Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/LmZuA5xQxIuIIg71sHbsSGe9xPQ.roa
File: LmZuA5xQxIuIIg71sHbsSGe9xPQ.roa (raw, json)
Hash identifier: 2HX7US9g9YNIpbrsmooMDgdALSfU8eIWT6ebu4T2Rqc=
Subject key identifier: 2E:66:6E:03:9C:50:C4:8B:88:22:0E:F5:B0:76:EC:48:67:BD:C4:F4
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 0193058FF7AB2CA5C01A7ACB112F418124C9
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/LmZuA5xQxIuIIg71sHbsSGe9xPQ.roa
Signing time: Thu 07 Nov 2024 07:39:01 +0000
ROA not before: Thu 07 Nov 2024 07:39:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 5.252.92.0/24 maxlen: 24
5.253.158.0/24 maxlen: 24
62.122.228.0/22 maxlen: 22
62.122.228.0/24 maxlen: 24
62.122.230.0/24 maxlen: 24
62.122.231.0/24 maxlen: 24
185.167.181.0/24 maxlen: 24
185.204.203.0/24 maxlen: 24
185.218.160.0/24 maxlen: 24
185.218.161.0/24 maxlen: 24
185.218.162.0/24 maxlen: 24
185.218.163.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:8f:f7:ab:2c:a5:c0:1a:7a:cb:11:2f:41:81:24:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Nov 7 07:39:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e666e039c50c48b88220ef5b076ec4867bdc4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:f2:17:80:1c:7d:94:76:fd:b2:2e:56:5e:
52:e6:8b:c1:29:50:7c:5d:ca:91:ca:8a:2f:66:6c:
04:a2:3e:ef:7e:a0:9a:12:d0:a5:e9:42:4f:81:d4:
d7:44:82:94:6c:9e:5b:ba:1a:7f:03:75:f8:18:b4:
80:33:27:46:c1:eb:eb:06:20:e4:05:10:b7:ff:35:
b5:d1:05:95:7d:53:4c:24:d7:17:42:76:e2:11:0a:
df:fc:7b:be:dd:71:10:56:ca:d2:21:46:d9:a0:86:
75:dd:d6:1a:e4:65:0f:c0:88:70:70:bb:50:2d:88:
31:bf:44:c7:be:4d:0d:75:03:0c:a8:c1:c6:67:f1:
00:18:72:55:52:4f:de:a8:33:db:b2:05:4a:a1:d8:
03:6b:90:65:72:8f:08:56:6c:01:24:63:04:7d:da:
f9:77:61:f1:56:30:97:41:75:cf:b6:57:3e:9c:6d:
09:98:1f:09:29:d9:80:1e:c5:1d:06:11:63:d3:f1:
08:14:68:57:3d:79:d5:04:bf:e8:49:f1:47:21:32:
bc:49:dd:44:45:9f:75:5c:bc:ef:a1:53:11:6f:b9:
0f:8e:b4:e1:2d:70:2f:7f:15:22:5d:be:2e:1b:e4:
00:31:97:2d:e4:dc:88:23:b3:34:38:05:85:3f:a4:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:66:6E:03:9C:50:C4:8B:88:22:0E:F5:B0:76:EC:48:67:BD:C4:F4
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/LmZuA5xQxIuIIg71sHbsSGe9xPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.92.0/24
5.253.158.0/24
62.122.228.0/22
185.167.181.0/24
185.204.203.0/24
185.218.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:50:88:d6:20:b2:6f:e2:a6:56:28:0e:d7:8f:82:83:0a:30:
50:52:6c:f2:15:c7:80:c2:3f:fe:e3:39:29:c7:50:97:03:de:
23:96:42:e6:12:ef:c4:4d:88:22:82:fb:62:88:23:61:c0:85:
06:1d:0f:e4:05:63:14:6f:90:5a:21:61:76:93:99:b1:c1:61:
01:e5:22:bb:1c:46:83:12:ca:a4:ce:ee:cc:23:49:01:fd:03:
7d:e1:17:f2:df:0f:92:5e:ee:9b:71:4e:5d:9b:02:b0:4b:84:
45:b1:6a:d4:87:bb:89:f8:94:0c:cb:29:f3:68:cb:fc:d2:e2:
b4:88:09:b6:f6:d6:ef:58:6c:86:9e:70:4a:b1:81:7b:a6:1e:
2a:4f:50:99:d7:54:19:55:cf:25:c0:99:09:d6:82:9e:22:30:
09:b8:ae:e4:7c:80:63:41:60:63:3d:0d:55:0e:c1:16:bb:ef:
60:83:36:a1:7b:37:c1:7d:b8:5d:a6:98:88:d1:e9:5e:0c:46:
ef:b1:cd:bc:a8:bb:d0:4d:e2:74:c1:b8:c1:fd:dd:6e:e7:56:
c7:62:e4:6b:e0:3a:9c:81:64:36:72:23:47:15:23:e4:ed:f3:
ba:cf:9c:1c:af:0d:ea:69:74:34:28:03:82:c1:ff:a1:7a:cc:
55:42:39:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:20 2025 by rpki-client