Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/LsfIlu6R7v7mOBwJFw7Pfx0RzyQ.roa
File: LsfIlu6R7v7mOBwJFw7Pfx0RzyQ.roa (raw, json)
Hash identifier: y8k9/kH8u0CZKjNrjvnrki/rjpGUoURCVLiYB0GVKfA=
Subject key identifier: 2E:C7:C8:96:EE:91:EE:FE:E6:38:1C:09:17:0E:CF:7F:1D:11:CF:24
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 0193D0061F97DB6E30F159A6BFD973B0B2BE
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/LsfIlu6R7v7mOBwJFw7Pfx0RzyQ.roa
Signing time: Mon 16 Dec 2024 15:11:22 +0000
ROA not before: Mon 16 Dec 2024 15:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8612
IP address blocks: 82.84.0.0/15 maxlen: 24
82.85.26.128/26 maxlen: 26
82.85.53.0/26 maxlen: 26
82.85.53.64/26 maxlen: 26
84.220.0.0/15 maxlen: 15
84.220.0.0/16 maxlen: 24
84.221.0.0/16 maxlen: 24
94.32.0.0/19 maxlen: 24
94.32.64.0/18 maxlen: 24
94.32.115.0/24 maxlen: 24
94.32.128.0/17 maxlen: 24
94.33.0.0/16 maxlen: 24
94.34.0.0/16 maxlen: 24
94.35.0.0/16 maxlen: 24
193.43.2.0/24 maxlen: 24
193.43.3.180/30 maxlen: 30
193.43.3.184/29 maxlen: 29
193.43.3.192/26 maxlen: 26
193.207.24.0/23 maxlen: 23
193.207.26.0/24 maxlen: 24
193.207.48.0/20 maxlen: 24
193.207.64.0/18 maxlen: 24
193.207.96.0/20 maxlen: 21
193.207.128.0/17 maxlen: 22
195.130.224.0/19 maxlen: 19
212.123.64.0/19 maxlen: 19
213.205.0.0/18 maxlen: 18
213.205.0.251/32 maxlen: 32
217.133.0.0/16 maxlen: 16
217.133.170.0/24 maxlen: 24
2a01:7d0::/32 maxlen: 32
2a01:7d0:4800:1::/64 maxlen: 64
2a01:7d0:4811::/64 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:06:1f:97:db:6e:30:f1:59:a6:bf:d9:73:b0:b2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Dec 16 15:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ec7c896ee91eefee6381c09170ecf7f1d11cf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:06:79:79:2c:8b:61:81:30:9b:9e:0f:d5:
f8:68:b9:7b:6b:da:06:c7:0e:53:d8:cc:d0:c7:7a:
9d:07:d1:43:4a:6b:d1:21:cd:36:34:dd:97:35:86:
98:cf:f0:af:c8:32:1f:e6:c9:5a:0c:21:2f:99:85:
cd:46:20:23:71:c4:63:62:92:72:34:ba:3f:5b:4b:
c9:20:d5:3f:43:62:fe:1d:2f:54:a0:ab:d9:4a:ba:
9d:e7:e0:5d:f0:e0:86:eb:16:fc:f3:0e:04:97:81:
2a:0f:dd:7f:2f:0e:fe:8a:98:2b:ae:51:11:cc:59:
c3:93:33:0b:12:e7:8b:b2:91:99:41:a0:7c:df:d1:
c9:d5:47:35:18:c5:d4:19:48:19:68:29:c1:79:ca:
7d:d1:01:15:22:89:42:ef:e5:9a:34:3c:29:23:9c:
98:39:a0:d6:d9:73:36:c8:4f:6b:91:67:4a:4f:a8:
04:ba:cf:d6:20:b7:89:6a:3d:61:f6:49:42:53:17:
86:f4:70:02:c1:92:83:fa:95:0e:94:e4:e7:d1:55:
ce:d8:67:81:61:ce:fe:64:50:9c:92:2d:f4:53:a9:
63:4c:7e:3a:6d:e9:c1:ea:97:09:fb:ce:4b:c9:e3:
8b:2f:97:04:45:c9:55:d9:bf:a4:c7:2a:78:d4:e1:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C7:C8:96:EE:91:EE:FE:E6:38:1C:09:17:0E:CF:7F:1D:11:CF:24
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/LsfIlu6R7v7mOBwJFw7Pfx0RzyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.84.0.0/15
84.220.0.0/15
94.32.0.0/19
94.32.64.0-94.35.255.255
193.43.2.0/24
193.43.3.180-193.43.3.255
193.207.24.0-193.207.26.255
193.207.48.0-193.207.255.255
195.130.224.0/19
212.123.64.0/19
213.205.0.0/18
217.133.0.0/16
IPv6:
2a01:7d0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:a2:55:5f:cf:df:1d:35:2c:4f:75:3a:93:d1:b3:ad:b3:80:
47:9f:3d:5c:22:02:e3:c7:fc:c8:f1:34:89:a5:d3:2d:83:22:
0b:a5:05:ee:37:d8:92:4f:10:46:33:60:59:38:fd:49:e3:ff:
9d:06:f3:a4:0b:7b:75:5d:2f:ca:3e:12:64:61:53:b3:42:cd:
2d:8f:1c:39:b4:15:a2:9c:f5:17:a1:84:0e:af:8f:f0:fb:ac:
ec:84:d5:3b:25:ea:2f:82:7f:be:aa:80:70:4d:bc:18:cd:4f:
f1:0b:80:74:4e:91:f6:0a:59:22:f7:1b:10:52:0b:8f:6f:3c:
f2:19:51:1c:48:74:aa:00:e1:28:dd:75:6b:72:81:f8:c4:e6:
ee:eb:e5:09:90:9b:1c:1a:bc:8d:bc:21:95:1c:98:bb:da:a9:
cb:ee:57:af:14:df:dc:a2:28:43:c0:43:23:60:32:8e:69:b3:
b7:82:e1:c0:45:81:be:b4:9c:9c:30:d3:1e:a6:c7:ab:8f:7b:
39:df:fd:ea:cf:0e:b8:a5:ed:b7:e4:a9:ce:f9:19:63:a0:33:
36:cc:25:a0:3f:af:0c:06:83:0a:44:0b:72:2f:b9:42:0f:21:
de:d4:44:f9:41:4b:75:64:cb:06:8a:a8:91:55:da:9b:5c:ac:
fe:16:05:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 17:12:14 2025 by rpki-client