Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/8Q6duQdLh60e2jqLiqJPkS3FoW4.roa
File: 8Q6duQdLh60e2jqLiqJPkS3FoW4.roa (raw, json)
Hash identifier: IvU9ceaRNeTWqK6FN7S56npvkleLZowye7W8Y/zl1KU=
Subject key identifier: F1:0E:9D:B9:07:4B:87:AD:1E:DA:3A:8B:8A:A2:4F:91:2D:C5:A1:6E
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 11B040FD
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/8Q6duQdLh60e2jqLiqJPkS3FoW4.roa
Signing time: Wed 06 Apr 2022 08:52:01 +0000
ROA not before: Wed 06 Apr 2022 08:52:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15659
IP address blocks: 217.13.0.0/19 maxlen: 19
84.48.0.0/17 maxlen: 17
89.11.0.0/17 maxlen: 17
84.48.0.0/15 maxlen: 17
84.49.0.0/16 maxlen: 16
213.187.160.0/19 maxlen: 19
80.202.0.0/16 maxlen: 16
89.10.0.0/16 maxlen: 16
213.187.190.0/24 maxlen: 24
213.145.160.0/19 maxlen: 19
84.49.101.0/24 maxlen: 24
80.203.128.0/17 maxlen: 17
2a04:980::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296763645 (0x11b040fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Apr 6 08:52:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f10e9db9074b87ad1eda3a8b8aa24f912dc5a16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:fb:3d:fb:37:a8:1d:7a:84:a5:69:1b:53:
1e:ab:b3:6f:09:09:ae:bd:c9:fe:3f:43:5a:a0:ea:
e3:90:f4:2f:8f:45:dd:3b:9c:d7:e3:0a:13:66:a8:
79:6e:f9:a1:74:32:a7:6d:b0:83:13:40:ec:15:d5:
35:52:59:18:e6:85:4f:df:f5:56:51:90:16:50:ec:
16:2f:6e:02:ac:2a:55:ce:e8:4c:88:38:9d:55:eb:
2d:23:09:87:2c:0c:1f:91:3b:29:ec:37:64:e4:e6:
11:6f:69:9e:17:35:85:e4:d0:fe:7e:56:94:7a:a0:
b2:33:8c:f8:a4:35:5d:7d:de:c0:8a:c3:02:ea:91:
02:45:fb:3a:13:69:39:01:0b:07:d7:c4:83:b9:42:
c1:35:25:d5:3b:78:99:21:6f:58:ac:fb:b1:7c:58:
e2:46:bc:07:01:5f:78:b1:3e:a9:19:04:40:18:71:
e0:ac:60:9f:25:fd:9b:d6:5e:13:fa:46:4b:14:c4:
f2:3e:8f:4d:e4:b8:74:d7:3c:18:2b:06:32:49:41:
64:60:3c:3c:9f:bf:79:fd:9a:f8:89:05:f3:c1:0d:
ac:d5:fa:29:7c:eb:1d:88:57:1f:92:8a:a0:41:20:
84:0d:3d:bd:3e:55:96:f8:be:ec:bc:19:9e:14:61:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0E:9D:B9:07:4B:87:AD:1E:DA:3A:8B:8A:A2:4F:91:2D:C5:A1:6E
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/8Q6duQdLh60e2jqLiqJPkS3FoW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.202.0.0/16
80.203.128.0/17
84.48.0.0/15
89.10.0.0-89.11.127.255
213.145.160.0/19
213.187.160.0/19
217.13.0.0/19
IPv6:
2a04:980::/29
Signature Algorithm: sha256WithRSAEncryption
27:a3:1b:f7:c1:cf:1c:19:24:c0:89:77:39:3f:86:e3:6b:62:
ab:a0:6f:23:1d:38:14:1d:4b:fe:8e:4b:0d:8f:85:f7:b9:0a:
2c:4c:ed:72:31:7d:a4:3e:63:da:cc:3b:04:40:dc:48:7f:4a:
4f:07:c2:87:1f:64:37:2c:93:1d:35:ac:82:50:13:ad:26:46:
01:73:9c:9e:92:3a:af:a5:a0:33:0b:bc:33:7d:0b:73:32:ba:
8a:2b:d1:d8:14:a5:0e:9a:82:9b:c9:70:7d:5c:16:0a:34:d2:
7c:67:6b:7c:6f:c4:d6:10:52:5c:c3:af:f6:6b:d7:f2:c5:3f:
e0:ff:af:c8:f5:e1:ac:0b:13:cd:14:f0:fd:78:14:7d:47:b2:
80:86:2e:eb:8a:0d:36:6d:54:97:d6:37:77:92:b0:2c:aa:0a:
40:60:20:8e:fc:a6:f0:75:d6:ec:71:36:a4:c7:6a:c4:ca:24:
08:f5:db:27:83:f5:51:f7:b2:57:e5:bd:a9:ef:38:8e:f4:29:
9d:2e:8b:03:6e:51:00:a0:6d:27:95:ac:24:34:99:aa:28:2a:
3b:40:8d:5f:55:c5:2a:1b:3d:5e:d7:fa:ac:82:90:9e:21:d6:
5d:a5:39:c0:01:88:66:bc:16:ce:21:fd:cf:dc:93:de:a1:99:
33:0e:4f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:47 2025 by rpki-client