Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/u9OKUCidJ3NrjxTQEqakWML2R_U.roa
File: u9OKUCidJ3NrjxTQEqakWML2R_U.roa (raw, json)
Hash identifier: JDUptm5j3+5wniLabcMjtQlvwaxBd0xTZS7H9DbINzQ=
Subject key identifier: BB:D3:8A:50:28:9D:27:73:6B:8F:14:D0:12:A6:A4:58:C2:F6:47:F5
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 019427B5DBD82A5C04B8538CEC08C2135463
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/u9OKUCidJ3NrjxTQEqakWML2R_U.roa
Signing time: Thu 02 Jan 2025 15:50:17 +0000
ROA not before: Thu 02 Jan 2025 15:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209968
IP address blocks: 185.23.5.0/24 maxlen: 24
2a09:be41::/32 maxlen: 48
2a09:be42::/31 maxlen: 48
2a09:be44::/30 maxlen: 48
2a0e:ec00::/30 maxlen: 48
2a0e:ec04::/31 maxlen: 48
2a12:49c0::/29 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:db:d8:2a:5c:04:b8:53:8c:ec:08:c2:13:54:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Jan 2 15:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbd38a50289d27736b8f14d012a6a458c2f647f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:04:1b:53:24:4a:2e:94:8d:32:3f:ba:23:
1c:4f:0c:02:19:07:9a:75:2f:b6:2a:b1:41:64:a4:
4f:f5:71:b0:7f:08:cc:93:26:d5:c0:d5:53:48:60:
05:84:2c:09:2d:39:48:fb:57:a3:ed:01:a7:c0:ae:
a0:8b:bd:90:12:da:3e:9d:f8:28:71:02:81:97:72:
ab:ad:f1:4f:9e:2d:85:59:17:f1:ef:bf:e4:20:3a:
13:f0:f4:11:eb:db:73:2d:27:06:f7:08:90:13:17:
19:1c:6e:94:39:87:e5:2c:74:7d:3b:4f:5a:71:0d:
c9:1d:bc:be:00:96:60:a6:88:4f:b7:65:48:6c:8c:
57:18:cc:f8:be:e3:53:77:b3:84:19:0e:70:e1:9b:
4f:17:73:99:8c:c9:1c:e5:d2:3f:4e:ef:82:63:94:
dd:79:66:b4:26:fa:10:99:e7:cb:cf:1c:0a:0a:d2:
06:c0:10:cc:f8:2d:f3:8a:74:4a:23:32:2a:be:61:
fb:64:7d:e7:0f:83:c8:03:77:a1:f1:c7:00:13:dd:
2e:26:e0:88:f6:70:33:cc:73:73:f2:3d:a3:e7:35:
f8:eb:2f:f8:8e:58:6c:cc:98:d6:8b:42:9a:58:db:
9d:fc:3a:b3:ab:8f:9b:24:d0:f7:56:0b:14:a3:c2:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D3:8A:50:28:9D:27:73:6B:8F:14:D0:12:A6:A4:58:C2:F6:47:F5
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/u9OKUCidJ3NrjxTQEqakWML2R_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.5.0/24
IPv6:
2a09:be41::-2a09:be47:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:ec00::-2a0e:ec05:ffff:ffff:ffff:ffff:ffff:ffff
2a12:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:65:12:4c:e4:da:7d:91:75:34:8f:0d:e3:a0:54:21:be:e7:
71:c1:cc:14:7f:e8:2e:5d:4e:b1:94:22:65:1b:69:f7:a2:c8:
af:0c:f1:24:82:20:a5:4d:72:7a:4a:68:e1:51:4a:8c:b1:28:
fd:43:c6:56:ac:1d:b3:05:af:d7:79:1a:76:b2:66:e6:9e:f6:
ae:d3:65:14:71:c3:19:b0:79:85:a8:b8:fc:7f:74:a0:c6:de:
e5:7a:43:f4:14:27:0b:8d:c4:e3:e0:3e:b5:58:d1:22:10:6d:
df:a8:67:b3:8e:f5:1c:00:6d:06:f0:b2:8e:47:e3:68:61:f9:
1a:bc:11:e7:c3:bb:32:19:df:4e:74:97:7c:64:c2:5a:00:99:
b0:3c:15:43:69:40:8b:60:31:98:bc:c8:6b:1d:29:9c:37:65:
cf:76:c3:31:88:1a:d7:7d:ff:67:57:db:55:4c:91:1e:ab:a7:
27:d5:a0:fc:68:ce:2f:5d:f4:aa:37:e6:e6:e6:97:e5:98:be:
13:94:e3:19:f8:50:bc:c6:f6:97:45:20:6d:ae:35:83:17:69:
82:29:2e:26:ea:cb:c9:2d:eb:0a:98:58:a1:e5:93:52:32:08:
55:62:6a:51:c6:6c:86:7b:8d:77:60:e0:be:e2:68:14:4e:ed:
bd:67:38:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:36 2025 by rpki-client