Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/BlkDhs11IekO0zr2WwVtk5KeFAI.roa
File: BlkDhs11IekO0zr2WwVtk5KeFAI.roa (raw, json)
Hash identifier: YHLVV5oldTyBWZq12BCQtVpV/MsSHbrPmf1Bh+g4z+s=
Subject key identifier: 06:59:03:86:CD:75:21:E9:0E:D3:3A:F6:5B:05:6D:93:92:9E:14:02
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 01863B9AD41D3E01834EBBAC980F060D3896
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/BlkDhs11IekO0zr2WwVtk5KeFAI.roa
Signing time: Fri 10 Feb 2023 13:54:07 +0000
ROA not before: Fri 10 Feb 2023 13:54:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49632
IP address blocks: 188.125.174.0/24 maxlen: 24
188.125.161.0/24 maxlen: 24
188.125.160.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:9a:d4:1d:3e:01:83:4e:bb:ac:98:0f:06:0d:38:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Feb 10 13:54:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06590386cd7521e90ed33af65b056d93929e1402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:31:bd:dc:90:92:6d:3f:c2:75:1d:87:a4:
5e:79:4c:88:07:06:e0:e1:ed:c9:94:09:fb:db:0c:
19:84:1e:f4:d7:01:f9:ea:a9:f1:36:48:6f:95:06:
a8:69:63:31:c4:fc:3f:2a:19:2d:68:52:b5:cc:60:
4c:b9:b7:4b:8e:c6:6f:44:04:e1:9b:41:11:31:3f:
65:00:79:24:b4:1b:87:b4:52:f5:4f:35:ee:b1:1a:
bc:f2:bc:60:f8:56:22:10:62:9c:de:99:1a:25:12:
eb:00:bf:d9:0e:8f:64:d4:5c:33:d6:0c:f0:69:2a:
ea:1a:30:3a:3b:9e:01:84:9f:0c:42:18:d6:30:03:
b3:b9:71:3c:03:a4:b5:f4:81:43:17:cf:7d:8f:31:
32:f3:94:d4:72:3b:cf:cf:b2:7c:89:1c:fd:88:7d:
da:ba:79:97:37:b8:d3:0b:46:d8:df:73:1d:40:c7:
32:47:32:0c:d1:39:81:9b:2e:e6:ce:10:c2:57:51:
9e:16:36:5d:5a:69:47:95:96:95:a2:2c:69:ba:21:
a0:62:42:78:eb:49:c9:63:76:54:8b:6b:88:55:5e:
0c:d4:87:7a:9a:7b:88:4e:a8:8d:dd:09:8e:fc:ce:
c6:03:aa:ec:96:c9:7a:29:ad:65:3f:b4:9a:30:0a:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:59:03:86:CD:75:21:E9:0E:D3:3A:F6:5B:05:6D:93:92:9E:14:02
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/BlkDhs11IekO0zr2WwVtk5KeFAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/23
188.125.163.0-188.125.170.255
188.125.174.0/24
Signature Algorithm: sha256WithRSAEncryption
11:6a:02:a9:2c:27:d6:21:e2:42:82:f8:a2:68:40:9d:0f:b8:
b7:5b:9f:a1:ba:70:76:55:97:62:f6:a5:6a:c3:87:bb:ab:9a:
3e:0f:36:04:6e:f0:40:ee:50:05:1c:aa:79:aa:cd:71:bf:77:
35:9d:ca:de:df:ad:65:04:e8:e6:e1:3d:da:40:0c:8a:8f:08:
e0:15:d7:02:da:97:d8:62:cd:b5:77:a2:5a:dc:c9:60:67:5c:
2f:2b:76:f6:db:e4:ae:ad:9a:42:84:a6:b8:58:62:0b:25:08:
e6:09:44:96:b3:9c:5d:44:d0:b8:b9:f5:9d:57:2a:30:ba:d1:
48:ca:a4:8e:f1:5a:c5:c4:08:ef:36:b2:ee:29:1b:ff:c2:27:
20:f1:55:6f:e8:51:16:02:8a:da:2a:17:15:ab:4a:e8:99:e3:
e5:17:32:e2:63:22:b8:ce:fd:c4:34:fd:5a:2f:1e:50:ae:29:
b6:2b:d5:21:03:fe:18:7c:27:07:31:1b:ba:07:b4:ec:43:ab:
a0:9e:97:56:a6:80:aa:ba:f7:5c:48:85:13:40:02:17:a1:e6:
ed:1d:f1:93:1a:01:18:d1:9e:31:2b:52:e3:cb:36:f1:85:cf:
c4:92:a0:9e:7f:63:2a:c1:d9:6b:9f:7e:95:a2:32:34:cd:e9:
06:03:6e:18
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYY7mtQdPgGDTrusmA8GDTiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0
M2Q4MGMwHhcNMjMwMjEwMTM1NDA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjU5MDM4NmNkNzUyMWU5MGVkMzNhZjY1YjA1NmQ5MzkyOWUxNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmUxvdyQkm0/wnUdh6ReeUyIBwbg
4e3JlAn72wwZhB701wH56qnxNkhvlQaoaWMxxPw/KhktaFK1zGBMubdLjsZvRATh
m0ERMT9lAHkktBuHtFL1TzXusRq88rxg+FYiEGKc3pkaJRLrAL/ZDo9k1Fwz1gzw
aSrqGjA6O54BhJ8MQhjWMAOzuXE8A6S19IFDF899jzEy85TUcjvPz7J8iRz9iH3a
unmXN7jTC0bY33MdQMcyRzIM0TmBmy7mzhDCV1GeFjZdWmlHlZaVoixpuiGgYkJ4
60nJY3ZUi2uIVV4M1Id6mnuITqiN3QmO/M7GA6rslsl6Ka1lP7SaMAqiYwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAZZA4bNdSHpDtM69lsFbZOSnhQCMB8GA1UdIwQY
MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt
NjliOTUzYzlkNWFhLzEvQmxrRGhzMTFJZWtPMHpyMld3VnRrNUtlRkFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh
LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBvH2gMAwD
BAC8faMDBAC8faoDBAC8fa4wDQYJKoZIhvcNAQELBQADggEBABFqAqksJ9Yh4kKC
+KJoQJ0PuLdbn6G6cHZVl2L2pWrDh7urmj4PNgRu8EDuUAUcqnmqzXG/dzWdyt7f
rWUE6ObhPdpADIqPCOAV1wLal9hizbV3olrcyWBnXC8rdvbb5K6tmkKEprhYYgsl
COYJRJaznF1E0Li59Z1XKjC60UjKpI7xWsXECO82su4pG//CJyDxVW/oURYCitoq
FxWrSuiZ4+UXMuJjIrjO/cQ0/VovHlCuKbYr1SED/hh8JwcxG7oHtOxDq6Cel1am
gKq691xIhRNAAheh5u0d8ZMaARjRnjErUuPLNvGFz8SSoJ5/YyrB2WuffpWiMjTN
6QYDbhg=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:30 2025 by rpki-client