Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/QHMWvRcuuzFXgaDCKg522vN6x9g.roa
File: QHMWvRcuuzFXgaDCKg522vN6x9g.roa (raw, json)
Hash identifier: DyDP7NK2/b/et8lp3sxBLoX6G/ggoF5tmnq/gzd/f+I=
Subject key identifier: 40:73:16:BD:17:2E:BB:31:57:81:A0:C2:2A:0E:76:DA:F3:7A:C7:D8
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 018CC94CE09063D4E8242D4F22386E804BBB
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/QHMWvRcuuzFXgaDCKg522vN6x9g.roa
Signing time: Tue 02 Jan 2024 08:31:47 +0000
ROA not before: Tue 02 Jan 2024 08:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12796
IP address blocks: 94.190.136.0/21 maxlen: 21
94.190.160.0/19 maxlen: 19
192.109.10.0/23 maxlen: 24
94.190.192.0/23 maxlen: 23
94.190.194.0/24 maxlen: 24
192.109.40.0/23 maxlen: 24
94.190.128.0/22 maxlen: 22
94.190.132.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:e0:90:63:d4:e8:24:2d:4f:22:38:6e:80:4b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Jan 2 08:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=407316bd172ebb315781a0c22a0e76daf37ac7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:75:47:9c:02:7a:a0:ac:9f:75:09:c9:11:
36:8e:f8:33:9d:f3:ac:f0:dd:66:6f:0a:9e:e4:73:
6e:f2:db:a1:66:72:e0:1b:64:f9:13:98:1f:39:1b:
ad:9b:84:80:05:b1:ff:ae:4d:97:69:02:5a:24:7a:
00:5f:a1:e2:52:0f:ba:36:f6:44:d1:07:90:c4:39:
5f:d5:81:78:6b:72:b0:2a:c5:94:5d:29:ac:79:ea:
a2:aa:d3:e3:03:3c:c1:22:56:00:11:67:4d:2f:2b:
2c:fe:3e:79:17:27:4c:ce:b0:20:e2:46:15:b9:3f:
83:ce:11:1c:1f:d0:e2:71:c1:b0:a3:43:44:ea:16:
d1:7c:cc:5e:34:3a:4a:80:8e:a5:68:ad:ec:8e:18:
70:52:39:2d:f2:fc:fc:1e:50:64:00:5f:5a:8c:ad:
43:0f:a3:d2:49:25:4e:ec:8d:c1:72:df:a7:9e:5d:
7d:27:08:ee:a9:51:13:ea:97:4c:5a:6e:5e:74:76:
8e:a0:5d:0d:18:31:78:7d:f1:3d:d0:81:00:34:8b:
9d:15:f9:48:20:d5:58:8e:07:6a:e9:4d:20:d4:b6:
e8:d0:07:7b:f8:0a:8f:52:e7:ca:36:e6:2c:50:c0:
c7:71:0c:59:36:5e:ff:34:c3:0b:1b:26:2b:da:65:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:73:16:BD:17:2E:BB:31:57:81:A0:C2:2A:0E:76:DA:F3:7A:C7:D8
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/QHMWvRcuuzFXgaDCKg522vN6x9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.128.0/20
94.190.160.0-94.190.194.255
192.109.10.0/23
192.109.40.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:3a:30:45:e7:4e:db:4e:08:0b:c6:90:40:42:00:2b:e2:9a:
a8:a1:63:5e:c9:14:60:99:cb:b8:26:cb:a9:fc:b1:c9:c6:86:
a5:57:fc:e1:a5:73:c0:b9:cd:81:ba:69:b0:e3:05:46:d0:2d:
f2:59:b8:5f:fe:60:6b:72:91:8e:ba:90:2f:3f:7e:c9:91:b7:
7a:43:04:f8:08:6b:3e:cf:96:80:3b:03:35:ce:16:06:26:a3:
fa:04:b4:60:5f:b5:86:5d:1c:28:b6:e1:41:fc:ac:8d:c4:f4:
af:ea:ba:58:cc:5b:39:0e:88:49:5c:22:85:a5:14:fe:c5:4f:
63:b5:4a:0c:53:64:98:cf:10:f2:17:a7:52:cd:d7:74:1a:bb:
e0:a6:93:99:88:55:b2:49:65:83:ee:ef:10:55:10:c6:4e:de:
98:76:54:4c:8f:73:86:e8:91:4d:37:01:63:93:fc:d1:0f:18:
eb:23:e7:30:71:de:d4:ce:74:4e:a4:83:53:ea:08:5e:82:24:
71:20:63:0e:dd:ca:94:de:45:db:8a:c5:15:66:5a:54:e4:f3:
92:57:e5:68:14:85:4c:59:0c:3c:6e:5b:82:b1:ba:f3:c7:06:
7f:d3:8b:5f:17:43:73:2a:75:fe:65:c0:0f:6d:87:0f:50:43:
b2:ca:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:46 2025 by rpki-client