Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/rRzl7Hap8--gGXUJTvhR81PcJw8.roa
File: rRzl7Hap8--gGXUJTvhR81PcJw8.roa (raw, json)
Hash identifier: 4t0kmet//YnUH0y93unEvqp7ZNz++dp0MIvK94xEK/g=
Subject key identifier: AD:1C:E5:EC:76:A9:F3:EF:A0:19:75:09:4E:F8:51:F3:53:DC:27:0F
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 01957028D7E39C7D3182788085EF4790020A
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/rRzl7Hap8--gGXUJTvhR81PcJw8.roa
Signing time: Fri 07 Mar 2025 10:31:19 +0000
ROA not before: Fri 07 Mar 2025 10:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 45.114.12.0/22 maxlen: 32
45.145.104.0/22 maxlen: 32
45.250.64.0/22 maxlen: 32
91.132.114.0/23 maxlen: 32
103.53.216.0/22 maxlen: 22
103.240.180.0/22 maxlen: 32
185.232.45.0/24 maxlen: 32
193.19.204.0/24 maxlen: 32
193.19.205.0/24 maxlen: 32
193.19.206.0/24 maxlen: 32
193.19.207.0/24 maxlen: 32
193.28.182.0/24 maxlen: 32
193.28.191.0/24 maxlen: 32
193.28.202.0/24 maxlen: 32
193.28.237.0/24 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:28:d7:e3:9c:7d:31:82:78:80:85:ef:47:90:02:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Mar 7 10:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad1ce5ec76a9f3efa01975094ef851f353dc270f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ed:55:6a:6c:4b:85:f6:c9:46:41:26:c3:dd:
52:ef:39:e8:da:ef:8c:79:0f:e7:e8:28:c9:a9:9d:
51:ac:60:78:e1:57:77:31:b8:50:38:ab:0b:da:bf:
4f:08:80:1d:ea:74:eb:07:7a:b3:6b:d3:49:d0:ce:
bd:fa:8e:33:13:bd:19:a0:ff:1e:e2:56:4e:7e:6a:
77:40:84:ac:ba:88:fe:cb:55:5d:29:a4:28:a7:e3:
3a:3d:3d:6d:18:1e:93:d1:d9:92:7a:f7:86:f7:c1:
41:eb:c3:00:83:79:ab:bd:5a:60:6a:78:1b:bc:e7:
45:7f:fd:44:7e:32:55:ec:81:a2:dc:d2:3b:c1:02:
ad:85:16:df:a2:a7:4c:a3:dd:bd:61:63:ae:31:db:
17:f8:43:d1:d1:2d:21:89:c1:6a:aa:f5:df:15:9f:
f1:15:9b:ea:db:40:4f:a0:81:c0:37:15:c8:7d:18:
20:90:a2:68:9d:3d:f0:55:71:45:0a:cb:84:75:5e:
e0:32:cf:8b:1f:61:98:dc:9f:9c:03:59:10:92:3a:
d2:76:b4:5f:f6:b3:fb:61:d2:49:92:95:53:79:ca:
e9:a6:4b:10:1e:a0:22:2f:1f:91:04:63:b6:55:73:
85:8d:b3:50:64:ed:be:6c:ea:38:6f:97:15:d6:08:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1C:E5:EC:76:A9:F3:EF:A0:19:75:09:4E:F8:51:F3:53:DC:27:0F
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/rRzl7Hap8--gGXUJTvhR81PcJw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.114.12.0/22
45.145.104.0/22
45.250.64.0/22
91.132.114.0/23
103.53.216.0/22
103.240.180.0/22
185.232.45.0/24
193.19.204.0/22
193.28.182.0/24
193.28.191.0/24
193.28.202.0/24
193.28.237.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8c:53:10:d1:2e:dc:a0:6c:32:31:89:42:de:ce:d5:26:fc:
b8:1f:1f:f9:11:26:15:8e:05:7e:10:95:d4:ac:6d:ac:14:4a:
1c:e7:53:84:06:2f:07:00:57:26:c7:d4:13:6a:5d:f7:94:2c:
ce:3a:9b:96:cb:f8:32:92:51:a5:dc:20:b7:a5:56:64:c1:41:
50:eb:ed:c6:68:56:2a:d4:f2:46:2f:a9:1f:12:c5:20:1c:46:
d1:fb:6e:a9:b7:e4:ec:51:86:b1:d9:f2:f6:cf:15:0a:e1:3d:
b9:48:25:dd:0b:c9:5f:52:83:ee:95:de:8c:6e:56:f7:e0:41:
12:99:6c:a6:eb:b1:98:f6:55:86:9e:5a:df:84:bd:b4:02:44:
9b:85:84:14:bb:c6:53:be:f4:b3:c6:53:02:5c:c6:37:35:11:
58:c3:d9:c2:48:04:39:e4:48:2c:82:40:e9:b8:91:02:79:10:
11:a9:17:0b:a2:43:23:61:5e:24:ab:ec:d0:83:b0:40:4b:ad:
dd:ac:04:ab:af:81:59:91:4a:f8:e7:19:5c:7f:f5:45:a2:f8:
19:64:51:2f:84:21:ab:a0:4a:2b:6e:74:93:36:eb:e1:e5:db:
eb:9c:d8:9a:b7:07:1d:e6:7b:ec:c2:68:dc:76:4e:a3:b3:c2:
c3:c4:b7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:14:55 2025 by rpki-client