Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/EmmW5CuJ66QWgAEinoj06TJWSvA.roa
File: EmmW5CuJ66QWgAEinoj06TJWSvA.roa (raw, json)
Hash identifier: TBcAB8K0oKySFA5Kh9Etp7XqDxw6G1iQywiFdt6GAOw=
Subject key identifier: 12:69:96:E4:2B:89:EB:A4:16:80:01:22:9E:88:F4:E9:32:56:4A:F0
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018B327D04E836FA0D870C1A0B1899D8C7E6
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/EmmW5CuJ66QWgAEinoj06TJWSvA.roa
Signing time: Sun 15 Oct 2023 08:38:55 +0000
ROA not before: Sun 15 Oct 2023 08:38:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.24.0/21 maxlen: 21
176.221.28.0/22 maxlen: 24
37.128.250.0/23 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:32:7d:04:e8:36:fa:0d:87:0c:1a:0b:18:99:d8:c7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 15 08:38:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=126996e42b89eba4168001229e88f4e932564af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:69:30:59:40:3f:39:c1:9d:9f:d4:74:2f:
00:48:e2:3c:45:77:98:bc:88:10:ec:fe:7d:63:19:
93:f9:e2:1d:30:a9:65:b0:63:10:21:20:a1:eb:0b:
03:54:38:0e:32:2b:c7:ec:a3:23:21:8d:19:02:c6:
43:02:7a:ed:d5:9e:e3:2c:ec:aa:60:a0:64:9d:59:
4d:d1:59:d2:45:d5:d2:05:7c:dd:c0:5a:9b:e1:cd:
96:6f:93:a3:e2:38:8c:b9:fb:93:2e:f1:9f:3a:62:
fb:aa:fb:9c:e4:ea:93:c8:a9:63:2c:f0:5c:24:e0:
06:a3:fd:1a:38:88:a6:45:0b:69:91:ed:98:35:f5:
ad:cc:2a:9f:e8:cf:70:ea:41:a9:10:f4:92:50:c7:
c1:75:d6:c6:e1:98:dd:7f:31:62:49:ad:ec:5d:cb:
97:1c:f3:02:23:30:72:5f:1f:01:9f:77:27:a8:1f:
6c:87:0e:8a:9c:b8:48:e4:ce:8e:33:da:9f:16:78:
41:54:be:aa:60:ac:98:e2:ff:44:88:84:be:6f:d1:
c8:a5:f6:9d:27:36:e5:f3:6e:3d:ea:97:ec:52:d4:
03:31:b9:ba:ad:e7:6d:25:65:67:06:0f:4f:45:bf:
c2:1c:f2:1f:32:e4:1d:28:26:37:95:a5:01:cb:51:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:69:96:E4:2B:89:EB:A4:16:80:01:22:9E:88:F4:E9:32:56:4A:F0
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/EmmW5CuJ66QWgAEinoj06TJWSvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/21
176.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
51:06:7a:0a:ce:33:49:f5:df:17:ab:11:e5:79:c6:97:26:4f:
52:24:a2:64:a9:ee:a7:98:04:4e:e1:c5:49:d3:ce:11:72:ba:
71:9f:f9:5b:e5:d3:4b:1d:dc:ab:0d:a5:69:97:79:61:67:fe:
7f:63:20:25:78:6d:6b:41:1d:55:da:52:6d:e9:17:48:19:fe:
04:ac:26:73:96:98:7f:1c:7c:44:c9:9f:b2:aa:77:5b:41:b2:
d4:29:0f:14:78:4c:ea:4a:99:6e:ae:ed:f9:89:83:1e:73:72:
e3:4b:67:76:bd:1e:e2:5d:42:7a:bb:79:08:80:0b:bd:d6:ef:
5b:1e:c6:91:07:79:2d:2b:dd:71:16:4f:ed:1b:1f:72:d3:50:
9e:69:ef:50:5a:06:68:ef:9a:ad:cd:71:df:86:43:c3:e7:bb:
74:12:d3:04:c0:05:81:6d:35:28:fa:51:37:68:4b:f0:68:6b:
47:d1:07:8f:2e:45:19:70:d8:05:05:df:b3:28:24:e9:6d:71:
b1:5f:1d:c1:40:9f:4b:c2:32:7e:7f:30:57:26:a3:f2:f7:2c:
99:2a:d7:08:95:12:05:0c:6b:8e:6f:c9:36:69:83:19:93:1d:
b2:09:d3:8d:8a:56:22:71:ab:b1:e9:7f:ca:6c:41:1d:4a:51:
10:6b:ec:db
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYsyfQToNvoNhwwaCxiZ2MfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjMxMDE1MDgzODU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjY5OTZlNDJiODllYmE0MTY4MDAxMjI5ZTg4ZjRlOTMyNTY0YWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlRpMFlAPznBnZ/UdC8ASOI8RXeY
vIgQ7P59YxmT+eIdMKllsGMQISCh6wsDVDgOMivH7KMjIY0ZAsZDAnrt1Z7jLOyq
YKBknVlN0VnSRdXSBXzdwFqb4c2Wb5Oj4jiMufuTLvGfOmL7qvuc5OqTyKljLPBc
JOAGo/0aOIimRQtpke2YNfWtzCqf6M9w6kGpEPSSUMfBddbG4ZjdfzFiSa3sXcuX
HPMCIzByXx8Bn3cnqB9shw6KnLhI5M6OM9qfFnhBVL6qYKyY4v9EiIS+b9HIpfad
Jzbl82496pfsUtQDMbm6redtJWVnBg9PRb/CHPIfMuQdKCY3laUBy1HKUQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBJpluQrieukFoABIp6I9OkyVkrwMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvRW1tVzVDdUo2NlFXZ0FFaW5vajA2VEpXU3ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJYD4AwQD
X1IAAwQEsN0QMA0GCSqGSIb3DQEBCwUAA4IBAQBRBnoKzjNJ9d8XqxHlecaXJk9S
JKJkqe6nmARO4cVJ084Rcrpxn/lb5dNLHdyrDaVpl3lhZ/5/YyAleG1rQR1V2lJt
6RdIGf4ErCZzlph/HHxEyZ+yqndbQbLUKQ8UeEzqSpluru35iYMec3LjS2d2vR7i
XUJ6u3kIgAu91u9bHsaRB3ktK91xFk/tGx9y01Ceae9QWgZo75qtzXHfhkPD57t0
EtMEwAWBbTUo+lE3aEvwaGtH0QePLkUZcNgFBd+zKCTpbXGxXx3BQJ9LwjJ+fzBX
JqPy9yyZKtcIlRIFDGuOb8k2aYMZkx2yCdONilYicaux6X/KbEEdSlEQa+zb
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:29 2025 by rpki-client