Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/c6v7HiECu5OUpZ1tTqH7rdJOeZ8.roa
File: c6v7HiECu5OUpZ1tTqH7rdJOeZ8.roa (raw, json)
Hash identifier: YCpR4i1jptw4begfwMQXIgrGM9Yhb6iEy2dqmrMYsMs=
Subject key identifier: 73:AB:FB:1E:21:02:BB:93:94:A5:9D:6D:4E:A1:FB:AD:D2:4E:79:9F
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 01959365FE8D79EDB0323C9CF9EB4959970F
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/c6v7HiECu5OUpZ1tTqH7rdJOeZ8.roa
Signing time: Fri 14 Mar 2025 06:44:49 +0000
ROA not before: Fri 14 Mar 2025 06:44:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61272
IP address blocks: 85.206.160.0/22 maxlen: 22
85.206.164.0/22 maxlen: 22
85.206.166.58/32 maxlen: 32
85.206.168.0/22 maxlen: 22
85.206.172.0/22 maxlen: 22
85.206.240.0/22 maxlen: 22
88.119.160.0/21 maxlen: 21
88.119.168.0/24 maxlen: 24
88.119.169.0/24 maxlen: 24
88.119.170.0/24 maxlen: 24
88.119.171.0/24 maxlen: 24
88.119.173.0/24 maxlen: 24
88.119.174.0/24 maxlen: 24
88.119.175.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:65:fe:8d:79:ed:b0:32:3c:9c:f9:eb:49:59:97:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Mar 14 06:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73abfb1e2102bb9394a59d6d4ea1fbadd24e799f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:bf:c2:f1:b0:88:09:14:89:10:80:6b:25:
9f:a5:ac:55:e2:99:36:3e:a5:bb:60:cd:80:76:d2:
29:e7:50:ca:d2:08:da:de:06:fc:eb:f6:dc:b4:2c:
ad:7b:3e:85:a3:eb:85:33:5c:97:3e:21:67:21:46:
26:7f:bb:11:f3:d5:37:d5:e4:8e:40:11:17:49:21:
dc:fc:4a:9c:7c:e3:98:4c:50:be:2c:9b:a6:97:19:
69:32:19:0a:b3:3f:ad:ce:d9:04:f4:e8:14:4c:63:
97:b8:08:03:57:8e:44:73:d3:3d:aa:10:b3:f6:47:
86:c6:57:40:0c:9a:f5:fb:48:fa:94:ea:fc:92:09:
e8:13:95:d9:e8:54:06:cf:0d:41:a7:82:09:a3:f9:
ba:dc:52:ad:04:a8:22:6a:e9:ce:5c:07:23:7b:f7:
35:3b:70:11:ba:26:f7:e9:a1:de:19:8e:01:da:35:
bb:af:c9:9d:d0:67:5c:6e:ce:68:5b:ed:d7:ee:3f:
a1:26:5c:9b:db:02:6c:a0:c7:e4:29:f4:f0:bd:c4:
d0:67:19:e4:0e:8b:78:dc:47:a4:a0:da:6b:90:f0:
07:9d:60:c9:66:c2:3e:20:23:eb:c2:06:fd:4e:5f:
29:1b:2a:7c:2f:00:51:cb:95:61:d5:b1:2d:a3:91:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AB:FB:1E:21:02:BB:93:94:A5:9D:6D:4E:A1:FB:AD:D2:4E:79:9F
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/c6v7HiECu5OUpZ1tTqH7rdJOeZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.206.160.0/20
85.206.240.0/22
88.119.160.0-88.119.171.255
