Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9Rj5xGgGLF0EQqHucSW76zkXp4I.roa
File: 9Rj5xGgGLF0EQqHucSW76zkXp4I.roa (raw, json)
Hash identifier: lN48l0IdMB8lEQ+n0vMVmveUer1Ku1YEJMygVrJdiSE=
Subject key identifier: F5:18:F9:C4:68:06:2C:5D:04:42:A1:EE:71:25:BB:EB:39:17:A7:82
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018632FF28E7E28B37EE0D16EA7FF4561C1F
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9Rj5xGgGLF0EQqHucSW76zkXp4I.roa
Signing time: Wed 08 Feb 2023 21:47:08 +0000
ROA not before: Wed 08 Feb 2023 21:47:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57142
IP address blocks: 89.44.108.0/24 maxlen: 24
89.47.3.0/24 maxlen: 24
86.107.54.0/24 maxlen: 24
89.47.10.0/24 maxlen: 24
89.32.185.0/24 maxlen: 24
89.44.236.0/24 maxlen: 24
89.32.191.0/24 maxlen: 24
86.107.181.0/24 maxlen: 24
176.126.175.0/24 maxlen: 24
188.240.208.0/24 maxlen: 24
86.107.30.0/24 maxlen: 24
89.43.38.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:32:ff:28:e7:e2:8b:37:ee:0d:16:ea:7f:f4:56:1c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Feb 8 21:47:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f518f9c468062c5d0442a1ee7125bbeb3917a782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:78:4c:de:c6:c7:22:c5:56:fe:0d:18:04:c3:
14:8e:85:22:78:e6:38:36:10:2f:3a:85:78:d5:a4:
ed:62:59:be:5f:63:09:a0:49:39:1e:38:ff:95:ef:
9d:b7:0e:43:8d:ae:9f:be:7f:cc:b9:eb:05:d4:8b:
03:db:66:90:c5:00:3d:18:88:81:66:02:ce:f3:e0:
5e:f5:91:63:38:c0:45:8d:3b:ea:58:eb:ac:bd:c4:
fd:ba:1a:e5:ac:57:4d:d6:d5:65:e2:81:15:7f:32:
47:87:0b:7b:48:20:2d:5f:59:b8:4b:ff:47:69:a9:
a2:cb:9c:ab:01:69:01:f3:bc:f6:91:d4:d1:55:66:
ab:b0:86:52:e6:e4:39:ed:d8:f4:31:6e:d4:b3:4a:
89:d4:3f:de:0a:95:f7:e6:e8:49:a1:39:50:d0:4a:
62:2a:f9:0e:40:35:32:54:57:3b:8e:25:94:4a:43:
e0:14:ce:35:99:8b:43:68:7b:53:b6:71:da:41:4e:
c1:1a:ea:9f:7c:8c:ad:81:19:3a:c3:0d:e4:3a:ea:
04:4b:10:60:8e:c8:ee:d6:8c:4b:3d:19:99:76:35:
ae:d5:48:18:9a:ac:df:ad:6c:c3:13:67:74:24:a1:
79:63:8b:e0:dd:e5:b5:fb:76:56:1f:66:34:19:73:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:18:F9:C4:68:06:2C:5D:04:42:A1:EE:71:25:BB:EB:39:17:A7:82
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9Rj5xGgGLF0EQqHucSW76zkXp4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.30.0/24
86.107.54.0/24
86.107.181.0/24
89.32.185.0/24
89.32.191.0/24
89.43.38.0/24
89.44.108.0/24
89.44.236.0/24
89.47.3.0/24
89.47.10.0/24
176.126.175.0/24
188.240.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:26:fa:dd:03:03:f8:ad:f7:1c:59:c5:c4:28:af:c1:fb:12:
90:ac:2a:a4:1b:b1:6c:01:ec:b7:4f:ea:c1:3b:28:71:ee:6a:
41:55:03:ca:43:33:9e:0d:5a:a4:74:fe:10:af:a3:29:29:32:
58:70:06:49:2b:09:00:90:27:23:97:e6:55:86:60:b8:bf:ff:
6c:8a:5b:6e:8d:fe:5d:7d:cc:5f:8c:64:a1:24:c8:d1:21:1b:
b0:3d:52:5e:dc:fe:4d:57:67:73:8d:7d:14:5e:c7:34:79:bd:
50:e1:79:0e:be:b7:23:40:18:36:32:14:bc:fb:a2:f2:b6:08:
f2:cd:17:5d:ce:1e:e3:8c:2c:fd:c8:82:02:ca:0d:c7:91:2e:
ef:63:b4:92:76:3e:dc:0e:b0:59:98:48:0c:99:09:76:ba:1e:
ac:b0:03:f9:d7:e2:4d:2a:d4:80:8e:b9:d9:08:5d:73:3e:12:
3c:ce:de:4a:2b:b3:1a:de:02:03:99:88:78:58:88:5f:70:a9:
86:68:18:3e:3c:34:04:74:a7:5a:3f:b1:76:ad:53:79:33:ef:
10:b7:ef:2b:eb:9b:ed:e3:18:68:f5:b2:3e:fe:d6:a2:32:b7:
22:52:10:37:08:1c:bd:35:cf:82:e7:ae:82:99:f1:e8:75:6f:
ff:72:42:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:31:16 2025 by rpki-client