Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/TbkD_APA2S8j-_6jhMlZSLQ4SMo.roa
File: TbkD_APA2S8j-_6jhMlZSLQ4SMo.roa (raw, json)
Hash identifier: 0ka6ZFz2/z39gACpGA3rtUq6psoirbgGw7nsl8TtL94=
Subject key identifier: 4D:B9:03:FC:03:C0:D9:2F:23:FB:FE:A3:84:C9:59:48:B4:38:48:CA
Certificate issuer: /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial: 019425223AA67D416167F13C3F49E2F12EFE
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/TbkD_APA2S8j-_6jhMlZSLQ4SMo.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208425
IP address blocks: 185.1.132.0/24 maxlen: 24
185.50.68.0/24 maxlen: 24
185.50.69.0/24 maxlen: 24
185.50.70.0/24 maxlen: 24
185.50.71.0/24 maxlen: 24
185.114.20.0/24 maxlen: 24
185.114.21.0/24 maxlen: 24
185.114.22.0/24 maxlen: 24
185.114.23.0/24 maxlen: 24
185.146.88.0/24 maxlen: 24
185.146.89.0/24 maxlen: 24
185.146.90.0/24 maxlen: 24
185.146.91.0/24 maxlen: 24
185.169.52.0/24 maxlen: 24
185.169.53.0/24 maxlen: 24
185.169.54.0/24 maxlen: 24
185.169.55.0/24 maxlen: 24
194.61.116.0/24 maxlen: 24
194.61.117.0/24 maxlen: 24
194.61.118.0/24 maxlen: 24
194.61.119.0/24 maxlen: 24
217.28.139.0/24 maxlen: 24
2001:7f8:ec::/48 maxlen: 48
2a01:a420::/29 maxlen: 29
2a0a:3900::/29 maxlen: 29
2a0f:d500::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3a:a6:7d:41:61:67:f1:3c:3f:49:e2:f1:2e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4db903fc03c0d92f23fbfea384c95948b43848ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:46:5c:ca:c4:05:d8:6d:30:b7:3d:e1:49:
40:32:8d:59:9f:39:d1:e9:bc:32:d9:0f:7f:28:35:
87:62:0f:e9:7b:8a:11:48:17:ba:18:a5:9b:fb:ad:
1d:78:9d:8a:d2:c1:a0:e4:01:37:59:d6:51:5b:33:
c1:2f:d4:7d:df:50:d6:bd:f6:f6:e5:d6:29:a8:07:
f0:67:61:4f:ab:9d:45:f4:49:53:24:08:51:7e:29:
71:7d:92:28:92:d3:b2:41:2d:62:f5:b3:5c:ee:5f:
11:59:fb:14:5c:0a:c5:c2:c8:e1:fd:d6:54:f7:06:
f7:c7:41:81:1c:5d:2b:21:29:95:d1:b3:50:c2:68:
ce:52:b5:cd:08:e6:f0:12:7d:1e:d4:52:3c:ae:0a:
9a:94:85:41:a3:b1:9c:62:05:5d:5b:48:8a:8a:d0:
90:ea:7e:78:47:8a:d8:96:59:cf:b8:24:7a:bb:6f:
91:b6:d2:2a:10:4c:ff:03:fe:2c:4e:96:3c:14:7e:
de:01:d0:a1:0c:8f:33:a5:1d:58:ad:b0:d0:46:ae:
27:ed:dd:11:71:f2:af:1e:43:1a:6d:33:64:c3:19:
cd:57:87:ca:aa:95:ab:2d:d6:9f:33:6c:a8:2e:cb:
02:17:ee:f2:bf:14:42:68:1c:ee:28:68:aa:be:2a:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:03:FC:03:C0:D9:2F:23:FB:FE:A3:84:C9:59:48:B4:38:48:CA
X509v3 Authority Key Identifier:
keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/TbkD_APA2S8j-_6jhMlZSLQ4SMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.132.0/24
185.50.68.0/22
185.114.20.0/22
185.146.88.0/22
185.169.52.0/22
194.61.116.0/22
217.28.139.0/24
IPv6:
2001:7f8:ec::/48
2a01:a420::/29
