Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/7Hl-UcVIWJV-Df3-FCf0snM-n2c.roa
File: 7Hl-UcVIWJV-Df3-FCf0snM-n2c.roa (raw, json)
Hash identifier: HE2EmwFVStny86lL4XYXV1jWpT1awtWFJQ5AMW95nBo=
Subject key identifier: EC:79:7E:51:C5:48:58:95:7E:0D:FD:FE:14:27:F4:B2:73:3E:9F:67
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 01864A1C37548FF6E46FA6FD561E5E98EC74
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/7Hl-UcVIWJV-Df3-FCf0snM-n2c.roa
Signing time: Mon 13 Feb 2023 09:30:08 +0000
ROA not before: Mon 13 Feb 2023 09:30:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44814
IP address blocks: 185.7.217.0/24 maxlen: 24
95.169.192.0/20 maxlen: 20
95.169.192.0/24 maxlen: 24
95.169.205.0/24 maxlen: 24
95.169.204.0/24 maxlen: 24
95.169.203.0/24 maxlen: 24
95.169.202.0/24 maxlen: 24
95.169.201.0/24 maxlen: 24
95.169.213.0/24 maxlen: 24
95.169.208.0/20 maxlen: 20
95.169.219.0/24 maxlen: 24
95.169.218.0/24 maxlen: 24
95.169.222.0/24 maxlen: 24
93.94.136.0/21 maxlen: 21
93.94.137.0/24 maxlen: 24
93.94.136.0/24 maxlen: 24
93.94.138.0/24 maxlen: 24
93.94.143.0/24 maxlen: 24
93.94.142.0/24 maxlen: 24
93.94.141.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
46.253.3.0/24 maxlen: 24
46.253.2.0/24 maxlen: 24
46.253.1.0/24 maxlen: 24
46.253.0.0/24 maxlen: 24
46.253.0.0/21 maxlen: 21
46.253.4.0/24 maxlen: 24
46.253.10.0/24 maxlen: 24
46.253.8.0/24 maxlen: 24
46.253.7.0/24 maxlen: 24
46.253.6.0/24 maxlen: 24
46.253.5.0/24 maxlen: 24
46.253.15.0/24 maxlen: 24
2a01:4a40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:1c:37:54:8f:f6:e4:6f:a6:fd:56:1e:5e:98:ec:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Feb 13 09:30:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec797e51c54858957e0dfdfe1427f4b2733e9f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:d3:a0:28:5d:d8:0d:cf:d6:ba:1b:a4:36:
90:15:66:95:88:3b:da:0c:86:ea:92:02:ac:c2:a7:
95:32:23:df:f2:1a:c6:84:91:e2:a9:30:66:41:f8:
1d:05:1d:a1:98:b4:84:49:ea:70:59:4a:c2:80:8a:
27:2d:eb:51:aa:96:af:4b:05:94:fd:be:c1:42:a7:
f9:6d:c0:a5:4b:26:dc:a0:d5:64:e7:a9:87:c9:5e:
86:54:70:0c:22:b9:ce:07:1c:fb:fa:03:8d:5d:df:
a0:ea:75:61:eb:06:a1:e8:59:37:c8:9a:ea:95:57:
d3:1b:f2:a7:2b:74:ff:55:a9:06:57:d3:2e:27:86:
d2:ba:44:86:e5:85:08:4d:6e:d2:5b:ec:57:ad:07:
23:72:20:31:6f:a0:f9:55:04:22:4d:be:6c:60:fa:
92:24:d1:f7:e1:24:85:64:24:27:f2:6b:9c:2a:c5:
8c:8b:df:d1:20:61:95:63:c3:82:c5:41:71:9f:da:
f6:5c:e7:4a:e9:70:ce:28:34:10:58:49:3e:51:58:
fb:ad:5a:67:3f:42:d0:1b:a4:57:ec:ad:c2:08:d9:
0d:7f:76:ab:ac:99:ca:1b:cd:00:ad:4d:cd:7f:1c:
54:df:5e:2d:16:5f:fe:ff:07:da:47:5c:94:41:4f:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:7E:51:C5:48:58:95:7E:0D:FD:FE:14:27:F4:B2:73:3E:9F:67
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/7Hl-UcVIWJV-Df3-FCf0snM-n2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.0.0-46.253.8.255
46.253.10.0/24
46.253.15.0/24
93.94.136.0/21
95.169.192.0/19
185.7.217.0/24
IPv6:
2a01:4a40::/32
Signature Algorithm: sha256WithRSAEncryption
57:90:bf:32:4b:28:eb:3c:22:bc:36:c8:42:73:2e:2b:2a:35:
b1:1c:80:49:db:6d:44:27:da:f4:78:47:eb:d4:f8:cc:ec:5a:
7b:b6:b5:42:7a:73:0d:05:f3:91:68:0d:6f:3b:c2:19:bf:ba:
08:4a:a9:0d:08:b3:14:9f:ea:bc:18:fa:d8:6d:aa:b7:7c:8b:
1e:af:7d:a1:f9:29:94:45:77:b8:ff:72:21:b5:e8:64:c2:29:
18:0f:ab:9c:59:45:eb:d4:e9:38:11:56:4b:09:1c:4a:aa:9e:
84:5f:87:2f:30:1c:ba:b6:21:ca:01:f9:c1:6e:01:28:40:74:
ce:a3:5d:89:20:0e:f3:00:34:71:6b:5d:45:5a:dc:1a:5c:0b:
a1:59:3c:35:ec:5a:6b:17:40:20:2e:76:22:c2:43:04:01:0d:
12:27:7c:71:c4:57:f6:33:b4:ef:6e:c8:8f:17:f7:31:0e:d9:
dd:be:e9:47:31:29:8e:32:c6:dd:d7:09:11:4a:9e:92:64:bf:
cb:e9:e4:a3:24:a2:78:6c:fb:51:0c:81:14:0b:83:9a:06:89:
0f:91:54:a9:22:dc:3a:5f:ec:e1:96:99:89:21:37:fd:85:16:
6a:51:70:9d:81:75:ac:ac:49:a2:62:92:6b:85:41:12:e5:84:
c3:5c:71:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:33:38 2025 by rpki-client