Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/Ky5iDsEoXV-_5WQ8MyUqXwWCwos.roa
File: Ky5iDsEoXV-_5WQ8MyUqXwWCwos.roa (raw, json)
Hash identifier: iaxSw4zFSd58AYFCIUJdcMpToM3OVskzdjfaZigCM5s=
Subject key identifier: 2B:2E:62:0E:C1:28:5D:5F:BF:E5:64:3C:33:25:2A:5F:05:82:C2:8B
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 3746BDCF
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/Ky5iDsEoXV-_5WQ8MyUqXwWCwos.roa
Signing time: Sat 01 Jan 2022 10:04:58 +0000
ROA not before: Sat 01 Jan 2022 10:04:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49632
IP address blocks: 188.125.175.0/24 maxlen: 24
188.125.174.0/24 maxlen: 24
188.125.173.0/24 maxlen: 24
188.125.162.0/24 maxlen: 24
188.125.161.0/24 maxlen: 24
188.125.160.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.172.0/24 maxlen: 24
188.125.171.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927382991 (0x3746bdcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Jan 1 10:04:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b2e620ec1285d5fbfe5643c33252a5f0582c28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:12:ad:8f:ee:3b:32:49:db:78:72:b6:ae:
28:a9:9a:25:99:6d:c7:74:ea:1c:8b:29:b4:25:a0:
9e:d6:69:8f:0e:b6:67:78:89:7a:b1:2c:ca:f6:0a:
59:56:db:3e:3e:24:57:07:92:ab:ad:ac:05:48:45:
6d:0d:63:0c:03:88:14:62:3d:ca:bc:db:1d:d4:42:
7f:6b:9b:40:9d:37:d1:83:0a:ad:77:10:f7:ce:93:
3f:92:45:6f:a3:8a:f3:63:d7:ce:f3:77:d0:55:2b:
66:c4:21:a0:ef:30:86:89:6d:ff:88:3b:80:0e:0f:
db:4e:09:a2:2a:e3:6f:07:ea:ec:5a:ec:d2:f6:ad:
a3:b0:a5:e6:42:71:b4:05:b8:92:e1:19:51:25:91:
ab:36:15:ec:d0:95:22:97:ba:a0:40:41:75:32:72:
ff:77:cd:30:33:6b:98:69:0e:0e:b3:ac:e4:cf:36:
be:b5:b2:9b:57:f8:f9:f0:32:61:ec:6d:c6:3e:8c:
43:00:92:44:50:2a:25:af:df:49:c3:e4:75:d9:a7:
c2:27:2c:80:a2:95:8d:1b:a1:92:f4:84:1c:5c:bc:
ec:db:b8:e3:0e:fa:c7:f1:f5:fb:2a:61:a2:f1:80:
38:4b:90:dc:81:e5:e3:1f:27:f7:40:2a:c2:b7:86:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2E:62:0E:C1:28:5D:5F:BF:E5:64:3C:33:25:2A:5F:05:82:C2:8B
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/Ky5iDsEoXV-_5WQ8MyUqXwWCwos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/20
Signature Algorithm: sha256WithRSAEncryption
68:e8:8e:98:15:89:70:53:61:bd:fc:23:d4:5f:f8:2d:f6:75:
5e:1f:46:10:43:71:b4:9d:7a:be:0b:b0:96:fc:f4:98:78:b7:
16:70:07:a6:3a:94:fc:8f:09:b1:3d:3f:ac:dd:a5:7e:f1:22:
71:e8:35:e1:cf:b8:a4:68:8c:f8:dd:4a:e8:3f:d9:d6:3a:ce:
48:40:ba:48:93:a0:9b:13:d7:01:e5:02:c9:f9:cc:a5:19:1a:
6a:99:64:d3:a5:ad:6f:01:d7:58:bc:fe:4f:64:cd:47:8e:ad:
6b:7a:01:ad:bb:1f:34:c0:ec:ad:27:d7:2c:ec:d1:8c:3c:d8:
26:fc:f8:3c:65:09:7a:fe:6a:8d:71:60:38:88:ad:8d:ee:19:
bc:22:ff:29:40:e5:3a:3a:ec:e4:38:b0:34:ba:1d:cf:a1:8b:
39:37:58:34:dd:26:8d:d3:bb:fe:a3:72:8b:f9:2a:b6:fd:6a:
43:2f:b1:c9:5d:98:f1:9b:7d:e8:c6:d1:b8:bf:cd:5b:53:bf:
54:34:ff:2e:a0:86:3b:cd:a5:cb:65:44:13:fe:f4:71:1c:cd:
84:86:66:c8:9b:0d:f4:4b:2e:3e:67:93:de:3a:66:8e:b3:f1:
09:f1:dc:1c:92:e5:1d:db:44:72:15:9d:4a:34:c3:24:cf:c4:
8a:17:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:25 2025 by rpki-client