Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/02gfttZW3BtqlHgAltVF3st0omU.roa
File: 02gfttZW3BtqlHgAltVF3st0omU.roa (raw, json)
Hash identifier: 2pRfrNVT/OtPAyAuMeGjcsLfhGvrxWx4kZEHMNgsteY=
Subject key identifier: D3:68:1F:B6:D6:56:DC:1B:6A:94:78:00:96:D5:45:DE:CB:74:A2:65
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187523E1B2C379DC35BF23F34900695221D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/02gfttZW3BtqlHgAltVF3st0omU.roa
Signing time: Wed 05 Apr 2023 16:26:54 +0000
ROA not before: Wed 05 Apr 2023 16:26:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.124.226.0/24 maxlen: 24
193.124.224.0/23 maxlen: 23
212.192.16.0/21 maxlen: 24
194.87.192.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:3e:1b:2c:37:9d:c3:5b:f2:3f:34:90:06:95:22:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 5 16:26:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3681fb6d656dc1b6a94780096d545decb74a265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:86:e1:d1:41:78:51:0c:53:a7:cc:b4:c0:e3:
aa:b1:f8:48:0d:29:43:23:1c:8d:a3:35:3d:7a:d0:
0b:67:9e:b5:fb:7c:17:c9:3b:73:a9:fd:f2:28:be:
20:7b:61:83:39:f6:20:5d:77:2d:db:f1:b6:29:75:
e6:20:f1:73:71:25:0d:01:d8:3c:7c:17:64:55:25:
fc:f6:9f:e9:d0:40:92:30:bd:ef:fb:95:9e:42:7a:
2b:cc:08:08:a5:f3:6d:86:d3:a6:fb:68:a2:a8:88:
d0:ea:41:9e:95:3c:b7:f8:f3:cd:ca:bf:aa:f4:1c:
83:60:09:9c:89:4a:6a:78:e4:91:2f:50:2c:3c:b3:
45:3e:de:73:00:6f:17:c2:96:37:b6:11:b1:04:37:
89:2c:0e:5f:1a:ad:d6:cd:0c:a3:e3:e6:81:05:43:
1b:33:90:f2:53:aa:5c:9b:6a:90:56:aa:67:7d:93:
c0:49:3d:22:7b:a6:86:1d:4f:d1:03:7e:97:72:51:
0d:8c:14:18:4d:13:2d:a5:49:11:93:e3:18:62:0b:
33:74:77:84:78:cf:8c:8b:29:e1:be:bf:b5:23:bd:
20:75:74:37:82:6d:e1:8d:70:87:03:54:e1:e0:63:
b0:1d:dd:f8:3e:25:f4:53:ef:ba:0f:f2:2a:2b:d0:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:68:1F:B6:D6:56:DC:1B:6A:94:78:00:96:D5:45:DE:CB:74:A2:65
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/02gfttZW3BtqlHgAltVF3st0omU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.224.0-193.124.226.255
194.87.192.0/22
212.192.16.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:63:54:07:bf:65:70:33:d0:ca:49:1e:bf:fc:d5:8c:35:69:
f7:55:6d:d9:31:17:84:54:9a:8d:b2:24:8f:f8:9a:e1:12:6c:
51:7a:f1:ec:50:1e:6b:d0:0f:e5:98:77:42:bc:39:fc:f0:81:
ba:fc:fa:e3:35:72:15:ac:8a:25:44:2f:1a:e6:a9:0a:b7:b4:
51:c5:cb:89:d0:d9:3a:73:97:d3:37:5e:27:c7:5c:68:8e:b9:
2d:d9:58:75:9f:2f:70:07:8d:a4:94:69:f1:37:4f:60:1e:4b:
7d:c3:3c:0b:99:f2:ea:4d:1f:21:2f:d0:7f:79:07:fe:9d:a6:
d6:1c:25:c2:08:0d:6d:87:8f:2c:14:9b:2b:3b:af:5d:ad:dd:
64:f9:3a:cc:18:08:23:a2:18:d3:8b:70:61:3d:b0:ca:af:4f:
b7:9b:98:14:bb:ed:12:79:4c:75:d4:a4:a7:a7:82:1c:94:6a:
bc:52:a8:d9:40:f6:1d:e0:c4:f7:84:88:c9:2a:85:26:6c:96:
c8:b6:bf:2d:ca:47:4f:4f:48:1b:1c:d3:c1:17:ed:d2:76:0f:
3e:33:d4:b2:aa:32:b7:4b:58:06:68:a6:89:01:3d:04:57:30:
28:fa:c2:ae:92:80:c0:bc:ac:ad:ef:26:19:e3:59:50:e9:d8:
b6:c6:7b:b7
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYdSPhssN53DW/I/NJAGlSIdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDA1MTYyNjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzY4MWZiNmQ2NTZkYzFiNmE5NDc4MDA5NmQ1NDVkZWNiNzRhMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYbh0UF4UQxTp8y0wOOqsfhIDSlD
IxyNozU9etALZ561+3wXyTtzqf3yKL4ge2GDOfYgXXct2/G2KXXmIPFzcSUNAdg8
fBdkVSX89p/p0ECSML3v+5WeQnorzAgIpfNthtOm+2iiqIjQ6kGelTy3+PPNyr+q
9ByDYAmciUpqeOSRL1AsPLNFPt5zAG8XwpY3thGxBDeJLA5fGq3WzQyj4+aBBUMb
M5DyU6pcm2qQVqpnfZPAST0ie6aGHU/RA36XclENjBQYTRMtpUkRk+MYYgszdHeE
eM+Miynhvr+1I70gdXQ3gm3hjXCHA1Th4GOwHd34PiX0U++6D/IqK9AuswIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNNoH7bWVtwbapR4AJbVRd7LdKJlMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMDJnZnR0WlczQnRxbEhnQWx0VkYzc3Qwb21VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAXBfOAD
BADBfOIDBALCV8ADBAPUwBAwDQYJKoZIhvcNAQELBQADggEBAEtjVAe/ZXAz0MpJ
Hr/81Yw1afdVbdkxF4RUmo2yJI/4muESbFF68exQHmvQD+WYd0K8Ofzwgbr8+uM1
chWsiiVELxrmqQq3tFHFy4nQ2Tpzl9M3XifHXGiOuS3ZWHWfL3AHjaSUafE3T2Ae
S33DPAuZ8upNHyEv0H95B/6dptYcJcIIDW2HjywUmys7r12t3WT5OswYCCOiGNOL
cGE9sMqvT7ebmBS77RJ5THXUpKenghyUarxSqNlA9h3gxPeEiMkqhSZslsi2vy3K
R09PSBsc08EX7dJ2Dz4z1LKqMrdLWAZopokBPQRXMCj6wq6SgMC8rK3vJhnjWVDp
2LbGe7c=
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:09:47 2025 by rpki-client