Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/qmjH9s44ZqXjogw0C8UcY0FAGsA.roa
File: qmjH9s44ZqXjogw0C8UcY0FAGsA.roa (raw, json)
Hash identifier: NTHf2Nm6DIPEeFpPRMpoGiYTPsT632k3mb4ED1jvVPU=
Subject key identifier: AA:68:C7:F6:CE:38:66:A5:E3:A2:0C:34:0B:C5:1C:63:41:40:1A:C0
Certificate issuer: /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial: 018FD14A7081266AC92F97548723000D53CF
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/qmjH9s44ZqXjogw0C8UcY0FAGsA.roa
Signing time: Sat 01 Jun 2024 00:54:27 +0000
ROA not before: Sat 01 Jun 2024 00:54:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208425
IP address blocks: 185.1.132.0/24 maxlen: 24
185.50.68.0/24 maxlen: 24
185.50.69.0/24 maxlen: 24
185.50.70.0/24 maxlen: 24
185.50.71.0/24 maxlen: 24
185.114.20.0/24 maxlen: 24
185.114.21.0/24 maxlen: 24
185.114.22.0/24 maxlen: 24
185.114.23.0/24 maxlen: 24
185.146.88.0/24 maxlen: 24
185.146.89.0/24 maxlen: 24
185.146.90.0/24 maxlen: 24
185.146.91.0/24 maxlen: 24
185.169.52.0/24 maxlen: 24
185.169.53.0/24 maxlen: 24
185.169.54.0/24 maxlen: 24
185.169.55.0/24 maxlen: 24
194.61.116.0/24 maxlen: 24
194.61.117.0/24 maxlen: 24
194.61.118.0/24 maxlen: 24
194.61.119.0/24 maxlen: 24
217.28.139.0/24 maxlen: 24
2001:7f8:ec::/48 maxlen: 48
2a01:a420::/29 maxlen: 29
2a0a:3900::/29 maxlen: 29
2a0f:d500::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d1:4a:70:81:26:6a:c9:2f:97:54:87:23:00:0d:53:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Validity
Not Before: Jun 1 00:54:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa68c7f6ce3866a5e3a20c340bc51c6341401ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:20:70:e9:ac:a9:c4:25:3c:47:76:bb:2a:
d1:a7:28:a8:ab:a4:8b:45:f4:5b:46:eb:1d:d1:f9:
c6:2f:3c:60:4a:87:8c:cb:44:bd:cd:ce:4f:72:8a:
30:da:d3:90:73:9e:be:48:c5:2b:ce:7b:48:4c:b3:
ac:ea:cb:ed:8b:06:b5:39:4f:4d:43:7e:e0:95:d8:
00:2c:64:f6:cc:36:20:fd:3d:f9:6f:1f:76:a2:66:
13:d9:28:ee:a9:f6:58:e8:81:35:6f:0c:c7:57:ac:
cf:bf:ad:5d:9c:b1:17:24:29:f6:44:b9:5a:d2:41:
09:2b:f9:76:44:be:92:46:ec:29:58:c2:ca:c6:3c:
82:3a:e9:0c:ff:a8:c8:27:41:ce:1e:04:4a:5f:69:
dc:ae:dd:bb:79:5a:77:12:06:99:de:00:80:be:fa:
b3:c0:cb:06:2b:22:b9:93:09:45:8a:c1:92:46:d2:
bc:5f:0a:af:3c:00:0f:ba:8f:14:a7:2b:9e:a9:a4:
4b:e8:b7:5a:fa:e6:ef:e5:a7:a6:28:79:0a:ef:8a:
a6:cf:55:0f:24:e8:92:a2:53:ff:36:b9:73:11:11:
9a:03:fd:4f:35:16:33:bc:1f:7e:18:8c:03:8e:b1:
b0:f9:18:6b:75:f2:42:e2:ce:7d:68:4d:bd:1b:44:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:68:C7:F6:CE:38:66:A5:E3:A2:0C:34:0B:C5:1C:63:41:40:1A:C0
X509v3 Authority Key Identifier:
keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/qmjH9s44ZqXjogw0C8UcY0FAGsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.132.0/24
185.50.68.0/22
185.114.20.0/22
185.146.88.0/22
185.169.52.0/22
194.61.116.0/22
217.28.139.0/24
IPv6:
2001:7f8:ec::/48
2a01:a420::/29
2a0a:3900::/29
2a0f:d500::/29
Signature Algorithm: sha256WithRSAEncryption
86:b3:b2:8b:fa:b2:dc:0b:b4:7f:91:c3:91:03:f9:b7:ff:a2:
e5:b5:0b:8d:01:b5:55:df:3b:4c:13:db:18:da:07:2d:f0:17:
a5:90:0e:4e:c2:b6:ef:9f:bb:63:f6:d9:0b:77:38:d7:ef:c6:
bf:53:8f:39:bd:3f:bd:3a:56:85:bb:0e:e9:e1:c6:b0:27:7d:
d9:26:b5:71:15:f1:e3:e5:09:42:23:e9:8c:51:11:22:20:37:
49:0a:2e:5c:ea:82:eb:d8:a6:1d:29:4e:3b:37:34:32:23:31:
e0:73:83:50:24:b8:2e:4e:0b:e2:14:24:75:a0:64:f8:28:a3:
01:b6:b6:43:74:11:ce:65:27:58:da:0e:16:3d:4f:c2:26:0b:
c1:9d:38:af:5b:8e:33:6f:62:34:f0:52:d2:20:99:7e:ff:9e:
44:7b:3c:db:7b:b8:fd:29:39:e3:34:e1:e1:1e:a2:0e:1e:3e:
d8:47:3b:61:fe:b6:9d:16:f3:88:34:13:f4:c7:08:15:27:a0:
b3:e3:1d:8d:94:27:07:5e:55:1e:3c:bb:e5:ba:24:44:6d:0b:
41:09:c9:ce:9e:3e:3c:b1:2d:08:4c:14:98:75:2c:5c:72:af:
cc:2a:78:9b:78:d3:a4:f8:a7:d0:7f:4c:74:26:47:cb:0b:71:
03:c7:23:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:48 2025 by rpki-client