91:de:e4:78:8e:c1:aa:3d:b9:f8:02:12:
bd:29:4c:4a:62:ee:f1:04:4e:7b:ec:8b:d3:1d:0c:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7B:08:FE:54:CA:28:32:36:48:09:2A:28:94:AF:72:60:E0:6A:30
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/n3sI_lTKKDI2SAkqKJSvcmDgajA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.164.0/22
80.65.220.0/22
185.210.40.0/22
185.224.140.0/22
185.228.216.0/22
185.254.64.0/22
194.15.104.0/22
195.242.208.0/22
212.115.60.0/22
Signature Algorithm: sha256WithRSAEncryption
34:05:8c:f2:41:f2:c6:c7:99:74:f9:d9:4d:19:d6:22:f5:df:
12:92:72:38:93:17:37:c7:eb:54:d6:2e:c5:a4:84:33:a2:da:
6c:3f:72:31:3e:0c:c3:6f:18:98:2d:fe:1a:51:ae:ca:1e:37:
2b:73:bc:c7:fd:40:30:06:55:4a:11:f0:ba:73:1f:36:8c:19:
df:da:33:81:b5:70:b1:d1:b6:77:d0:d4:8f:8a:e4:cf:52:e7:
0c:87:f0:0b:6a:c1:6c:b4:b5:53:44:53:b8:c1:ad:47:de:25:
4b:2f:8d:ac:ff:2a:d7:ac:ec:f0:e5:01:55:01:b5:97:7c:91:
32:b9:3c:da:8c:54:e3:f2:06:39:65:e7:25:2b:7c:db:bb:b9:
1d:d0:13:5f:a6:61:51:8d:52:d1:93:49:52:da:8d:cd:bc:14:
bf:04:9f:ba:82:d8:70:2c:79:28:26:a1:e7:6e:58:ac:25:0f:
f9:ee:92:f7:53:e9:c0:e5:02:49:58:0b:c7:99:83:f4:2b:2f:
50:f8:4b:c7:d7:1e:4f:39:0e:d1:af:5a:0f:b4:24:c4:2c:8a:
04:63:68:18:12:d5:ef:0a:34:66:55:e4:dd:22:09:0d:da:e9:
b3:c6:7a:7c:5b:ac:7f:dd:3f:f4:a8:e6:fc:7a:79:db:bc:53:
f8:0c:12:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:59:21 2025 by rpki-client