Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1RW03O1alZshMzsw6y9ZTQrxZtQ.roa
File: 1RW03O1alZshMzsw6y9ZTQrxZtQ.roa (raw, json)
Hash identifier: OsRN2syaW5QRh+51ZdrRAoczVv/hVyMrqKwzfRSMubE=
Subject key identifier: D5:15:B4:DC:ED:5A:95:9B:21:33:3B:30:EB:2F:59:4D:0A:F1:66:D4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018FEDFACD102EDA6261A9A82F7BA65CB355
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1RW03O1alZshMzsw6y9ZTQrxZtQ.roa
Signing time: Thu 06 Jun 2024 14:36:27 +0000
ROA not before: Thu 06 Jun 2024 14:36:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.58.56.0/23 maxlen: 23
194.87.134.0/24 maxlen: 24
194.87.141.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
195.133.17.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.193.4.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:fa:cd:10:2e:da:62:61:a9:a8:2f:7b:a6:5c:b3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 6 14:36:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d515b4dced5a959b21333b30eb2f594d0af166d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:18:21:e5:4d:23:2b:b7:d2:c6:03:12:00:
59:71:a5:0b:e0:5e:b3:d8:b4:62:1a:8b:19:0e:57:
4b:c4:dd:58:a8:7c:88:d5:38:05:bd:bf:33:d1:64:
e1:4e:3c:f6:7e:ee:a1:eb:7b:93:b7:b4:07:d9:9c:
64:13:e4:22:13:46:fa:87:cb:fa:fa:a9:e3:3a:ce:
24:88:b1:78:c1:6f:3f:e5:19:a0:22:a1:70:fc:8e:
63:f9:4b:c7:64:3e:70:4f:18:6e:15:d3:8f:a8:7d:
fd:7e:71:4a:c4:c9:9f:94:76:ff:21:35:f5:66:e8:
3f:e8:46:2b:eb:fb:fa:3b:15:b0:60:51:78:d3:81:
60:1b:36:1b:c0:d8:4b:71:50:a7:50:3c:df:ca:4b:
16:fc:c7:9e:ad:13:d8:72:89:e4:75:53:c4:73:ef:
07:14:46:ac:c6:80:c3:ce:29:c0:4d:e6:24:99:f5:
9f:2f:ce:26:22:fd:2f:bb:56:51:be:a6:52:c7:1b:
76:fa:12:06:ce:fc:9c:27:ef:f2:a4:8f:bc:fb:67:
79:4c:b7:32:22:2a:35:b0:0e:f9:4a:58:11:4f:1b:
0c:d6:da:25:43:ad:88:34:f3:35:09:9c:f1:9a:da:
96:af:99:4b:63:44:bb:93:f1:f0:f6:60:b6:e5:2b:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:B4:DC:ED:5A:95:9B:21:33:3B:30:EB:2F:59:4D:0A:F1:66:D4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1RW03O1alZshMzsw6y9ZTQrxZtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.56.0/23
194.87.134.0/24
194.87.141.0/24
194.87.169.0/24
195.133.17.0/24
195.133.25.0/24
195.133.92.0/23
212.192.1.0/24
212.193.4.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
3d:cd:5d:a4:48:8f:73:43:64:d1:54:96:46:d7:c0:e3:b7:d6:
24:b7:86:2a:10:13:df:3a:d9:64:d2:b8:68:3d:98:14:e3:22:
01:f5:68:2f:20:06:40:92:b3:27:70:06:d8:c6:a7:df:67:18:
e0:89:99:27:c4:2f:b8:b4:11:2a:6a:4c:b7:c1:8b:ed:28:8f:
37:21:ea:1f:94:45:10:81:10:b8:d2:23:1c:af:52:80:0c:6d:
12:cb:4a:b3:e0:8d:59:c0:e7:51:30:c4:3d:40:f7:29:08:c5:
dd:c6:e8:6c:66:fa:1d:c6:01:6c:2a:df:4b:84:05:06:86:e6:
b8:9c:aa:7e:0a:8d:3f:8f:af:9d:48:d4:40:21:c9:a6:f4:ce:
a8:6b:49:2f:92:cd:85:fd:8b:43:4e:67:0c:16:87:af:fb:74:
ad:f1:71:de:b7:09:92:7c:71:65:de:fc:14:3f:8f:59:d8:4f:
f1:15:39:71:ec:72:cf:cb:57:9b:cb:6e:4c:a7:ee:0c:e9:03:
0e:9c:fb:9f:00:6d:35:a3:b5:b9:b5:24:55:23:eb:69:6f:4b:
c8:9a:c4:81:14:6c:1c:bf:4c:1e:b1:fe:b0:e5:90:0a:ec:81:
e5:38:48:09:b7:d0:98:1a:34:74:82:c7:1d:e8:55:3d:ae:d9:
3b:29:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:48:47 2025 by rpki-client