Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/4fD_0P9_V81qIiCSkl4TmOiLWwo.roa
File: 4fD_0P9_V81qIiCSkl4TmOiLWwo.roa (raw, json)
Hash identifier: 1kHJFXIAMj8GG5KIcWcScX4qeVJk3iy/S8d1EyeNW70=
Subject key identifier: E1:F0:FF:D0:FF:7F:57:CD:6A:22:20:92:92:5E:13:98:E8:8B:5B:0A
Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial: 01936862B050E814A5C9B0D00CF4C252DD8C
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/4fD_0P9_V81qIiCSkl4TmOiLWwo.roa
Signing time: Tue 26 Nov 2024 12:11:58 +0000
ROA not before: Tue 26 Nov 2024 12:11:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 45.136.104.0/24 maxlen: 24
45.136.105.0/24 maxlen: 24
45.136.107.0/24 maxlen: 24
185.26.144.0/24 maxlen: 24
185.26.145.0/24 maxlen: 24
185.26.146.0/24 maxlen: 24
185.26.147.0/24 maxlen: 24
185.126.176.0/24 maxlen: 24
185.126.177.0/24 maxlen: 24
185.126.178.0/24 maxlen: 24
185.126.179.0/24 maxlen: 24
185.153.228.0/24 maxlen: 24
185.153.229.0/24 maxlen: 24
185.153.230.0/24 maxlen: 24
185.153.231.0/24 maxlen: 24
185.162.144.0/24 maxlen: 24
185.162.147.0/24 maxlen: 24
185.171.24.0/24 maxlen: 24
185.171.25.0/24 maxlen: 24
185.171.26.0/24 maxlen: 24
185.171.27.0/24 maxlen: 24
185.247.136.0/24 maxlen: 24
185.247.138.0/24 maxlen: 24
185.247.139.0/24 maxlen: 24
2a04:3880::/30 maxlen: 30
2a06:c380::/29 maxlen: 29
2a0b:6000::/29 maxlen: 29
2a0d:a2c0::/29 maxlen: 29
2a0d:c480::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:62:b0:50:e8:14:a5:c9:b0:d0:0c:f4:c2:52:dd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Validity
Not Before: Nov 26 12:11:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1f0ffd0ff7f57cd6a222092925e1398e88b5b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:a2:22:75:9f:c6:ea:c6:9a:61:16:b8:37:
86:79:02:93:4d:19:1b:56:f5:c1:52:97:a2:6b:fd:
f9:24:03:f3:bf:9c:b5:2c:52:5c:16:63:1e:93:6b:
55:44:95:7c:05:72:c0:9b:09:6b:28:a9:c9:33:ba:
7c:5d:16:5f:5d:b9:6f:c9:d1:aa:20:3b:4c:bc:81:
d4:67:39:c3:82:e4:fb:89:ef:02:da:26:e7:26:e2:
15:54:ae:4a:24:d8:22:31:5e:e2:fd:2a:00:fe:5d:
f0:a7:e4:91:6c:bd:14:25:b4:f2:1a:60:35:a6:cc:
d1:81:37:df:98:12:61:0c:4f:07:3a:fa:12:97:60:
2c:e2:37:69:ce:cb:80:5c:33:1a:18:03:17:a2:aa:
20:00:b2:b7:ac:61:d1:ec:a2:7c:76:ea:d6:f3:00:
ba:1f:40:d4:61:45:73:b7:9f:d4:85:e3:98:45:7e:
b1:9e:25:c5:cc:08:ee:90:b7:e4:92:08:77:3b:51:
ef:f0:9b:b9:b9:a7:56:28:50:d7:40:2b:19:0a:93:
62:3f:3a:e3:0a:93:55:dd:7b:f6:73:c8:31:bf:de:
ad:b6:03:30:f5:1c:d4:88:9d:17:5a:b7:fc:ad:f8:
1c:1a:64:a0:c7:b9:a0:fd:4a:4d:40:8f:07:bc:27:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F0:FF:D0:FF:7F:57:CD:6A:22:20:92:92:5E:13:98:E8:8B:5B:0A
X509v3 Authority Key Identifier:
keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/4fD_0P9_V81qIiCSkl4TmOiLWwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.104.0/23
45.136.107.0/24
185.26.144.0/22
185.126.176.0/22
185.153.228.0/22
185.162.144.0/24
185.162.147.0/24
185.171.24.0/22
185.247.136.0/24
185.247.138.0/23
IPv6:
2a04:3880::/30
2a06:c380::/29
2a0b:6000::/29
2a0d:a2c0::/29
2a0d:c480::/29
Signature Algorithm: sha256WithRSAEncryption
26:ea:9c:26:58:70:69:6c:19:2d:c0:bd:87:2a:c9:b4:92:6a:
b0:c8:21:47:44:1a:d6:e3:11:1b:f4:49:c5:70:7f:94:29:ef:
ec:81:2a:97:68:ba:af:33:f2:1d:dc:73:2f:3e:b6:8f:63:ef:
af:aa:7a:8a:77:f9:20:40:f1:fd:62:f0:48:8d:9e:2b:5f:1e:
aa:34:65:00:55:9b:e3:b5:c9:06:7a:75:ca:d4:b8:f7:a3:23:
87:59:01:f8:46:7a:05:64:6f:f4:c7:80:19:32:25:c6:f3:db:
a3:ab:52:ae:af:68:3c:ca:74:ce:ba:ef:84:13:ec:77:cd:dc:
5f:41:20:cc:74:0b:7e:67:fa:93:6d:58:c8:2e:6c:13:e1:92:
25:e5:7a:d8:35:46:ca:01:a3:24:e4:ae:2a:08:1c:a3:5d:e5:
a1:25:f5:09:25:fd:6e:21:b7:57:17:61:21:90:6b:e9:bc:fe:
4a:59:06:d6:e2:82:40:17:55:19:21:ce:05:f4:25:3d:d1:ac:
ca:e1:3f:36:a8:48:60:35:7c:1c:42:28:fa:a4:8c:19:49:ac:
00:07:96:e5:5d:5e:cd:58:ca:ac:44:d4:18:68:68:4b:e4:6e:
da:ba:36:11:fe:f4:81:b6:e2:13:6f:5a:2f:c1:07:a0:cf:aa:
98:c9:dd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:01:14 2025 by rpki-client