Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/5uj3iim53FWvzxifDvQoPo6rjHY.roa
File: 5uj3iim53FWvzxifDvQoPo6rjHY.roa (raw, json)
Hash identifier: rQDm5oIrDb1QHeT9hcp/dW33eAn+7ccI0QGi9MepW5M=
Subject key identifier: E6:E8:F7:8A:29:B9:DC:55:AF:CF:18:9F:0E:F4:28:3E:8E:AB:8C:76
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018C9BEF92B13CB8D034DBE248E191665035
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/5uj3iim53FWvzxifDvQoPo6rjHY.roa
Signing time: Sun 24 Dec 2023 13:06:58 +0000
ROA not before: Sun 24 Dec 2023 13:06:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
95.82.32.0/21 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9b:ef:92:b1:3c:b8:d0:34:db:e2:48:e1:91:66:50:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Dec 24 13:06:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6e8f78a29b9dc55afcf189f0ef4283e8eab8c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bd:22:fc:17:f6:5d:ae:9f:82:2a:42:c9:88:
2c:25:31:07:42:e6:5b:57:27:40:48:cb:74:93:51:
2d:a5:75:86:16:70:ab:2d:4f:2b:8a:94:21:8c:a7:
75:4a:37:5d:c1:cf:b1:77:33:ee:8d:d1:e1:7b:81:
f1:40:8c:34:48:b4:d4:45:e3:e4:f7:55:e2:76:cd:
c9:d7:72:a3:b5:41:e1:6f:e3:77:18:2e:56:fb:16:
39:02:b5:24:f4:fd:b0:d6:a2:b8:cb:0c:29:f5:d3:
8b:85:e9:c4:3e:2c:f2:04:20:63:52:c2:ba:82:8c:
e9:61:20:a0:8c:ce:7c:7a:4c:d1:44:a9:c4:5b:0c:
e3:fe:1f:52:0e:15:85:f1:ba:11:9d:5f:da:78:b7:
6f:c1:26:82:11:1c:52:53:f1:91:65:f1:36:c1:56:
ae:db:28:24:4a:43:44:41:ee:e1:86:ad:19:97:30:
a5:7c:f5:56:9a:5e:d3:5d:b0:d7:0d:bd:9d:6c:91:
0c:5f:49:9e:ba:f1:e1:18:9f:39:15:73:ae:38:a8:
be:0b:a4:6d:47:66:88:5c:75:97:27:8d:ae:b9:07:
42:db:a0:ee:98:06:47:5a:da:b9:45:86:34:a8:9d:
43:7d:c6:0f:5b:5e:65:93:20:85:ff:93:51:c8:2b:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E8:F7:8A:29:B9:DC:55:AF:CF:18:9F:0E:F4:28:3E:8E:AB:8C:76
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/5uj3iim53FWvzxifDvQoPo6rjHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.32.0/21
109.111.32.0/20
176.221.16.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:61:ed:00:a7:88:84:7c:1d:20:ee:b4:53:cc:71:79:24:90:
54:ff:18:aa:26:ab:43:f0:2c:cd:a0:b3:dc:28:55:0c:be:88:
85:80:af:4a:54:1f:26:1d:10:e6:63:a0:30:e8:d2:b7:f8:87:
c7:bf:24:45:54:9c:2e:ca:50:a7:00:b5:45:11:57:84:ae:bc:
77:55:15:bb:a8:f3:fc:5e:80:5e:b3:a2:6b:96:04:54:df:66:
d0:af:74:4f:c9:ca:04:df:02:53:fe:b5:e5:71:36:c4:03:ba:
ec:91:20:6b:0a:59:f0:52:8f:76:96:b8:01:26:46:96:77:27:
7d:5e:c3:96:82:0b:b4:c7:03:08:91:90:2c:80:12:00:a0:52:
f9:cf:55:5b:a8:a6:d8:ab:fd:e5:9f:fd:46:41:87:bb:2d:58:
a8:4d:72:dc:40:36:2d:50:88:21:a7:99:ba:71:12:e7:4f:eb:
2f:ad:e0:7d:1f:f5:0d:54:a5:98:5c:08:77:11:b3:63:2a:21:
b2:04:ce:c6:ea:a2:52:a0:6b:17:28:9d:77:84:7d:b7:48:8b:
96:e5:21:89:3a:79:92:6e:c7:60:d9:a2:61:c4:79:69:f9:cd:
9f:34:df:4e:b6:6f:c3:4b:17:f7:c7:d9:f5:36:fe:9f:10:94:
f0:c5:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:25 2025 by rpki-client