Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/gTqjlylggWzX5s42tz696X5X2OY.roa
File: gTqjlylggWzX5s42tz696X5X2OY.roa (raw, json)
Hash identifier: yL4VkQHn764WX0k3jVc909VPl8BIlbWkNoToTqKkm/I=
Subject key identifier: 81:3A:A3:97:29:60:81:6C:D7:E6:CE:36:B7:3E:BD:E9:7E:57:D8:E6
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 018CC49238A8FA62D5428BB98DD54E40E5C5
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/gTqjlylggWzX5s42tz696X5X2OY.roa
Signing time: Mon 01 Jan 2024 10:29:26 +0000
ROA not before: Mon 01 Jan 2024 10:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9080
IP address blocks: 213.168.160.0/20 maxlen: 24
85.132.140.0/22 maxlen: 24
79.127.128.0/18 maxlen: 24
212.71.128.0/18 maxlen: 24
85.132.160.0/19 maxlen: 24
2001:ae8::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:38:a8:fa:62:d5:42:8b:b9:8d:d5:4e:40:e5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Jan 1 10:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=813aa3972960816cd7e6ce36b73ebde97e57d8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:e9:45:98:b0:53:c9:44:87:46:32:6b:ad:
cf:2e:a9:24:c0:63:11:77:ea:b5:51:4f:95:dc:98:
db:0e:f9:56:9b:0c:6c:af:1a:d0:a9:d3:3c:f4:4c:
0f:27:c9:4f:97:69:81:8b:13:74:05:eb:dd:34:d4:
8a:59:ab:6f:2f:88:2b:5f:48:ce:c2:ad:f2:94:83:
cf:a8:d4:9d:aa:a7:08:0b:7f:5f:6e:68:f4:f4:85:
8c:47:45:39:0d:d6:2a:a8:a9:7a:59:d6:55:f8:4a:
91:63:ab:3a:26:d6:78:bc:be:e8:95:d9:7a:56:eb:
9a:95:fe:97:58:70:e1:19:de:e8:ae:e9:3a:5f:aa:
5f:1e:dd:42:05:58:89:49:6b:c9:e7:6f:19:bd:ba:
ff:86:17:ae:b0:72:0a:1e:0b:e0:39:31:8e:41:f4:
67:83:00:49:1c:ad:d6:ee:d2:9f:b5:d0:08:1d:34:
ff:d5:19:1f:5f:e6:bb:3b:17:6d:18:63:f1:8f:c4:
f8:61:57:da:2a:7b:75:27:39:dd:d5:3d:b6:36:32:
6f:07:b5:1a:64:25:6f:8c:05:06:8f:86:37:8f:27:
c1:71:0f:f7:69:ec:e4:6b:7b:89:9a:09:48:d4:c4:
3a:b1:c2:a3:5e:0c:91:bf:11:ec:ad:c1:b8:c6:73:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3A:A3:97:29:60:81:6C:D7:E6:CE:36:B7:3E:BD:E9:7E:57:D8:E6
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/gTqjlylggWzX5s42tz696X5X2OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.127.128.0/18
85.132.140.0/22
85.132.160.0/19
212.71.128.0/18
213.168.160.0/20
IPv6:
2001:ae8::/32
Signature Algorithm: sha256WithRSAEncryption
19:0e:a2:6b:e2:86:6d:7d:dc:6a:9e:56:59:c0:1e:9a:27:57:
36:81:6f:1a:5d:f5:57:86:3c:b9:19:8f:1a:9a:d4:11:1e:21:
a4:a5:65:d9:90:52:03:48:25:a6:fc:e8:2e:4c:7e:b8:d1:d0:
85:e0:49:f2:35:55:13:c4:b3:66:d5:89:9f:1e:b9:32:cd:7a:
63:1c:f7:24:d5:6a:d3:19:2a:b6:60:26:4c:53:0d:b3:29:6d:
51:4e:ab:21:20:02:87:ff:a9:a5:6e:b8:53:42:65:94:a3:89:
3a:66:73:2a:f2:a5:45:b6:d3:4c:63:54:7d:fa:2f:87:ab:ff:
bf:8e:f8:93:e7:25:1b:15:00:94:61:8d:9a:6e:6e:82:ca:63:
2a:63:2d:57:bc:ef:10:d9:8d:3d:c8:de:f9:e9:94:7a:1c:1b:
2d:47:a9:8f:36:65:54:86:09:c4:28:8b:e3:2f:ab:c7:a0:29:
07:da:1f:e4:d2:d8:de:ce:e2:b8:3e:41:88:b7:77:17:13:b4:
1b:d1:c9:e6:e7:5b:ca:ab:b8:93:6a:03:52:d0:28:e4:f4:43:
0e:dd:6b:c5:58:67:c4:d0:29:ff:0f:17:f4:6a:1b:c0:3c:17:
ac:ea:b9:53:d4:13:97:47:73:26:c7:a8:0d:f6:67:ce:8d:86:
37:e4:83:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:38 2025 by rpki-client