Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/xmXDmx7mGPB31pmSBInQdPDmYqk.roa
File: xmXDmx7mGPB31pmSBInQdPDmYqk.roa (raw, json)
Hash identifier: ffgrASxLCr309vR1SHUiptiTvHmyM0VV2lNZnSQUG0I=
Subject key identifier: C6:65:C3:9B:1E:E6:18:F0:77:D6:99:92:04:89:D0:74:F0:E6:62:A9
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0194D7B1E20331F6263E23D7AAFDD2AACE38
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/xmXDmx7mGPB31pmSBInQdPDmYqk.roa
Signing time: Wed 05 Feb 2025 19:59:06 +0000
ROA not before: Wed 05 Feb 2025 19:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199152
IP address blocks: 91.203.235.0/24 maxlen: 24
193.43.248.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:b1:e2:03:31:f6:26:3e:23:d7:aa:fd:d2:aa:ce:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Feb 5 19:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c665c39b1ee618f077d699920489d074f0e662a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:2d:15:8f:b2:22:31:a0:e1:a5:67:86:ef:
4c:15:c8:8d:9b:22:8d:01:96:f5:77:ca:66:ef:1c:
d4:38:32:e0:2d:8f:e2:76:1d:44:5c:71:14:9d:96:
95:b7:e9:fd:ed:aa:b6:01:ea:c7:d4:9e:32:b1:50:
94:7c:bc:f2:31:05:42:ba:ad:19:85:93:a3:3e:94:
68:09:78:ad:c6:47:1e:5f:fe:ec:7f:77:bd:c2:b2:
03:35:bb:be:bb:9d:a1:94:4c:df:04:a6:fd:6d:0c:
78:8b:d4:91:bf:7b:19:70:9c:c2:b6:44:27:a3:dd:
84:48:67:48:4c:74:20:d8:ac:74:e9:6f:0b:01:b3:
55:c4:c6:e4:90:12:35:25:7d:39:b9:43:68:bb:23:
80:55:15:d6:10:51:27:65:4e:40:f2:7f:ed:8d:bb:
da:70:e9:cf:69:e3:a2:19:a4:df:87:67:ec:ab:ab:
27:e0:cb:cd:9b:04:89:b9:db:0f:e7:03:98:e7:a2:
5a:1a:4f:8e:f6:07:e7:75:fa:4a:28:ad:aa:4a:a1:
6e:84:b6:4b:bd:24:47:d6:cc:e3:b9:6e:79:fc:29:
1b:79:e5:93:4b:8d:24:5c:b9:0f:69:21:09:c0:c7:
af:9d:f3:d2:61:84:63:6d:64:68:0b:6e:73:0f:42:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:C3:9B:1E:E6:18:F0:77:D6:99:92:04:89:D0:74:F0:E6:62:A9
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/xmXDmx7mGPB31pmSBInQdPDmYqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.235.0/24
193.43.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:40:08:99:b8:7e:fd:ca:c2:54:d4:66:e0:31:2e:3f:a3:af:
63:d0:37:da:1a:bb:fe:2c:15:32:e0:e1:a3:9b:b7:14:92:3e:
d2:e4:4e:dc:ee:0f:18:bc:b0:71:09:aa:8d:c8:bb:c8:fd:8b:
0e:ea:7a:e8:eb:73:17:78:31:5d:ce:89:dc:1b:37:fe:9d:e3:
4d:4b:30:44:6a:b8:9b:90:ec:20:28:9d:c9:1b:f2:20:7d:41:
0e:15:4c:c4:43:1d:36:76:87:ee:b8:08:0a:81:6c:39:a7:7d:
0b:ea:69:47:5a:88:0e:ae:d3:64:76:b3:b3:c0:4b:2b:e2:99:
d9:2c:48:4c:4d:98:27:73:85:12:ad:90:6e:e9:44:3f:cb:79:
05:65:b2:56:da:51:c5:0b:31:41:9c:50:17:53:11:37:31:09:
70:c1:0f:b9:49:9f:e0:d5:9a:60:f1:d7:d1:ae:38:24:7e:c4:
fa:b7:47:11:ca:aa:9e:de:9b:e6:af:69:0b:71:03:4b:76:da:
b1:98:36:bb:26:83:e7:17:65:e3:74:27:30:15:1c:69:cd:dc:
6c:73:d1:b2:c3:a1:15:da:07:05:c0:5e:c1:d0:af:d1:91:8b:
65:f4:fa:71:b3:f0:28:ff:47:d1:3a:70:9e:46:1c:48:8c:1c:
1b:81:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:59:27 2025 by rpki-client