Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/LgDtZG8qMRy7Imab-3x2gYbb1lE.roa
File: LgDtZG8qMRy7Imab-3x2gYbb1lE.roa (raw, json)
Hash identifier: tbtP0rXy4rpjvvXl+jLMLo/wSonjg+60TWUAw/bfaXs=
Subject key identifier: 2E:00:ED:64:6F:2A:31:1C:BB:22:66:9B:FB:7C:76:81:86:DB:D6:51
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018BE28DBCDED582CDFD11EA36DAE0A89249
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/LgDtZG8qMRy7Imab-3x2gYbb1lE.roa
Signing time: Sat 18 Nov 2023 13:10:21 +0000
ROA not before: Sat 18 Nov 2023 13:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203394
IP address blocks: 141.105.130.0/24 maxlen: 24
185.126.255.0/24 maxlen: 24
212.79.125.0/24 maxlen: 24
194.4.71.0/24 maxlen: 24
212.87.168.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e2:8d:bc:de:d5:82:cd:fd:11:ea:36:da:e0:a8:92:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Nov 18 13:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e00ed646f2a311cbb22669bfb7c768186dbd651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:19:7d:12:8f:b8:09:23:59:a9:50:cb:13:
26:49:e1:cf:92:ad:71:76:9a:75:79:0f:29:ae:7e:
19:48:80:1b:97:f9:15:0d:27:33:3e:e0:e2:73:82:
3c:1b:6c:f0:0b:3c:0b:1d:49:5d:80:fc:7e:8f:40:
01:c6:21:30:52:73:29:81:89:2d:e4:d4:d6:92:95:
8d:14:d0:46:40:21:e8:06:b3:3d:ea:a9:f7:1a:06:
5e:e7:58:ff:29:19:a3:41:40:0b:29:49:03:50:23:
03:2f:81:56:af:fb:f0:80:21:3d:c3:c9:b2:f7:09:
14:ca:d6:f5:02:5e:76:ef:8a:43:f4:ac:1e:40:9b:
2d:dd:49:2b:fc:85:4d:07:15:1e:e4:2b:76:c9:18:
03:4f:d1:22:d5:80:b3:4f:7b:d2:97:5d:41:d9:c2:
00:96:56:f9:4f:3c:d0:ff:97:7a:68:2e:1f:fc:4c:
fb:46:d2:69:c3:25:1d:4b:46:fe:b2:9c:35:a6:52:
6b:b5:ae:4f:19:27:c8:a8:12:f8:d0:ec:79:fd:cb:
db:9c:14:c6:75:e4:c3:ae:cb:09:71:26:84:87:fb:
2a:d7:26:af:ee:a6:59:46:e9:59:8a:f7:3d:2a:c7:
05:02:56:7f:90:0f:14:0e:cb:97:bd:6d:c0:8e:7d:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:00:ED:64:6F:2A:31:1C:BB:22:66:9B:FB:7C:76:81:86:DB:D6:51
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/LgDtZG8qMRy7Imab-3x2gYbb1lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.130.0/24
185.126.255.0/24
194.4.71.0/24
212.79.125.0/24
212.87.168.0/24
Signature Algorithm: sha256WithRSAEncryption
05:84:85:b5:ed:65:d3:0d:ea:1a:ba:76:83:76:21:1a:78:3e:
8e:68:96:db:36:25:9f:65:7d:36:dc:e4:33:61:46:67:87:30:
44:d1:e7:d5:7d:d3:e8:bd:20:9b:9c:e2:ac:34:f8:90:f3:b5:
13:5a:af:a8:16:5d:15:3f:d7:2a:25:e6:23:23:1a:93:4f:b1:
93:46:c4:e1:a3:e7:95:a6:85:2e:b4:20:b6:3b:1c:67:81:da:
ac:3c:2c:13:ba:98:a9:75:e4:13:47:3a:bb:fd:a5:ef:8a:19:
6e:e0:5b:83:9e:25:92:a6:7f:08:5f:48:0b:65:6d:1c:28:a3:
dc:b2:5b:b9:a1:d2:b5:d6:97:2e:54:0b:ba:5f:d8:f4:6d:47:
36:e1:81:e3:96:d4:12:8e:55:95:21:ec:d5:1c:15:49:4f:86:
5a:5e:8e:89:11:8f:33:ee:4c:be:94:bd:72:97:f1:e9:d8:53:
55:d1:61:13:8b:a8:b9:19:c9:49:8f:4c:60:22:79:15:93:5e:
c6:5e:9e:0e:66:cf:65:97:9c:fd:2f:94:a3:1b:9e:99:8b:9f:
d4:d0:c8:c2:91:a5:7a:f3:a3:c4:29:36:53:52:6b:9f:8f:8f:
94:1d:ac:f3:6b:83:e9:b7:7b:79:9e:36:01:db:39:aa:58:59:
df:a8:b9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:44:13 2025 by rpki-client