Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/MVi9BSBvMdlO4bp6Qx85cFW7ePc.roa
File: MVi9BSBvMdlO4bp6Qx85cFW7ePc.roa (raw, json)
Hash identifier: qOBr5QOUfh9OPhKtIT2W5HnP2XFkypffJZfjrb5Q40w=
Subject key identifier: 31:58:BD:05:20:6F:31:D9:4E:E1:BA:7A:43:1F:39:70:55:BB:78:F7
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 0194228E2727AB00D7BE0F0A62502FDDAAA9
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/MVi9BSBvMdlO4bp6Qx85cFW7ePc.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203639
IP address blocks: 46.21.20.0/24 maxlen: 24
46.21.23.0/24 maxlen: 24
46.21.28.0/24 maxlen: 24
46.21.30.0/24 maxlen: 24
77.220.90.0/23 maxlen: 23
185.155.186.0/24 maxlen: 24
185.155.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:27:27:ab:00:d7:be:0f:0a:62:50:2f:dd:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3158bd05206f31d94ee1ba7a431f397055bb78f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:71:9f:be:4e:92:04:c5:fe:6a:02:b2:b7:
77:3c:1c:a0:29:04:69:a2:fe:29:43:79:6b:4f:7f:
72:e0:f4:ad:a8:75:07:88:49:e2:42:91:8a:33:63:
71:13:77:45:b7:88:aa:0b:b8:f4:d1:d0:b4:56:9e:
17:ab:91:7b:13:29:4d:c2:af:ad:48:17:16:a2:75:
2c:3e:3c:18:22:19:09:d9:ab:4f:77:24:06:74:14:
b7:79:b8:0f:b5:c2:4a:47:26:86:4a:ae:12:29:97:
e9:22:2a:f5:77:39:1d:93:83:84:16:20:b8:2d:96:
06:b8:0c:4e:41:3f:ab:b5:98:16:f8:c2:6d:8a:0a:
92:af:0c:da:e4:b5:41:28:30:6c:ca:8b:e6:e5:6a:
7a:44:30:9e:73:b0:80:ae:0c:b2:d7:22:58:c1:d5:
df:5f:ca:91:9c:3e:57:99:24:63:36:96:43:78:f8:
18:0f:04:bc:3e:f1:d0:9d:ff:4c:9d:0c:5c:e4:32:
83:40:13:ac:fc:95:ba:e9:0b:70:7d:49:09:c2:e0:
81:2a:cd:40:33:c4:ae:46:d6:9c:e4:33:29:79:0e:
7a:89:8d:1d:99:da:91:80:7e:fe:79:f2:01:87:2b:
11:f6:f4:9a:90:76:22:57:c7:82:d4:bf:cb:83:97:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:58:BD:05:20:6F:31:D9:4E:E1:BA:7A:43:1F:39:70:55:BB:78:F7
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/MVi9BSBvMdlO4bp6Qx85cFW7ePc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.20.0/24
46.21.23.0/24
46.21.28.0/24
46.21.30.0/24
77.220.90.0/23
185.155.186.0/23
Signature Algorithm: sha256WithRSAEncryption
22:b6:f5:12:e9:34:f5:49:fb:15:06:5c:4a:b2:af:7a:cd:ab:
65:eb:e7:ae:0c:61:aa:c0:57:74:cd:3e:2c:5b:c8:33:3a:5d:
b0:da:d0:66:51:ef:9d:8a:39:d3:61:0a:30:79:57:75:97:97:
d1:af:d9:fe:5c:8a:e2:a5:7e:38:2b:5c:02:c3:78:5c:8b:8e:
85:f9:6e:c9:f7:ab:46:7d:d3:ae:fd:fe:65:bb:40:7b:d4:df:
75:a8:3d:44:55:db:97:a4:89:4a:e9:4b:e2:0b:d0:f3:d8:15:
15:ea:3f:a9:71:ea:e8:40:61:58:9d:7b:02:96:96:d8:d1:5b:
a7:89:74:9f:78:55:99:33:27:49:3b:83:01:a4:7d:da:b9:44:
51:69:dc:79:a7:4c:5e:96:d1:71:42:dd:f8:c8:0b:04:9c:e0:
5b:68:79:ba:8f:b7:e8:a8:15:27:eb:3d:ce:62:6d:27:e6:11:
3c:7f:9b:00:f5:1f:da:d3:2a:a2:32:af:60:f8:8c:ea:d9:6e:
7a:3e:4a:75:41:f4:af:be:11:01:7c:a4:f2:f2:e3:ff:bf:08:
19:6c:6a:d3:2d:0e:c7:2c:3a:2a:35:bd:39:ce:49:a4:6f:e4:
f6:5d:64:bb:c4:d5:ea:dc:a4:83:de:d8:d3:e4:13:04:5c:f2:
06:33:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:55:23 2025 by rpki-client