Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/P8PXqR8AZvuJSta8N92Z6MyPqHw.roa
File: P8PXqR8AZvuJSta8N92Z6MyPqHw.roa (raw, json)
Hash identifier: N9n/rGWGlOnnQZ44anpOfaoxvENM+ZHk3JFB7yDl8JA=
Subject key identifier: 3F:C3:D7:A9:1F:00:66:FB:89:4A:D6:BC:37:DD:99:E8:CC:8F:A8:7C
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018EA0BF2491E930B390EFF3585A60A1ACF3
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/P8PXqR8AZvuJSta8N92Z6MyPqHw.roa
Signing time: Tue 02 Apr 2024 21:37:45 +0000
ROA not before: Tue 02 Apr 2024 21:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.128.248.0/22 maxlen: 24
37.128.254.0/23 maxlen: 24
95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
109.111.60.0/22 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.20.0/22 maxlen: 24
176.221.20.0/23 maxlen: 24
176.221.24.0/22 maxlen: 24
185.65.62.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:bf:24:91:e9:30:b3:90:ef:f3:58:5a:60:a1:ac:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 2 21:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fc3d7a91f0066fb894ad6bc37dd99e8cc8fa87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:a7:9c:45:d2:e7:64:23:92:2b:e1:d5:1e:
3e:b4:e6:69:7d:90:4b:dd:67:9c:49:7a:b5:81:e2:
2a:9f:33:00:23:5f:30:b9:5d:00:eb:14:c1:98:56:
9c:52:ac:53:4f:ac:94:15:59:99:51:46:9e:54:aa:
73:d9:e1:4d:87:a2:ac:d8:4f:30:b3:40:43:87:4e:
6c:59:1f:8b:e4:32:12:8a:c0:60:02:77:29:8d:d8:
ca:df:ab:d5:e2:75:bb:2d:70:f2:27:ed:ad:0f:c9:
bd:e9:2d:33:ec:2b:f4:c5:f4:93:e8:a2:d6:f2:4b:
6d:98:f4:e7:39:21:23:05:0b:6f:66:df:d3:e8:07:
f7:76:58:07:7a:52:4f:47:2b:40:c6:af:ae:7b:cf:
a4:db:86:f3:dc:2f:33:1a:66:20:cf:e1:81:7e:70:
51:d2:5f:06:15:61:70:22:e7:b2:4e:47:7e:cc:a7:
70:62:17:dd:f6:24:69:a4:6c:90:e8:a2:54:83:a1:
bf:76:1a:45:08:56:d6:dc:58:95:e2:ab:a2:f5:dc:
f0:8f:2f:dd:c1:03:3b:54:1c:64:2f:ac:a7:a6:6e:
f9:2f:bc:eb:fa:32:38:b1:d8:15:98:94:24:e5:39:
aa:dd:cc:41:06:9b:dc:42:39:be:a5:75:44:69:aa:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C3:D7:A9:1F:00:66:FB:89:4A:D6:BC:37:DD:99:E8:CC:8F:A8:7C
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/P8PXqR8AZvuJSta8N92Z6MyPqHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
37.128.254.0/23
95.82.0.0/20
109.111.32.0/20
109.111.60.0/22
176.221.16.0-176.221.27.255
185.65.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d8:19:ed:38:12:5e:df:64:7c:fc:fe:0f:75:fa:5d:11:0d:
ad:20:46:e3:bd:9e:57:9f:cc:67:05:eb:04:8f:92:9b:5d:ee:
e5:ee:ca:15:55:83:8e:2c:12:e6:82:0c:29:c1:f0:3c:9c:cc:
9f:d2:54:1d:eb:09:0d:84:1c:be:d8:63:92:75:20:0a:da:dd:
8b:cc:90:22:42:bd:f5:7a:a2:91:02:bc:cb:76:ac:af:3d:84:
75:f2:fa:f0:25:71:d1:ba:6b:04:9e:78:64:6d:a5:31:13:af:
87:d5:00:9e:c7:ad:94:f6:2b:38:50:03:f6:dc:33:39:27:13:
25:70:55:4e:6a:aa:a1:a1:d3:00:22:36:67:d6:f7:be:58:d3:
22:ab:9b:0d:96:fe:9d:7d:ba:8c:33:da:28:dd:ef:03:c6:2b:
e0:cc:fc:4d:1a:2e:47:52:82:ac:1d:66:0f:87:5d:89:9d:75:
68:86:91:2b:13:5d:17:38:71:c0:69:b1:a0:e2:9f:92:80:5f:
0e:e5:bb:e0:6e:e1:fb:72:89:47:5c:7c:d1:45:5f:26:72:f7:
87:51:74:71:ab:ba:cd:09:24:3e:0c:c0:37:66:6c:61:a6:f4:
9d:6c:c6:b9:af:74:cd:3b:11:4c:05:a1:96:80:d2:03:99:43:
af:92:f5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:24 2025 by rpki-client