Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aLpcEqYTo890pWhBG3dXlSM9Moo.roa
File: aLpcEqYTo890pWhBG3dXlSM9Moo.roa (raw, json)
Hash identifier: F3YS6DkOgMta2tJIfmulvSo80A1T77lnpUFpenB3fXU=
Subject key identifier: 68:BA:5C:12:A6:13:A3:CF:74:A5:68:41:1B:77:57:95:23:3D:32:8A
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01890638047BA252CAD23808667E55690578
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aLpcEqYTo890pWhBG3dXlSM9Moo.roa
Signing time: Thu 29 Jun 2023 08:14:41 +0000
ROA not before: Thu 29 Jun 2023 08:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12325
IP address blocks: 89.39.94.0/23 maxlen: 24
89.39.123.0/24 maxlen: 24
185.18.224.0/23 maxlen: 24
89.45.228.0/24 maxlen: 24
188.215.40.0/22 maxlen: 24
89.40.222.0/23 maxlen: 24
93.115.108.0/24 maxlen: 24
89.35.124.0/23 maxlen: 24
89.46.232.0/21 maxlen: 24
89.46.128.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:38:04:7b:a2:52:ca:d2:38:08:66:7e:55:69:05:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jun 29 08:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68ba5c12a613a3cf74a568411b775795233d328a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c0:ca:69:f0:e0:e5:68:1e:22:bd:4a:3f:fc:
ba:64:17:b8:58:a7:79:a0:1d:08:25:4c:66:21:c0:
e0:25:da:99:90:d0:f8:9b:07:ac:d6:a5:3b:92:f3:
a6:4d:96:bd:c6:7b:75:28:4f:16:11:7c:0e:7a:43:
78:f1:bb:f7:43:ec:92:8f:ec:e2:22:09:cd:03:08:
8f:9a:05:08:fc:5c:65:2f:db:b0:73:30:10:ea:23:
71:2c:d0:30:46:d0:4c:8b:f6:2a:c0:68:42:ef:58:
61:0e:e9:2f:31:ab:74:ba:eb:75:7b:17:af:48:42:
4e:74:a9:04:91:4d:68:65:27:33:54:f0:06:a9:b8:
52:69:36:28:27:61:57:fb:45:25:94:ce:57:c9:2c:
57:07:09:12:c6:9f:61:4e:d3:61:7a:e2:6c:df:65:
b7:97:d8:c0:73:fe:b2:8b:6c:f2:55:85:55:ea:04:
ab:f2:83:d2:c1:c1:ef:87:68:64:a8:58:e0:1c:81:
c8:ce:ff:b1:1c:e7:4e:bc:82:09:86:cd:d3:19:5a:
51:88:56:d3:04:eb:45:70:70:64:4b:77:e4:21:41:
4f:4e:23:c9:41:e3:9c:ee:79:34:d1:e7:c0:df:4e:
59:8b:3f:66:37:9d:50:f5:4b:f9:0c:6e:e1:29:a5:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BA:5C:12:A6:13:A3:CF:74:A5:68:41:1B:77:57:95:23:3D:32:8A
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aLpcEqYTo890pWhBG3dXlSM9Moo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.124.0/23
89.39.94.0/23
89.39.123.0/24
89.40.222.0/23
89.45.228.0/24
89.46.128.0/22
89.46.232.0/21
93.115.108.0/24
185.18.224.0/23
188.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
e7:70:7b:c8:58:92:6a:aa:50:9e:96:95:d4:58:4b:d0:18:53:
71:87:42:5e:4e:d7:d3:ec:1b:10:65:01:79:47:c6:88:f4:18:
08:ef:04:9e:00:64:af:1b:41:88:8f:16:fa:c3:2d:e3:c8:89:
85:67:40:69:9a:d3:70:a7:fe:36:f6:cb:45:8c:ce:53:eb:50:
c9:2b:45:57:88:ff:4c:bf:b9:cc:07:89:c1:74:bc:35:ce:73:
be:f7:d8:b0:2b:ea:d1:15:c5:1a:c4:e3:66:3f:e4:09:2a:8d:
04:eb:70:8a:2a:64:03:52:82:1a:af:de:d4:87:c1:f7:e1:40:
12:82:9d:71:7a:39:71:5e:78:23:dc:0b:89:6b:c3:d8:ad:a4:
b1:16:9f:dd:5a:89:3f:28:59:63:7a:a4:54:61:b9:cd:aa:85:
db:0b:86:ab:09:b5:94:f9:53:45:3c:e8:08:fc:0f:46:da:b9:
29:e6:81:7e:0b:25:4a:34:f6:67:a3:b1:3b:69:8d:87:61:54:
47:25:7a:4a:a9:59:9f:4a:3b:4f:71:fb:1f:f9:70:ae:23:f1:
a8:b0:91:99:92:59:57:fc:05:bc:2b:22:99:6d:7b:8d:60:24:
25:de:cb:c2:3e:b7:e7:2f:43:50:b7:b3:ed:24:5e:8b:2c:9a:
c2:f6:6f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:21 2025 by rpki-client