Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/_koVTdfV0-Rkr9tA8_kp_Pcg_m0.roa
File: _koVTdfV0-Rkr9tA8_kp_Pcg_m0.roa (raw, json)
Hash identifier: 9+kTiYPexscJ2l6BEk01FObFgezg4tGtSVis/mHRNjM=
Subject key identifier: FE:4A:15:4D:D7:D5:D3:E4:64:AF:DB:40:F3:F9:29:FC:F7:20:FE:6D
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0194221FCE8871952D0FAC6BAB9B994FF9C8
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/_koVTdfV0-Rkr9tA8_kp_Pcg_m0.roa
Signing time: Wed 01 Jan 2025 13:48:17 +0000
ROA not before: Wed 01 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199152
IP address blocks: 91.203.235.0/24 maxlen: 24
91.241.47.0/24 maxlen: 24
193.19.110.0/24 maxlen: 24
193.43.248.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ce:88:71:95:2d:0f:ac:6b:ab:9b:99:4f:f9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe4a154dd7d5d3e464afdb40f3f929fcf720fe6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:56:9d:a0:a6:8e:6c:ea:f3:6a:39:bc:4c:
f1:4e:e8:48:0f:ee:5f:b8:cd:53:f0:f6:96:07:08:
cf:b7:0b:af:1a:08:bb:ad:97:61:5a:db:e1:b2:04:
13:fc:5a:b2:93:ba:20:a7:dd:74:55:d4:37:3f:4d:
f1:a5:56:63:9e:32:b0:85:c8:99:79:15:70:d9:cb:
fa:89:bd:bd:1a:7d:70:04:ea:21:87:d7:f5:89:5f:
f8:16:46:c1:fe:66:95:7e:37:bb:ee:28:68:fb:7f:
ae:9f:78:d7:92:3e:da:64:c9:15:f7:6a:5d:80:05:
a5:e2:de:62:2b:ec:d2:60:8d:a8:86:b8:b4:6b:d1:
f9:8a:59:74:c6:f9:5d:a9:08:2d:c4:75:5d:f5:fb:
e8:31:62:3e:9c:b8:ed:fc:af:df:f5:aa:e0:6a:3a:
b5:51:e1:17:7a:bc:4e:6d:3d:7e:4f:f7:5f:d8:e9:
5f:a0:23:7a:bc:d4:8b:ff:c4:30:f6:6f:c0:3c:d2:
c7:3d:a8:ec:43:dc:07:05:96:bd:2e:0f:25:97:b5:
4d:dc:6c:75:ea:81:ed:f4:bd:54:f5:7a:77:a7:6f:
5a:12:92:5c:f6:42:e0:98:fd:13:a7:e3:c2:3c:3b:
9c:66:5c:bf:49:3c:a3:2d:b0:14:e7:5d:ec:c5:89:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4A:15:4D:D7:D5:D3:E4:64:AF:DB:40:F3:F9:29:FC:F7:20:FE:6D
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/_koVTdfV0-Rkr9tA8_kp_Pcg_m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.235.0/24
91.241.47.0/24
193.19.110.0/24
193.43.248.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c0:2c:47:ca:ae:de:3f:ea:b6:ce:0a:ef:4e:c1:89:51:25:
fa:64:c9:3f:44:d5:33:cc:ff:26:f4:20:05:4b:ff:83:fc:3c:
51:6d:23:f5:09:13:cd:ed:cb:6f:e3:6d:76:3d:01:60:e2:cf:
06:14:1b:87:a8:e0:ec:7b:54:92:d8:4c:e6:d2:15:c8:8d:d5:
e8:fd:64:b2:39:60:e2:1a:a4:a2:e3:2d:46:94:3f:12:8e:ed:
a4:28:a8:8d:70:20:a4:53:ee:65:04:20:e3:f5:fb:5d:51:ba:
d3:50:48:50:54:87:77:ac:e3:fd:6a:9f:44:b8:02:75:ee:55:
25:60:2e:d4:3c:f8:bc:b2:2f:c8:10:5f:f2:10:7b:84:97:59:
2f:99:e8:28:60:2a:8c:e7:50:80:2d:69:30:c8:32:bd:51:a5:
e9:c4:4c:8a:30:16:53:a4:a8:41:59:bf:aa:6b:42:c0:75:8e:
f3:b0:cf:23:27:13:db:f4:66:10:99:94:b5:60:6d:cb:f9:64:
e6:54:97:8f:ee:2e:32:fb:74:f2:05:e6:d9:03:93:01:19:93:
16:2a:ae:8f:2e:95:81:2f:5f:33:cb:5d:b3:33:29:aa:7f:24:
d1:b2:6d:c0:48:33:06:49:b3:16:cf:8f:db:c2:12:85:ae:a2:
33:8f:f4:7e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQiH86IcZUtD6xrq5uZT/nIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjUwMTAxMTM0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTRhMTU0ZGQ3ZDVkM2U0NjRhZmRiNDBmM2Y5MjlmY2Y3MjBmZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7ZWnaCmjmzq82o5vEzxTuhID+5f
uM1T8PaWBwjPtwuvGgi7rZdhWtvhsgQT/Fqyk7ogp910VdQ3P03xpVZjnjKwhciZ
eRVw2cv6ib29Gn1wBOohh9f1iV/4FkbB/maVfje77iho+3+un3jXkj7aZMkV92pd
gAWl4t5iK+zSYI2ohri0a9H5ill0xvldqQgtxHVd9fvoMWI+nLjt/K/f9argajq1
UeEXerxObT1+T/df2OlfoCN6vNSL/8Qw9m/APNLHPajsQ9wHBZa9Lg8ll7VN3Gx1
6oHt9L1U9Xp3p29aEpJc9kLgmP0Tp+PCPDucZly/STyjLbAU513sxYkonQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFP5KFU3X1dPkZK/bQPP5Kfz3IP5tMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvX2tvVlRkZlYwLVJrcjl0QThfa3BfUGNnX20wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8vrAwQA
W/EvAwQAwRNuAwQAwSv4MA0GCSqGSIb3DQEBCwUAA4IBAQBJwCxHyq7eP+q2zgrv
TsGJUSX6ZMk/RNUzzP8m9CAFS/+D/DxRbSP1CRPN7ctv4212PQFg4s8GFBuHqODs
e1SS2Ezm0hXIjdXo/WSyOWDiGqSi4y1GlD8Sju2kKKiNcCCkU+5lBCDj9ftdUbrT
UEhQVId3rOP9ap9EuAJ17lUlYC7UPPi8si/IEF/yEHuEl1kvmegoYCqM51CALWkw
yDK9UaXpxEyKMBZTpKhBWb+qa0LAdY7zsM8jJxPb9GYQmZS1YG3L+WTmVJeP7i4y
+3TyBebZA5MBGZMWKq6PLpWBL18zy12zMymqfyTRsm3ASDMGSbMWz4/bwhKFrqIz
j/R+
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:54:29 2025 by rpki-client