Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/ul3a4-bPo1SXbYcr3VNtwtEsdzY.roa
File: ul3a4-bPo1SXbYcr3VNtwtEsdzY.roa (raw, json)
Hash identifier: rPJQdBmHhJSIeieyhWgTygVL+qklKCjZtNIoUFe2NNA=
Subject key identifier: BA:5D:DA:E3:E6:CF:A3:54:97:6D:87:2B:DD:53:6D:C2:D1:2C:77:36
Certificate issuer: /CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Certificate serial: 07179E15
Authority key identifier: 06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/ul3a4-bPo1SXbYcr3VNtwtEsdzY.roa
Signing time: Sat 01 Jan 2022 11:56:45 +0000
ROA not before: Sat 01 Jan 2022 11:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15965
IP address blocks: 194.48.192.0/23 maxlen: 23
195.43.96.0/19 maxlen: 19
217.31.64.0/20 maxlen: 24
194.48.252.0/23 maxlen: 24
80.64.144.0/20 maxlen: 20
193.91.32.0/20 maxlen: 20
2a02:3a8::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118988309 (0x7179e15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Validity
Not Before: Jan 1 11:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba5ddae3e6cfa354976d872bdd536dc2d12c7736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5a:91:51:e3:97:22:4e:a1:52:34:ea:72:83:
5b:90:23:9e:8e:88:88:15:0b:f4:3e:ee:83:20:bf:
cb:57:9f:8f:66:32:0b:0a:43:02:92:5e:43:e3:de:
9b:f9:16:d0:d5:bc:8a:d4:28:8d:05:b8:ab:3a:51:
2b:ec:74:41:d2:8e:f8:99:3b:40:3e:04:8b:f2:11:
86:61:03:64:db:a7:94:f4:76:3d:ce:37:e7:63:52:
db:6b:9a:ac:44:a7:88:0b:71:cd:23:d5:3f:84:83:
12:07:be:22:98:5a:23:f0:4c:02:37:c9:b9:2e:fa:
5b:89:9f:a5:51:85:54:65:69:f9:cf:cb:03:33:d1:
b9:18:f5:0b:a0:4d:bc:2e:72:cb:d1:ad:a5:64:30:
ea:34:88:8e:74:26:83:25:35:84:0d:97:95:1f:09:
ca:fb:80:60:9f:38:77:e1:c9:21:9f:12:dd:f0:85:
f3:03:df:c9:01:87:0a:6b:d0:92:63:46:41:bc:a3:
f4:b7:76:1a:59:82:b9:01:c7:df:6b:c0:ff:6c:f6:
b5:1b:e2:18:64:e2:c4:53:dd:21:0e:91:e9:4a:ff:
96:ba:ce:16:d2:d3:e7:c1:d1:46:b0:dd:f1:8f:74:
4f:59:e6:30:a4:e0:f6:34:f7:16:ad:fb:64:02:75:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5D:DA:E3:E6:CF:A3:54:97:6D:87:2B:DD:53:6D:C2:D1:2C:77:36
X509v3 Authority Key Identifier:
keyid:06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/ul3a4-bPo1SXbYcr3VNtwtEsdzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.144.0/20
193.91.32.0/20
194.48.192.0/23
194.48.252.0/23
195.43.96.0/19
217.31.64.0/20
IPv6:
2a02:3a8::/32
Signature Algorithm: sha256WithRSAEncryption
e6:3f:58:87:ab:8c:6e:10:ab:0e:b1:d1:6f:48:c0:cb:69:79:
95:b6:ab:63:77:d6:a6:79:73:62:d7:5a:35:29:12:bf:b2:ea:
