Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/NQrbjf3WFTPISNLGTWlKja6sByk.roa
File: NQrbjf3WFTPISNLGTWlKja6sByk.roa (raw, json)
Hash identifier: 4L3rUprlUobBCZwxrZquPVNbcCobpVHhPT/qka6hDaQ=
Subject key identifier: 35:0A:DB:8D:FD:D6:15:33:C8:48:D2:C6:4D:69:4A:8D:AE:AC:07:29
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 0183C3CDA13AFEF2F51BD0F669E0B1206D54
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/NQrbjf3WFTPISNLGTWlKja6sByk.roa
Signing time: Mon 10 Oct 2022 21:29:36 +0000
ROA not before: Mon 10 Oct 2022 21:29:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.160.193.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c3:cd:a1:3a:fe:f2:f5:1b:d0:f6:69:e0:b1:20:6d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Oct 10 21:29:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=350adb8dfdd61533c848d2c64d694a8daeac0729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:d3:2e:7c:f6:7f:ad:14:5c:6b:c8:31:76:
7a:ee:23:63:04:70:0c:40:e1:fe:2c:67:66:98:82:
87:fd:c0:c9:ac:ea:b2:c6:df:be:80:0f:6b:cf:5c:
ea:aa:63:7c:e5:8c:e1:3d:41:a0:81:87:a7:93:4b:
d5:96:fa:32:c2:94:fa:46:61:78:7b:bb:93:29:d6:
54:1a:08:c4:00:22:9f:96:91:36:ee:d0:d9:aa:b2:
35:c8:d6:2f:2e:90:4e:a9:14:66:12:3f:b1:a1:d8:
6d:b2:6d:33:ea:9b:c0:2a:fc:7c:aa:8f:28:80:29:
e7:64:8a:57:b9:fa:72:55:80:4a:e3:aa:10:9c:47:
fa:32:15:89:c3:0b:e7:94:88:4e:86:19:e6:cf:c1:
2e:64:1b:19:a7:32:57:54:7d:23:4c:d7:bf:e8:26:
e1:44:d5:bc:be:61:48:70:06:e6:23:b5:a3:ba:a2:
50:41:f5:75:72:9a:a2:cc:90:1c:24:5b:17:e8:84:
0a:bc:e3:4b:e3:0d:e0:f0:1e:0f:ee:27:4c:66:5f:
73:0e:26:f9:ca:b9:5c:60:6d:d3:49:e1:48:7e:04:
37:64:a2:78:67:e1:9e:06:16:9c:ea:5e:98:d1:72:
e5:94:a8:fa:87:ac:85:5e:70:6f:f8:05:b8:37:2d:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:DB:8D:FD:D6:15:33:C8:48:D2:C6:4D:69:4A:8D:AE:AC:07:29
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/NQrbjf3WFTPISNLGTWlKja6sByk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:44:37:a9:c4:56:2d:f1:93:45:a2:d6:a2:2c:e7:55:7f:9c:
4d:17:63:08:e4:5d:dd:41:c0:ac:d1:55:f0:cc:e6:ff:8f:08:
14:9b:18:da:37:1d:bb:78:d9:e6:db:15:41:fb:4d:6e:11:fa:
f2:4b:0e:55:31:80:8b:01:7c:6a:28:fc:fd:2d:85:5e:63:f1:
01:63:1b:21:2b:65:19:80:a9:7f:c1:99:7c:c9:64:65:e7:8d:
22:99:da:8e:72:1e:dd:0b:92:b5:8d:47:a3:88:97:9c:c0:e7:
fe:da:1f:a6:3a:48:5c:0a:3b:67:5c:81:44:b3:cc:6c:00:8d:
bf:9d:45:63:9c:d2:dd:0e:08:69:66:dd:51:2a:a2:e0:5f:51:
7a:71:a8:9c:92:4f:c6:64:e1:af:60:28:44:01:6c:4e:12:63:
4d:58:f0:75:c1:ff:72:b8:e7:fc:0f:11:f4:02:8d:79:d3:a5:
78:b6:9d:9b:21:d0:d5:1f:17:a1:a3:b6:e6:7e:89:1f:96:2b:
6e:b4:54:c5:a8:3d:fe:9c:8e:7a:79:3a:41:4e:2d:f8:7c:cd:
21:b7:56:94:17:fb:cd:46:47:9a:85:ff:95:53:e2:c6:38:a7:
12:54:0e:ae:89:c3:c3:93:76:4e:b2:1c:e8:f2:18:a4:47:06:
de:f8:8e:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPDzaE6/vL1G9D2aeCxIG1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZGQwZWJmZjViYTM4YTg3NThiNzk0ZDA0ZDYyOTA1MTk0
YTMyNjYwHhcNMjIxMDEwMjEyOTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTBhZGI4ZGZkZDYxNTMzYzg0OGQyYzY0ZDY5NGE4ZGFlYWMwNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LPTLnz2f60UXGvIMXZ67iNjBHAM
QOH+LGdmmIKH/cDJrOqyxt++gA9rz1zqqmN85YzhPUGggYenk0vVlvoywpT6RmF4
e7uTKdZUGgjEACKflpE27tDZqrI1yNYvLpBOqRRmEj+xodhtsm0z6pvAKvx8qo8o
gCnnZIpXufpyVYBK46oQnEf6MhWJwwvnlIhOhhnmz8EuZBsZpzJXVH0jTNe/6Cbh
RNW8vmFIcAbmI7WjuqJQQfV1cpqizJAcJFsX6IQKvONL4w3g8B4P7idMZl9zDib5
yrlcYG3TSeFIfgQ3ZKJ4Z+GeBhac6l6Y0XLllKj6h6yFXnBv+AW4Ny2VbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDUK24391hUzyEjSxk1pSo2urAcpMB8GA1UdIwQY
MBaAFBHdDr/1ujiodYt5TQTWKQUZSjJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYt
ZjE3NjEzZWE0OWU3LzEvTlFyYmpmM1dGVFBJU05MR1RXbEtqYTZzQnlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYtZjE3NjEzZWE0OWU3
LzEvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaDBMA0G
CSqGSIb3DQEBCwUAA4IBAQCgRDepxFYt8ZNFotaiLOdVf5xNF2MI5F3dQcCs0VXw
zOb/jwgUmxjaNx27eNnm2xVB+01uEfrySw5VMYCLAXxqKPz9LYVeY/EBYxshK2UZ
gKl/wZl8yWRl540imdqOch7dC5K1jUejiJecwOf+2h+mOkhcCjtnXIFEs8xsAI2/
nUVjnNLdDghpZt1RKqLgX1F6caickk/GZOGvYChEAWxOEmNNWPB1wf9yuOf8DxH0
Ao1506V4tp2bIdDVHxeho7bmfokflitutFTFqD3+nI56eTpBTi34fM0ht1aUF/vN
Rkeahf+VU+LGOKcSVA6uicPDk3ZOshzo8hikRwbe+I4L
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:55:27 2025 by rpki-client