Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/jQfO3ZIfsu8VaLbyvQDTYcKSN9Y.roa
File: jQfO3ZIfsu8VaLbyvQDTYcKSN9Y.roa (raw, json)
Hash identifier: FpjsMLLo2T/692TsuTaeNgGV6ea5mZit8fLeDY1mCFA=
Subject key identifier: 8D:07:CE:DD:92:1F:B2:EF:15:68:B6:F2:BD:00:D3:61:C2:92:37:D6
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 01867DB67E06ABF30318B5FAAADE45D6851F
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/jQfO3ZIfsu8VaLbyvQDTYcKSN9Y.roa
Signing time: Thu 23 Feb 2023 09:59:17 +0000
ROA not before: Thu 23 Feb 2023 09:59:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5400
IP address blocks: 213.9.138.0/24 maxlen: 24
212.163.169.0/24 maxlen: 24
213.9.148.0/24 maxlen: 24
213.9.160.0/24 maxlen: 24
212.49.175.0/24 maxlen: 24
212.49.181.0/24 maxlen: 24
212.49.190.0/24 maxlen: 24
212.49.191.0/24 maxlen: 24
212.163.141.0/24 maxlen: 24
212.163.40.0/24 maxlen: 24
213.9.232.0/24 maxlen: 24
212.49.131.0/24 maxlen: 24
212.163.55.0/24 maxlen: 24
212.49.142.0/24 maxlen: 24
212.49.163.0/24 maxlen: 24
212.49.167.0/24 maxlen: 24
212.163.206.0/24 maxlen: 24
213.9.173.0/24 maxlen: 24
213.9.177.0/24 maxlen: 24
213.9.188.0/24 maxlen: 24
212.163.3.0/24 maxlen: 24
212.163.215.0/24 maxlen: 24
212.163.6.0/24 maxlen: 24
212.163.24.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:b6:7e:06:ab:f3:03:18:b5:fa:aa:de:45:d6:85:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Feb 23 09:59:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d07cedd921fb2ef1568b6f2bd00d361c29237d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:93:fd:a2:db:66:30:ac:ea:15:34:5d:a1:
84:dd:f9:53:40:9e:99:df:5e:ef:61:68:a1:ad:9a:
f0:92:f1:8f:63:37:b8:9b:0b:a3:a3:ce:18:ca:60:
c2:41:d2:14:87:f5:6f:3f:6e:8f:5f:bc:26:81:e0:
2a:a6:31:81:e7:ef:1c:52:41:79:78:ce:81:89:80:
a0:5c:c4:1f:7d:3d:45:70:9b:b2:c8:07:d9:52:d8:
e3:bf:1c:15:de:ff:32:46:b5:80:d3:ae:3d:07:66:
31:6f:f7:9f:4c:42:7c:d4:3f:7a:52:3f:48:1a:6c:
2e:06:ac:f5:a6:b7:ec:32:72:09:14:00:94:a1:07:
a3:30:f2:12:ce:fc:b7:80:a7:74:c1:19:f3:b7:fe:
77:e3:c7:e5:a3:67:3f:6d:22:59:1a:9a:9a:82:c0:
0a:19:93:cc:50:90:ea:ed:92:c7:89:94:ca:fc:31:
ac:53:2a:af:0e:c6:c2:a4:96:97:21:92:d5:a2:b6:
f8:12:ee:d1:5d:f5:e6:10:dd:fe:85:7f:e3:71:d1:
da:a5:24:02:7a:4b:84:90:f2:d8:98:14:6a:c3:ae:
f9:c3:aa:b0:66:f6:6b:a3:07:79:4b:68:ce:6b:1b:
a4:20:ad:ee:9b:16:0b:36:1a:de:67:94:65:c1:72:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:07:CE:DD:92:1F:B2:EF:15:68:B6:F2:BD:00:D3:61:C2:92:37:D6
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/jQfO3ZIfsu8VaLbyvQDTYcKSN9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.131.0/24
212.49.142.0/24
212.49.163.0/24
212.49.167.0/24
212.49.175.0/24
212.49.181.0/24
212.49.190.0/23
212.163.3.0/24
212.163.6.0/24
212.163.24.0/24
212.163.40.0/24
212.163.55.0/24
212.163.141.0/24
212.163.169.0/24
212.163.206.0/24
212.163.215.0/24
213.9.138.0/24
213.9.148.0/24
213.9.160.0/24
213.9.173.0/24
213.9.177.0/24
213.9.188.0/24
213.9.232.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e0:c8:df:95:af:f4:af:8e:26:b0:c4:ed:3c:42:a8:28:23:
44:76:94:99:fe:3e:93:33:7e:ae:23:98:18:1e:38:3f:2c:fe:
8e:b2:8b:7a:72:44:b7:e2:99:c7:04:2c:62:2e:9d:e4:be:d8:
fa:a1:f9:10:f3:45:95:23:ff:db:0e:46:ef:1a:76:6e:23:ec:
62:48:88:ce:e0:b6:fe:1a:92:2b:16:c5:76:0c:bd:2b:cc:88:
70:36:43:73:5b:80:9d:13:65:0c:f6:ca:1a:f6:52:f8:45:b5:
8a:21:7b:a7:ef:43:42:7e:1f:fc:c2:6b:43:68:27:58:51:66:
91:08:fb:bc:6a:d9:b2:40:46:9f:39:0c:ec:af:f1:d7:d1:96:
6c:17:a0:29:3b:1b:aa:13:cd:f3:0a:ac:c1:d0:ed:e2:e2:81:
5a:2e:55:0e:fd:82:f9:ba:a1:fc:8a:03:4d:c4:bf:3e:b6:a9:
5a:32:ae:3b:99:db:df:9c:10:83:a9:c8:36:8b:e1:9d:0a:74:
8c:d9:6c:a7:47:80:e7:50:2f:a9:cb:ed:b3:65:5a:4e:9d:28:
b3:8b:d6:a5:47:9f:1f:d5:41:f8:ba:ff:bd:90:92:e1:9e:a8:
d3:49:16:61:27:61:86:24:cc:44:f3:ea:16:79:76:39:8d:10:
ad:79:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:46 2025 by rpki-client