Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/94ZclPDw_2WFy_KL5X7itId4gnE.roa
File: 94ZclPDw_2WFy_KL5X7itId4gnE.roa (raw, json)
Hash identifier: 2quGGx4VT0i8iYKLEQNHacnBELnMX1eyRXCJY8m7mYk=
Subject key identifier: F7:86:5C:94:F0:F0:FF:65:85:CB:F2:8B:E5:7E:E2:B4:87:78:82:71
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 08081104
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/94ZclPDw_2WFy_KL5X7itId4gnE.roa
Signing time: Sat 01 Jan 2022 07:54:54 +0000
ROA not before: Sat 01 Jan 2022 07:54:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203576
IP address blocks: 89.252.188.0/24 maxlen: 32
185.126.218.0/24 maxlen: 32
185.126.217.0/24 maxlen: 32
185.126.216.0/24 maxlen: 32
89.252.191.0/24 maxlen: 32
89.252.190.0/24 maxlen: 32
89.252.189.0/24 maxlen: 32
185.126.219.0/24 maxlen: 32
185.165.46.0/24 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134746372 (0x8081104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Jan 1 07:54:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7865c94f0f0ff6585cbf28be57ee2b487788271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:bb:91:0e:69:98:8d:c9:01:82:35:ee:77:
ca:36:d8:60:32:ef:8f:47:5d:6e:b4:fb:01:da:0b:
0b:69:92:34:a1:26:b1:05:dc:5c:dc:55:20:c1:f2:
e1:4d:a7:bf:d4:dc:68:0b:fc:be:2a:b0:e8:f0:ca:
68:c7:bb:b3:bb:eb:1e:e8:77:0e:1d:6f:d3:74:60:
9f:06:c2:bd:a6:9b:24:63:12:93:06:dc:35:df:aa:
f1:9f:d5:0f:19:3b:a0:65:cd:80:88:64:de:d0:80:
4e:80:16:57:13:c2:d6:93:da:da:f0:70:aa:8d:1c:
15:78:db:0d:88:56:f8:2e:99:25:4e:f1:88:9c:1d:
46:34:82:11:84:79:17:cd:8e:c3:55:d8:76:21:e9:
3a:fe:e0:7f:c1:11:a6:59:6a:72:15:e8:31:70:98:
18:95:d9:a3:71:2a:a8:d7:4e:c3:83:0f:ff:a9:83:
ca:9b:00:af:91:2f:14:74:7b:51:b1:e1:31:1f:78:
be:c0:ed:71:15:7c:33:f5:34:98:a2:bd:86:91:75:
4c:16:75:ba:86:8e:d2:1b:cd:1b:81:3c:c8:c3:1d:
42:f3:37:94:98:8f:2e:b7:09:b9:52:02:18:98:b3:
83:22:6a:e8:91:18:41:ff:fe:e9:19:51:e2:77:1e:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:86:5C:94:F0:F0:FF:65:85:CB:F2:8B:E5:7E:E2:B4:87:78:82:71
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/94ZclPDw_2WFy_KL5X7itId4gnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.188.0/22
185.126.216.0/22
185.165.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:09:a7:b4:35:e3:c6:75:7c:fc:cf:41:9d:dc:ee:ff:28:2f:
36:33:06:75:6c:e6:f3:f6:c3:06:6e:a1:c2:12:5d:18:f4:cc:
cf:9d:34:dc:9d:13:2f:fa:bb:b4:ca:c0:ac:98:4f:a9:5b:a7:
ed:3d:51:8b:4a:6d:83:74:90:94:e3:10:a9:56:32:00:a3:b2:
80:9d:1e:20:1c:d5:8f:45:76:c6:61:b3:29:d9:18:92:16:7e:
21:48:2d:64:35:5c:8f:84:bf:82:03:6e:51:a3:e0:75:60:63:
43:fd:07:2d:60:58:3a:46:55:d2:08:58:22:07:08:25:65:5e:
46:5a:76:8d:a8:9d:91:60:1c:a2:01:87:61:6a:73:43:b9:3e:
85:d3:a7:64:fa:21:53:89:09:e1:4b:ac:9f:86:49:5b:f3:c4:
98:fe:ee:5f:4d:5a:ad:af:74:5d:d1:94:4f:41:a9:79:d9:08:
1b:01:03:0e:30:0d:59:5f:ee:a3:87:c8:4b:62:e9:2d:9b:1f:
9e:4b:a3:01:0b:f9:35:11:b0:85:ad:39:54:27:d4:b3:b3:e5:
da:9c:0e:4f:55:01:f7:86:b5:c0:4c:c7:1b:d4:8f:17:84:2c:
1b:6b:cf:26:c5:02:40:9f:86:6e:0b:b3:ab:52:13:e2:83:be:
57:6b:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:00 2025 by rpki-client