Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/wmoOtqhBoWrVd4Xu2olxYnrnsnk.roa
File: wmoOtqhBoWrVd4Xu2olxYnrnsnk.roa (raw, json)
Hash identifier: EkYtK0mtrXgYzv0PkYTJigVAK5BZKMQGO4prgoBOqmo=
Subject key identifier: C2:6A:0E:B6:A8:41:A1:6A:D5:77:85:EE:DA:89:71:62:7A:E7:B2:79
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 11EA7074
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/wmoOtqhBoWrVd4Xu2olxYnrnsnk.roa
Signing time: Tue 26 Apr 2022 11:09:52 +0000
ROA not before: Tue 26 Apr 2022 11:09:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13287
IP address blocks: 213.162.192.0/24 maxlen: 24
213.162.193.0/24 maxlen: 24
213.162.195.0/24 maxlen: 24
213.162.197.0/24 maxlen: 24
213.162.196.0/22 maxlen: 24
213.162.206.0/24 maxlen: 24
213.162.205.0/24 maxlen: 24
213.162.200.0/22 maxlen: 22
213.162.208.0/23 maxlen: 23
213.162.207.0/24 maxlen: 24
213.162.212.0/24 maxlen: 24
213.162.211.0/24 maxlen: 24
213.162.210.0/24 maxlen: 24
213.162.219.0/24 maxlen: 24
213.162.216.0/22 maxlen: 22
213.162.218.0/24 maxlen: 24
213.162.217.0/24 maxlen: 24
213.162.215.0/24 maxlen: 24
213.162.214.0/24 maxlen: 24
213.162.220.0/24 maxlen: 24
213.162.221.0/24 maxlen: 24
185.33.64.0/24 maxlen: 24
185.33.65.0/24 maxlen: 24
185.33.67.0/24 maxlen: 24
109.234.84.0/24 maxlen: 24
109.234.85.0/24 maxlen: 24
109.234.81.0/24 maxlen: 24
109.234.80.0/24 maxlen: 24
109.234.82.0/24 maxlen: 24
109.234.82.0/23 maxlen: 23
109.234.87.0/24 maxlen: 24
185.19.68.0/22 maxlen: 22
185.111.185.0/24 maxlen: 24
185.111.184.0/24 maxlen: 24
185.111.184.0/22 maxlen: 22
2a02:23a0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300576884 (0x11ea7074)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Apr 26 11:09:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c26a0eb6a841a16ad57785eeda8971627ae7b279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:25:97:21:f2:d3:20:c0:72:b5:1a:68:f9:6f:
ef:b3:d4:28:94:85:c5:05:3c:07:ea:fc:85:10:1d:
dc:9f:59:c3:42:03:5a:51:ab:39:56:73:e3:65:af:
4d:57:f0:cb:5d:2c:6d:a0:fa:2d:22:cc:63:62:c3:
d4:9e:ce:b1:ac:05:85:96:35:94:15:cf:8b:d0:a9:
43:f9:3c:21:51:90:d6:17:11:68:2a:8c:41:eb:ac:
f3:c4:ae:e2:17:a6:c9:a5:79:5e:23:07:79:4a:43:
ee:d2:7c:bc:13:f9:c2:0a:8d:3d:67:af:3b:15:7a:
20:71:ad:61:9f:ad:dc:0d:e3:f4:05:ee:ba:5c:fa:
5f:e4:e7:71:59:c0:09:50:b8:81:9c:ec:27:c5:58:
0f:36:01:ef:8f:67:78:58:fc:14:2b:9c:ab:31:25:
a1:3c:4e:c3:75:bb:20:92:68:b7:74:50:8f:0a:3a:
89:10:cb:7b:c5:e4:a3:b6:de:65:f6:af:3f:00:04:
e1:12:3d:fc:c5:53:b9:fc:db:16:f3:58:e4:34:47:
4c:91:c6:7d:e0:11:af:6b:d6:ad:e9:bf:9f:dc:3a:
8a:55:b8:d0:2a:27:6e:94:3b:ce:58:16:67:f7:61:
f1:d6:a6:e1:da:92:3a:e7:ce:8b:78:b2:81:26:db:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6A:0E:B6:A8:41:A1:6A:D5:77:85:EE:DA:89:71:62:7A:E7:B2:79
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/wmoOtqhBoWrVd4Xu2olxYnrnsnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.80.0-109.234.85.255
109.234.87.0/24
185.19.68.0/22
185.33.64.0/23
185.33.67.0/24
185.111.184.0/22
213.162.192.0/23
213.162.195.0-213.162.203.255
213.162.205.0-213.162.212.255
213.162.214.0-213.162.221.255
IPv6:
2a02:23a0::/32
Signature Algorithm: sha256WithRSAEncryption
65:bf:59:14:37:59:89:e1:b0:a0:84:ac:e6:b5:26:20:76:10:
34:c9:6f:66:6c:9e:a7:b1:27:76:20:6d:e7:77:2a:48:8f:64:
5d:8d:8b:2e:93:d5:c5:f1:29:72:ec:c8:59:b4:8d:18:74:76:
e8:8a:41:83:07:b0:a8:33:35:bb:79:88:d8:27:21:bf:ec:56:
6a:8f:07:a3:ef:6e:91:d0:0e:11:f7:06:85:d0:82:81:89:10:
fc:ff:c2:be:3c:83:ca:3d:5f:86:c6:41:97:d6:c3:ed:bd:2c:
6a:a6:c3:9b:40:a6:f6:e4:98:e4:be:27:d1:ac:0b:a5:53:c3:
7b:56:86:a2:14:2e:80:30:22:b4:94:1e:98:04:34:40:8b:06:
48:7c:cd:45:ce:57:bb:4d:a1:dc:86:b6:a5:51:7a:4a:49:04:
c2:80:f3:e5:49:52:7d:68:ae:32:17:7a:8d:f0:45:67:8c:ce:
d9:7d:2f:de:d3:b8:4c:5b:b3:db:b9:61:66:ac:20:76:5b:da:
99:ed:5d:ed:e9:d3:e3:4f:b6:0b:03:a1:66:c9:a7:69:91:9e:
cc:07:93:01:cb:26:4a:70:d7:93:67:e5:f8:c9:89:db:00:19:
a4:aa:9a:15:86:c3:a1:07:12:5f:06:32:4a:d0:dc:fe:af:52:
11:97:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:44 2025 by rpki-client