Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1-upjFiA9endKheqEIlIsEh1qyT0.roa
File: 1-upjFiA9endKheqEIlIsEh1qyT0.roa (raw, json)
Hash identifier: k7fVnKv9n1GQ6PZWEPqUn0AuM3B8/iRZEwIU8NhHnCA=
Subject key identifier: FA:EA:63:16:20:3D:7A:77:4A:85:EA:84:22:52:2C:12:1D:6A:C9:3D
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747EBB79C8B8B5C2A09DF5CB9062749
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1-upjFiA9endKheqEIlIsEh1qyT0.roa
Signing time: Thu 02 Jan 2025 13:50:12 +0000
ROA not before: Thu 02 Jan 2025 13:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43205
IP address blocks: 37.143.192.0/18 maxlen: 18
46.40.64.0/18 maxlen: 18
46.40.75.0/24 maxlen: 24
46.47.64.0/18 maxlen: 18
46.237.64.0/18 maxlen: 18
78.128.88.0/22 maxlen: 22
78.128.90.0/24 maxlen: 24
91.139.128.0/17 maxlen: 17
93.155.128.0/17 maxlen: 17
109.121.192.0/18 maxlen: 18
158.58.192.0/18 maxlen: 18
178.169.128.0/17 maxlen: 17
185.4.80.0/22 maxlen: 22
188.254.128.0/17 maxlen: 17
193.24.240.0/22 maxlen: 22
212.43.32.0/19 maxlen: 19
212.75.0.0/19 maxlen: 19
213.214.64.0/19 maxlen: 19
2a02:6800::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:eb:b7:9c:8b:8b:5c:2a:09:df:5c:b9:06:27:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faea6316203d7a774a85ea8422522c121d6ac93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:85:a2:df:81:62:b3:f9:f6:5a:ba:c2:47:
e9:0a:5c:63:80:cc:c5:97:e2:48:23:e7:46:72:9c:
01:59:70:50:f7:c7:cc:c8:ac:43:bf:46:f1:a8:d7:
cf:53:cf:5e:17:2c:02:dc:f2:4f:a4:1b:c4:b1:06:
bf:0e:75:ee:a4:19:b5:27:26:40:3b:6c:d3:e7:62:
c3:44:e8:81:d4:43:34:6a:f5:a3:53:14:dd:c0:51:
fc:d1:40:a9:c5:53:d2:96:27:06:ae:72:4a:bb:f7:
ec:38:9c:3f:05:80:d7:c7:95:78:03:58:0d:7d:22:
c6:09:25:1e:fe:20:ae:b4:30:c4:7b:15:4e:06:05:
9b:c4:82:11:db:48:97:d8:c0:90:1b:bb:c6:dd:07:
d5:02:df:78:49:40:bf:6f:d7:04:b5:83:5b:8d:96:
10:24:c9:7b:1a:ca:b5:08:6b:58:0b:85:23:df:17:
85:b5:fc:9b:f6:10:d9:9a:9b:73:55:68:1e:73:72:
d3:92:9d:0e:5e:13:2b:08:e7:77:fd:c9:54:f1:0f:
56:b5:62:8e:ad:da:b5:50:2f:23:5f:66:7d:f8:8a:
c5:4d:bd:29:be:62:95:2c:f7:1b:a6:25:67:c8:2c:
d6:7b:14:98:79:6c:ce:84:3c:e3:ff:c0:9d:20:b9:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EA:63:16:20:3D:7A:77:4A:85:EA:84:22:52:2C:12:1D:6A:C9:3D
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1-upjFiA9endKheqEIlIsEh1qyT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.192.0/18
46.40.64.0/18
46.47.64.0/18
46.237.64.0/18
78.128.88.0/22
91.139.128.0/17
93.155.128.0/17
109.121.192.0/18
158.58.192.0/18
178.169.128.0/17
185.4.80.0/22
188.254.128.0/17
193.24.240.0/22
212.43.32.0/19
212.75.0.0/19
213.214.64.0/19
IPv6:
2a02:6800::/32
Signature Algorithm: sha256WithRSAEncryption
27:1d:88:03:f2:73:05:b9:63:16:ea:a1:85:5c:bf:b9:e6:2e:
57:55:80:5c:fd:33:ed:9c:38:7e:7d:eb:10:99:9d:0e:28:1a:
01:df:ca:fc:7f:0d:eb:e4:59:71:0c:0f:24:9d:a6:df:df:06:
97:f8:3d:84:77:4b:ff:77:31:e2:15:3a:32:de:f1:22:5e:c4:
da:ee:27:9f:cc:8e:ff:bf:08:e6:e5:a8:d6:3e:56:49:12:c8:
c2:bc:7f:ae:ab:f6:74:e8:73:43:5d:10:a9:91:6c:d4:63:53:
86:91:cc:f3:97:db:a6:a1:68:2d:47:70:aa:cf:50:52:2c:c7:
f0:c2:e2:22:be:c1:ba:54:6a:ee:ce:6b:24:aa:44:ef:f7:54:
87:34:11:49:bc:c4:0f:80:86:09:5b:27:c0:e9:b9:03:b8:e0:
74:89:1c:c0:2f:ae:8f:3d:fb:e9:0f:a0:ba:90:d1:ea:79:54:
f8:61:33:74:88:21:6e:9e:30:5e:d0:8e:81:1c:f8:b9:1e:b3:
5c:81:a4:a8:c2:ed:9e:03:f9:c4:43:1b:5d:f3:7a:4f:2e:2b:
b7:32:b1:a8:d7:70:d6:c4:9c:1e:21:47:e6:b7:1d:6e:50:0c:
c3:15:89:df:90:70:fc:a2:7d:f3:0e:d2:2d:1e:b3:47:0a:5c:
b2:87:1f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:24 2025 by rpki-client