Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_0--sdnaPadtROC5GxoPszt6ZCA.roa
File: _0--sdnaPadtROC5GxoPszt6ZCA.roa (raw, json)
Hash identifier: S418p161s50rLPl1NFMl9DaKS/R+ecJAK2BQobnKECQ=
Subject key identifier: FF:4F:BE:B1:D9:DA:3D:A7:6D:44:E0:B9:1B:1A:0F:B3:3B:7A:64:20
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CC86BD1FA8D99F629C7400E67DB2F750D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_0--sdnaPadtROC5GxoPszt6ZCA.roa
Signing time: Tue 02 Jan 2024 04:25:58 +0000
ROA not before: Tue 02 Jan 2024 04:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6b:d1:fa:8d:99:f6:29:c7:40:0e:67:db:2f:75:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 04:25:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff4fbeb1d9da3da76d44e0b91b1a0fb33b7a6420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:51:de:07:2c:af:bd:1f:8f:ce:b8:2e:9d:
53:dc:b4:b2:e5:1c:77:12:cc:04:72:27:72:68:57:
41:ca:ac:0c:e6:53:86:e4:1a:3b:72:0a:2a:d8:45:
fa:18:13:fe:08:d1:00:5c:10:c2:e9:ea:8c:6b:48:
20:30:26:be:17:ec:80:e5:e0:31:e7:21:b6:8f:0c:
f2:e0:1d:5e:fa:9a:4d:d1:8b:df:89:4c:98:c3:27:
ee:5e:8d:41:6d:c7:ad:a0:5e:b5:09:cc:50:8e:e8:
90:4e:7f:cf:72:08:1d:89:6a:d2:2c:06:c4:60:84:
83:53:ea:b9:0e:42:a9:c8:48:45:44:e1:43:28:14:
9a:8d:ab:2f:70:6b:79:e9:68:76:a9:b8:ea:a1:c5:
10:54:39:87:d5:23:da:f8:4f:6a:90:e8:ab:12:3b:
9d:67:eb:18:e1:f3:7e:a4:f8:2a:f3:8d:b3:7d:78:
e4:91:3f:83:11:11:b9:14:17:1c:13:01:c4:a4:a5:
ad:4f:19:32:c3:06:b3:b8:71:5e:a6:e3:aa:ee:a6:
95:0e:07:a9:44:1f:cd:a5:75:7d:10:e8:66:6b:25:
d1:da:c1:40:4b:9f:6b:0f:e7:80:3a:ef:1c:ff:17:
77:80:08:fb:ac:ef:74:a1:c0:bf:cb:35:02:f4:c9:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4F:BE:B1:D9:DA:3D:A7:6D:44:E0:B9:1B:1A:0F:B3:3B:7A:64:20
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_0--sdnaPadtROC5GxoPszt6ZCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
212.192.214.0/24
212.192.222.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
33:09:33:ee:30:ea:d7:ed:b4:53:b4:a9:10:69:ed:a1:b2:7f:
62:fd:8b:25:98:57:0c:b2:72:ef:23:e1:95:2e:e6:05:7a:7c:
58:ce:c6:9a:a6:e7:03:cc:a5:f5:9d:f7:8e:0d:85:83:99:ca:
f4:d9:46:60:44:77:ec:54:81:a4:55:39:04:78:d2:9f:bc:e8:
df:67:a1:be:ec:81:31:e6:c2:e6:69:71:cd:3d:3a:65:a0:73:
7b:a8:18:a9:dc:71:0f:63:6b:dd:83:9c:30:56:57:a9:13:a3:
a7:2a:f8:b5:48:ac:44:fe:8c:08:9c:d6:f9:23:99:9f:0c:a9:
21:f2:5b:36:e8:6b:96:74:27:80:bc:ff:7a:6a:40:d7:1d:12:
a6:23:84:43:f8:67:a8:5c:4b:06:4c:2f:ef:f5:3c:c3:7a:05:
ae:6f:5f:f2:2d:48:3c:40:cc:70:48:7b:4f:69:68:12:bf:56:
de:7c:fd:e2:f2:15:12:21:ce:67:7f:a3:b6:9f:d8:4e:a9:32:
81:6c:40:2e:b3:ea:fb:8c:f0:1c:d6:5c:18:e5:07:5e:7c:86:
1d:cd:5a:ec:33:14:a5:c6:ce:e3:8e:ec:a7:34:db:b3:ff:f8:
1a:9b:86:8b:6f:39:30:70:49:b5:51:94:b4:25:d1:8b:50:ed:
96:6e:17:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:36:27 2025 by rpki-client