Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/YsNWfjZNmWPJix2D6R4aESweuY8.roa
File: YsNWfjZNmWPJix2D6R4aESweuY8.roa (raw, json)
Hash identifier: qfZbBzvZpGzn33qrWqw4wEe5eeJnpuARQ+unCWZ8Vas=
Subject key identifier: 62:C3:56:7E:36:4D:99:63:C9:8B:1D:83:E9:1E:1A:11:2C:1E:B9:8F
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 16222C92
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/YsNWfjZNmWPJix2D6R4aESweuY8.roa
Signing time: Tue 19 Apr 2022 08:22:27 +0000
ROA not before: Tue 19 Apr 2022 08:22:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47223
IP address blocks: 94.240.63.0/24 maxlen: 24
94.240.60.0/22 maxlen: 22
212.7.223.0/24 maxlen: 24
91.106.30.0/23 maxlen: 23
94.240.0.0/19 maxlen: 19
94.240.0.0/18 maxlen: 18
91.106.26.0/23 maxlen: 23
185.139.16.0/22 maxlen: 22
94.240.32.0/21 maxlen: 21
94.240.40.0/24 maxlen: 24
94.240.42.0/24 maxlen: 24
94.240.44.0/22 maxlen: 22
94.240.46.0/24 maxlen: 24
94.240.48.0/24 maxlen: 24
94.240.48.0/21 maxlen: 21
91.106.24.0/23 maxlen: 23
194.152.46.0/23 maxlen: 23
2a01:6e80::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371338386 (0x16222c92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Apr 19 08:22:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c3567e364d9963c98b1d83e91e1a112c1eb98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b8:59:dd:60:f5:68:5d:65:48:c8:83:bc:b0:
cd:a6:0e:ad:50:a2:07:28:1a:db:0e:93:6c:54:4e:
4d:01:a8:16:36:7c:e8:1c:4f:b9:25:77:5b:b7:8b:
de:67:77:e3:6e:98:7f:7c:30:9e:d1:9f:cc:8f:70:
d0:d1:38:93:e2:a3:be:a7:17:33:fb:89:86:77:24:
ac:61:dc:8c:dc:52:b5:2b:9e:20:ba:f9:3a:b4:88:
da:69:66:de:58:80:3e:f1:cd:c6:15:40:35:24:b7:
46:3c:c9:21:db:36:ca:6d:d7:16:c7:ae:d2:d7:b6:
ac:d4:2d:12:df:25:29:de:d4:28:ff:ed:cc:68:98:
6b:a0:7a:b1:2b:cb:b6:c2:72:05:23:56:6c:4b:1a:
a6:77:1b:be:67:b0:bb:07:d2:ef:d6:98:4c:da:32:
b5:3a:97:ca:a6:c7:fa:0b:c3:1e:7a:4c:4c:58:c1:
96:42:42:72:63:eb:e5:55:7e:48:32:62:44:5f:ef:
38:a1:4d:a0:2b:31:0b:91:45:ba:18:4a:3c:1b:98:
28:ae:e8:2b:f3:ef:01:7d:b4:f4:f7:07:76:78:e2:
3c:36:c1:5a:b5:55:67:73:b2:93:49:10:15:39:38:
f3:78:08:d9:65:77:b7:c9:f0:ab:8e:31:a9:5e:e7:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C3:56:7E:36:4D:99:63:C9:8B:1D:83:E9:1E:1A:11:2C:1E:B9:8F
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/YsNWfjZNmWPJix2D6R4aESweuY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.24.0/22
91.106.30.0/23
94.240.0.0/18
185.139.16.0/22
194.152.46.0/23
212.7.223.0/24
IPv6:
2a01:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
61:98:38:e5:a8:26:ec:f8:d0:e9:fc:69:8f:e1:e7:a8:64:b8:
5e:6f:b7:7e:82:9a:ff:98:0e:3f:6a:21:1f:b2:ba:02:ba:12:
ac:39:41:f3:5f:c1:35:10:21:e2:b3:25:13:4f:64:90:35:52:
d2:14:09:47:00:87:b7:11:37:df:e2:8d:ed:05:d0:f2:30:c7:
27:1b:c8:75:d6:90:08:8b:e4:62:38:4a:82:d1:ac:2a:40:16:
24:15:d4:98:07:bc:6c:61:85:56:8d:9e:4e:00:6b:bb:3d:bc:
de:ac:54:63:17:4c:23:62:e3:98:2a:aa:cd:37:d9:ec:3c:37:
61:1e:2c:d3:18:fc:4f:c9:9c:85:0b:35:3c:ef:73:25:38:10:
f9:9c:fb:0b:ab:16:3f:79:f1:ad:f6:ab:b4:27:cf:49:5e:03:
b3:08:ce:65:8d:00:77:12:0d:8e:63:6d:8f:90:64:b5:62:c6:
db:f7:27:bc:03:a6:39:be:ce:56:d6:f7:ac:0b:2e:9d:30:e4:
77:26:60:9a:74:19:ba:89:b8:83:66:03:2c:8f:db:39:6b:97:
77:fb:80:c5:f1:98:30:f2:22:2b:2c:7f:42:69:2b:d4:5d:1f:
e8:6f:50:23:4b:ea:86:da:d7:e1:49:02:66:3f:72:1f:71:73:
68:87:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:27 2025 by rpki-client