Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/SDBGUr9iQF0_tXSEU_ki81LdVus.roa
File: SDBGUr9iQF0_tXSEU_ki81LdVus.roa (raw, json)
Hash identifier: qpbzplnZdEhyRQt+jS9nPXV8bDEVAdyhmEb6XxGOffE=
Subject key identifier: 48:30:46:52:BF:62:40:5D:3F:B5:74:84:53:F9:22:F3:52:DD:56:EB
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 17513A93
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/SDBGUr9iQF0_tXSEU_ki81LdVus.roa
Signing time: Sat 01 Jan 2022 16:03:54 +0000
ROA not before: Sat 01 Jan 2022 16:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50527
IP address blocks: 93.114.98.0/24 maxlen: 24
89.35.162.0/24 maxlen: 24
93.114.56.0/24 maxlen: 24
86.106.169.0/24 maxlen: 24
89.36.88.0/24 maxlen: 24
93.114.68.0/24 maxlen: 24
188.241.6.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391199379 (0x17513a93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48304652bf62405d3fb5748453f922f352dd56eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:d9:f3:e8:d8:07:9a:00:dd:df:a5:c3:01:
af:25:85:0c:67:8e:9f:a9:0e:36:42:d9:b5:d1:b0:
dc:89:94:80:12:23:16:2e:d5:c7:ac:a9:a2:eb:23:
26:0c:b7:42:d1:2a:6d:b4:3d:ad:be:fb:0b:dc:a7:
e6:d3:2f:9f:44:a0:b4:53:15:88:ed:27:bb:24:05:
6b:57:97:3e:2c:1b:bd:98:39:2b:87:81:1a:ab:df:
72:41:5e:39:7d:80:7e:29:97:6e:9f:7e:4c:66:e3:
f7:7c:cc:d8:58:3f:c7:fa:b2:f6:33:29:c7:b9:26:
0b:f4:4c:b1:75:be:2e:f2:9e:3e:14:70:54:a4:18:
49:8b:8a:5a:6d:39:34:b7:95:a2:17:18:6d:80:b9:
c6:5c:05:b9:5c:82:36:44:a3:19:06:48:71:49:b4:
49:93:08:81:19:05:28:3e:39:b0:91:eb:8c:ad:ae:
a0:f2:73:66:13:86:a8:64:f3:b3:cf:3b:d9:00:21:
bb:0d:b5:5f:4a:db:c7:b9:57:dd:41:1b:70:38:0a:
16:bd:e2:cb:a2:d5:ab:81:c0:19:d3:cf:8c:b5:c1:
c9:d9:02:1b:15:11:90:1a:6a:a2:d9:7a:aa:f2:b1:
53:7b:ff:8d:f0:71:35:76:28:91:b4:93:36:e7:b8:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:30:46:52:BF:62:40:5D:3F:B5:74:84:53:F9:22:F3:52:DD:56:EB
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/SDBGUr9iQF0_tXSEU_ki81LdVus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.169.0/24
89.35.162.0/24
89.36.88.0/24
93.114.56.0/24
93.114.68.0/24
93.114.98.0/24
188.241.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2c:57:8d:50:e2:0f:cf:b1:08:7f:29:bd:18:64:0e:5b:92:
87:ce:1c:a0:a2:86:96:d4:fd:20:30:1d:68:a0:5e:bc:ea:9c:
60:fb:4b:d8:0d:af:a9:2d:a3:61:60:93:1e:60:f4:39:ad:8b:
2e:55:a0:fa:04:d4:f9:0b:77:d8:b3:a7:23:82:71:ae:cd:e4:
27:a4:5f:e5:6a:dc:8c:f7:ba:80:e4:ec:43:40:cf:a3:4d:d1:
68:32:6a:cb:51:65:f2:d8:05:e3:9a:db:0d:4d:e9:9f:35:45:
10:d3:bd:75:5a:1f:af:cd:2c:6c:a2:35:ad:0b:fe:43:cd:b7:
5e:65:76:11:b6:43:96:0b:44:c4:f4:94:e2:f4:96:07:2c:52:
9e:82:96:92:ec:2d:2c:d4:e4:36:ad:37:9c:00:ff:ae:31:36:
ea:cc:4e:d2:a4:0e:13:f1:b8:e6:4e:c3:f0:3f:28:0d:07:25:
53:3a:a6:af:b7:42:db:e5:8d:68:2a:ab:00:c7:8e:ab:e8:f1:
9f:bb:13:5f:2b:78:98:0e:39:a7:99:7f:e4:5b:94:50:97:21:
86:a2:d9:08:ce:2a:c1:74:46:0f:e7:8c:6d:90:97:6c:ee:0e:
b8:4b:78:ea:74:9c:ed:05:e7:3c:27:5d:d8:da:7e:32:d9:c6:
37:0f:d3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:24 2025 by rpki-client