Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/sDGp7T56Sf2YNLvKvFuAIwBbczc.roa
File: sDGp7T56Sf2YNLvKvFuAIwBbczc.roa (raw, json)
Hash identifier: BcVhFlLacuQ1XG+U5JeX6Q3Hk/eUavSrt2YkWAtbRZ4=
Subject key identifier: B0:31:A9:ED:3E:7A:49:FD:98:34:BB:CA:BC:5B:80:23:00:5B:73:37
Certificate issuer: /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial: 0194221FB4F3D8AF804C430360C51DCCE6E4
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/sDGp7T56Sf2YNLvKvFuAIwBbczc.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49042
IP address blocks: 45.148.120.0/24 maxlen: 24
45.148.123.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b4:f3:d8:af:80:4c:43:03:60:c5:1d:cc:e6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b031a9ed3e7a49fd9834bbcabc5b8023005b7337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:3e:21:28:28:46:59:d1:46:fa:71:0e:9a:
4b:59:d1:59:f7:3f:06:1f:21:e6:05:28:bc:6b:fa:
15:34:73:1a:97:a6:13:89:c8:88:c4:13:40:8f:64:
ae:d6:19:5c:7b:e6:78:a4:fc:e5:d2:c5:d6:65:bc:
2a:d4:7e:e9:d9:c0:10:16:f9:19:28:37:46:a8:ed:
2e:1c:90:2d:b6:6c:2d:72:2b:e5:dd:a2:86:14:11:
49:95:aa:2d:5e:7b:68:87:6e:7e:88:4c:2d:69:cd:
d3:b5:55:fb:f9:9c:2d:8e:51:59:a4:45:7f:89:10:
2a:e3:26:28:d8:97:3b:fc:78:87:f8:86:aa:0c:e6:
37:68:69:08:cf:e2:66:79:81:cf:d0:af:c7:00:7b:
d0:e6:36:b4:b2:70:02:c2:49:f5:a6:30:bb:59:7d:
21:4f:58:fa:f0:a1:7d:08:93:3a:df:fd:cf:06:f4:
84:12:14:17:dc:d5:01:a6:f2:3e:17:ec:75:bf:15:
5d:93:95:2d:10:85:61:80:a0:67:8f:25:fd:b5:ea:
c5:2a:d5:24:07:4f:e3:87:9a:19:49:90:71:fd:09:
a9:e5:71:64:fa:09:80:50:09:01:de:5b:75:6a:f8:
e7:20:f6:e4:e5:c5:70:8d:19:1b:8d:c8:6c:e6:26:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:31:A9:ED:3E:7A:49:FD:98:34:BB:CA:BC:5B:80:23:00:5B:73:37
X509v3 Authority Key Identifier:
keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/sDGp7T56Sf2YNLvKvFuAIwBbczc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.120.0/24
45.148.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:53:4c:b2:25:2f:2d:cb:a9:06:9c:92:c5:12:14:d1:e1:ed:
6e:e4:98:ff:be:3f:28:73:03:12:1f:22:2d:4e:be:61:87:19:
6a:04:58:ae:d2:56:f4:ab:ce:47:e2:35:c7:3d:d7:ca:88:33:
05:ec:f0:9f:fc:6b:8a:3f:36:26:55:7a:18:41:a7:8e:73:d8:
aa:ec:ca:87:2d:a6:34:d5:d3:20:fe:ae:a8:ec:22:0c:ea:7c:
87:23:6e:09:34:d8:9c:dc:28:44:e8:93:77:5c:76:c7:13:ba:
fb:d2:ab:51:f8:11:09:c4:87:1c:27:4d:64:f8:a1:d2:ca:18:
56:a0:93:f7:aa:a0:63:37:c5:a0:f7:41:1b:bc:ed:8b:2f:3b:
88:d1:4d:98:2a:05:29:a1:ee:9c:43:48:bd:1b:e9:4d:5b:b2:
52:88:e5:27:fb:e9:9d:c4:67:bd:a4:27:52:20:8a:b7:5a:41:
99:ae:9a:97:26:4f:fc:57:6b:25:e2:a5:12:4d:c2:45:54:24:
9f:48:d7:2e:39:1e:e6:c2:20:e2:a7:53:6d:65:8c:19:61:c9:
0c:ca:c6:73:09:b4:56:66:09:53:58:32:0f:f4:d6:85:8f:e1:
ae:a6:3f:a5:69:7c:1b:08:2c:67:64:dc:c7:21:28:84:e5:26:
df:22:4d:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiH7Tz2K+ATEMDYMUdzObkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzU4YjQ1MWVlMGZlODViMDA0YTA1NjRmODMxMGZiMjEx
Yzk1ZmEwHhcNMjUwMTAxMTM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDMxYTllZDNlN2E0OWZkOTgzNGJiY2FiYzViODAyMzAwNWI3MzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw18+ISgoRlnRRvpxDppLWdFZ9z8G
HyHmBSi8a/oVNHMal6YTiciIxBNAj2Su1hlce+Z4pPzl0sXWZbwq1H7p2cAQFvkZ
KDdGqO0uHJAttmwtcivl3aKGFBFJlaotXntoh25+iEwtac3TtVX7+ZwtjlFZpEV/
iRAq4yYo2Jc7/HiH+IaqDOY3aGkIz+JmeYHP0K/HAHvQ5ja0snACwkn1pjC7WX0h
T1j68KF9CJM63/3PBvSEEhQX3NUBpvI+F+x1vxVdk5UtEIVhgKBnjyX9terFKtUk
B0/jh5oZSZBx/Qmp5XFk+gmAUAkB3lt1avjnIPbk5cVwjRkbjchs5iY+8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLAxqe0+ekn9mDS7yrxbgCMAW3M3MB8GA1UdIwQY
MBaAFDM1i0Ue4P6FsASgVk+DEPshHJX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85ZjE4ZjgtOTZjNC00YjIzLTkzMWYt
ZDVmMDQ3YzI5MTkwLzEvc0RHcDdUNTZTZjJZTkx2S3ZGdUFJd0JiY3pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85ZjE4ZjgtOTZjNC00YjIzLTkzMWYtZDVmMDQ3YzI5MTkw
LzEvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZR4AwQA
LZR7MA0GCSqGSIb3DQEBCwUAA4IBAQBLU0yyJS8ty6kGnJLFEhTR4e1u5Jj/vj8o
cwMSHyItTr5hhxlqBFiu0lb0q85H4jXHPdfKiDMF7PCf/GuKPzYmVXoYQaeOc9iq
7MqHLaY01dMg/q6o7CIM6nyHI24JNNic3ChE6JN3XHbHE7r70qtR+BEJxIccJ01k
+KHSyhhWoJP3qqBjN8Wg90EbvO2LLzuI0U2YKgUpoe6cQ0i9G+lNW7JSiOUn++md
xGe9pCdSIIq3WkGZrpqXJk/8V2sl4qUSTcJFVCSfSNcuOR7mwiDip1NtZYwZYckM
ysZzCbRWZglTWDIP9NaFj+Gupj+laXwbCCxnZNzHISiE5SbfIk2q
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:03 2025 by rpki-client