Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/Fe5NOtYI9eyKUsNYBDqRmvt7A_E.roa
File: Fe5NOtYI9eyKUsNYBDqRmvt7A_E.roa (raw, json)
Hash identifier: 30NNNQBVLJoROka9EwCJOP7D+9P49nKncnjqKr5/fbI=
Subject key identifier: 15:EE:4D:3A:D6:08:F5:EC:8A:52:C3:58:04:3A:91:9A:FB:7B:03:F1
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 018D800915E366B3EFC9BDCB999499B7A126
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/Fe5NOtYI9eyKUsNYBDqRmvt7A_E.roa
Signing time: Tue 06 Feb 2024 20:08:15 +0000
ROA not before: Tue 06 Feb 2024 20:08:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15682
IP address blocks: 212.74.224.0/19 maxlen: 19
212.74.224.0/21 maxlen: 21
212.74.229.0/24 maxlen: 24
212.74.231.0/24 maxlen: 24
212.74.232.0/21 maxlen: 21
212.74.235.0/24 maxlen: 24
212.74.237.0/24 maxlen: 24
212.74.240.0/21 maxlen: 21
212.74.248.0/21 maxlen: 21
212.74.253.0/24 maxlen: 24
212.74.254.0/24 maxlen: 24
2a01:5f40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:80:09:15:e3:66:b3:ef:c9:bd:cb:99:94:99:b7:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Feb 6 20:08:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15ee4d3ad608f5ec8a52c358043a919afb7b03f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:58:b1:5a:e7:72:35:06:96:86:0d:97:ec:
25:6a:fa:95:ba:13:25:87:2d:c8:b3:85:c6:54:c7:
c7:ca:d5:94:c7:ed:9e:95:bf:2f:2c:f8:f2:b7:31:
f1:95:03:1c:83:ba:7b:78:92:5b:0f:16:75:32:fb:
7c:0f:5d:00:eb:d5:49:85:6d:d7:d6:47:2e:f3:0e:
60:63:82:fa:68:2b:59:a1:d8:36:06:22:9d:4b:b0:
98:24:c3:0b:a3:1d:c7:99:09:3f:d5:6f:4f:a1:76:
f6:0c:16:ab:fb:06:9f:9a:e1:8f:7f:30:e0:20:be:
b2:b5:1e:76:26:ed:ff:01:6a:45:57:cd:b2:50:40:
38:91:9e:54:77:68:39:d5:7f:4a:f2:c9:c2:62:f1:
82:47:c8:cb:b7:bc:6d:98:1c:f5:7f:c9:20:83:28:
76:2d:b4:89:7f:66:86:15:c6:b7:94:5c:53:ef:41:
2e:3d:e4:81:10:46:69:76:93:07:26:34:8a:8f:20:
7f:d6:d9:df:6e:13:39:83:15:e9:61:8a:ab:62:d2:
da:0a:8a:ec:00:19:06:af:5d:ec:36:53:5d:d8:e0:
0d:6f:47:b3:e2:23:5e:28:69:b5:a3:19:83:3d:67:
b9:ad:55:e6:28:d6:66:0d:a7:1a:db:5d:07:17:8f:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EE:4D:3A:D6:08:F5:EC:8A:52:C3:58:04:3A:91:9A:FB:7B:03:F1
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/Fe5NOtYI9eyKUsNYBDqRmvt7A_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.224.0/19
IPv6:
2a01:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
61:c5:de:38:5e:2b:66:fc:89:43:93:1f:34:8d:c7:7c:d4:ca:
b7:57:93:f2:a6:44:9b:14:5f:11:3c:15:47:2c:23:ca:cd:d9:
e3:a3:c8:c5:c8:1a:41:d8:e3:76:13:c9:21:b5:dc:85:11:d4:
71:cc:67:f6:27:35:6a:9d:88:14:0a:1b:19:b8:e0:f9:4b:41:
ac:f5:c1:54:89:7d:f0:d4:af:37:7a:3b:c8:19:e1:05:dd:9a:
74:63:9b:40:a1:f5:2e:f3:99:ac:58:16:15:c7:ba:d6:22:64:
06:a2:5a:a0:24:44:c1:26:bf:1b:26:f3:da:ea:4e:7f:c7:c9:
0c:d2:f3:f6:e8:40:9d:dc:97:c6:8a:54:c0:a3:7c:86:2e:1e:
ed:5c:fc:bd:28:00:08:ec:a5:b1:0d:99:be:4a:19:0b:33:7a:
fe:0d:75:8b:d4:d7:f4:5c:b5:d3:cc:e2:8c:2c:9c:56:b1:69:
b8:6b:cf:6c:e1:56:5d:41:1c:9e:51:8a:0f:a7:fc:7e:17:46:
cb:12:50:e9:56:67:0b:73:f0:0a:20:e7:97:41:8a:4f:ea:d3:
d0:6d:1b:7e:da:8e:e9:2a:e9:cd:1b:90:f4:39:41:31:d7:05:
26:94:51:30:b2:eb:6b:42:91:4c:12:55:f1:01:2e:28:44:81:
a5:0c:00:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:34:50 2025 by rpki-client