Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/qGZ5i1vpHSPkxLXvFIGHFGqvh_Q.roa
File: qGZ5i1vpHSPkxLXvFIGHFGqvh_Q.roa (raw, json)
Hash identifier: s/t/5x6t658Jo61KpU81r1l+x00Y/AHG+RS/Audg5ss=
Subject key identifier: A8:66:79:8B:5B:E9:1D:23:E4:C4:B5:EF:14:81:87:14:6A:AF:87:F4
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0195A3EA5C950EED0F3A8637880B6CF9B371
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/qGZ5i1vpHSPkxLXvFIGHFGqvh_Q.roa
Signing time: Mon 17 Mar 2025 11:43:19 +0000
ROA not before: Mon 17 Mar 2025 11:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57033
IP address blocks: 89.185.4.0/22 maxlen: 22
89.185.8.0/21 maxlen: 21
89.185.16.0/22 maxlen: 22
89.185.20.0/23 maxlen: 23
93.185.208.0/21 maxlen: 21
93.185.216.0/23 maxlen: 23
93.185.218.0/23 maxlen: 23
93.185.220.0/23 maxlen: 23
93.185.222.0/23 maxlen: 23
185.30.203.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:ea:5c:95:0e:ed:0f:3a:86:37:88:0b:6c:f9:b3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Mar 17 11:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a866798b5be91d23e4c4b5ef148187146aaf87f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:36:be:0a:be:b1:f1:f7:d0:aa:88:c1:07:
a3:b4:5e:2f:15:50:26:d8:ff:8a:fc:74:32:2b:80:
bc:be:a0:80:2a:dd:d7:39:18:64:93:44:12:53:06:
92:35:bc:e3:1d:7c:fe:3d:c5:a5:ba:ee:74:ab:2b:
c4:fb:34:0d:6d:ef:6e:c9:40:11:6f:a5:ac:1e:a0:
26:94:41:80:29:66:82:45:38:53:c9:ae:61:51:31:
fd:5c:fc:c7:3f:a0:e7:b1:f4:79:d3:6c:ba:ae:2c:
9d:db:00:e9:e5:6c:87:66:66:d7:07:09:a8:40:d1:
6d:36:77:09:9c:f7:48:ad:57:6b:65:e9:ad:ae:e3:
37:b5:26:58:bd:07:04:ad:f9:d8:2c:0e:da:42:84:
6c:db:48:05:52:41:36:77:09:ea:a7:68:6c:3a:9b:
16:cc:13:4a:b3:0e:d1:6d:76:21:81:20:ab:03:6f:
29:0e:15:55:06:39:90:11:c6:5c:a4:81:e0:0f:15:
31:5d:9b:fa:75:c3:20:9a:27:7b:f6:f2:ff:68:c0:
eb:71:80:06:66:1a:b4:0f:7f:f6:f8:d2:3b:45:2b:
6e:11:d5:63:cf:67:d6:44:10:48:51:50:6a:7e:3e:
95:9d:fb:c3:43:67:4f:88:91:c9:13:f2:cf:a7:c0:
50:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:66:79:8B:5B:E9:1D:23:E4:C4:B5:EF:14:81:87:14:6A:AF:87:F4
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/qGZ5i1vpHSPkxLXvFIGHFGqvh_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.4.0-89.185.21.255
93.185.208.0/20
185.30.203.0/24
Signature Algorithm: sha256WithRSAEncryption
67:be:c4:64:72:1c:a7:7e:1d:dc:06:e9:2e:82:29:2a:fa:3f:
47:7e:3e:46:2c:7e:02:7f:0b:60:f2:28:9e:aa:f7:ab:dc:ab:
1a:36:33:a4:0c:69:d3:8b:a0:f8:af:9c:43:4f:92:7e:ed:4d:
c0:59:cf:b0:2b:4f:d8:45:ff:6d:7c:d2:62:45:f7:d2:49:6e:
8f:35:84:1a:30:9b:55:e1:7e:13:fd:ad:47:67:8d:62:1b:b9:
3a:9a:43:9d:a3:c8:84:3b:ce:bf:8b:06:34:2b:eb:e7:5e:83:
24:7f:95:7a:11:53:0b:3d:2a:86:2f:bc:d2:ef:b7:52:cc:13:
cf:29:e7:0a:4a:e7:c8:7c:79:f7:e6:51:4c:f8:2d:4b:7b:86:
21:26:41:cb:f1:b2:36:a5:5c:0b:aa:53:bb:9c:12:da:49:75:
4d:9e:c5:a5:32:65:a9:7d:8b:13:f4:bd:9b:2e:ac:74:e6:f9:
5d:a1:98:59:6f:7e:2a:ed:e6:01:24:a2:5d:8f:21:d5:e0:20:
b1:18:30:5f:a9:08:6e:18:b0:73:1c:8c:76:5c:4d:91:6d:ef:
57:a3:51:08:40:32:a2:21:40:6b:fa:b0:68:ac:a2:fb:78:51:
53:a9:3e:d8:fb:a5:0f:02:e0:22:e8:3b:54:34:81:33:fa:6c:
13:25:02:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:04:06 2025 by rpki-client