Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/v5_bUQEnZ-yo64cxPNoejVF3s5w.roa
File: v5_bUQEnZ-yo64cxPNoejVF3s5w.roa (raw, json)
Hash identifier: 30DjIUneUQDTitHaXdm9DPdPaJobC3DJ30EoDMlimdY=
Subject key identifier: BF:9F:DB:51:01:27:67:EC:A8:EB:87:31:3C:DA:1E:8D:51:77:B3:9C
Certificate issuer: /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial: 01856F9DD3665D93DB02F115E4CED857D7B2
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/v5_bUQEnZ-yo64cxPNoejVF3s5w.roa
Signing time: Sun 01 Jan 2023 23:14:52 +0000
ROA not before: Sun 01 Jan 2023 23:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44889
IP address blocks: 185.79.96.0/24 maxlen: 24
185.232.152.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d3:66:5d:93:db:02:f1:15:e4:ce:d8:57:d7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
Validity
Not Before: Jan 1 23:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf9fdb51012767eca8eb87313cda1e8d5177b39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:87:b8:8e:b9:98:22:67:4a:de:ba:4c:4e:
51:48:64:3e:be:0a:08:89:7e:f7:18:b0:8e:b4:d7:
53:cb:c1:29:96:6f:89:a9:61:6f:cd:b4:2c:c9:63:
9d:c7:3f:5a:d6:d3:a7:78:67:1b:f8:93:aa:84:dc:
93:0c:6f:85:9c:93:38:45:f1:cb:c0:c4:c1:7c:3d:
e1:91:ac:76:40:8b:b6:07:b1:fa:8f:86:d5:2d:cd:
ad:d1:a4:35:87:32:b7:bc:d6:11:85:67:0a:38:6f:
cf:8f:3a:2e:3e:93:56:1c:78:7c:2d:a8:3a:4a:47:
fb:a0:85:cf:65:77:f9:e7:20:17:8a:52:ac:91:9b:
b2:fd:9a:cc:1c:73:bf:41:d5:9f:14:14:78:37:e0:
08:e8:21:8c:e4:7e:f9:dd:75:eb:06:19:47:bc:da:
48:7d:99:fa:77:3c:55:d7:98:f3:bc:df:69:b2:7c:
43:77:c8:51:2e:ee:3c:df:15:44:03:19:82:a1:9a:
e2:58:ed:e7:e0:e7:41:9e:68:94:cb:95:0c:73:82:
b9:36:a1:6d:c2:64:c5:95:83:5f:06:9a:a0:65:e9:
44:40:e2:bb:5d:c9:73:7a:03:94:b9:cb:fa:50:7b:
59:83:5d:9c:1b:fc:d5:7d:a3:b2:02:f8:3b:b4:b5:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9F:DB:51:01:27:67:EC:A8:EB:87:31:3C:DA:1E:8D:51:77:B3:9C
X509v3 Authority Key Identifier:
keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/v5_bUQEnZ-yo64cxPNoejVF3s5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.96.0/24
185.232.152.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e9:2e:ec:22:55:5f:40:76:bb:23:d7:ed:c3:f9:3c:9d:67:
04:f9:2c:c6:51:46:b7:58:b8:a2:07:20:74:65:48:6c:af:1d:
a6:4f:18:29:f3:7a:5d:fa:13:a4:90:36:37:65:3c:b1:f0:9f:
00:c4:86:32:bf:90:df:32:20:8c:50:4e:6b:4b:39:21:c6:ca:
c9:04:7c:3c:2f:80:3a:55:a5:d7:b3:9b:36:2f:f9:06:e8:ac:
bf:38:66:8a:35:0d:1c:e5:b9:c8:3f:9f:90:c4:1a:2f:11:77:
86:4a:01:dd:43:93:ac:2c:b4:3c:de:5e:4d:24:d0:44:a8:12:
81:e1:11:42:46:c8:64:09:a3:ca:60:e0:8d:af:33:cc:17:d5:
da:e1:95:86:66:29:07:f9:c7:0e:ca:1a:38:00:c4:c2:93:47:
c5:09:f6:a0:6e:98:8a:ca:c6:9a:39:d9:0d:3b:0d:93:0c:8c:
bf:25:e9:3c:c6:8d:1d:36:f2:e6:1f:dc:d9:db:18:97:e7:9a:
bb:41:c3:02:a6:95:20:77:6f:ef:13:12:44:5b:41:6c:0f:3a:
90:80:bc:f7:ef:5e:fa:43:b5:f9:fc:e4:5b:59:3b:69:04:6b:
07:50:53:85:30:07:3f:98:82:79:a2:1c:45:a9:4a:1c:a5:6f:
87:6a:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:40 2025 by rpki-client