Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/LBkZ8vW30TJfZ3jcw8dfHTJR378.roa
File: LBkZ8vW30TJfZ3jcw8dfHTJR378.roa (raw, json)
Hash identifier: 6Ug/Ckfi+EAVhjZR2IP0CaqMGF4biblf1NkTzv5/NRg=
Subject key identifier: 2C:19:19:F2:F5:B7:D1:32:5F:67:78:DC:C3:C7:5F:1D:32:51:DF:BF
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 01941FFA3977C7D5A7A9ADFE3476732C201D
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/LBkZ8vW30TJfZ3jcw8dfHTJR378.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12796
IP address blocks: 94.190.128.0/22 maxlen: 22
94.190.132.0/22 maxlen: 24
94.190.136.0/21 maxlen: 21
94.190.160.0/19 maxlen: 19
94.190.192.0/23 maxlen: 23
94.190.194.0/24 maxlen: 24
192.109.10.0/23 maxlen: 24
192.109.40.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:39:77:c7:d5:a7:a9:ad:fe:34:76:73:2c:20:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c1919f2f5b7d1325f6778dcc3c75f1d3251dfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:d0:b3:8c:e5:28:19:09:f9:ab:24:f9:28:
9c:a5:21:b5:3c:9c:aa:b4:12:d6:5d:42:b5:e4:f3:
d3:3c:09:b2:43:92:2c:98:e3:2d:68:5b:13:96:5f:
33:1c:cb:60:29:69:4f:f4:f6:5e:8d:46:13:a9:18:
75:99:c4:05:27:7c:07:3f:d7:05:db:17:68:40:39:
fa:fa:c9:27:d0:3f:2c:07:d4:ab:a2:d6:ed:f5:ac:
7e:11:e8:11:a2:f6:b2:9d:9a:28:44:29:f1:44:55:
34:51:3c:c0:eb:a8:d6:1c:6f:41:d9:8f:f3:3f:ef:
e4:b4:81:1c:45:6c:7c:db:e5:e3:4b:a6:c9:48:8b:
7b:bf:87:42:50:7f:09:b9:e6:71:cb:34:5a:75:d9:
65:70:d3:be:a0:cc:9d:9f:75:a5:e6:c5:d8:3f:8c:
35:97:90:dd:33:43:70:53:0b:01:96:25:33:bc:30:
75:b2:7b:e3:bd:6e:e4:be:b9:3b:72:33:f2:b8:6d:
c8:0c:4e:92:d2:ff:2a:6e:8a:a7:42:73:4e:86:a0:
e1:40:5c:b0:68:24:bc:4a:bd:ec:a0:d6:80:4d:53:
58:dc:f1:ef:91:d9:24:a9:fb:19:f1:ef:d1:6b:73:
bb:ae:cc:ba:25:78:b0:57:14:86:45:4c:08:63:25:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:19:19:F2:F5:B7:D1:32:5F:67:78:DC:C3:C7:5F:1D:32:51:DF:BF
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/LBkZ8vW30TJfZ3jcw8dfHTJR378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.128.0/20
94.190.160.0-94.190.194.255
192.109.10.0/23
192.109.40.0/23
Signature Algorithm: sha256WithRSAEncryption
57:b5:41:cd:68:07:9b:82:9a:e3:1e:86:af:99:b1:1f:88:e8:
0a:0e:b8:03:45:b3:6c:52:31:e8:56:1c:cb:4e:b1:fe:44:2e:
ba:70:de:3b:27:29:ee:7c:63:7d:df:23:e0:74:8c:f8:d0:db:
87:4e:f6:38:ca:76:11:12:e1:0e:c5:fe:17:0b:0c:52:67:96:
8a:24:24:b1:14:b9:9b:58:eb:d5:45:b9:1d:fb:f7:98:a1:df:
01:1d:88:df:e7:15:4a:ea:58:a3:4d:46:c9:84:7d:4f:69:88:
2f:08:dd:47:28:6b:45:38:f8:ac:fe:41:45:c4:8c:be:ee:1c:
ef:3b:87:22:f1:4c:62:36:ae:af:da:33:12:85:63:d3:aa:dd:
a2:d2:c9:bc:d1:1d:1d:40:fa:be:82:d2:c4:2c:5d:1a:de:b3:
20:0b:a6:bf:9c:aa:a6:49:16:0b:9f:b2:44:73:b5:7c:39:0a:
fa:e5:55:34:ea:bb:fb:9a:3c:83:83:5f:ab:a4:d6:b7:b6:60:
50:d8:eb:de:e9:38:d4:d4:03:95:fb:8c:1a:7d:ce:a4:26:6d:
f6:b8:25:07:0a:b6:e1:bd:f1:2b:66:e8:53:71:f3:57:7b:04:
81:51:e6:7f:1d:c5:62:58:71:13:46:19:fa:94:46:f3:21:55:
76:84:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:01 2025 by rpki-client