2a0a:3900::/29
2a0f:d500::/29
Signature Algorithm: sha256WithRSAEncryption
72:ec:f1:63:b9:60:69:a6:7d:a1:95:cf:9f:1e:92:1f:5d:16:
42:a0:e3:fd:f3:f0:30:e3:15:93:cb:c5:8b:e0:60:1b:2f:73:
27:22:9c:04:4d:72:d4:cf:62:cb:51:ba:00:02:c2:72:04:4f:
1e:90:1f:42:7d:43:c5:99:47:74:fb:69:b5:24:8e:15:54:ed:
51:d3:0a:9e:36:06:49:d3:98:9f:03:0a:af:b2:8f:00:d2:c5:
74:10:8d:5f:88:eb:13:74:7a:7e:01:9a:7e:94:e7:05:23:1b:
d7:bc:09:dd:05:d3:3c:cb:4f:1a:0c:49:11:52:e7:d1:75:2b:
69:4a:7e:6a:84:d6:4c:fc:7e:fe:7f:ac:d9:28:d3:be:d8:ca:
63:85:24:6a:2e:b7:9a:18:c2:6c:6f:40:c5:7d:27:c5:6a:c2:
7e:f9:90:f0:83:6b:e6:97:88:0f:78:77:fa:96:72:82:6a:ff:
c0:dd:93:f8:2c:39:6e:9a:c8:64:2d:af:72:6d:c5:12:72:a9:
2c:aa:7a:29:e5:49:12:89:f0:e3:75:90:30:9d:29:a6:9e:ba:
9d:0d:f9:99:e0:1a:d0:c3:7f:28:f0:03:09:79:67:75:fc:67:
a5:20:f1:8c:9a:fa:52:c2:10:e9:1d:92:27:d4:87:f3:a6:64:
cc:75:45:64
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZQlIjqmfUFhZ/E8P0ni8S7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ODYyOWY1ZjYxZmIyNTU2NDI4NGZiZmVmZmI5M2MzZWQ0
NGJmZTIwHhcNMjUwMTAyMDM0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGI5MDNmYzAzYzBkOTJmMjNmYmZlYTM4NGM5NTk0OGI0Mzg0OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutZGXMrEBdhtMLc94UlAMo1ZnznR
6bwy2Q9/KDWHYg/pe4oRSBe6GKWb+60deJ2K0sGg5AE3WdZRWzPBL9R931DWvfb2
5dYpqAfwZ2FPq51F9ElTJAhRfilxfZIoktOyQS1i9bNc7l8RWfsUXArFwsjh/dZU
9wb3x0GBHF0rISmV0bNQwmjOUrXNCObwEn0e1FI8rgqalIVBo7GcYgVdW0iKitCQ
6n54R4rYllnPuCR6u2+RttIqEEz/A/4sTpY8FH7eAdChDI8zpR1YrbDQRq4n7d0R
cfKvHkMabTNkwxnNV4fKqpWrLdafM2yoLssCF+7yvxRCaBzuKGiqviqtGQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFE25A/wDwNkvI/v+o4TJWUi0OEjKMB8GA1UdIwQY
MBaAFAeGKfX2H7JVZChPv+/7k8PtRL/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRZcDlmWWZzbFZrS0UtXzdfdVR3LTFFdi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNjE4ZTQtN2E2NC00NjBjLWFhZjkt
NjNhZjJjNGY0MDIwLzEvVGJrRF9BUEEyUzhqLV82amhNbFpTTFE0U01vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8wNjE4ZTQtN2E2NC00NjBjLWFhZjktNjNhZjJjNGY0MDIw
LzEvQjRZcDlmWWZzbFZrS0UtXzdfdVR3LTFFdi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDAwBAIAATAqAwQAuQGEAwQC
uTJEAwQCuXIUAwQCuZJYAwQCuak0AwQCwj10AwQA2RyLMCQEAgACMB4DBwAgAQf4
AOwDBQMqAaQgAwUDKgo5AAMFAyoP1QAwDQYJKoZIhvcNAQELBQADggEBAHLs8WO5
YGmmfaGVz58ekh9dFkKg4/3z8DDjFZPLxYvgYBsvcycinARNctTPYstRugACwnIE
Tx6QH0J9Q8WZR3T7abUkjhVU7VHTCp42BknTmJ8DCq+yjwDSxXQQjV+I6xN0en4B
mn6U5wUjG9e8Cd0F0zzLTxoMSRFS59F1K2lKfmqE1kz8fv5/rNko077YymOFJGou
t5oYwmxvQMV9J8Vqwn75kPCDa+aXiA94d/qWcoJq/8Ddk/gsOW6ayGQtr3JtxRJy
qSyqeinlSRKJ8ON1kDCdKaaeup0N+ZngGtDDfyjwAwl5Z3X8Z6Ug8Yya+lLCEOkd
kifUh/OmZMx1RWQ=
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:42 2025 by rpki-client