69:50:d2:d9:d0:48:ab:21:d1:02:cd:d1:00:34:bd:40:c9:92:
01:bb:f4:91:51:ec:bc:3a:4f:48:51:de:b4:a5:ef:53:59:dd:
6e:76:ea:23:f8:72:bc:3f:a9:19:a4:1f:2d:04:fc:c2:8b:62:
95:b1:aa:9d:7a:23:70:51:fd:f5:74:ec:75:e4:cc:d8:b7:f7:
67:d4:57:61:70:2e:3c:33:6d:36:3e:6a:9e:14:30:42:34:64:
e7:8d:cd:89:c9:f3:e1:30:9a:e4:1e:5d:ad:80:27:d3:25:f0:
58:05:92:57:4e:3b:af:1b:e4:4b:c1:6e:24:36:58:4d:43:67:
3f:6c:0d:37:eb:fa:a4:95:3b:74:df:02:ac:68:fc:6f:1d:84:
69:31:a8:a8:20:e0:1a:c7:68:81:81:ec:fb:f5:6d:6b:ad:18:
aa:ef:d1:76:78:18:dd:36:2c:59:24:0c:94:1e:f8:a1:d5:e8:
96:84:cf:fe:5d:bc:69:92:d7:c2:16:1f:49:4b:dd:2d:b5:c8:
f3:5d:26:e0:82:f0:50:35:5a:c8:b8:dc:2f:db:6f:95:e0:53:
3c:1d:70:b0
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIEBxeeFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NmI3ZWRlZjYxODU4NzIzYzRhZGViZTNlZTVhODlmNzAwNThkNWZlMB4XDTIyMDEw
MTExNTY0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmE1ZGRhZTNlNmNm
YTM1NDk3NmQ4NzJiZGQ1MzZkYzJkMTJjNzczNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJZakVHjlyJOoVI06nKDW5Ajno6IiBUL9D7ugyC/y1efj2Yy
CwpDApJeQ+Pem/kW0NW8itQojQW4qzpRK+x0QdKO+Jk7QD4Ei/IRhmEDZNunlPR2
Pc4352NS22uarESniAtxzSPVP4SDEge+IphaI/BMAjfJuS76W4mfpVGFVGVp+c/L
AzPRuRj1C6BNvC5yy9GtpWQw6jSIjnQmgyU1hA2XlR8JyvuAYJ84d+HJIZ8S3fCF
8wPfyQGHCmvQkmNGQbyj9Ld2GlmCuQHH32vA/2z2tRviGGTixFPdIQ6R6Ur/lrrO
FtLT58HRRrDd8Y90T1nmMKTg9jT3Fq37ZAJ1g8sCAwEAAaOCAjYwggIyMB0GA1Ud
DgQWBBS6Xdrj5s+jVJdthyvdU23C0Sx3NjAfBgNVHSMEGDAWgBQGt+3vYYWHI8St
6+PuWon3AFjV/jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JyZnQ3MkdGaHlQRXJldmo3bHFKOXdCWTFmNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWYvMDEwY2ExLTViMzAtNGJhZi04MzFlLTg5NTUxZThjY2UxMi8x
L3VsM2E0LWJQbzFTWGJZY3IzVk50d3RFc2R6WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYv
MDEwY2ExLTViMzAtNGJhZi04MzFlLTg5NTUxZThjY2UxMi8xL0JyZnQ3MkdGaHlQ
RXJldmo3bHFKOXdCWTFmNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBM
BggrBgEFBQcBBwEB/wQ9MDswKgQCAAEwJAMEBFBAkAMEBMFbIAMEAcIwwAMEAcIw
/AMEBcMrYAMEBNkfQDANBAIAAjAHAwUAKgIDqDANBgkqhkiG9w0BAQsFAAOCAQEA
5j9Yh6uMbhCrDrHRb0jAy2l5lbarY3fWpnlzYtdaNSkSv7LqaVDS2dBIqyHRAs3R
ADS9QMmSAbv0kVHsvDpPSFHetKXvU1ndbnbqI/hyvD+pGaQfLQT8wotilbGqnXoj
cFH99XTsdeTM2Lf3Z9RXYXAuPDNtNj5qnhQwQjRk543Nicnz4TCa5B5drYAn0yXw
WAWSV047rxvkS8FuJDZYTUNnP2wNN+v6pJU7dN8CrGj8bx2EaTGoqCDgGsdogYHs
+/Vta60Yqu/RdngY3TYsWSQMlB74odXoloTP/l28aZLXwhYfSUvdLbXI810m4ILw
UDVayLjcL9tvleBTPB1wsA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:19:14 2025 by rpki-client