Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/xPhOb95_ZSJRAG7SxW2Osi0zx2o.roa
File: xPhOb95_ZSJRAG7SxW2Osi0zx2o.roa (raw, json)
Hash identifier: P4+8gelyf0MOEoAeEQIAJwHcIMvOB3BNSn42GGXcy7w=
Subject key identifier: C4:F8:4E:6F:DE:7F:65:22:51:00:6E:D2:C5:6D:8E:B2:2D:33:C7:6A
Certificate issuer: /CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
Certificate serial: 05D81524
Authority key identifier: 53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/xPhOb95_ZSJRAG7SxW2Osi0zx2o.roa
Signing time: Sat 01 Jan 2022 15:57:04 +0000
ROA not before: Sat 01 Jan 2022 15:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31712
IP address blocks: 195.153.19.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98047268 (0x5d81524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
Validity
Not Before: Jan 1 15:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4f84e6fde7f652251006ed2c56d8eb22d33c76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:05:10:73:eb:c3:37:6b:86:40:11:15:b7:
68:c2:ec:7a:d3:2e:45:d6:5b:87:57:fc:ae:28:c4:
74:9b:3a:e3:93:2b:e8:d5:72:95:11:4f:2c:fd:b0:
cf:db:d3:24:92:17:ae:d7:24:b5:ab:ea:99:15:15:
75:04:de:7e:95:36:4c:24:39:9c:49:60:a8:31:43:
3b:25:b7:65:a8:3c:c1:65:95:db:18:83:a8:62:be:
06:63:c2:27:24:1e:9c:cb:df:28:f2:c7:2b:ee:6f:
57:c5:e5:51:da:89:dc:2e:a7:03:f2:c3:b3:87:bc:
25:2a:60:b1:af:a2:7c:de:1c:b6:e2:26:75:18:39:
5b:f3:b2:88:c8:04:ee:30:34:26:30:24:a9:0f:56:
d0:9f:f3:da:0e:5c:ed:cf:0e:9b:15:7f:f9:2e:33:
b9:65:35:b5:54:9e:6f:e7:a6:a5:a3:45:9d:bd:bf:
5a:3e:24:58:df:9c:72:c3:d9:5e:b4:14:66:77:33:
2c:b3:cd:79:f1:bb:d2:67:89:a3:9b:29:bf:6a:b2:
82:92:99:6d:c9:98:ee:ce:c2:7a:1d:73:bc:8c:c7:
83:d0:2c:b8:4f:77:f2:5f:cc:43:16:4e:85:04:f7:
2e:f0:a9:f4:65:bd:d5:ad:82:13:e5:73:5b:4b:65:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F8:4E:6F:DE:7F:65:22:51:00:6E:D2:C5:6D:8E:B2:2D:33:C7:6A
X509v3 Authority Key Identifier:
keyid:53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/xPhOb95_ZSJRAG7SxW2Osi0zx2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.153.19.0/24
Signature Algorithm: sha256WithRSAEncryption
12:bb:eb:01:25:32:cf:49:8d:f0:71:69:d2:2c:37:21:bb:26:
09:e7:7a:d8:df:9b:60:5c:00:46:73:43:fd:a1:c7:23:ce:8a:
ec:7b:ed:16:3c:37:66:03:fc:50:6e:cd:f6:10:8b:6f:81:c4:
45:a4:6e:cf:b6:78:52:27:3b:c3:86:88:43:a3:a6:89:64:84:
65:0c:10:4c:2c:22:f4:94:57:75:27:40:a7:d0:a1:01:33:3b:
19:9a:94:03:e5:e4:b4:bd:71:d5:60:a1:ce:5a:f1:e1:ed:8b:
61:d6:92:5d:e6:b2:b0:73:01:f3:5c:b2:92:65:73:df:00:af:
e7:a4:bd:c9:80:07:7a:a1:8a:06:08:5f:5b:20:12:c9:eb:e0:
e4:57:02:4a:97:60:7f:23:6b:71:b3:9c:00:6b:81:64:a1:38:
e9:40:04:6f:47:6c:69:e7:67:ce:c5:40:c0:9f:fb:63:e5:3c:
8c:e6:31:c6:c4:10:6a:58:3c:61:50:11:f7:d6:42:52:77:ac:
18:f1:cc:5c:31:65:a4:9a:94:a3:86:cb:0d:77:2e:9d:71:55:
ef:40:f3:b2:7f:9d:b6:84:f5:a9:f2:52:5f:13:60:18:c0:0b:
50:ff:2c:92:dc:90:85:1a:0c:92:79:91:1d:fb:38:48:df:2e:
3d:11:7f:88
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBdgVJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
M2ZiNTI0MmY5OGNmZjlkZWE5YmFhOGM4YWU0NjZhNDJiNTM3YzVjMB4XDTIyMDEw
MTE1NTcwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzRmODRlNmZkZTdm
NjUyMjUxMDA2ZWQyYzU2ZDhlYjIyZDMzYzc2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMQBBRBz68M3a4ZAERW3aMLsetMuRdZbh1f8rijEdJs645Mr
6NVylRFPLP2wz9vTJJIXrtcktavqmRUVdQTefpU2TCQ5nElgqDFDOyW3Zag8wWWV
2xiDqGK+BmPCJyQenMvfKPLHK+5vV8XlUdqJ3C6nA/LDs4e8JSpgsa+ifN4ctuIm
dRg5W/OyiMgE7jA0JjAkqQ9W0J/z2g5c7c8OmxV/+S4zuWU1tVSeb+empaNFnb2/
Wj4kWN+ccsPZXrQUZnczLLPNefG70meJo5spv2qygpKZbcmY7s7Ceh1zvIzHg9As
uE938l/MQxZOhQT3LvCp9GW91a2CE+VzW0tlajsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTE+E5v3n9lIlEAbtLFbY6yLTPHajAfBgNVHSMEGDAWgBRT+1JC+Yz/neqb
qoyK5GakK1N8XDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VfdFNRdm1NXzUzcW02cU1pdVJtcEN0VGZGdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODIvZTRkN2M2LWEyOTktNGI4OC04MjQ3LTljNDAzMjk2M2UxNy8x
L3hQaE9iOTVfWlNKUkFHN1N4VzJPc2kwengyby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIv
ZTRkN2M2LWEyOTktNGI4OC04MjQ3LTljNDAzMjk2M2UxNy8xL1VfdFNRdm1NXzUz
cW02cU1pdVJtcEN0VGZGdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOZEzANBgkqhkiG9w0BAQsFAAOC
AQEAErvrASUyz0mN8HFp0iw3IbsmCed62N+bYFwARnND/aHHI86K7HvtFjw3ZgP8
UG7N9hCLb4HERaRuz7Z4Uic7w4aIQ6OmiWSEZQwQTCwi9JRXdSdAp9ChATM7GZqU
A+XktL1x1WChzlrx4e2LYdaSXeaysHMB81yykmVz3wCv56S9yYAHeqGKBghfWyAS
yevg5FcCSpdgfyNrcbOcAGuBZKE46UAEb0dsaednzsVAwJ/7Y+U8jOYxxsQQalg8
YVAR99ZCUnesGPHMXDFlpJqUo4bLDXcunXFV70Dzsn+dtoT1qfJSXxNgGMALUP8s
ktyQhRoMknmRHfs4SN8uPRF/iA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:06:19 2025 by rpki-client