Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/W5gihdWHcWlgbq6T5O39R-jydEM.roa
File: W5gihdWHcWlgbq6T5O39R-jydEM.roa (raw, json)
Hash identifier: KlvyLQ0iYhBw6glsIq8QaH4XMLQ0qFqgtpwGzdZhWBw=
Subject key identifier: 5B:98:22:85:D5:87:71:69:60:6E:AE:93:E4:ED:FD:47:E8:F2:74:43
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 018500607A040740DA631B8228A03E35E47E
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/W5gihdWHcWlgbq6T5O39R-jydEM.roa
Signing time: Sun 11 Dec 2022 08:50:00 +0000
ROA not before: Sun 11 Dec 2022 08:50:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35251
IP address blocks: 45.145.230.0/24 maxlen: 24
45.145.231.0/24 maxlen: 24
45.138.68.0/24 maxlen: 24
45.138.69.0/24 maxlen: 24
45.138.70.0/24 maxlen: 24
45.138.71.0/24 maxlen: 24
45.158.22.0/24 maxlen: 24
45.158.23.0/24 maxlen: 24
45.158.20.0/24 maxlen: 24
45.158.21.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:00:60:7a:04:07:40:da:63:1b:82:28:a0:3e:35:e4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Dec 11 08:50:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b982285d5877169606eae93e4edfd47e8f27443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:2b:34:de:24:32:d9:40:33:79:b8:ac:87:
2c:f7:32:5e:04:42:02:b8:3d:4d:b7:b1:2c:ac:3b:
cf:78:76:92:c3:b9:39:72:64:fd:a7:49:a7:b3:c2:
70:11:a3:05:37:11:2f:bf:aa:5d:11:6c:65:6b:f0:
c7:8e:ad:69:28:b3:09:4e:65:79:47:b2:fb:6e:b9:
6b:d4:8d:b1:e6:9c:43:73:41:cb:49:27:d4:35:2d:
0b:27:fd:0e:ee:8b:4b:b6:4d:33:a4:18:6c:37:70:
91:eb:d7:29:cf:90:0f:f7:6f:7a:4b:fb:d1:a0:04:
00:5c:53:7a:b3:5c:8e:46:f5:77:7d:52:e7:08:56:
06:34:b3:75:ff:51:94:5e:3e:d4:17:2d:eb:09:e6:
9c:ac:20:47:b9:1a:66:a9:52:b5:23:c4:23:90:fc:
f5:ea:2d:92:7c:52:a0:22:99:7f:7f:3a:1d:00:6b:
3b:61:b6:37:13:85:7e:96:4a:52:07:98:d0:48:fa:
ba:af:da:a8:32:5a:de:e8:23:d7:ad:50:4c:ad:31:
e8:3c:e9:4f:c0:fa:76:b7:f8:c6:02:e0:d3:02:40:
94:a0:af:14:83:16:bc:98:6c:9d:b2:62:5d:ce:c9:
68:d8:4e:f7:41:9f:c7:a5:27:df:2f:81:cb:96:29:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:98:22:85:D5:87:71:69:60:6E:AE:93:E4:ED:FD:47:E8:F2:74:43
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/W5gihdWHcWlgbq6T5O39R-jydEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.68.0/22
45.145.230.0/23
45.158.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:02:53:1a:12:a6:14:03:3f:35:e3:14:fe:90:e7:d7:e9:d8:
e6:48:0d:a8:4b:b2:56:47:90:b0:4b:4a:17:83:55:40:ff:32:
51:6a:28:ec:1a:f2:50:30:fb:aa:2d:e7:10:99:ca:89:dc:b1:
b4:2d:e8:29:af:ff:e7:5c:44:c8:38:e4:79:6c:ab:02:d2:41:
6a:f3:97:30:9b:7c:8c:b5:be:7b:36:91:ab:f7:51:4c:5c:50:
d9:db:b9:e0:0b:10:6b:d5:88:60:a5:92:78:02:3e:e1:5c:5b:
39:ce:31:db:a5:96:45:fc:96:73:78:12:2a:b2:c8:e3:e4:65:
e7:85:70:4e:a2:d7:1d:90:51:6e:58:19:f1:16:ae:f9:43:d9:
74:9d:b7:b0:40:0d:8a:7a:03:73:33:19:81:b0:23:fa:00:af:
09:77:47:b8:4a:2e:4f:56:ea:fa:a6:9c:22:c7:40:d9:08:41:
0d:14:02:df:f8:b5:6e:91:29:1e:29:c1:73:51:0e:f4:a1:db:
53:70:8a:89:19:51:e1:3c:2a:30:97:6f:c2:46:53:99:49:a7:
17:a4:42:51:a0:92:48:f2:be:8b:ba:7d:99:c0:e8:fa:36:45:
d0:8c:e4:23:ae:c5:31:0e:a5:42:13:4e:11:16:2f:a5:51:91:
b8:a6:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:42:09 2025 by rpki-client