Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/1-kojbSQE8lIaiHEmC79CZWsOV3g.roa
File: 1-kojbSQE8lIaiHEmC79CZWsOV3g.roa (raw, json)
Hash identifier: O1J6xJVICz8iAcGEY69FbnMHyCSeN4XE4/A2sbWr6s4=
Subject key identifier: FA:4A:23:6D:24:04:F2:52:1A:88:71:26:0B:BF:42:65:6B:0E:57:78
Certificate issuer: /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial: 0194221FB52CFE50527FBEBD57128740ACBC
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/1-kojbSQE8lIaiHEmC79CZWsOV3g.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64425
IP address blocks: 45.148.121.0/24 maxlen: 24
45.148.122.0/24 maxlen: 24
2a0f:5e00::/32 maxlen: 32
2a0f:5e01::/32 maxlen: 32
2a0f:5e02::/32 maxlen: 32
2a0f:5e03::/32 maxlen: 32
2a0f:5e04::/32 maxlen: 32
2a0f:5e05::/32 maxlen: 32
2a0f:5e06::/32 maxlen: 32
2a0f:5e07::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b5:2c:fe:50:52:7f:be:bd:57:12:87:40:ac:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa4a236d2404f2521a8871260bbf42656b0e5778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:7c:77:50:00:8e:f6:5c:e9:23:99:1a:70:
bd:29:90:1b:09:f6:75:fa:4c:ea:be:60:c9:37:16:
1c:9d:b3:3c:fa:68:98:d3:d0:81:f2:ca:7a:96:6c:
2d:6d:25:fb:15:fc:ab:21:59:2e:aa:ea:87:b6:a3:
39:10:4f:94:db:af:29:04:82:26:79:a3:cf:c2:af:
6c:65:63:a7:91:88:02:18:73:bb:3e:fb:8a:d7:de:
05:fc:3e:94:13:1c:e2:27:3d:51:52:e8:d5:6d:ab:
46:37:1e:8b:e3:54:bb:2e:5a:fc:95:f4:5f:8b:7e:
81:c3:ee:2b:49:6e:75:a4:38:14:d9:55:61:9c:af:
36:1b:09:22:d6:55:f2:f6:fb:0b:7c:3e:77:47:c4:
2b:d9:4f:02:3b:8c:6c:5b:29:b1:6d:18:e4:36:10:
5b:54:03:5b:f9:e1:d1:40:42:4f:9d:f0:47:47:e0:
7f:35:be:ce:a4:99:d0:5a:7e:25:47:55:2e:35:fd:
84:40:41:a9:7d:b1:b6:7d:fe:74:df:c5:3f:39:e9:
66:0e:c6:60:22:71:df:96:24:b3:0a:4d:d4:79:eb:
c8:e7:69:a9:4d:2b:11:1a:66:99:6c:3b:6a:1a:59:
94:e4:d4:90:1c:56:96:36:11:97:07:38:53:ce:eb:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4A:23:6D:24:04:F2:52:1A:88:71:26:0B:BF:42:65:6B:0E:57:78
X509v3 Authority Key Identifier:
keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/1-kojbSQE8lIaiHEmC79CZWsOV3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.121.0-45.148.122.255
IPv6:
2a0f:5e00::/29
Signature Algorithm: sha256WithRSAEncryption
2b:a5:b3:e8:3d:01:0a:3a:b5:c1:4f:f8:49:0b:e1:c5:69:0f:
44:8b:64:8b:d7:07:a5:2d:b8:65:7d:b8:83:2f:ff:a2:73:a8:
49:3c:df:14:04:1d:2d:a1:b7:3e:e3:73:fe:44:4b:85:fe:53:
8d:ee:88:4d:c8:0c:e8:a4:4a:7b:e8:78:9c:39:77:c1:4e:c9:
a2:0b:2f:b2:dd:45:9a:ce:a1:81:2c:ad:31:67:ab:22:5b:0d:
0b:ce:c9:ec:82:55:23:5c:d8:06:9a:a1:c4:0d:16:61:4f:60:
e3:8c:40:60:fc:4a:65:7b:53:f6:49:29:00:76:c3:dc:d0:fa:
80:ab:2e:86:1b:2f:1a:bf:cd:42:41:c7:13:3b:b6:72:f1:f5:
99:88:32:40:99:d1:a1:ad:0c:ac:2f:31:49:64:41:e4:fe:27:
2a:65:bd:e8:70:19:58:6d:6c:dc:0f:f4:11:af:f1:be:11:ec:
6e:20:60:1c:8c:87:4f:94:85:37:3c:08:60:b6:d4:85:ef:32:
28:2d:16:ab:e6:09:6b:f6:12:86:76:53:c3:db:6d:93:a1:67:
42:cb:6e:4a:0f:f4:d4:8b:66:e5:46:16:e8:89:23:0f:b8:3d:
62:26:a0:63:1b:3e:17:17:28:35:c0:2d:d3:2c:2a:15:2f:63:
89:c2:03:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:37 2025 by rpki-client