Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/dDO9RvF3YWAHERb4GxoHqtg7ITo.roa
File: dDO9RvF3YWAHERb4GxoHqtg7ITo.roa (raw, json)
Hash identifier: IoYSpv0Re6I+NgaTsFJKAwxNz5he7FDmk/idAxUI1Ls=
Subject key identifier: 74:33:BD:46:F1:77:61:60:07:11:16:F8:1B:1A:07:AA:D8:3B:21:3A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018C3DF1A20CC8D5EA18823DA91DE80A95EF
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/dDO9RvF3YWAHERb4GxoHqtg7ITo.roa
Signing time: Wed 06 Dec 2023 07:04:54 +0000
ROA not before: Wed 06 Dec 2023 07:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.8.0/21 maxlen: 24
185.65.62.0/24 maxlen: 24
109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
95.82.32.0/21 maxlen: 24
176.221.24.0/21 maxlen: 21
176.221.30.0/23 maxlen: 24
109.111.56.0/22 maxlen: 24
176.221.28.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3d:f1:a2:0c:c8:d5:ea:18:82:3d:a9:1d:e8:0a:95:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Dec 6 07:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7433bd46f1776160071116f81b1a07aad83b213a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:49:96:9e:24:33:6e:18:2f:cf:60:f4:e5:
c9:bb:da:87:89:bc:42:10:50:95:55:7c:44:70:9e:
4a:2b:cb:9d:e7:87:a0:db:6c:d1:6b:45:52:f2:85:
68:76:db:36:81:13:7a:5c:b2:fa:16:5f:e7:11:07:
a2:c3:8f:e4:66:cc:32:41:1f:b4:86:2e:67:00:e4:
a7:a4:6d:30:af:8e:bc:4b:16:56:82:3a:f4:84:83:
f2:ae:61:29:bd:6b:db:36:cc:99:e7:17:c3:14:98:
18:0f:41:3e:cc:a5:ad:9d:4e:55:d4:9f:30:ce:d6:
83:7a:fe:9c:68:bb:de:e5:6f:06:a0:61:b9:dc:6e:
04:f4:db:23:3f:67:1a:f7:9f:77:91:df:73:1e:34:
a8:94:c0:8c:b7:24:75:4d:8a:ae:b8:b1:96:b9:6c:
16:6d:b6:b9:88:a5:f6:5e:e9:38:79:ad:83:07:29:
53:81:92:d3:b5:1a:ab:62:b0:ae:a4:01:bd:bc:e0:
34:19:30:46:4c:05:e5:57:10:05:24:82:81:5c:ba:
3a:34:73:1d:2e:1c:ca:3f:83:7d:b3:a6:ff:7d:2d:
d1:19:ae:4a:38:d8:6e:57:33:d9:f0:72:16:4f:d5:
db:4f:5c:91:67:22:50:83:f0:a2:ab:e4:94:c8:11:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:33:BD:46:F1:77:61:60:07:11:16:F8:1B:1A:07:AA:D8:3B:21:3A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/dDO9RvF3YWAHERb4GxoHqtg7ITo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.8.0/21
95.82.32.0/21
109.111.32.0/20
109.111.56.0/22
176.221.16.0/20
185.65.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c1:a0:66:df:bb:d4:0a:33:e3:1a:91:3e:55:08:e2:ca:34:
41:3d:a0:78:aa:4d:0a:7f:33:57:b9:22:8c:25:d8:18:0a:ab:
1a:f2:6c:a8:7a:16:b5:2f:59:3e:e8:73:58:e4:05:cf:f1:41:
a3:1f:fd:da:83:a3:43:f6:26:e9:9f:38:3c:fd:7f:5f:42:85:
7b:a1:84:98:bb:4b:f9:d3:5d:9e:09:01:93:6c:ba:d8:9f:5d:
b4:9b:97:1e:56:a8:fc:e8:b2:e3:4b:ae:83:5f:49:f5:a2:f9:
63:93:fe:e1:04:7b:db:eb:03:10:ac:ee:5a:ad:7a:12:14:08:
a3:8f:8c:57:e7:07:5f:54:4b:68:00:e0:8c:ed:09:3a:8d:86:
e8:2a:5d:de:08:dd:ed:4a:30:2a:a8:61:cf:1e:cd:78:91:f6:
c7:a2:5e:6f:90:08:91:1a:8a:fe:b4:a4:d0:a3:30:cf:f9:41:
40:ab:ec:dd:95:33:43:a9:08:88:69:97:3a:f9:77:3b:6f:8c:
fc:61:85:05:35:1e:c2:42:af:9f:57:69:7e:ed:80:29:92:38:
f8:43:28:e9:b4:46:6c:4e:51:b5:35:1d:87:4a:65:ac:18:65:
54:5a:46:1e:d6:14:5a:90:30:96:50:44:1c:6d:28:79:1b:41:
91:42:10:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:44 2025 by rpki-client