Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RbX6n2ux8nX_3kX_0SX0qCErmcU.roa
File: RbX6n2ux8nX_3kX_0SX0qCErmcU.roa (raw, json)
Hash identifier: r/WyDinpk8Uis9y2ZYtr2oDzG4pfcGvjHaFsI4sObpU=
Subject key identifier: 45:B5:FA:9F:6B:B1:F2:75:FF:DE:45:FF:D1:25:F4:A8:21:2B:99:C5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187574352D99C33E8DB34D59B2B0C7B1E15
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RbX6n2ux8nX_3kX_0SX0qCErmcU.roa
Signing time: Thu 06 Apr 2023 15:50:42 +0000
ROA not before: Thu 06 Apr 2023 15:50:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 194.87.227.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
212.192.245.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:43:52:d9:9c:33:e8:db:34:d5:9b:2b:0c:7b:1e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 15:50:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45b5fa9f6bb1f275ffde45ffd125f4a8212b99c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b0:f7:5d:cc:4c:53:0d:ba:7b:72:5e:36:2e:
ec:6a:10:ca:10:ae:b1:0e:13:64:54:b5:f3:7b:f2:
2b:04:a2:e5:47:91:80:ef:ef:f7:19:53:de:16:f8:
b6:17:85:e6:b9:ca:97:b1:0d:9b:8c:03:33:b5:94:
da:51:02:63:72:dc:49:1d:5d:60:c1:8a:1d:15:d4:
18:49:f0:0a:0c:10:7d:ed:af:be:cb:0e:c2:18:46:
fc:33:54:65:13:fc:36:8b:45:6b:54:e0:6a:58:0f:
2b:ea:8a:c7:c9:6f:cb:04:69:6f:8f:d6:2b:a4:a8:
79:aa:a7:fc:a6:81:1d:7a:af:ee:81:47:64:d4:60:
26:6a:6a:fd:e0:80:88:f9:ed:56:0b:c4:58:67:24:
f5:02:b6:a7:1a:12:51:1f:fd:e4:ea:c2:24:4e:b4:
a5:61:60:9c:ae:02:e2:69:6d:ef:92:a5:e5:6a:45:
46:dc:72:41:ea:77:cb:54:0a:3e:27:39:af:68:49:
8b:66:a2:da:2d:98:06:df:a4:23:15:d8:42:65:fe:
62:a5:2a:89:ef:6d:12:f4:7d:d8:b1:b9:6f:2f:34:
bd:88:e5:4e:cb:e5:da:58:18:15:09:1e:13:53:6d:
71:a9:ca:d0:a8:89:34:de:c1:90:ff:8f:36:e2:63:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B5:FA:9F:6B:B1:F2:75:FF:DE:45:FF:D1:25:F4:A8:21:2B:99:C5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RbX6n2ux8nX_3kX_0SX0qCErmcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.248.0/24
194.87.67.0/24
194.87.227.0/24
212.192.245.0-212.192.246.255
Signature Algorithm: sha256WithRSAEncryption
5f:46:4a:82:c7:c7:8a:63:81:b4:c9:2c:15:f5:45:93:7a:0b:
f6:2b:0e:b3:f6:9d:83:22:93:cb:22:b8:3d:83:c1:e9:b9:35:
28:a3:19:9f:bf:44:2b:1b:ea:f2:69:92:38:8b:cf:54:97:a0:
b9:4a:fe:d8:e3:1e:32:cd:15:cb:d2:21:a3:e1:0a:b4:9b:b0:
be:81:0b:82:1a:14:53:18:d4:64:d8:95:d2:d4:da:40:a2:ce:
39:21:d2:fb:9f:30:bd:89:5e:14:bd:16:94:4d:a4:3f:eb:fa:
79:f7:a6:53:91:eb:03:98:0c:6e:80:d2:8a:71:09:85:2e:18:
e4:b2:b3:94:0d:78:f0:60:4f:72:2f:ab:a1:3c:3f:d6:0d:bb:
a5:59:4f:c9:f7:27:ab:3b:eb:54:0b:4b:34:80:a0:0c:fa:cc:
80:5d:c4:e6:fa:56:3b:c7:d8:22:04:f5:31:7f:c3:e5:c7:79:
36:78:ff:b9:6b:d3:87:6e:4a:15:87:89:62:e7:c7:ed:7c:5d:
1d:93:f4:f9:7c:c6:7c:93:e4:2a:c7:fb:a5:db:97:c0:f7:1b:
c2:45:75:83:68:94:75:4a:92:aa:14:4c:60:bc:da:1c:e6:7b:
84:52:3d:5a:58:49:f9:79:dd:c9:58:a8:3a:d9:70:f5:c2:c6:
d4:18:ff:e7
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYdXQ1LZnDPo2zTVmysMex4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDA2MTU1MDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWI1ZmE5ZjZiYjFmMjc1ZmZkZTQ1ZmZkMTI1ZjRhODIxMmI5OWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrD3XcxMUw26e3JeNi7sahDKEK6x
DhNkVLXze/IrBKLlR5GA7+/3GVPeFvi2F4XmucqXsQ2bjAMztZTaUQJjctxJHV1g
wYodFdQYSfAKDBB97a++yw7CGEb8M1RlE/w2i0VrVOBqWA8r6orHyW/LBGlvj9Yr
pKh5qqf8poEdeq/ugUdk1GAmamr94ICI+e1WC8RYZyT1AranGhJRH/3k6sIkTrSl
YWCcrgLiaW3vkqXlakVG3HJB6nfLVAo+JzmvaEmLZqLaLZgG36QjFdhCZf5ipSqJ
720S9H3YsblvLzS9iOVOy+XaWBgVCR4TU21xqcrQqIk03sGQ/4824mNVOwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFEW1+p9rsfJ1/95F/9El9KghK5nFMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvUmJYNm4ydXg4blhfM2tYXzBTWDBxQ0VybWNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAwlX4AwQA
wldDAwQAwlfjMAwDBADUwPUDBADUwPYwDQYJKoZIhvcNAQELBQADggEBAF9GSoLH
x4pjgbTJLBX1RZN6C/YrDrP2nYMik8siuD2Dwem5NSijGZ+/RCsb6vJpkjiLz1SX
oLlK/tjjHjLNFcvSIaPhCrSbsL6BC4IaFFMY1GTYldLU2kCizjkh0vufML2JXhS9
FpRNpD/r+nn3plOR6wOYDG6A0opxCYUuGOSys5QNePBgT3Ivq6E8P9YNu6VZT8n3
J6s761QLSzSAoAz6zIBdxOb6VjvH2CIE9TF/w+XHeTZ4/7lr04duShWHiWLnx+18
XR2T9Pl8xnyT5CrH+6Xbl8D3G8JFdYNolHVKkqoUTGC82hzme4RSPVpYSfl53clY
qDrZcPXCxtQY/+c=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:59:40 2025 by rpki-client