Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/erWAm4DTNCzXLaUsDszPK1fvI2c.roa
File: erWAm4DTNCzXLaUsDszPK1fvI2c.roa (raw, json)
Hash identifier: Glwe3xA9TDP2B19lWfrM26uy4oDuCvyHtpyl5ePD6Ls=
Subject key identifier: 7A:B5:80:9B:80:D3:34:2C:D7:2D:A5:2C:0E:CC:CF:2B:57:EF:23:67
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0188CEFB204443980F8002F791AB1F6D0481
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/erWAm4DTNCzXLaUsDszPK1fvI2c.roa
Signing time: Sun 18 Jun 2023 14:49:04 +0000
ROA not before: Sun 18 Jun 2023 14:49:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8851
IP address blocks: 89.213.64.0/18 maxlen: 24
37.252.24.0/21 maxlen: 24
80.240.80.0/20 maxlen: 20
77.107.64.0/18 maxlen: 24
213.210.0.0/18 maxlen: 24
85.159.128.0/21 maxlen: 24
212.38.64.0/19 maxlen: 24
37.98.144.0/21 maxlen: 24
37.98.144.0/22 maxlen: 24
109.176.0.0/16 maxlen: 16
89.213.48.0/20 maxlen: 24
213.218.208.0/20 maxlen: 24
89.213.192.0/18 maxlen: 24
89.31.232.0/21 maxlen: 24
79.99.72.0/21 maxlen: 24
185.20.32.0/22 maxlen: 24
185.20.34.0/24 maxlen: 24
185.20.35.0/24 maxlen: 24
213.218.224.0/19 maxlen: 24
81.168.0.0/17 maxlen: 17
82.163.0.0/19 maxlen: 24
217.144.144.0/20 maxlen: 24
217.145.64.0/20 maxlen: 24
185.24.84.0/22 maxlen: 24
213.130.128.0/19 maxlen: 24
194.105.64.0/19 maxlen: 24
81.5.128.0/18 maxlen: 18
82.152.0.0/15 maxlen: 15
195.128.138.0/24 maxlen: 24
213.152.32.0/19 maxlen: 19
2a02:21f8::/32 maxlen: 32
2a00:c60::/32 maxlen: 32
2001:1a90::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ce:fb:20:44:43:98:0f:80:02:f7:91:ab:1f:6d:04:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 18 14:49:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ab5809b80d3342cd72da52c0ecccf2b57ef2367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:79:f2:97:60:d3:42:5f:c9:43:29:db:a2:
ea:dd:bc:2a:5d:c1:4c:b1:a0:19:9a:14:fa:e3:82:
15:d4:2d:a5:4a:94:31:d6:2f:95:d1:50:33:df:48:
0e:ee:38:8c:1b:e5:8c:a6:d6:d0:4e:dc:e4:21:0a:
c1:36:1d:0b:b0:80:f6:0b:0a:ff:16:c2:2f:b0:eb:
96:e5:01:79:fc:a9:fd:40:d5:ed:b0:a3:48:1b:22:
ca:a8:91:96:1b:b8:0e:1d:fc:5b:0d:29:8e:07:01:
02:8f:d6:f5:8a:32:03:de:66:68:19:c6:3f:ad:9e:
0f:ae:ff:17:b1:0a:05:c4:e9:3a:16:62:86:7c:51:
e9:56:34:74:8c:93:15:59:98:da:50:a5:34:9f:2a:
e5:e4:c7:5a:c5:28:d1:36:2a:d5:a5:9e:43:51:18:
34:71:75:91:2c:85:3b:2e:cb:a3:7b:3b:0b:e0:fb:
b9:c2:d5:58:2a:3b:c1:29:23:73:66:f4:1f:84:d3:
ce:05:36:f5:d1:57:49:bd:10:04:7d:86:25:e6:b5:
81:c9:56:5b:17:1b:80:ef:96:f4:ee:d0:10:d1:8d:
ca:13:f1:c6:3e:6b:ae:55:13:42:30:ea:2e:fb:2b:
a2:0c:28:ba:b2:cc:14:0e:fe:8a:21:29:d8:97:1d:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B5:80:9B:80:D3:34:2C:D7:2D:A5:2C:0E:CC:CF:2B:57:EF:23:67
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/erWAm4DTNCzXLaUsDszPK1fvI2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.107.64.0/18
79.99.72.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.31.232.0/21
89.213.48.0-89.213.127.255
89.213.192.0/18
109.176.0.0/16
185.20.32.0/22
185.24.84.0/22
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a02:21f8::/32
Signature Algorithm: sha256WithRSAEncryption
64:80:db:d6:20:45:ec:f8:f5:c0:f7:07:5b:27:89:84:3a:bd:
c2:dc:38:63:9f:83:e7:35:b3:ff:20:37:e4:73:2c:d2:37:41:
9a:bc:94:fa:cc:5c:2f:7c:12:49:83:0b:be:02:82:3d:47:ba:
30:87:6f:af:19:6f:fd:23:d8:2b:9a:12:af:6d:88:fa:3a:91:
19:e0:4d:ac:cb:4f:13:74:4e:63:38:a4:4c:cf:ca:ca:93:2a:
c6:87:08:d9:41:13:73:c6:a8:f7:b5:e9:89:b9:71:ce:05:95:
5b:62:a4:67:ff:ea:ec:17:49:3c:4f:18:4b:5e:00:86:86:70:
3b:27:c9:d0:5c:eb:e8:e2:8d:89:08:95:dd:e7:a0:13:75:be:
0b:35:86:d7:42:78:91:76:c2:e7:68:06:ed:02:82:be:c0:5a:
dd:48:57:a9:93:01:bd:9b:68:22:ce:ca:37:4a:c4:24:c7:38:
f7:7e:0d:ac:96:61:a9:b2:09:e8:df:eb:8e:d8:b8:33:69:6d:
bc:34:9b:93:73:b7:6d:4c:e1:dc:ad:c7:cd:68:1f:d9:ca:73:
86:7f:eb:20:a2:35:9a:6b:75:2a:31:bb:c5:c4:d9:58:cc:e8:
85:c2:92:a4:ee:d4:8a:a7:14:4f:41:e0:18:9d:52:4c:b5:24:
b5:ce:73:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:11:08 2025 by rpki-client