Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/_snQhEkGiQ_gbW26HiZtJ0bMH0w.roa
File: _snQhEkGiQ_gbW26HiZtJ0bMH0w.roa (raw, json)
Hash identifier: Ryya44slBhGO62BtknpFWzHpj24Xi445nsR8CAtRPKA=
Subject key identifier: FE:C9:D0:84:49:06:89:0F:E0:6D:6D:BA:1E:26:6D:27:46:CC:1F:4C
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 34281818
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/_snQhEkGiQ_gbW26HiZtJ0bMH0w.roa
Signing time: Sat 01 Jan 2022 05:54:08 +0000
ROA not before: Sat 01 Jan 2022 05:54:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 78.136.196.0/22 maxlen: 22
78.136.200.0/22 maxlen: 23
88.204.40.0/21 maxlen: 22
78.136.202.0/23 maxlen: 23
83.172.63.0/24 maxlen: 24
83.172.60.0/24 maxlen: 24
78.136.248.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875042840 (0x34281818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Jan 1 05:54:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fec9d0844906890fe06d6dba1e266d2746cc1f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:4c:4a:90:52:45:66:53:b2:10:d1:21:13:
8b:f0:10:9d:4d:db:01:5b:28:6c:1e:6b:f8:c2:00:
b0:e3:30:6c:77:db:c6:e5:6d:b8:05:c8:50:a5:ab:
b2:e9:a7:8f:48:05:d1:72:66:c4:12:f0:f5:c1:66:
8e:46:6d:9d:48:8b:39:7d:2d:ac:8a:1c:3b:58:b0:
e6:89:08:d8:c3:ba:26:f7:c4:3e:d5:df:1f:1e:36:
66:d3:72:71:f2:14:5f:be:15:ba:87:9a:b6:7d:0e:
7f:04:4a:0c:77:68:25:03:b5:2b:77:5d:1e:1c:a3:
9c:9c:ff:fa:74:e4:71:7f:be:de:f8:d8:12:90:d8:
5c:03:d5:2e:1b:0c:df:0a:da:21:93:5e:a8:af:71:
42:8f:33:89:e4:9f:70:3d:36:6b:e3:6f:5f:e5:78:
f7:a0:b4:ed:5f:06:e5:41:44:19:15:64:e2:32:a0:
4e:96:0f:5c:01:f9:eb:31:36:67:d7:27:e2:bd:8e:
09:94:39:6d:84:fa:1a:0a:d1:b0:41:2d:61:f4:ff:
95:0b:e0:88:af:b1:48:b5:77:f2:b2:60:66:40:de:
19:b6:54:e6:99:0c:00:41:88:47:38:64:8b:fa:97:
b8:f3:6e:95:4c:99:be:0a:ec:bd:29:4e:a4:e4:60:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C9:D0:84:49:06:89:0F:E0:6D:6D:BA:1E:26:6D:27:46:CC:1F:4C
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/_snQhEkGiQ_gbW26HiZtJ0bMH0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.196.0-78.136.203.255
78.136.248.0/21
83.172.60.0/24
83.172.63.0/24
88.204.40.0/21
Signature Algorithm: sha256WithRSAEncryption
02:ea:c4:e3:3d:9d:45:6f:06:c0:99:1e:cd:8f:fd:2c:b7:01:
e0:08:75:31:7c:d7:b5:db:f1:d9:aa:90:1a:6a:44:83:61:ab:
d5:7e:75:62:6b:84:ea:f6:e7:da:d2:54:e8:89:52:fe:be:98:
