Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/oWGIRNhrkUi9s4zN-WCwewIBbwY.roa
File: oWGIRNhrkUi9s4zN-WCwewIBbwY.roa (raw, json)
Hash identifier: lxvZUC1MOHoMaZ3LzQVqi7vmeea/KOijc86gtozNi7A=
Subject key identifier: A1:61:88:44:D8:6B:91:48:BD:B3:8C:CD:F9:60:B0:7B:02:01:6F:06
Certificate issuer: /CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
Certificate serial: 05D5F36F
Authority key identifier: 53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/oWGIRNhrkUi9s4zN-WCwewIBbwY.roa
Signing time: Sat 01 Jan 2022 15:57:02 +0000
ROA not before: Sat 01 Jan 2022 15:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4637
IP address blocks: 195.153.124.0/24 maxlen: 24
195.153.19.0/24 maxlen: 24
195.152.3.0/24 maxlen: 24
195.153.74.0/24 maxlen: 24
195.152.0.0/15 maxlen: 24
195.153.108.0/22 maxlen: 22
195.153.217.0/24 maxlen: 24
195.153.216.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97907567 (0x5d5f36f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
Validity
Not Before: Jan 1 15:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1618844d86b9148bdb38ccdf960b07b02016f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3c:14:24:41:c2:c7:a1:8e:cf:77:cd:a9:52:
c6:21:bb:98:81:2f:7e:20:02:48:38:b3:89:a5:6b:
ec:38:08:33:b1:f4:21:80:df:ab:fc:fe:fd:6c:f5:
a0:3d:08:8d:4f:d2:49:ba:2d:9d:94:c4:c9:a1:63:
cb:2e:bd:ec:14:f5:06:e7:72:70:5b:5d:2c:2f:09:
9d:bb:1c:c3:14:68:fc:76:8f:2b:06:b5:a4:38:e0:
7c:13:b1:80:05:df:e9:cf:63:b1:c3:32:7c:3e:ce:
66:d2:97:de:18:a7:67:b5:84:d9:68:8c:7b:01:72:
35:b0:c0:e1:67:c3:0e:94:e8:67:44:e7:21:eb:9b:
65:82:f8:fd:f9:e3:47:e7:3f:47:48:fb:f5:9a:b7:
a4:43:03:97:e2:c4:43:6f:d0:35:6a:82:52:3f:00:
f2:3c:d8:82:dd:23:58:8c:3a:95:64:ff:57:e4:9d:
76:de:44:c8:66:fd:42:93:57:45:06:cc:fa:d8:90:
97:f6:41:85:80:e3:bb:6f:bf:44:a8:9e:05:dd:18:
ad:2e:59:cc:53:24:8f:28:1f:cb:bd:a1:38:10:6e:
78:ed:6b:e3:a6:a1:8b:85:b0:85:65:0a:9b:51:7d:
5f:a5:64:04:e3:bb:3b:1b:86:fd:83:c3:68:31:db:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:61:88:44:D8:6B:91:48:BD:B3:8C:CD:F9:60:B0:7B:02:01:6F:06
X509v3 Authority Key Identifier:
keyid:53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/oWGIRNhrkUi9s4zN-WCwewIBbwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.152.0.0/15
Signature Algorithm: sha256WithRSAEncryption
65:48:89:7c:22:4e:4d:15:dd:81:77:c9:0a:c9:6b:a1:96:b7:
86:04:8d:63:b1:c5:44:02:18:d5:93:7e:15:22:e8:8d:15:64:
