Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/fL3aErQrGl09gRsb05ywg2rcxnk.roa
File: fL3aErQrGl09gRsb05ywg2rcxnk.roa (raw, json)
Hash identifier: uXIQEkes18nJ2qPYgebzc0RtfO7XHuM1qsmeWjVN9FE=
Subject key identifier: 7C:BD:DA:12:B4:2B:1A:5D:3D:81:1B:1B:D3:9C:B0:83:6A:DC:C6:79
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0191B366C6E6B3C20777644A1B1B145E4753
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/fL3aErQrGl09gRsb05ywg2rcxnk.roa
Signing time: Mon 02 Sep 2024 15:42:22 +0000
ROA not before: Mon 02 Sep 2024 15:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
109.111.34.0/23 maxlen: 24
109.111.40.0/22 maxlen: 24
109.111.42.0/23 maxlen: 24
176.221.20.0/22 maxlen: 24
176.221.24.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:66:c6:e6:b3:c2:07:77:64:4a:1b:1b:14:5e:47:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 2 15:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cbdda12b42b1a5d3d811b1bd39cb0836adcc679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:e6:71:a0:f6:f0:5a:d8:3c:75:78:b6:89:
0b:85:ef:34:f6:7d:f1:fe:2d:b5:4a:12:37:2f:06:
2a:92:d1:f1:c9:94:aa:4c:91:57:01:b5:4f:78:22:
4a:50:57:d5:b3:99:65:29:79:01:73:dd:8c:3a:6d:
74:6d:05:fa:d9:bf:dc:a9:e7:af:c6:f3:26:51:5b:
76:01:48:45:95:6f:21:37:87:cc:ed:08:73:e5:dd:
38:f6:6b:8d:b1:61:b4:cf:5e:e8:8a:42:e0:a7:e7:
43:e8:56:1a:e5:6b:0f:57:ee:ee:66:ed:95:75:50:
6f:a6:88:19:8f:ef:f3:1f:94:f1:82:c5:85:dd:1b:
5a:fb:f5:c5:58:5e:9a:5d:0a:d1:61:35:a5:40:e9:
4c:09:0a:b6:24:44:e7:fd:b1:5d:d5:db:32:cc:a6:
42:9c:04:3a:ee:22:d2:a4:96:ad:25:ca:45:9c:ea:
37:25:1a:dd:5a:11:33:bb:46:d5:a0:f4:b1:3d:4c:
0a:a6:8b:80:46:91:d6:41:80:2d:5f:49:04:ea:6c:
b0:11:24:78:65:6d:1f:af:76:31:e7:09:3f:9e:59:
d7:88:58:c5:4c:b9:f8:93:53:87:c3:ec:69:c1:30:
3c:44:cf:c5:1e:cf:a3:95:1c:47:f2:24:db:bd:fd:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BD:DA:12:B4:2B:1A:5D:3D:81:1B:1B:D3:9C:B0:83:6A:DC:C6:79
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/fL3aErQrGl09gRsb05ywg2rcxnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.0.0/20
109.111.32.0/20
176.221.20.0-176.221.27.255
Signature Algorithm: sha256WithRSAEncryption
0b:0a:ee:d8:bb:28:15:58:61:aa:a5:fa:e5:81:3f:ff:a8:d1:
f8:17:38:55:b4:6e:ed:08:a1:01:ae:db:cd:b0:ae:ca:eb:c4:
3d:98:7f:86:33:7e:f5:79:c0:c9:a1:7e:55:4e:26:14:a6:ba:
f1:cc:05:59:04:9c:ef:8f:f5:56:02:47:83:73:15:b5:e1:03:
ad:f4:4d:6a:b1:5a:30:cd:42:54:57:a0:67:1c:96:a5:e0:ee:
ee:11:70:f0:3c:50:4a:fe:1d:14:4d:ca:87:dd:65:a3:79:77:
42:be:ca:cf:45:3b:eb:9d:e6:e0:7d:fc:c2:39:2e:ac:c5:3b:
0a:0d:d8:e6:4a:ef:8f:7b:1d:f8:ba:4a:3f:24:12:cd:70:f0:
88:61:09:31:15:8f:20:ac:28:b7:5c:77:13:e4:0d:d2:08:66:
1b:5f:08:62:30:73:aa:87:4c:b3:f3:01:eb:3e:d0:70:08:67:
ae:44:3a:33:ce:97:20:da:ae:90:aa:7c:d1:c2:52:90:d8:c8:
6f:5f:33:8e:f2:37:94:4d:ac:40:5b:1c:20:fc:34:e9:09:dc:
23:33:7b:86:60:6d:75:50:e6:06:98:db:76:12:62:fa:b1:09:
10:31:a7:4e:2a:1b:81:e6:e1:dd:d1:ef:6b:10:d1:7e:d0:8c:
aa:7c:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:03 2025 by rpki-client