Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/Kqy3yf4RCTjGuIcFz1oZxW_0W74.roa
File: Kqy3yf4RCTjGuIcFz1oZxW_0W74.roa (raw, json)
Hash identifier: G7arDgyLJPQO5EoF5PVVp8oXFIdeXKEaP4nTyDxE/bk=
Subject key identifier: 2A:AC:B7:C9:FE:11:09:38:C6:B8:87:05:CF:5A:19:C5:6F:F4:5B:BE
Certificate issuer: /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial: 16A67C39
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/Kqy3yf4RCTjGuIcFz1oZxW_0W74.roa
Signing time: Sat 01 Jan 2022 09:59:50 +0000
ROA not before: Sat 01 Jan 2022 09:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205112
IP address blocks: 185.65.240.0/24 maxlen: 24
185.65.242.0/24 maxlen: 24
2a05:400::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380009529 (0x16a67c39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
Validity
Not Before: Jan 1 09:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2aacb7c9fe110938c6b88705cf5a19c56ff45bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:68:e3:cf:0a:e2:d3:15:55:2d:cc:59:34:
07:a0:88:a2:3c:c5:f1:f2:5c:ef:79:6c:da:91:94:
6c:e8:13:75:73:60:63:98:f9:42:ae:56:e3:25:4d:
44:52:7f:9c:7b:08:3b:25:f7:57:16:05:5c:67:80:
7f:60:c2:8b:19:94:d7:74:60:7a:84:7a:fd:52:af:
03:7c:a5:c0:b5:63:5b:69:ef:ee:1f:5a:57:e4:c8:
8e:54:07:7e:00:33:0b:40:de:7e:70:b3:03:ff:82:
d4:7e:4b:52:49:0d:ce:a5:c1:0d:dd:dc:1f:6a:4f:
61:f9:f0:2d:cf:21:e6:85:20:53:ff:a5:17:5e:b1:
3b:a5:75:cf:46:8b:9d:fb:91:92:49:3c:30:6f:f8:
b9:b8:ff:be:51:ad:35:1b:f6:b2:14:9d:cf:61:ca:
f9:a0:99:d1:70:c2:f8:e4:ec:59:a8:82:d6:b3:3b:
79:f5:4a:7c:3a:e4:f4:a4:9a:ba:66:fd:a7:85:0b:
79:ba:2b:74:a8:9b:8c:bb:9e:75:88:b2:ed:e7:68:
29:c2:91:08:a4:a2:85:73:6b:b9:57:bb:31:a5:3d:
fa:67:91:07:00:c5:ba:4e:a9:6d:b9:10:13:9b:65:
61:81:f5:06:21:67:c7:fc:bb:33:91:56:e6:be:83:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AC:B7:C9:FE:11:09:38:C6:B8:87:05:CF:5A:19:C5:6F:F4:5B:BE
X509v3 Authority Key Identifier:
keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/Kqy3yf4RCTjGuIcFz1oZxW_0W74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.240.0/24
185.65.242.0/24
IPv6:
2a05:400::/29
Signature Algorithm: sha256WithRSAEncryption
6c:4b:f9:8b:9c:d4:70:fd:75:60:6c:20:84:f6:e7:2d:a5:d8:
35:78:59:95:0c:a9:10:0b:c6:3a:ac:ff:0d:58:04:8e:d8:94:
b8:d2:8e:30:71:36:7d:b2:dd:4b:7a:36:22:af:9a:00:ad:ba:
9a:c1:69:57:ac:8e:4c:45:5a:a8:c8:4c:2a:a4:36:b9:9c:a7:
6e:82:dd:73:97:81:2f:ca:7e:17:72:44:f8:f4:2f:5a:e0:bb:
dc:0d:b6:97:de:4e:73:d1:3a:6f:f1:39:a5:48:d4:4c:09:83:
33:47:d1:2f:24:5d:43:31:56:81:99:a4:42:eb:c4:ab:97:6b:
70:11:df:98:1c:eb:fb:30:43:e8:8f:ee:03:3b:6b:ef:87:42:
f9:7a:53:5c:6d:ca:1b:83:0f:04:6d:45:f7:9e:3f:59:37:63:
a4:70:ce:08:fe:4f:d8:57:27:b4:94:1b:87:ab:e9:66:0c:de:
09:b2:b9:bf:fd:86:33:a0:84:81:56:7f:75:ae:5f:59:b5:8a:
39:34:bd:ed:12:76:75:21:c9:4b:66:8d:e9:26:c5:cd:52:a8:
d9:f8:35:5a:56:1e:7b:4e:d8:4c:2d:e2:34:02:fd:42:37:12:
0d:aa:ba:6f:be:64:89:e7:46:55:2c:af:b8:cc:44:2c:df:fc:
97:3b:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:12:09 2025 by rpki-client