Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/f2cExnwkhEQ4k7yyVBlC_zSjD6E.roa
File: f2cExnwkhEQ4k7yyVBlC_zSjD6E.roa (raw, json)
Hash identifier: a3vovspdX2/MXKxFaxlZJK8RDbJxKHCtbkbtXQGFMoQ=
Subject key identifier: 7F:67:04:C6:7C:24:84:44:38:93:BC:B2:54:19:42:FF:34:A3:0F:A1
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 018CC8013E216486B403FA0802D1C1D9CA7F
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/f2cExnwkhEQ4k7yyVBlC_zSjD6E.roa
Signing time: Tue 02 Jan 2024 02:29:33 +0000
ROA not before: Tue 02 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48434
IP address blocks: 94.232.168.0/21 maxlen: 27
185.162.218.0/23 maxlen: 27
185.37.52.0/22 maxlen: 27
185.232.152.0/22 maxlen: 27
185.232.154.0/23 maxlen: 27
185.232.154.0/24 maxlen: 27
185.232.153.0/24 maxlen: 27
185.78.20.0/22 maxlen: 27
185.232.155.0/24 maxlen: 27
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3e:21:64:86:b4:03:fa:08:02:d1:c1:d9:ca:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jan 2 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f6704c67c2484443893bcb2541942ff34a30fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:7d:33:c7:99:55:96:c4:c9:3a:63:e9:81:
6d:32:a7:aa:5e:48:55:cc:3f:57:6e:6f:47:aa:7b:
79:9d:b9:ce:c9:4c:01:a9:19:8c:ea:38:ab:b9:76:
b5:22:7d:d2:69:44:70:b5:10:84:0a:00:2a:0d:26:
78:df:35:1e:51:e3:ea:0e:10:af:4b:4f:90:c8:20:
76:6c:77:27:e1:9f:70:43:18:41:90:f2:0f:69:e2:
b5:09:d8:c3:df:79:3f:a3:1d:f6:8b:2c:1f:d5:a6:
43:9f:f1:06:94:cc:a1:21:f8:d9:d3:8b:d0:0d:3d:
69:15:a0:7d:6e:f9:d8:c6:c5:6a:d0:d9:a3:62:f8:
4d:9e:33:8c:b0:0f:6a:52:34:80:5a:10:e3:57:ba:
82:b8:c4:38:12:4f:02:5b:42:de:4f:1c:a4:d6:6c:
5d:d7:d0:62:a8:85:c8:8a:cd:ea:5a:cf:c3:86:5a:
cd:82:db:94:21:ec:9a:22:37:cf:a0:4e:c5:84:44:
89:69:8b:66:23:a3:1e:10:15:32:fe:e4:47:70:e8:
a4:48:a1:2c:d0:c4:0e:13:1c:ba:05:18:9a:37:fe:
d9:61:55:c1:f2:6d:f9:e7:a6:ce:b7:86:56:f7:4f:
18:b0:26:3f:b9:6e:db:f4:a5:5d:c4:9e:d3:2a:d2:
6d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:04:C6:7C:24:84:44:38:93:BC:B2:54:19:42:FF:34:A3:0F:A1
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/f2cExnwkhEQ4k7yyVBlC_zSjD6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.168.0/21
185.37.52.0/22
185.78.20.0/22
185.162.218.0/23
185.232.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:5d:c8:a9:db:cc:94:df:e8:2f:d0:be:13:a9:2a:ef:ee:35:
04:85:1c:5b:6e:01:6a:e1:12:14:17:c2:87:a3:1b:04:3c:44:
83:0c:b8:be:3e:52:81:17:f1:af:63:35:e9:a6:74:ce:4a:ba:
68:86:90:fc:89:22:37:ae:ca:0c:b0:e2:a2:89:d1:c5:50:04:
a1:4f:b9:c5:ad:22:c7:bf:c8:ee:b1:b0:50:f4:99:f9:5d:0f:
e3:20:8a:cf:ae:b0:0a:f7:17:82:c4:1f:67:30:c2:81:0a:7d:
1e:c3:e4:cc:b4:59:0b:d1:26:fc:6f:f9:9c:5e:4b:10:a8:be:
47:0b:49:18:ba:6e:f3:da:ad:d4:4f:e0:77:e1:81:ea:3c:94:
ef:2d:2d:32:29:2d:81:97:55:a3:d5:dd:66:66:48:ce:ca:fc:
56:99:cd:12:b5:43:1f:e0:ea:d3:2a:d2:f7:29:41:a7:6e:08:
1d:f9:3c:04:62:94:8b:7f:db:50:e1:f0:2a:2a:e4:33:24:d7:
c7:43:6a:e2:fc:86:15:17:74:17:5e:7a:6f:d4:e7:8d:90:82:
bf:00:e4:b9:53:35:56:09:42:4d:d7:1f:a8:38:bc:f0:10:e2:
34:fe:9e:5a:be:33:1d:fd:6f:f0:23:b4:22:49:de:ae:b4:d5:
1f:fc:2f:fa
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzIAT4hZIa0A/oIAtHB2cp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZGE1Yzg3NDM1NGQ4MzgyNmU0M2MyNTM1Yjc2ZTIwZDVi
NjFiMDUwHhcNMjQwMTAyMDIyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjY3MDRjNjdjMjQ4NDQ0Mzg5M2JjYjI1NDE5NDJmZjM0YTMwZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzt9M8eZVZbEyTpj6YFtMqeqXkhV
zD9Xbm9Hqnt5nbnOyUwBqRmM6jiruXa1In3SaURwtRCECgAqDSZ43zUeUePqDhCv
S0+QyCB2bHcn4Z9wQxhBkPIPaeK1CdjD33k/ox32iywf1aZDn/EGlMyhIfjZ04vQ
DT1pFaB9bvnYxsVq0NmjYvhNnjOMsA9qUjSAWhDjV7qCuMQ4Ek8CW0LeTxyk1mxd
19BiqIXIis3qWs/DhlrNgtuUIeyaIjfPoE7FhESJaYtmI6MeEBUy/uRHcOikSKEs
0MQOExy6BRiaN/7ZYVXB8m3556bOt4ZW908YsCY/uW7b9KVdxJ7TKtJtzQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFH9nBMZ8JIREOJO8slQZQv80ow+hMB8GA1UdIwQY
MBaAFAzaXIdDVNg4JuQ8JTW3biDVthsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMt
YzgyZjQyNGI2ZDBkLzEvZjJjRXhud2toRVE0azd5eVZCbENfelNqRDZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMtYzgyZjQyNGI2ZDBk
LzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDXuioAwQC
uSU0AwQCuU4UAwQBuaLaAwQCueiYMA0GCSqGSIb3DQEBCwUAA4IBAQAMXcip28yU
3+gv0L4TqSrv7jUEhRxbbgFq4RIUF8KHoxsEPESDDLi+PlKBF/GvYzXppnTOSrpo
hpD8iSI3rsoMsOKiidHFUAShT7nFrSLHv8jusbBQ9Jn5XQ/jIIrPrrAK9xeCxB9n
MMKBCn0ew+TMtFkL0Sb8b/mcXksQqL5HC0kYum7z2q3UT+B34YHqPJTvLS0yKS2B
l1Wj1d1mZkjOyvxWmc0StUMf4OrTKtL3KUGnbggd+TwEYpSLf9tQ4fAqKuQzJNfH
Q2ri/IYVF3QXXnpv1OeNkIK/AOS5UzVWCUJN1x+oOLzwEOI0/p5avjMd/W/wI7Qi
Sd6utNUf/C/6
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:21:59 2025 by rpki-client