Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/908CjJVwEzY-Q7rq5gWYan6FK7A.roa
File: 908CjJVwEzY-Q7rq5gWYan6FK7A.roa (raw, json)
Hash identifier: r+dWqc5p2uQvaR0hp/ydgSShtCb659XbXMV6CSkrEdU=
Subject key identifier: F7:4F:02:8C:95:70:13:36:3E:43:BA:EA:E6:05:98:6A:7E:85:2B:B0
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019619E0C9404F3B20F88D90F0C02CD79E21
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/908CjJVwEzY-Q7rq5gWYan6FK7A.roa
Signing time: Wed 09 Apr 2025 09:28:04 +0000
ROA not before: Wed 09 Apr 2025 09:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200373
IP address blocks: 45.3.32.0/19 maxlen: 24
65.111.0.0/19 maxlen: 24
95.141.242.0/24 maxlen: 24
2a09:dc00::/29 maxlen: 32
2a0a:1f40::/29 maxlen: 32
2a0a:1f40::/32 maxlen: 32
2a0a:1f41::/32 maxlen: 32
2a0a:da40::/29 maxlen: 29
2a13:3f80::/32 maxlen: 32
2a13:3f83::/32 maxlen: 32
2a13:3f84::/32 maxlen: 32
2a13:3f85::/32 maxlen: 32
2a13:3f86::/32 maxlen: 32
2a13:3f87::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:e0:c9:40:4f:3b:20:f8:8d:90:f0:c0:2c:d7:9e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Apr 9 09:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f74f028c957013363e43baeae605986a7e852bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:34:5d:be:fc:bf:2d:d6:7b:3c:b6:8d:6c:79:
66:a7:08:74:eb:68:4c:45:d4:1c:ba:60:70:30:04:
d8:56:c7:c4:68:a8:0c:f5:51:8e:ff:24:55:b1:61:
68:93:f0:c9:7e:84:70:80:c5:47:7b:32:b5:5e:02:
f6:6b:85:36:1b:61:bf:03:44:62:cc:ff:2f:7c:42:
26:53:56:1c:85:03:0b:97:93:14:54:28:18:27:3e:
48:da:a4:47:d4:29:58:bd:36:67:dd:91:23:09:6c:
d2:dc:20:78:59:27:ad:09:a8:55:b5:b9:e3:ea:f3:
b2:91:c8:94:79:30:bb:3f:a7:33:72:ce:28:0f:3a:
f3:b0:fd:cb:2f:07:ab:7f:fb:0e:68:10:bd:a7:67:
1e:61:19:f2:4d:d0:a5:41:e9:df:50:6f:d7:20:45:
62:bc:77:98:d2:0b:b3:b1:48:b7:de:5b:6f:11:f5:
0c:c7:ef:a4:30:75:ce:8f:cd:58:f2:55:1b:5f:b7:
c6:c8:dd:8a:d2:4a:e3:8d:46:c1:5a:13:b8:30:ee:
fc:05:55:57:8e:e7:87:2e:95:74:41:e9:ea:30:89:
26:e2:78:1f:53:66:e3:0b:ab:7b:6f:0f:9a:cf:0d:
5f:66:d1:5d:b0:ea:c3:13:ee:c1:9a:26:04:d6:95:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4F:02:8C:95:70:13:36:3E:43:BA:EA:E6:05:98:6A:7E:85:2B:B0
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/908CjJVwEzY-Q7rq5gWYan6FK7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
65.111.0.0/19
95.141.242.0/24
IPv6:
2a09:dc00::/29
2a0a:1f40::/29
2a0a:da40::/29
2a13:3f80::/32
2a13:3f83::-2a13:3f87:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:36:ec:b4:99:5b:db:17:97:e5:6b:14:41:05:1d:cb:1c:4e:
07:fa:d1:85:2f:d7:50:5e:bd:be:4e:ca:8e:a5:2e:67:e6:c7:
70:c4:e6:f3:f9:a5:ec:ce:89:37:6f:ae:4a:08:51:47:56:24:
6f:cf:7e:25:ec:0f:94:e6:21:bc:47:27:8f:49:c5:23:a7:ca:
05:90:c4:63:1b:14:58:46:9d:b9:bb:53:8d:e6:d3:c1:f5:c1:
4a:96:81:8c:6d:58:97:55:e8:9f:33:72:9e:52:2d:48:9d:17:
39:65:e4:4a:95:90:83:21:88:74:74:58:35:3c:9f:cc:db:6a:
54:b8:5d:da:f1:3c:66:1b:b5:58:5c:b0:18:92:33:68:6d:bd:
a9:76:e0:e6:5b:66:7f:36:70:11:00:4a:d6:90:3e:b2:9d:aa:
31:47:b3:c1:c5:33:41:12:60:46:3f:ff:11:7b:15:ca:3f:c6:
4a:14:fa:15:77:8f:7b:85:a1:96:81:c5:fa:97:17:69:f0:da:
a5:10:be:04:09:7d:19:2d:52:d0:3e:1e:c3:b5:46:bb:a5:f6:
51:70:77:9b:38:9d:38:6a:76:a4:13:4f:16:55:03:f9:66:49:
a6:8a:5f:8b:9b:1c:17:25:ac:20:ff:cc:85:d9:5f:62:f5:9c:
77:c5:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:38:56 2025 by rpki-client