Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/f0k2E7BW4QevHZD9UJmo2jjT2gg.roa
File: f0k2E7BW4QevHZD9UJmo2jjT2gg.roa (raw, json)
Hash identifier: /HgN9GcJdOtIB2fYt5ML/nAWEW95a+LVx1vHF1vMGtQ=
Subject key identifier: 7F:49:36:13:B0:56:E1:07:AF:1D:90:FD:50:99:A8:DA:38:D3:DA:08
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01906CD63F6B6491615480C0630FAE5CDAFD
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/f0k2E7BW4QevHZD9UJmo2jjT2gg.roa
Signing time: Mon 01 Jul 2024 05:48:18 +0000
ROA not before: Mon 01 Jul 2024 05:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 85.204.106.0/24 maxlen: 24
89.46.128.0/22 maxlen: 24
89.46.232.0/21 maxlen: 24
188.215.40.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6c:d6:3f:6b:64:91:61:54:80:c0:63:0f:ae:5c:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jul 1 05:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f493613b056e107af1d90fd5099a8da38d3da08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:33:c9:c1:66:d9:29:8e:4d:30:c7:26:73:
2b:c4:b9:fd:0e:1d:fc:70:de:6a:ca:a3:82:d6:1a:
61:88:7f:e3:64:47:eb:9e:e7:22:60:6d:71:6f:1f:
0e:03:83:48:85:94:6e:70:0e:02:24:a5:16:7d:8f:
9d:52:d3:b3:5d:b5:dd:a7:c5:13:21:ee:5a:f0:39:
ce:6c:e5:1a:63:6d:49:45:56:43:bd:68:df:0d:66:
5c:82:bb:77:ef:7c:46:49:24:7f:6a:26:65:f3:b6:
44:68:33:68:b7:a7:1e:cb:02:4e:43:1d:68:45:64:
7e:e0:b5:2f:96:65:03:ad:a9:54:35:73:2c:95:1d:
d4:85:9b:31:a9:ca:50:b1:93:2c:c1:b2:89:0f:4b:
3d:8b:28:cf:0c:79:be:9e:c5:d2:96:36:75:44:36:
d5:56:c7:1d:d6:c9:d0:ae:94:0b:55:30:68:d4:92:
2d:4b:77:79:92:d4:85:06:8b:cc:7b:7a:4c:c7:f6:
0b:dd:ea:fc:b5:1a:40:a7:53:69:02:6e:f0:ba:ef:
ee:c5:f8:3b:12:6a:ec:70:c8:91:f4:2f:fa:b9:5d:
5b:e8:61:bc:47:01:88:da:26:c2:fa:06:2d:86:e4:
28:61:31:09:d1:52:2a:71:60:96:20:1d:cc:31:99:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:49:36:13:B0:56:E1:07:AF:1D:90:FD:50:99:A8:DA:38:D3:DA:08
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/f0k2E7BW4QevHZD9UJmo2jjT2gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.106.0/24
89.46.128.0/22
89.46.232.0/21
188.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
06:ee:2b:2a:de:a4:ee:93:c2:1a:f0:bd:57:da:98:de:03:71:
78:05:9a:90:46:84:08:a4:f1:de:46:cd:f3:f0:0e:e5:44:93:
d3:53:50:5e:37:c2:5e:c0:08:5d:28:a5:d6:11:88:d1:0b:07:
3c:8b:1c:5a:cb:2b:fd:17:cc:3e:89:3d:94:f8:4c:dc:d3:a1:
27:16:59:8e:fb:42:f3:aa:0f:71:49:2d:f2:3e:10:da:b7:5d:
fe:f5:4f:6b:6a:31:27:2a:54:60:73:de:d8:77:3a:57:63:1e:
59:4e:ab:a3:aa:0e:1f:9c:47:63:c7:2f:4c:40:be:ed:36:4b:
5e:29:70:6b:a9:0e:ac:40:96:d9:d2:4d:64:4f:ea:a1:72:1d:
f9:a3:bf:99:68:41:75:c7:eb:b8:28:4a:ae:42:a2:0e:fb:20:
fe:fd:e1:d1:52:e6:7a:e0:0c:13:4d:31:95:52:5f:b8:d7:a7:
5b:ed:22:1b:52:38:36:aa:dc:fb:57:72:28:6e:df:47:57:8b:
c5:33:24:3e:12:a2:2b:56:74:c7:20:b5:73:98:4f:3f:79:c7:
38:e2:be:e4:68:40:86:2a:51:a9:e1:0f:b5:60:a8:17:aa:bb:
67:1e:b6:78:10:af:3f:88:65:d1:37:a7:d8:5c:75:3b:79:f2:
2b:78:f4:8c
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZBs1j9rZJFhVIDAYw+uXNr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwNzAxMDU0ODE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjQ5MzYxM2IwNTZlMTA3YWYxZDkwZmQ1MDk5YThkYTM4ZDNkYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgQzycFm2SmOTTDHJnMrxLn9Dh38
cN5qyqOC1hphiH/jZEfrnuciYG1xbx8OA4NIhZRucA4CJKUWfY+dUtOzXbXdp8UT
Ie5a8DnObOUaY21JRVZDvWjfDWZcgrt373xGSSR/aiZl87ZEaDNot6ceywJOQx1o
RWR+4LUvlmUDralUNXMslR3UhZsxqcpQsZMswbKJD0s9iyjPDHm+nsXSljZ1RDbV
Vscd1snQrpQLVTBo1JItS3d5ktSFBovMe3pMx/YL3er8tRpAp1NpAm7wuu/uxfg7
EmrscMiR9C/6uV1b6GG8RwGI2ibC+gYthuQoYTEJ0VIqcWCWIB3MMZn74wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFH9JNhOwVuEHrx2Q/VCZqNo409oIMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL2YwazJFN0JXNFFldkhaRDlVSm1vMmpqVDJnZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABVzGoD
BAJZLoADBANZLugDBAK81ygwDQYJKoZIhvcNAQELBQADggEBAAbuKyrepO6Twhrw
vVfamN4DcXgFmpBGhAik8d5GzfPwDuVEk9NTUF43wl7ACF0opdYRiNELBzyLHFrL
K/0XzD6JPZT4TNzToScWWY77QvOqD3FJLfI+ENq3Xf71T2tqMScqVGBz3th3Oldj
HllOq6OqDh+cR2PHL0xAvu02S14pcGupDqxAltnSTWRP6qFyHfmjv5loQXXH67go
Sq5Cog77IP794dFS5nrgDBNNMZVSX7jXp1vtIhtSODaq3PtXcihu30dXi8UzJD4S
oitWdMcgtXOYTz95xzjivuRoQIYqUanhD7VgqBequ2cetngQrz+IZdE3p9hcdTt5
8it49Iw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:29 2025 by rpki-client