Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/V5u84NNUGukYjY6Uxj9_1QMV-Is.roa
File: V5u84NNUGukYjY6Uxj9_1QMV-Is.roa (raw, json)
Hash identifier: ihzydLmW0YEceekfvs209qsUPw4iPjKZIhchlEcCK9Y=
Subject key identifier: 57:9B:BC:E0:D3:54:1A:E9:18:8D:8E:94:C6:3F:7F:D5:03:15:F8:8B
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 018731C027F56D16979AB148749FB04B732B
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/V5u84NNUGukYjY6Uxj9_1QMV-Is.roa
Signing time: Thu 30 Mar 2023 09:01:29 +0000
ROA not before: Thu 30 Mar 2023 09:01:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 185.139.181.0/24 maxlen: 24
185.139.180.0/24 maxlen: 24
185.139.182.0/24 maxlen: 24
195.177.112.0/24 maxlen: 24
195.177.115.0/24 maxlen: 24
195.177.114.0/24 maxlen: 24
195.177.113.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:c0:27:f5:6d:16:97:9a:b1:48:74:9f:b0:4b:73:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Mar 30 09:01:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=579bbce0d3541ae9188d8e94c63f7fd50315f88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:53:5d:5a:ba:62:e4:30:a6:de:ed:ac:26:ef:
7b:c6:b3:ad:c3:68:b3:05:87:a2:df:d6:bd:32:82:
10:ae:4d:5d:0a:c7:2e:25:e8:2d:22:c6:5b:74:33:
14:c5:41:5a:5b:d1:b9:fd:0a:89:57:ce:eb:33:c5:
50:3f:48:be:41:d4:3f:c6:e8:8c:f8:f7:ba:a0:3c:
60:67:c3:d1:81:da:b8:3c:7e:82:d2:41:3a:ac:39:
0c:40:65:76:fd:e4:37:8b:42:50:25:d8:13:f9:09:
3f:36:7f:bc:a9:c1:fe:b5:b0:9d:45:c1:36:1a:68:
a8:a7:a7:21:3b:05:4e:71:18:f0:43:0d:37:79:1a:
b8:cf:a2:29:41:d0:ce:68:64:cd:03:e1:ee:95:b1:
f0:ee:cb:57:aa:96:9f:5a:aa:b8:e8:fa:0f:74:1b:
67:d5:1f:3d:ff:8e:8a:a3:ec:a0:15:2e:20:18:f1:
dd:6d:e7:4c:f5:bc:11:4e:44:c5:2c:a8:1a:3d:41:
2c:9d:e0:5b:a7:3e:86:20:2f:15:94:14:80:ea:54:
7b:7c:2f:42:69:83:15:7b:07:f3:01:d2:65:7f:41:
99:72:87:69:ec:f9:b9:e2:16:be:f6:cc:45:f7:20:
16:e9:83:0f:35:6e:2e:2a:41:d0:bf:46:4d:98:b3:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9B:BC:E0:D3:54:1A:E9:18:8D:8E:94:C6:3F:7F:D5:03:15:F8:8B
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/V5u84NNUGukYjY6Uxj9_1QMV-Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.180.0-185.139.182.255
195.177.112.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:45:9f:00:80:ae:c9:09:97:65:19:6f:d7:5a:11:09:f8:d1:
92:90:50:69:b9:e8:fc:a6:89:64:59:9c:11:8a:a1:a6:db:b5:
bf:3f:a4:29:37:12:ea:b9:f7:b0:e5:a7:0f:dd:5b:09:38:dc:
2b:33:07:c6:be:12:29:6b:27:9e:a8:d4:03:ee:1f:38:40:a6:
9b:a5:d5:97:55:a8:9a:a7:95:61:6e:6f:a9:d7:2a:27:4a:0a:
80:f3:a0:a7:84:0c:6e:3e:fc:44:28:00:9f:d7:0f:58:d8:dd:
6d:e6:71:8d:28:c1:b9:7e:ea:3c:23:66:7a:7c:aa:d0:72:7b:
97:2b:7b:f5:a2:3a:ee:9f:1c:77:b2:a5:f5:b2:25:13:f5:e5:
31:91:2d:db:1c:e6:bd:6b:e3:e0:80:b8:b7:5b:01:3c:87:a1:
00:e9:fa:bd:ae:48:81:80:a8:c3:18:a1:b3:46:39:f2:b3:52:
07:55:30:41:ad:94:8d:5e:1e:37:f0:4b:71:14:0e:a1:bf:56:
e2:eb:e7:29:23:fa:ae:af:b3:a9:e1:90:ca:a6:4b:63:a9:b7:
48:d0:09:f5:47:ef:9a:62:5b:87:93:eb:5c:ad:cb:70:9a:17:
35:86:7d:a2:95:20:13:71:11:f9:d4:0d:73:ef:47:5c:0e:2c:
7d:bd:08:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:57 2025 by rpki-client