Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xyGJdJgNxoLCXWZBbSa_87y-zwE.roa
File: xyGJdJgNxoLCXWZBbSa_87y-zwE.roa (raw, json)
Hash identifier: e6/iH6pr+RLgbGnwipxypOzq5D6E6rDvvssgiXPgZY0=
Subject key identifier: C7:21:89:74:98:0D:C6:82:C2:5D:66:41:6D:26:BF:F3:BC:BE:CF:01
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018709E6B25F4A5498DBDDEB069E7A1798B3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xyGJdJgNxoLCXWZBbSa_87y-zwE.roa
Signing time: Wed 22 Mar 2023 15:18:46 +0000
ROA not before: Wed 22 Mar 2023 15:18:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 217.144.55.0/24 maxlen: 24
217.144.52.0/24 maxlen: 24
217.144.57.0/24 maxlen: 24
217.144.58.0/24 maxlen: 24
79.172.224.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
217.144.60.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
79.172.250.0/24 maxlen: 24
84.21.12.0/24 maxlen: 24
84.21.13.0/24 maxlen: 24
79.172.192.0/24 maxlen: 24
79.172.207.0/24 maxlen: 24
185.63.17.0/24 maxlen: 24
185.63.18.0/24 maxlen: 24
185.63.19.0/24 maxlen: 24
213.181.217.0/24 maxlen: 24
213.181.218.0/24 maxlen: 24
213.181.216.0/24 maxlen: 24
84.21.4.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:e6:b2:5f:4a:54:98:db:dd:eb:06:9e:7a:17:98:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 22 15:18:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7218974980dc682c25d66416d26bff3bcbecf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:32:47:5f:89:40:23:e5:78:41:c9:d0:ee:
1f:cd:e1:16:f7:e8:41:2e:6f:1d:f7:31:87:2b:64:
9f:cf:63:b4:0a:e9:07:40:aa:6a:30:01:f7:e6:ac:
78:c6:f4:ca:fb:0a:bb:bd:4c:a7:04:f9:a0:ce:c0:
60:17:74:3d:30:98:1c:a9:59:c9:d0:76:0d:21:cb:
73:5a:2f:41:f0:f8:60:cf:40:b9:14:0c:a5:3e:61:
78:be:f3:0b:f1:67:fa:a5:18:73:74:a5:35:37:a4:
d1:1d:c9:4d:55:d4:48:a9:f5:af:1d:d1:8c:a7:32:
4f:b8:f9:71:e2:e2:2c:25:66:20:0b:90:d8:5f:3b:
5a:a4:fd:37:5c:ac:c7:5e:80:0d:f1:34:dd:66:98:
d1:12:8a:8b:a3:a1:43:89:c4:3a:9a:e3:16:b9:2c:
92:18:d7:21:a1:77:72:cf:24:ba:a3:42:25:32:72:
1b:10:23:ca:ee:54:f1:02:54:45:11:a2:62:43:43:
32:b6:a4:9f:a4:66:a6:26:4d:56:81:02:fb:9a:98:
cf:39:82:cf:01:1b:a3:65:e8:a5:c5:71:20:63:ca:
e6:10:98:8c:f6:a7:a4:33:12:74:63:20:e5:4a:b5:
db:fc:ff:49:00:1b:9c:eb:ef:0a:6d:89:8b:0d:c8:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:21:89:74:98:0D:C6:82:C2:5D:66:41:6D:26:BF:F3:BC:BE:CF:01
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xyGJdJgNxoLCXWZBbSa_87y-zwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/24
79.172.207.0/24
79.172.224.0/24
79.172.228.0/24
79.172.250.0/24
84.21.4.0/24
84.21.12.0/23
185.63.17.0-185.63.19.255
213.181.216.0-213.181.218.255
217.144.52.0/24
217.144.55.0/24
217.144.57.0-217.144.60.255
Signature Algorithm: sha256WithRSAEncryption
7e:9c:f9:25:86:9a:2d:b0:21:ea:c6:b9:f5:82:3c:05:b9:85:
11:87:d2:b1:7c:b6:bb:49:e9:66:4c:78:9c:e5:45:ae:aa:a7:
23:02:6d:fe:93:9b:40:e3:dd:ae:e5:23:2d:1e:57:cf:2b:9e:
ef:c0:79:2c:ab:33:0b:00:e8:06:ac:ea:0f:5d:4f:56:fc:3d:
9e:c1:fb:35:9c:29:5a:1b:90:e0:c5:62:37:d8:89:ed:ed:4d:
d8:9c:8f:a4:c3:f4:7f:1c:3b:0e:52:ad:ff:0a:a1:ef:06:5f:
93:72:de:89:77:64:0e:8e:b1:d0:11:08:20:e2:2f:af:e4:4d:
23:10:ae:40:3c:9a:b6:dc:25:a7:42:1b:33:f0:c3:58:74:6e:
82:46:b1:de:77:52:c9:87:01:7a:9a:b2:0b:6e:31:43:20:c2:
25:4d:2f:2b:56:48:51:a3:3f:5f:af:68:6c:50:8f:da:66:cd:
61:4e:89:e9:3f:38:3b:70:4e:de:56:69:1f:a9:6c:bd:a4:06:
08:a0:aa:62:8e:f6:13:7d:29:9a:db:09:a3:e9:c9:68:ee:05:
1c:ed:a0:0b:7d:1e:cc:18:d6:1d:bb:39:50:90:a9:77:fa:79:
79:b4:4f:e5:a1:00:cb:3d:0a:15:ad:e5:0b:0a:9f:a8:6a:a5:
60:e8:f3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:13 2025 by rpki-client