Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/IBh6VF3mNZ1Lqr8eHVYk_c7mlng.roa
File: IBh6VF3mNZ1Lqr8eHVYk_c7mlng.roa (raw, json)
Hash identifier: dRMEC668EPo42c5bYU1GvJPPF74H1ltyA+QIgpZ/Qbo=
Subject key identifier: 20:18:7A:54:5D:E6:35:9D:4B:AA:BF:1E:1D:56:24:FD:CE:E6:96:78
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018E8FFC1105CF639FF866568AA591DFE161
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/IBh6VF3mNZ1Lqr8eHVYk_c7mlng.roa
Signing time: Sat 30 Mar 2024 15:30:45 +0000
ROA not before: Sat 30 Mar 2024 15:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.128.248.0/22 maxlen: 24
95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.20.0/22 maxlen: 24
176.221.20.0/23 maxlen: 24
176.221.24.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8f:fc:11:05:cf:63:9f:f8:66:56:8a:a5:91:df:e1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Mar 30 15:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20187a545de6359d4baabf1e1d5624fdcee69678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:53:cd:c1:61:26:f3:03:4f:38:6c:c9:06:
86:70:5d:2c:54:ff:d3:30:36:f5:dd:e3:c7:1c:82:
d3:ac:f4:cf:2e:ac:b4:67:90:02:dd:d9:91:99:29:
07:34:cf:0e:5d:b8:3d:35:6a:a1:d6:f2:f5:5f:9b:
7c:54:8b:7c:87:2c:f9:3a:f9:bf:b1:62:38:df:ed:
5a:23:d4:c6:91:9e:88:62:91:d9:cc:f4:ef:95:3e:
e7:b3:0b:15:02:db:5e:81:2a:69:16:e8:77:d2:d8:
a3:af:7a:38:43:14:19:5c:b8:40:e5:c2:51:c0:58:
3e:4e:61:6e:de:94:93:32:0b:27:8f:68:fc:3c:59:
8e:c8:dc:4a:24:6c:73:00:77:66:41:9c:22:6d:89:
af:b4:c3:21:4c:0f:7e:d7:37:fe:e9:e9:ce:1b:8a:
49:4b:00:09:e2:ad:b6:11:64:d0:38:46:db:af:92:
9a:ad:40:b2:6d:6b:27:c5:77:0a:b8:14:e9:41:6a:
a8:72:ec:c1:00:42:d7:b0:45:8c:13:dc:97:ef:34:
b1:6b:01:3f:32:4f:92:c9:bf:67:8c:43:2d:dc:b8:
bc:78:aa:ac:ab:36:72:33:d0:b0:7e:a6:7d:2f:fa:
d5:6e:48:fe:74:fd:85:cb:55:11:4d:50:48:3c:e9:
1b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:18:7A:54:5D:E6:35:9D:4B:AA:BF:1E:1D:56:24:FD:CE:E6:96:78
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/IBh6VF3mNZ1Lqr8eHVYk_c7mlng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
109.111.32.0/20
176.221.16.0-176.221.27.255
Signature Algorithm: sha256WithRSAEncryption
2c:a8:50:37:98:92:87:eb:71:e7:61:57:55:c6:cb:c4:8c:17:
a7:a6:3d:6d:86:8a:79:1d:e1:2d:ac:e4:9f:20:40:09:68:ad:
ef:9f:ce:87:7b:ac:ca:48:6b:34:12:49:92:cd:50:8e:a9:a7:
07:12:22:7e:cf:1c:88:98:7e:fe:4c:12:fa:54:ce:c8:40:80:
de:fc:49:23:9e:47:18:88:ca:ee:02:84:42:9f:6e:5e:ec:66:
4f:43:6a:8a:d8:1a:01:a5:3c:6e:84:11:43:76:3a:94:a6:a5:
47:ad:2a:be:c1:c4:b4:f9:d5:17:14:7a:75:0a:38:4c:d7:8b:
49:b1:3b:de:1e:a2:31:5a:a7:9e:bb:8e:5e:32:ea:1a:10:06:
be:30:3d:3f:c3:b5:1e:0b:2c:95:9a:85:e0:7c:84:65:c7:77:
d5:9c:59:3c:86:99:ee:0f:f1:ce:52:f3:6d:06:b8:3c:bf:84:
aa:54:01:c6:ab:44:30:96:56:97:e3:cf:1a:d5:36:3e:52:3f:
99:9f:9d:bc:c6:98:ef:0d:62:a8:0c:df:b6:60:05:e2:32:e0:
4e:9d:fd:27:e4:38:1a:46:76:50:22:7e:77:d7:89:cf:7b:4c:
c2:d8:53:09:0d:8a:ac:3b:cf:ba:0f:19:64:b6:47:37:68:f3:
5e:60:84:8f
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAY6P/BEFz2Of+GZWiqWR3+FhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjQwMzMwMTUzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDE4N2E1NDVkZTYzNTlkNGJhYWJmMWUxZDU2MjRmZGNlZTY5Njc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSVTzcFhJvMDTzhsyQaGcF0sVP/T
MDb13ePHHILTrPTPLqy0Z5AC3dmRmSkHNM8OXbg9NWqh1vL1X5t8VIt8hyz5Ovm/
sWI43+1aI9TGkZ6IYpHZzPTvlT7nswsVAttegSppFuh30tijr3o4QxQZXLhA5cJR
wFg+TmFu3pSTMgsnj2j8PFmOyNxKJGxzAHdmQZwibYmvtMMhTA9+1zf+6enOG4pJ
SwAJ4q22EWTQOEbbr5KarUCybWsnxXcKuBTpQWqocuzBAELXsEWME9yX7zSxawE/
Mk+Syb9njEMt3Li8eKqsqzZyM9CwfqZ9L/rVbkj+dP2Fy1URTVBIPOkbJQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFCAYelRd5jWdS6q/Hh1WJP3O5pZ4MB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvSUJoNlZGM21OWjFMcXI4ZUhWWWtfYzdtbG5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCJYD4AwQE
X1IAAwQEbW8gMAwDBASw3RADBAKw3RgwDQYJKoZIhvcNAQELBQADggEBACyoUDeY
kofrcedhV1XGy8SMF6emPW2Ginkd4S2s5J8gQAlore+fzod7rMpIazQSSZLNUI6p
pwcSIn7PHIiYfv5MEvpUzshAgN78SSOeRxiIyu4ChEKfbl7sZk9DaorYGgGlPG6E
EUN2OpSmpUetKr7BxLT51RcUenUKOEzXi0mxO94eojFap567jl4y6hoQBr4wPT/D
tR4LLJWaheB8hGXHd9WcWTyGme4P8c5S820GuDy/hKpUAcarRDCWVpfjzxrVNj5S
P5mfnbzGmO8NYqgM37ZgBeIy4E6d/SfkOBpGdlAifnfXic97TMLYUwkNiqw7z7oP
GWS2Rzdo815ghI8=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:38 2025 by rpki-client