Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/KeUrK4_UJMWg0c5YLf7MToSLB9Q.roa
File: KeUrK4_UJMWg0c5YLf7MToSLB9Q.roa (raw, json)
Hash identifier: VMaw9QStIljkCDVYDmywNcPyfmeBZPhK6qiEDNVy6wk=
Subject key identifier: 29:E5:2B:2B:8F:D4:24:C5:A0:D1:CE:58:2D:FE:CC:4E:84:8B:07:D4
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 01856F2FD6F568500F3C47269C80AC6D4F62
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/KeUrK4_UJMWg0c5YLf7MToSLB9Q.roa
Signing time: Sun 01 Jan 2023 21:14:44 +0000
ROA not before: Sun 01 Jan 2023 21:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 5.250.242.0/24 maxlen: 24
5.250.241.0/24 maxlen: 24
5.250.245.0/24 maxlen: 24
5.250.244.0/24 maxlen: 24
5.250.243.0/24 maxlen: 24
5.250.246.0/24 maxlen: 24
5.250.252.0/24 maxlen: 24
5.250.251.0/24 maxlen: 24
5.250.250.0/24 maxlen: 24
5.250.253.0/24 maxlen: 24
5.250.249.0/24 maxlen: 24
5.250.248.0/24 maxlen: 24
5.250.247.0/24 maxlen: 24
5.250.255.0/24 maxlen: 24
5.250.254.0/24 maxlen: 24
185.67.121.0/24 maxlen: 24
185.67.120.0/24 maxlen: 24
185.67.123.0/24 maxlen: 24
185.67.122.0/24 maxlen: 24
5.250.240.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d6:f5:68:50:0f:3c:47:26:9c:80:ac:6d:4f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Jan 1 21:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29e52b2b8fd424c5a0d1ce582dfecc4e848b07d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:32:3f:e3:3f:e8:8d:07:98:b4:f7:76:c0:
d0:69:61:57:c7:cb:0c:52:f4:77:ed:47:4f:ab:20:
25:84:28:4d:b3:99:7a:cf:0a:ea:98:12:60:a9:0b:
09:82:b8:21:5a:52:a1:c2:de:ef:6f:e7:8e:e1:a9:
42:0b:bb:d8:0e:04:ae:ee:6d:79:e9:62:0e:f3:e6:
41:42:c3:0e:99:df:fa:73:a8:2c:af:f9:07:81:08:
6d:aa:5c:67:30:e4:c9:24:20:d1:b8:65:77:01:6a:
c2:73:cb:9b:fb:8f:4c:3e:08:c2:29:fa:bb:9a:04:
c9:0a:0c:47:5e:15:68:98:f7:96:bd:59:d1:f9:93:
ef:89:3b:67:c4:c1:08:08:26:ac:e2:69:09:05:8e:
0e:5f:2a:df:56:de:ce:58:4b:a0:2d:a9:a8:13:00:
a6:76:ad:60:26:ec:48:25:7e:44:04:37:2f:b3:43:
48:94:5d:40:e4:cd:4d:27:96:55:d9:31:9a:84:c3:
84:3d:cc:db:e8:7c:d5:7d:fb:a5:02:91:30:cb:9f:
41:14:ea:74:2a:55:10:cc:4a:60:c3:a0:f4:f3:01:
f2:c4:55:80:aa:98:4d:1c:77:65:0d:b5:91:02:79:
b9:4b:64:c6:6b:d1:95:6d:50:5e:e4:c8:80:3f:f4:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E5:2B:2B:8F:D4:24:C5:A0:D1:CE:58:2D:FE:CC:4E:84:8B:07:D4
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/KeUrK4_UJMWg0c5YLf7MToSLB9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.240.0/20
185.67.120.0/22
Signature Algorithm: sha256WithRSAEncryption
53:f4:b6:f8:5b:2d:52:df:46:c4:76:bc:04:d5:95:a8:a8:fb:
f3:30:39:11:e0:e6:98:25:94:f7:08:86:40:b7:8b:a8:cc:67:
3b:4b:ff:0d:fa:62:b9:8f:ee:17:89:4e:a4:60:f0:55:35:61:
40:61:8c:c5:a0:56:76:93:e0:5a:98:74:d5:5a:e6:87:40:df:
88:9f:37:8a:f7:b2:46:d1:15:c9:8b:43:51:19:84:40:5f:18:
77:bd:c6:ab:80:ee:e2:89:3f:a4:c6:3d:36:74:aa:b6:47:45:
f3:07:ff:cd:c0:d7:df:40:43:bf:a3:7f:85:9c:b1:3d:34:39:
fb:6a:93:59:ae:da:1d:95:31:b7:d4:c4:d5:8a:d9:90:59:16:
e0:4f:e9:90:bc:da:16:c5:db:fb:ab:2f:87:3d:70:16:da:31:
df:e4:b8:c2:e0:b2:c5:e9:1a:44:1a:c5:af:57:63:0a:1f:c4:
82:26:a7:d5:83:18:6b:29:c3:30:af:e7:9b:6c:dd:82:0f:f3:
76:d1:71:d8:63:75:80:65:43:49:28:c6:bf:8d:e3:36:81:17:
38:f9:db:47:8c:1a:51:6d:02:57:9e:a6:68:e3:e7:c6:a0:ec:
b7:2b:cf:9a:93:40:79:b6:28:72:07:6e:9c:df:8d:ca:88:bd:
0f:ab:04:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:11 2025 by rpki-client