72:e0:a1:fa:ff:c0:72:5f:f9:b9:58:12:5f:1c:cb:b6:d4:12:
a5:08:d9:90:0a:a3:d7:0c:96:ba:03:ea:f0:78:57:83:d6:53:
8c:4b:f0:9c:9a:ee:bc:e9:25:f0:a5:9b:15:d2:e7:82:41:95:
30:25:38:a3:33:7c:52:20:4e:cb:4d:1c:fb:05:a2:31:15:ee:
0e:bd:2c:3c:22:fe:8b:ab:86:34:45:6c:77:1d:5f:c7:1f:b0:
88:52:cf:90:6f:a4:89:e5:74:d9:24:b8:e7:8e:69:c4:47:59:
bd:69:20:e2:43:50:c5:db:cf:23:f6:87:30:18:9c:32:6c:4b:
b9:7f:7e:99:b9:26:7a:16:6b:0e:8b:dc:47:37:8d:b9:0b:fd:
48:9c:54:bd:15:db:9a:86:b7:b7:73:ff:74:41:09:e9:23:71:
f7:d9:ed:db:da:68:c3:6b:0f:df:2e:aa:27:fc:21:89:0e:c6:
e7:e8:7b:88:c4:02:e4:78:07:8f:67:90:75:67:7c:19:2b:1b:
26:59:36:c3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIENCgYGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MjljMjczMDk4YjUyNzY4Y2EwZTQ0YTNhMmMxNmVmZWQ0YTY1Y2EwMB4XDTIyMDEw
MTA1NTQwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmVjOWQwODQ0OTA2
ODkwZmUwNmQ2ZGJhMWUyNjZkMjc0NmNjMWY0YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdJTEqQUkVmU7IQ0SETi/AQnU3bAVsobB5r+MIAsOMwbHfb
xuVtuAXIUKWrsumnj0gF0XJmxBLw9cFmjkZtnUiLOX0trIocO1iw5okI2MO6JvfE
PtXfHx42ZtNycfIUX74Vuoeatn0OfwRKDHdoJQO1K3ddHhyjnJz/+nTkcX++3vjY
EpDYXAPVLhsM3wraIZNeqK9xQo8zieSfcD02a+NvX+V496C07V8G5UFEGRVk4jKg
TpYPXAH56zE2Z9cn4r2OCZQ5bYT6GgrRsEEtYfT/lQvgiK+xSLV38rJgZkDeGbZU
5pkMAEGIRzhki/qXuPNulUyZvgrsvSlOpORgTwcCAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBT+ydCESQaJD+BtbboeJm0nRswfTDAfBgNVHSMEGDAWgBRSnCcwmLUnaMoO
RKOiwW7+1KZcoDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Vwd25NSmkxSjJqS0RrU2pvc0Z1X3RTbVhLQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGUvNmQ5MzU5LWFmZWYtNDUzNS05YzkzLWYzM2QzYmIzNjQ4NC8x
L19zblFoRWtHaVFfZ2JXMjZIaVp0SjBiTUgwdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUv
NmQ5MzU5LWFmZWYtNDUzNS05YzkzLWYzM2QzYmIzNjQ4NC8xL1Vwd25NSmkxSjJq
S0RrU2pvc0Z1X3RTbVhLQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJjAMAwQCTojEAwQCTojIAwQDToj4AwQA
U6w8AwQAU6w/AwQDWMwoMA0GCSqGSIb3DQEBCwUAA4IBAQAC6sTjPZ1FbwbAmR7N
j/0stwHgCHUxfNe12/HZqpAaakSDYavVfnVia4Tq9ufa0lToiVL+vphy4KH6/8By
X/m5WBJfHMu21BKlCNmQCqPXDJa6A+rweFeD1lOMS/Ccmu686SXwpZsV0ueCQZUw
JTijM3xSIE7LTRz7BaIxFe4OvSw8Iv6Lq4Y0RWx3HV/HH7CIUs+Qb6SJ5XTZJLjn
jmnER1m9aSDiQ1DF288j9ocwGJwybEu5f36ZuSZ6FmsOi9xHN425C/1InFS9Fdua
hre3c/90QQnpI3H32e3b2mjDaw/fLqon/CGJDsbn6HuIxALkeAePZ5B1Z3wZKxsm
WTbD
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:18:21 2025 by rpki-client