Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/NywCjcSmhhILKGWYtej5Ql-n1l0.roa
File: NywCjcSmhhILKGWYtej5Ql-n1l0.roa (raw, json)
Hash identifier: pouc03dkDhneP0yDbPSU11z2EoTZKWnYiQR/y0Nb+CY=
Subject key identifier: 37:2C:02:8D:C4:A6:86:12:0B:28:65:98:B5:E8:F9:42:5F:A7:D6:5D
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018F1E390F30432F5D1EDA26A3A521774132
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/NywCjcSmhhILKGWYtej5Ql-n1l0.roa
Signing time: Sat 27 Apr 2024 06:23:26 +0000
ROA not before: Sat 27 Apr 2024 06:23:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.128.248.0/22 maxlen: 24
95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
109.111.32.0/22 maxlen: 24
109.111.36.0/22 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.24.0/22 maxlen: 24
185.65.62.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1e:39:0f:30:43:2f:5d:1e:da:26:a3:a5:21:77:41:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 27 06:23:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=372c028dc4a686120b286598b5e8f9425fa7d65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:83:ba:d9:e1:f1:65:3e:2d:75:88:93:1b:
9a:4e:e7:e7:67:b8:23:11:15:5a:d8:07:b8:e0:72:
43:50:87:9f:6a:42:c7:a9:cf:1e:a0:46:22:cb:fc:
ea:68:ec:48:27:34:fb:47:57:ef:f8:c1:e1:04:eb:
07:bf:2c:fc:ba:b1:67:27:d6:ce:86:64:61:02:a6:
ca:d9:77:d6:6d:6b:68:a7:99:f8:5b:74:66:ad:44:
76:43:88:c2:89:3a:5c:a9:c5:c0:e8:ae:44:f6:e1:
e3:59:fa:e2:c0:a7:46:a2:57:10:cb:f8:2d:69:a4:
6c:76:7a:00:ec:fd:bd:82:a2:8d:ea:b8:24:41:76:
c0:3c:77:fb:ba:a2:e8:ad:71:1a:03:3f:3a:2c:9d:
86:8a:46:39:8a:95:4f:b5:2f:b4:af:85:dd:9a:f8:
01:62:0c:da:5a:d6:f9:a1:7e:e9:9b:0b:c2:a3:30:
1f:a3:e6:e5:ec:25:78:cd:93:f0:52:49:39:46:12:
2b:13:c4:df:7c:1a:6f:b0:a1:86:39:5d:ce:b5:8b:
8e:ec:67:30:90:1b:f2:99:37:21:8f:ab:38:69:af:
f1:f0:02:2d:96:a1:63:a5:87:4d:1b:27:87:03:6e:
ef:c9:81:a8:5d:1b:27:33:32:55:1d:c7:3f:c7:e4:
02:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2C:02:8D:C4:A6:86:12:0B:28:65:98:B5:E8:F9:42:5F:A7:D6:5D
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/NywCjcSmhhILKGWYtej5Ql-n1l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
109.111.32.0/20
176.221.16.0-176.221.27.255
185.65.62.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:99:1e:78:7f:b0:ea:aa:a7:6c:52:41:03:78:0c:02:e4:aa:
5e:25:b8:f5:8c:cb:f9:31:cc:4d:a8:a1:2a:e8:11:a7:b7:cc:
5f:85:ba:ff:ea:97:7c:d0:5f:87:dd:db:7a:3f:f1:9b:3a:f1:
2b:4d:f2:5b:f4:d9:d2:81:1a:ed:61:ad:36:30:41:d9:98:95:
7f:71:93:85:99:a9:a5:32:df:30:91:93:e1:c5:f6:3d:ad:9b:
86:ec:24:a8:82:bf:e6:5b:e7:51:6e:bf:3f:39:48:86:04:47:
b2:cb:42:8c:9c:41:a6:2d:8c:fe:42:2b:94:c1:42:76:d0:22:
a0:a3:3b:56:b3:cf:96:52:c3:a9:33:3b:a9:fc:27:11:7c:61:
16:74:5a:17:b9:dc:a5:3f:d3:0d:0a:70:0f:10:73:0e:8a:b7:
03:5d:3d:e1:50:2f:50:e5:dc:0f:10:67:79:33:90:1c:cd:c3:
16:87:7a:7c:58:ee:1b:83:1c:07:20:f3:31:c7:5f:0b:f9:21:
ca:db:a2:36:f2:11:6a:21:42:4d:b7:6a:c4:4e:eb:7f:a7:d0:
c2:15:30:2b:58:e6:d8:ff:3e:ef:a2:93:37:74:50:c0:86:8f:
14:cd:77:c6:f2:04:29:60:c5:8f:0e:56:ab:e7:d4:33:45:11:
13:f3:06:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:52 2025 by rpki-client