Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/W8a8mP89fgoZie71lq3EKharTpM.roa
File: W8a8mP89fgoZie71lq3EKharTpM.roa (raw, json)
Hash identifier: RAzIwvU5MlW/hyWaiEB4akLdUdE4Z023ZgCi1oZoej8=
Subject key identifier: 5B:C6:BC:98:FF:3D:7E:0A:19:89:EE:F5:96:AD:C4:2A:16:AB:4E:93
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 018E15338412A714DD1B94398A4C27AB13A6
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/W8a8mP89fgoZie71lq3EKharTpM.roa
Signing time: Wed 06 Mar 2024 19:18:01 +0000
ROA not before: Wed 06 Mar 2024 19:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206119
IP address blocks: 185.86.82.0/24 maxlen: 24
185.205.16.0/24 maxlen: 24
185.205.18.0/24 maxlen: 24
185.237.80.0/24 maxlen: 24
185.237.81.0/24 maxlen: 24
185.254.93.0/24 maxlen: 24
193.36.62.0/24 maxlen: 24
194.145.136.0/24 maxlen: 24
2a0c:4a45::/32 maxlen: 32
2a0c:4a46::/32 maxlen: 32
2a0c:4a47::/32 maxlen: 32
2a0d:d380::/32 maxlen: 32
2a0d:d381::/32 maxlen: 32
2a0d:d383::/32 maxlen: 32
2a0d:d384::/32 maxlen: 32
2a0d:d385::/32 maxlen: 32
2a0d:d386::/32 maxlen: 32
2a0d:d387::/32 maxlen: 32
2a10:4b40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:15:33:84:12:a7:14:dd:1b:94:39:8a:4c:27:ab:13:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Mar 6 19:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bc6bc98ff3d7e0a1989eef596adc42a16ab4e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2d:c7:4a:03:14:bd:4d:a1:ff:89:b3:bf:d3:
87:e1:bc:ee:68:2a:0c:9f:4f:f0:10:52:c3:8e:12:
9a:a1:53:0b:37:6b:d3:fc:d2:e3:02:8f:1f:95:27:
1b:c3:7a:0e:54:d4:d7:fc:1f:fc:ce:77:61:42:35:
1c:00:00:2f:ec:b7:45:15:31:56:d0:f2:08:f0:14:
97:29:fe:4d:68:0e:7e:53:a1:59:29:e1:df:75:3f:
33:cf:2c:37:b5:0e:13:2c:df:93:11:54:95:89:50:
fb:5e:4b:b9:9b:1c:0f:97:bb:c0:ce:65:8e:3e:ff:
b6:fc:14:cf:ce:72:77:17:2c:04:51:f4:62:77:1b:
17:bb:7b:4f:aa:8d:49:49:d5:f4:19:c2:7f:d5:17:
0c:eb:d3:6f:e9:ac:9a:9c:29:62:cd:0d:25:7d:b7:
ac:39:31:8d:5f:52:37:65:04:c2:a5:1b:9f:37:4f:
7d:32:7e:6a:a7:0f:05:0b:99:21:75:40:46:09:2d:
6a:d1:de:06:6e:e1:1a:13:40:7c:31:aa:b1:6e:09:
20:2d:49:59:7c:05:69:a5:d0:ba:0d:9a:f9:75:90:
79:b6:70:ff:b7:07:7d:11:bd:37:48:8c:21:ab:f3:
b2:c6:cd:f0:62:00:57:7f:25:49:b1:b1:ec:7d:f5:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C6:BC:98:FF:3D:7E:0A:19:89:EE:F5:96:AD:C4:2A:16:AB:4E:93
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/W8a8mP89fgoZie71lq3EKharTpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.82.0/24
185.205.16.0/24
185.205.18.0/24
185.237.80.0/23
185.254.93.0/24
193.36.62.0/24
194.145.136.0/24
IPv6:
2a0c:4a45::-2a0c:4a47:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:d380::/31
2a0d:d383::-2a0d:d387:ffff:ffff:ffff:ffff:ffff:ffff
2a10:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
73:65:1a:b0:2d:88:25:8a:a8:c4:6e:97:0e:29:f4:9e:a7:27:
42:a6:a3:b9:f3:34:c7:ca:bd:f7:18:ea:9c:87:45:af:3b:50:
49:54:b3:2b:41:8c:bb:17:8d:f0:66:df:f0:ac:47:ea:16:8b:
33:f9:64:93:55:14:a4:a9:02:55:60:1b:9e:77:49:43:c2:a7:
44:dd:2f:b7:15:18:c4:63:88:53:e9:18:aa:a6:a3:ab:6e:18:
34:a7:f5:34:86:5c:2e:6e:8d:11:2f:af:e8:7b:af:5e:f1:b2:
6f:fe:f8:e8:fa:12:04:fd:50:09:d0:7c:03:9a:68:31:63:ea:
9e:a8:27:27:94:b4:54:6d:f1:b5:f6:14:f7:5d:5a:9c:9e:15:
8a:16:31:40:e1:c5:1e:d9:1a:d0:9e:90:48:0c:1c:c7:e6:8d:
38:57:78:8c:f4:08:b4:2f:1f:b6:b3:3c:5a:e4:59:64:ef:99:
c3:df:d4:2f:7e:0e:26:8e:ba:7e:b9:f0:3c:52:8f:97:ff:11:
f3:67:49:28:bd:50:e6:14:83:7a:25:67:62:a4:ed:87:81:41:
da:ae:02:55:83:16:fd:66:b5:10:80:1b:5a:8d:5d:8e:07:6b:
85:4a:0d:af:1d:5c:e3:1a:42:c5:bd:5b:66:68:e0:4a:fe:96:
7c:4b:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:45:37 2025 by rpki-client