Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/qgLNDSy5mD3kHzLgVf9DxAodgEE.roa
File: qgLNDSy5mD3kHzLgVf9DxAodgEE.roa (raw, json)
Hash identifier: wSMFxtyyXjUCnaido1qV88eknLV4WLgUH8pYGIm19EU=
Subject key identifier: AA:02:CD:0D:2C:B9:98:3D:E4:1F:32:E0:55:FF:43:C4:0A:1D:80:41
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 0185708C8EC00155F9EEF7C61964F0B613E9
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/qgLNDSy5mD3kHzLgVf9DxAodgEE.roa
Signing time: Mon 02 Jan 2023 03:35:37 +0000
ROA not before: Mon 02 Jan 2023 03:35:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 195.12.224.0/19 maxlen: 19
80.239.128.0/17 maxlen: 19
195.12.248.0/24 maxlen: 24
195.12.248.0/23 maxlen: 23
195.12.249.0/24 maxlen: 24
62.115.128.0/22 maxlen: 22
80.91.240.0/20 maxlen: 21
213.248.64.0/18 maxlen: 18
62.115.0.0/16 maxlen: 16
213.155.128.0/19 maxlen: 19
2001:2000::/20 maxlen: 20
2001:2030:c005::/48 maxlen: 48
2001:2030::/32 maxlen: 32
2001:2000:3000::/40 maxlen: 40
2001:2030::/28 maxlen: 28
2001:2030:c004::/48 maxlen: 48
2001:2030:c004::/47 maxlen: 47
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:8e:c0:01:55:f9:ee:f7:c6:19:64:f0:b6:13:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jan 2 03:35:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa02cd0d2cb9983de41f32e055ff43c40a1d8041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:7d:0b:b5:c3:0c:36:ba:1e:04:ed:d0:18:
a8:42:9a:a0:61:3b:77:e9:50:90:c1:4a:5a:00:73:
96:fe:53:f0:ee:c1:9a:6e:22:93:1a:55:26:13:17:
1b:e5:01:76:f7:72:9d:ae:27:f6:56:17:b7:50:33:
70:94:13:ae:82:6e:02:7f:95:3e:81:7a:79:1e:8b:
7c:72:d8:a1:2f:74:bd:67:c3:d2:07:ca:e6:38:79:
9e:fb:b1:bc:4d:b2:64:82:78:56:4a:40:21:fb:80:
e1:a8:e6:0d:b3:9c:d4:bd:f7:64:03:df:5f:f0:d8:
c1:d7:95:33:e8:35:c5:04:cc:e4:3b:d2:88:5d:a6:
7a:57:c7:9c:f5:69:a7:85:c0:c6:34:18:99:97:76:
63:4f:16:a3:bf:c6:5d:9d:d9:cf:f2:2b:8c:59:33:
17:ae:3c:7f:03:c5:f6:9c:02:3e:69:2b:b1:27:68:
37:89:35:02:02:2a:ff:cc:e8:8f:d1:44:53:4c:38:
f6:19:7e:e4:14:37:2c:7a:11:60:05:88:aa:ca:ce:
bd:dd:b4:cd:16:0f:17:bb:3a:a2:c0:d7:10:45:8e:
42:2f:39:11:31:6c:0d:49:32:af:23:82:8d:48:41:
25:d6:cf:ad:ac:41:93:58:84:a9:f3:92:a9:07:59:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:02:CD:0D:2C:B9:98:3D:E4:1F:32:E0:55:FF:43:C4:0A:1D:80:41
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/qgLNDSy5mD3kHzLgVf9DxAodgEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.115.0.0/16
80.91.240.0/20
80.239.128.0/17
195.12.224.0/19
213.155.128.0/19
213.248.64.0/18
IPv6:
2001:2000::/20
Signature Algorithm: sha256WithRSAEncryption
47:68:eb:a1:d8:18:09:86:c0:5d:29:6e:ad:3c:d7:53:d5:58:
4b:02:71:66:71:a2:32:ce:c1:fe:60:54:11:4b:4f:b2:df:7e:
01:c8:cb:0b:8a:1c:83:44:42:b3:23:c3:61:b5:4b:67:59:82:
0f:0b:85:0b:13:94:89:66:f8:ee:23:62:ac:a8:d6:59:77:a7:
c6:ee:59:f8:e3:33:11:a1:e3:88:b8:33:fb:0e:2e:a9:2d:08:
79:49:d7:9f:1c:e4:4b:87:01:e0:73:73:34:90:41:d3:a1:bc:
1b:01:f4:5e:26:8f:c2:0d:46:d1:55:9d:03:ff:5f:17:f3:27:
69:cb:19:5f:80:c3:6a:4a:10:2f:00:2b:c1:15:26:02:90:9c:
97:79:a7:14:ea:79:18:39:a8:6d:01:f6:a5:7f:0a:ff:4b:7d:
a1:59:d2:c9:9a:83:7c:e7:c0:28:f8:91:5e:e8:99:08:aa:44:
63:2f:11:7c:f8:86:81:6b:40:b7:e9:d7:7f:ce:7a:da:b7:d9:
37:f8:3a:3d:17:31:e4:87:d5:d0:3d:df:47:a2:66:6f:17:7c:
46:28:8b:6d:e3:c2:12:97:74:c9:e0:6c:62:b0:03:b4:5f:b1:
ad:8f:9c:09:76:9b:62:9f:67:ac:da:94:61:20:4d:6c:4a:17:
7d:6c:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:41:16 2025 by rpki-client