Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/sdnJQ14zQxHHGNy8feszKis2hVQ.roa
File: sdnJQ14zQxHHGNy8feszKis2hVQ.roa (raw, json)
Hash identifier: sdphIQdeO6/sc5o15K0fF/2eEo151YLEL8XZxxRJmPI=
Subject key identifier: B1:D9:C9:43:5E:33:43:11:C7:18:DC:BC:7D:EB:33:2A:2B:36:85:54
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 018CC492A677087C49A1AEF748A8F6F5CDA9
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/sdnJQ14zQxHHGNy8feszKis2hVQ.roa
Signing time: Mon 01 Jan 2024 10:29:54 +0000
ROA not before: Mon 01 Jan 2024 10:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201668
IP address blocks: 185.65.252.0/24 maxlen: 24
185.65.253.0/24 maxlen: 24
185.65.254.0/24 maxlen: 24
185.65.255.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:a6:77:08:7c:49:a1:ae:f7:48:a8:f6:f5:cd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Jan 1 10:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1d9c9435e334311c718dcbc7deb332a2b368554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:db:2d:90:c8:39:b2:b5:05:32:01:81:2e:
5b:c4:3b:a0:a9:41:e4:b3:db:e5:1d:75:a0:8c:2b:
a2:f6:9f:d0:fa:55:cf:06:89:eb:c8:16:a3:fc:7c:
28:98:66:c6:27:66:16:83:f6:22:cd:8f:14:f5:03:
37:e8:14:d2:f9:c2:2b:9f:1c:e2:87:b4:42:1b:ce:
c5:e5:53:f9:ea:b9:f5:6d:8e:c2:c0:7b:d7:52:36:
0f:b8:9f:a9:f6:d8:44:03:f3:83:36:c2:f4:6a:c8:
75:b4:5f:9f:76:1f:c3:32:b9:45:e8:27:ae:71:ec:
6b:e6:e3:73:85:f4:ba:a1:3f:79:55:79:ed:b8:fa:
95:46:3a:99:dd:8f:ec:09:e0:9c:63:65:9c:91:93:
b9:05:9d:2f:1e:e4:c9:8f:6d:70:c1:2b:ee:44:1d:
56:09:05:88:e1:07:63:35:be:94:97:06:2e:17:d1:
72:9d:15:3e:e8:9d:65:36:56:b2:e4:b7:1b:f8:34:
04:b9:ff:d1:ac:b6:b6:5f:a3:bf:76:dc:cd:56:90:
06:40:9b:91:33:f5:46:38:64:5f:b1:8e:0a:52:30:
db:b3:ba:00:d6:0b:8d:ee:c1:e6:c5:61:24:d3:bb:
ac:c0:af:64:cd:34:26:e6:74:72:84:8e:2d:52:b0:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:C9:43:5E:33:43:11:C7:18:DC:BC:7D:EB:33:2A:2B:36:85:54
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/sdnJQ14zQxHHGNy8feszKis2hVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.252.0/22
Signature Algorithm: sha256WithRSAEncryption
51:83:df:c7:a9:75:e3:e3:58:4f:3d:e1:58:27:a7:a0:73:d6:
92:0e:80:29:93:27:d6:70:d2:cb:57:94:1d:75:3d:74:a6:b5:
2f:d2:fc:13:99:ec:71:2f:a7:83:64:d1:35:f7:ad:44:51:44:
64:e3:c1:02:1c:19:df:b1:85:b1:d4:90:0c:b2:05:3b:2c:a2:
6b:43:a9:02:c0:4b:d3:36:c5:5b:bb:9a:88:2f:37:87:4f:31:
f0:84:25:ec:d2:63:91:07:a1:c8:e4:3b:a8:00:c2:73:fa:ce:
86:b9:78:e6:d4:60:30:bd:20:0b:f4:20:0d:28:a0:7e:57:ce:
01:90:cb:ec:9a:95:0a:4d:76:44:3d:88:40:2c:cd:c0:41:81:
0c:e2:46:76:c1:e2:25:ff:69:82:02:1c:ac:82:d8:b5:06:bb:
3d:d9:71:fb:0e:91:93:bb:3f:1b:6f:98:a7:ed:58:4f:fa:73:
d1:18:0f:ae:b3:b3:d2:51:f5:97:b7:d8:42:2d:72:27:4a:2a:
28:95:dd:78:6d:7f:74:1f:4e:15:05:07:2e:c6:fd:f1:c9:52:
a4:8f:7e:e0:22:bd:ad:1a:3c:99:17:b3:a3:e6:a3:5d:3c:7e:
c7:59:f3:f3:a1:28:fc:ee:b9:e1:63:d7:20:df:4b:39:54:c5:
89:44:eb:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkqZ3CHxJoa73SKj29c2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl
Yjc2ZWQwHhcNMjQwMTAxMTAyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWQ5Yzk0MzVlMzM0MzExYzcxOGRjYmM3ZGViMzMyYTJiMzY4NTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwjbLZDIObK1BTIBgS5bxDugqUHk
s9vlHXWgjCui9p/Q+lXPBonryBaj/HwomGbGJ2YWg/YizY8U9QM36BTS+cIrnxzi
h7RCG87F5VP56rn1bY7CwHvXUjYPuJ+p9thEA/ODNsL0ash1tF+fdh/DMrlF6Ceu
cexr5uNzhfS6oT95VXntuPqVRjqZ3Y/sCeCcY2WckZO5BZ0vHuTJj21wwSvuRB1W
CQWI4QdjNb6UlwYuF9FynRU+6J1lNlay5Lcb+DQEuf/RrLa2X6O/dtzNVpAGQJuR
M/VGOGRfsY4KUjDbs7oA1guN7sHmxWEk07uswK9kzTQm5nRyhI4tUrAQ8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLHZyUNeM0MRxxjcvH3rMyorNoVUMB8GA1UdIwQY
MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt
ZjQ3YWU3ZGRhZWMwLzEvc2RuSlExNHpReEhIR055OGZlc3pLaXMyaFZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw
LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUH8MA0G
CSqGSIb3DQEBCwUAA4IBAQBRg9/HqXXj41hPPeFYJ6egc9aSDoApkyfWcNLLV5Qd
dT10prUv0vwTmexxL6eDZNE1961EUURk48ECHBnfsYWx1JAMsgU7LKJrQ6kCwEvT
NsVbu5qILzeHTzHwhCXs0mORB6HI5DuoAMJz+s6GuXjm1GAwvSAL9CANKKB+V84B
kMvsmpUKTXZEPYhALM3AQYEM4kZ2weIl/2mCAhysgti1Brs92XH7DpGTuz8bb5in
7VhP+nPRGA+us7PSUfWXt9hCLXInSioold14bX90H04VBQcuxv3xyVKkj37gIr2t
GjyZF7Oj5qNdPH7HWfPzoSj87rnhY9cg30s5VMWJROuB
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:11:54 2025 by rpki-client