8e:df:6a:e1:7d:ab:63:17:29:e4:bc:03:c1:f4:76:62:fe:21:
0f:84:ec:f9:bc:c2:1e:9c:35:48:d8:a7:dd:ff:81:eb:2b:5b:
a7:d4:f8:99:36:10:72:0d:c1:1c:f3:01:3b:1b:2e:a2:c8:40:
c4:61:14:c9:0e:f6:fc:2f:93:e0:a1:24:e6:f6:27:06:8a:e0:
c3:a0:cf:13:23:45:fd:94:30:57:4a:9e:55:7e:63:1a:0a:f7:
1c:a4:e4:64:a7:f4:dc:5f:06:f1:22:7c:72:f2:fe:6d:68:25:
b4:cf:9a:f1:3e:bd:18:a7:b8:b8:1c:ec:88:07:5d:4a:5e:fa:
5c:31:37:9e:b1:37:10:20:af:63:01:20:84:88:51:2f:6a:08:
dd:2b:5b:f2:8f:53:89:06:40:ae:8e:81:4e:c6:0a:f6:e4:5c:
66:6d:e5:6d:28:8d:ee:b3:c7:17:7a:ea:4c:37:dd:a2:4e:ff:
cf:81:61:eb:56:88:66:e2:01:11:8f:d1:b0:31:58:ce:34:4c:
44:d6:45:a1:06:de:d3:c0:92:b4:21:12:d9:33:2d:d3:67:a3:
c9:f8:f4:79
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIEBdXzbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
M2ZiNTI0MmY5OGNmZjlkZWE5YmFhOGM4YWU0NjZhNDJiNTM3YzVjMB4XDTIyMDEw
MTE1NTcwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTE2MTg4NDRkODZi
OTE0OGJkYjM4Y2NkZjk2MGIwN2IwMjAxNmYwNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPA8FCRBwsehjs93zalSxiG7mIEvfiACSDiziaVr7DgIM7H0
IYDfq/z+/Wz1oD0IjU/SSbotnZTEyaFjyy697BT1BudycFtdLC8JnbscwxRo/HaP
Kwa1pDjgfBOxgAXf6c9jscMyfD7OZtKX3hinZ7WE2WiMewFyNbDA4WfDDpToZ0Tn
IeubZYL4/fnjR+c/R0j79Zq3pEMDl+LEQ2/QNWqCUj8A8jzYgt0jWIw6lWT/V+Sd
dt5EyGb9QpNXRQbM+tiQl/ZBhYDju2+/RKieBd0YrS5ZzFMkjygfy72hOBBueO1r
46ahi4WwhWUKm1F9X6VkBOO7OxuG/YPDaDHb1D8CAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBShYYhE2GuRSL2zjM35YLB7AgFvBjAfBgNVHSMEGDAWgBRT+1JC+Yz/neqb
qoyK5GakK1N8XDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VfdFNRdm1NXzUzcW02cU1pdVJtcEN0VGZGdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODIvZTRkN2M2LWEyOTktNGI4OC04MjQ3LTljNDAzMjk2M2UxNy8x
L29XR0lSTmhya1VpOXM0ek4tV0N3ZXdJQmJ3WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIv
ZTRkN2M2LWEyOTktNGI4OC04MjQ3LTljNDAzMjk2M2UxNy8xL1VfdFNRdm1NXzUz
cW02cU1pdVJtcEN0VGZGdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAcOYMA0GCSqGSIb3DQEBCwUAA4IB
AQBlSIl8Ik5NFd2Bd8kKyWuhlreGBI1jscVEAhjVk34VIuiNFWSO32rhfatjFynk
vAPB9HZi/iEPhOz5vMIenDVI2Kfd/4HrK1un1PiZNhByDcEc8wE7Gy6iyEDEYRTJ
Dvb8L5PgoSTm9icGiuDDoM8TI0X9lDBXSp5VfmMaCvccpORkp/TcXwbxInxy8v5t
aCW0z5rxPr0Yp7i4HOyIB11KXvpcMTeesTcQIK9jASCEiFEvagjdK1vyj1OJBkCu
joFOxgr25FxmbeVtKI3us8cXeupMN92iTv/PgWHrVohm4gERj9GwMVjONExE1kWh
Bt7TwJK0IRLZMy3TZ6PJ+PR5
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:08:52 2025 by rpki-client