88.119.173.0-88.119.175.255
Signature Algorithm: sha256WithRSAEncryption
a3:81:28:4f:d1:fc:d9:94:9a:cd:a5:af:65:43:99:82:ad:f3:
26:e6:46:4e:e6:da:d5:44:86:91:3b:24:c8:0f:47:b3:fc:57:
09:60:68:79:c4:1a:ea:d2:3c:18:04:67:1f:a8:d7:08:09:e3:
f3:a0:f9:e6:34:9a:82:81:3a:5a:33:c2:3f:3a:f2:b5:0b:6a:
8d:e0:38:f8:d1:7f:62:f7:df:2c:ef:b4:b9:0b:a8:e4:76:a2:
87:93:ba:04:52:05:3c:ef:9b:1c:e1:69:88:ff:0f:80:8d:d1:
10:87:d0:19:42:46:22:b4:b8:03:33:bc:a1:6f:24:b1:e8:03:
1e:73:a6:43:56:5a:6e:41:0e:fb:69:f7:70:18:90:64:ee:8a:
68:2b:54:9b:eb:86:d9:82:36:6a:05:0d:c2:76:e7:0f:2e:e2:
f8:91:55:26:69:d1:9e:cd:ba:07:07:ca:f7:03:04:f3:6e:cb:
00:3a:2f:e7:b2:fd:8b:e2:f2:0a:67:3a:f7:b1:d6:b2:a2:1c:
2c:01:7c:4f:26:63:e2:a8:f3:20:0c:cf:2f:de:74:d8:dc:4d:
5c:9d:10:5e:80:eb:83:dc:16:30:62:50:6a:2b:68:3d:fc:44:
bf:0e:65:f1:a0:cd:5c:eb:52:b5:e1:c3:8a:7f:6c:22:05:c7:
3b:3a:c9:ba
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZWTZf6Nee2wMjyc+etJWZcPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm
NDYyZWEwHhcNMjUwMzE0MDY0NDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2FiZmIxZTIxMDJiYjkzOTRhNTlkNmQ0ZWExZmJhZGQyNGU3OTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwie/wvGwiAkUiRCAayWfpaxV4pk2
PqW7YM2AdtIp51DK0gja3gb86/bctCytez6Fo+uFM1yXPiFnIUYmf7sR89U31eSO
QBEXSSHc/EqcfOOYTFC+LJumlxlpMhkKsz+tztkE9OgUTGOXuAgDV45Ec9M9qhCz
9keGxldADJr1+0j6lOr8kgnoE5XZ6FQGzw1Bp4IJo/m63FKtBKgiaunOXAcje/c1
O3ARuib36aHeGY4B2jW7r8md0Gdcbs5oW+3X7j+hJlyb2wJsoMfkKfTwvcTQZxnk
Dot43EekoNprkPAHnWDJZsI+ICPrwgb9Tl8pGyp8LwBRy5Vh1bEto5G5JQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFHOr+x4hAruTlKWdbU6h+63STnmfMB8GA1UdIwQY
MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw
LWJlNTgzMmQ1ZjdhYS8xL2M2djdIaUVDdTVPVXBaMXRUcUg3cmRKT2VaOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh
YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUHAQcBAf8EMjAwMC4EAgABMCgDBARVzqAD
BAJVzvAwDAMEBVh3oAMEAlh3qDAMAwQAWHetAwQEWHegMA0GCSqGSIb3DQEBCwUA
A4IBAQCjgShP0fzZlJrNpa9lQ5mCrfMm5kZO5trVRIaROyTID0ez/FcJYGh5xBrq
0jwYBGcfqNcICePzoPnmNJqCgTpaM8I/OvK1C2qN4Dj40X9i998s77S5C6jkdqKH
k7oEUgU875sc4WmI/w+AjdEQh9AZQkYitLgDM7yhbySx6AMec6ZDVlpuQQ77afdw
GJBk7opoK1Sb64bZgjZqBQ3CducPLuL4kVUmadGezboHB8r3AwTzbssAOi/nsv2L
4vIKZzr3sdayohwsAXxPJmPiqPMgDM8v3nTY3E1cnRBegOuD3BYwYlBqK2g9/ES/
DmXxoM1c61K14cOKf2wiBcc7Osm6
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:48:59 2025 by rpki-client