Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/wqBGfoBQ5eJBag7mlfDq0xUXxzQ.roa
File: wqBGfoBQ5eJBag7mlfDq0xUXxzQ.roa (raw, json)
Hash identifier: Hyx93O2LK69cWVKo2UtLp5OkiolilL3j7cSRIc66pvo=
Subject key identifier: C2:A0:46:7E:80:50:E5:E2:41:6A:0E:E6:95:F0:EA:D3:15:17:C7:34
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 17446C69
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/wqBGfoBQ5eJBag7mlfDq0xUXxzQ.roa
Signing time: Sat 01 Jan 2022 16:03:47 +0000
ROA not before: Sat 01 Jan 2022 16:03:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41055
IP address blocks: 89.38.27.0/24 maxlen: 24
89.36.229.0/24 maxlen: 24
93.113.170.0/24 maxlen: 24
77.81.190.0/24 maxlen: 24
89.38.100.0/24 maxlen: 24
89.39.70.0/24 maxlen: 24
89.39.191.0/24 maxlen: 24
89.39.82.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390360169 (0x17446c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2a0467e8050e5e2416a0ee695f0ead31517c734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:86:a3:81:83:35:f0:36:39:5b:60:3f:7c:
10:7c:cb:9f:b9:de:c8:cb:2b:e6:0b:e5:ba:6e:5d:
1f:dd:8c:5c:3b:38:8f:9a:21:b1:11:c9:65:e8:44:
30:1c:71:f7:bf:62:a8:6c:0e:04:a4:15:4b:b0:bb:
f5:af:32:92:18:bd:f3:92:a4:cb:49:2f:b3:91:a5:
be:f8:c0:54:02:6e:af:4a:c9:8d:3c:fa:0a:06:76:
7c:84:59:61:20:a7:42:6e:d3:8e:ab:8c:42:eb:1b:
b1:61:be:73:a1:c0:f7:53:8f:04:bc:0c:3d:f4:97:
49:e7:9c:01:fe:ec:ae:61:99:2d:6e:fa:d4:b3:37:
3a:8b:38:39:df:c2:e5:2b:db:c1:cb:bc:ac:cd:a3:
42:55:c5:5d:94:28:91:de:a1:19:7b:b6:0d:44:d7:
be:41:8d:4e:da:54:45:f0:a7:c2:d1:01:a7:70:8d:
2c:24:71:ee:0f:54:c1:8c:3c:6e:70:47:b9:ce:0d:
6b:45:54:2c:ca:73:58:16:50:d3:d3:f6:e5:de:0c:
d7:86:3f:4f:2c:aa:17:1b:f4:19:e0:9f:65:ec:70:
c7:c7:35:ef:47:d5:24:5c:9c:f1:3b:a7:ee:ce:00:
e1:44:74:a0:de:ed:67:94:9d:de:13:71:ad:2a:4c:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A0:46:7E:80:50:E5:E2:41:6A:0E:E6:95:F0:EA:D3:15:17:C7:34
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/wqBGfoBQ5eJBag7mlfDq0xUXxzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.190.0/24
89.36.229.0/24
89.38.27.0/24
89.38.100.0/24
89.39.70.0/24
89.39.82.0/24
89.39.191.0/24
93.113.170.0/24
Signature Algorithm: sha256WithRSAEncryption
19:09:5f:c4:39:c2:01:6e:e7:e6:e4:5d:00:49:b3:64:26:6e:
15:30:bb:f0:dd:e8:25:21:17:4c:ed:b3:ec:5d:94:94:e1:92:
28:05:ea:03:42:a9:ae:8b:85:7f:b8:10:77:d3:2a:68:1e:2d:
dd:ec:18:56:60:93:de:98:50:97:58:c2:ff:26:01:63:16:a7:
9c:96:6b:84:0f:61:90:bf:c5:62:0c:7e:45:04:53:34:b5:42:
ad:65:bf:04:a2:ae:fa:f9:a1:38:ce:8d:51:48:00:15:ac:66:
e1:ea:99:25:06:d7:b6:ae:71:38:57:22:33:30:82:f9:f5:4b:
78:7e:30:9b:4b:61:1e:8e:75:58:3e:42:3e:a7:e5:d3:8e:b1:
56:4c:2d:a4:99:04:10:07:23:fd:39:bd:e4:48:75:86:5d:bf:
32:31:0c:c5:c8:9a:6e:6e:a4:0a:b5:c3:55:98:ab:7f:60:9c:
81:a1:cb:c5:19:81:78:d4:2c:21:04:8c:50:e1:07:6f:e2:d0:
dd:36:ac:f8:2f:fc:11:79:01:47:25:74:08:46:c0:66:45:c6:
60:f4:70:6b:55:7c:25:23:6c:a2:39:02:32:3c:34:a4:81:e4:
ed:a4:e8:0d:99:23:d4:d9:b6:80:04:4f:28:60:89:24:7d:61:
93:9b:66:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:59 2025 by rpki-client