Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/7ZW9ECGbU5aLh32SvJ1KcBaS3tY.roa
File: 7ZW9ECGbU5aLh32SvJ1KcBaS3tY.roa (raw, json)
Hash identifier: C888TCbb25bUK81LwXncVo/n+NsdRIPX3TPl9i7AUx0=
Subject key identifier: ED:95:BD:10:21:9B:53:96:8B:87:7D:92:BC:9D:4A:70:16:92:DE:D6
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 018572472189C86B678026B63F2F08277F09
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/7ZW9ECGbU5aLh32SvJ1KcBaS3tY.roa
Signing time: Mon 02 Jan 2023 11:39:02 +0000
ROA not before: Mon 02 Jan 2023 11:39:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58222
IP address blocks: 185.16.172.0/22 maxlen: 24
185.2.200.0/22 maxlen: 24
212.237.208.0/22 maxlen: 24
185.234.16.0/22 maxlen: 24
45.80.16.0/22 maxlen: 24
89.43.116.0/22 maxlen: 24
156.67.8.0/22 maxlen: 24
2a03:da40::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:21:89:c8:6b:67:80:26:b6:3f:2f:08:27:7f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Jan 2 11:39:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed95bd10219b53968b877d92bc9d4a701692ded6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:67:2c:b2:c0:58:7a:d9:41:19:d1:7e:24:
71:26:fa:87:32:40:cb:4e:09:ae:fd:81:7d:3b:0e:
98:55:eb:0f:c4:67:72:55:44:fc:10:f2:2b:ee:13:
27:96:de:02:cf:8a:f7:b1:a5:7a:c5:be:ea:32:a1:
8d:f2:9e:48:9d:54:89:dc:d7:ea:76:8f:de:b3:20:
77:5c:07:aa:24:e9:c9:55:10:91:af:8d:51:7f:28:
b0:93:3b:c0:ea:c8:94:6e:96:1d:d3:20:68:eb:8a:
da:9e:75:c6:cd:f0:c5:ce:78:fb:f4:2e:00:5f:3a:
12:72:d5:5c:3b:b4:1c:58:a0:95:f6:64:37:49:4f:
55:96:f0:52:e4:65:d4:1d:4a:ba:c1:7d:fc:a5:38:
c1:61:60:fa:bd:6c:59:23:c6:c4:e8:fe:06:fd:da:
35:ad:2b:2e:b6:6a:ec:e6:7d:4e:66:e3:04:1d:f1:
ae:c5:b6:3e:15:70:d3:7c:b2:32:a0:c9:fe:a9:b2:
81:0f:b5:d1:3c:91:b8:99:34:35:79:54:c8:ca:25:
3a:19:d2:f8:28:10:12:34:18:34:8a:4e:d5:23:f2:
61:ee:10:90:c6:19:fd:a1:8e:4f:f6:a7:19:ea:42:
e3:6b:21:53:77:75:cc:60:b3:94:c2:e5:e8:78:9c:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:95:BD:10:21:9B:53:96:8B:87:7D:92:BC:9D:4A:70:16:92:DE:D6
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/7ZW9ECGbU5aLh32SvJ1KcBaS3tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.16.0/22
89.43.116.0/22
156.67.8.0/22
185.2.200.0/22
185.16.172.0/22
185.234.16.0/22
212.237.208.0/22
IPv6:
2a03:da40::/29
Signature Algorithm: sha256WithRSAEncryption
09:4f:7b:d6:08:ac:f8:4a:7e:25:45:8b:62:b9:6f:33:a6:a1:
ff:6f:bc:2f:a9:89:b1:51:fa:85:a9:0f:22:aa:47:d8:49:6c:
a5:3f:bb:ad:0c:1d:0d:2e:73:17:3c:a4:bf:a1:03:f5:d3:1f:
69:1a:d0:24:f2:7d:9e:9c:12:b9:a2:3a:19:49:9f:50:4a:1e:
cb:50:e7:e2:c8:22:41:08:c3:4b:fb:cc:bb:61:2f:37:63:d2:
73:16:94:8f:e0:cf:3e:e7:41:3d:83:21:8c:e7:19:d8:cb:b3:
1e:24:f4:0c:64:cf:51:96:6d:8b:9c:a7:a1:3f:a6:93:f5:e3:
f8:f8:41:13:f6:11:e4:0c:24:fc:c1:2e:52:4c:61:e9:bf:ee:
14:5e:94:66:87:95:aa:09:74:3e:47:c9:e3:b2:85:df:ca:56:
83:a8:75:19:af:4c:62:ac:34:ff:ce:b2:1f:62:c1:7c:63:6a:
37:94:b6:cb:c1:f4:c7:24:52:8c:23:50:f7:db:24:c3:bc:a7:
8a:20:c8:8e:2c:16:8c:57:8b:ed:5f:be:1b:71:ad:67:81:37:
29:38:33:53:51:8f:84:36:3a:f5:ad:b9:b2:b8:25:99:f7:20:
58:33:c4:34:fc:67:17:d2:1c:7c:29:ad:c9:3e:96:cd:54:fe:
99:d1:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:55 2025 by rpki-client