Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w2YF-fOvevMxgtFTpfc9Jkt1soA.roa
File: w2YF-fOvevMxgtFTpfc9Jkt1soA.roa (raw, json)
Hash identifier: 7cXPJCm55YECYYLdnEPsO9FyAF1F1DNbmkiPKwjwkak=
Subject key identifier: C3:66:05:F9:F3:AF:7A:F3:31:82:D1:53:A5:F7:3D:26:4B:75:B2:80
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191E095F1C1F5FB5EC556F5E53CEE0F27CD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w2YF-fOvevMxgtFTpfc9Jkt1soA.roa
Signing time: Wed 11 Sep 2024 10:16:48 +0000
ROA not before: Wed 11 Sep 2024 10:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.58.155.0/24 maxlen: 24
194.87.29.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:95:f1:c1:f5:fb:5e:c5:56:f5:e5:3c:ee:0f:27:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 11 10:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c36605f9f3af7af33182d153a5f73d264b75b280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:a9:11:8e:15:75:df:f2:82:cf:16:8c:0d:
bd:f2:10:43:dd:99:9d:77:4b:91:2d:04:b7:4f:4b:
20:84:7e:ab:b4:52:41:db:35:a0:56:ce:19:39:ce:
5d:aa:11:cf:de:11:f9:90:ac:ef:91:6e:19:32:e3:
0f:5f:42:f7:69:9c:f7:5a:38:20:f5:fc:17:c4:55:
ac:b9:0a:38:30:0e:cc:36:a9:a0:d0:eb:4e:5d:11:
65:e4:fc:38:fe:c8:95:2d:aa:7b:bd:df:42:e7:64:
b2:d1:d0:3d:3b:3a:17:ec:28:96:a9:a5:b6:31:0d:
55:d0:0c:7e:bc:84:0c:dc:b9:21:1b:0f:f0:b9:f6:
ae:29:7d:de:37:95:b8:92:49:9f:55:01:91:69:0c:
f5:ab:03:45:e4:52:cf:40:48:c9:c1:80:76:dc:52:
06:3f:e7:21:1d:a2:02:50:f1:90:2b:27:97:fa:59:
bc:58:fb:f0:ad:d5:c8:b3:e0:fe:63:56:9a:3d:8a:
ec:17:80:54:b8:99:04:17:c9:d9:97:15:d5:9f:c1:
dd:82:68:37:24:11:27:11:d7:88:ef:af:91:a5:73:
57:c0:95:4d:d8:ff:1a:93:ac:dd:ab:22:50:6a:8e:
90:15:f1:30:4d:f0:8c:07:2c:5b:80:3b:04:0b:f2:
c7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:66:05:F9:F3:AF:7A:F3:31:82:D1:53:A5:F7:3D:26:4B:75:B2:80
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w2YF-fOvevMxgtFTpfc9Jkt1soA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.155.0/24
194.87.29.0/24
194.87.169.0/24
195.133.24.0/23
195.133.50.0/23
195.133.92.0/23
212.192.1.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
5a:65:cc:d1:0e:a3:30:d8:01:59:f9:46:bd:0c:29:60:86:fb:
50:9e:ea:cb:cb:ca:2f:c8:03:c3:59:f5:b4:a7:5a:7f:26:4e:
ea:ec:0b:64:df:6f:6f:32:a4:f9:89:f7:74:1d:2d:bb:5a:5e:
d9:98:73:93:ac:db:84:71:01:d1:47:c8:1b:0d:51:2c:19:d0:
1c:61:48:47:1b:db:0f:81:9e:0a:58:cc:37:81:9d:d6:6c:94:
5a:94:1e:9b:9c:87:5f:55:b6:1d:98:83:b1:9d:64:68:92:57:
d7:eb:fe:b0:f8:0c:43:ae:12:20:97:9d:40:5a:fc:dd:0f:a6:
58:b3:f1:62:1b:be:7c:86:74:6d:68:bd:9d:25:af:ad:3a:77:
15:c7:84:8e:ae:25:39:f7:3c:27:a5:be:92:de:be:a6:50:6f:
e7:50:f8:53:48:58:e0:31:a5:c1:16:ce:73:6a:49:95:12:07:
4d:8d:76:35:49:47:b1:46:3f:87:af:71:c0:de:ce:ae:ca:ae:
33:2e:d9:70:94:e5:82:ad:70:54:d6:72:60:d0:77:dc:ed:e5:
47:17:d3:4b:f6:b6:ef:b7:5f:bc:74:98:d7:b7:41:cc:27:0d:
4a:7c:11:5d:87:e3:ba:c6:6f:9c:3e:d1:b0:ec:ab:d6:dd:bb:
73:de:52:2d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZHglfHB9ftexVb15TzuDyfNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwOTExMTAxNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzY2MDVmOWYzYWY3YWYzMzE4MmQxNTNhNWY3M2QyNjRiNzViMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpmpEY4Vdd/ygs8WjA298hBD3Zmd
d0uRLQS3T0sghH6rtFJB2zWgVs4ZOc5dqhHP3hH5kKzvkW4ZMuMPX0L3aZz3Wjgg
9fwXxFWsuQo4MA7MNqmg0OtOXRFl5Pw4/siVLap7vd9C52Sy0dA9OzoX7CiWqaW2
MQ1V0Ax+vIQM3LkhGw/wufauKX3eN5W4kkmfVQGRaQz1qwNF5FLPQEjJwYB23FIG
P+chHaICUPGQKyeX+lm8WPvwrdXIs+D+Y1aaPYrsF4BUuJkEF8nZlxXVn8Hdgmg3
JBEnEdeI76+RpXNXwJVN2P8ak6zdqyJQao6QFfEwTfCMByxbgDsEC/LHgwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFMNmBfnzr3rzMYLRU6X3PSZLdbKAMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvdzJZRi1mT3Zldk14Z3RGVHBmYzlKa3Qxc29BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQAwjqbAwQA
wlcdAwQAwlepAwQBw4UYAwQBw4UyAwQBw4VcAwQA1MABAwQB1MEaMBQEAgACMA4D
BQMqAVfAAwUDKgz/QDANBgkqhkiG9w0BAQsFAAOCAQEAWmXM0Q6jMNgBWflGvQwp
YIb7UJ7qy8vKL8gDw1n1tKdafyZO6uwLZN9vbzKk+Yn3dB0tu1pe2Zhzk6zbhHEB
0UfIGw1RLBnQHGFIRxvbD4GeCljMN4Gd1myUWpQem5yHX1W2HZiDsZ1kaJJX1+v+
sPgMQ64SIJedQFr83Q+mWLPxYhu+fIZ0bWi9nSWvrTp3FceEjq4lOfc8J6W+kt6+
plBv51D4U0hY4DGlwRbOc2pJlRIHTY12NUlHsUY/h69xwN7OrsquMy7ZcJTlgq1w
VNZyYNB33O3lRxfTS/a277dfvHSY17dBzCcNSnwRXYfjusZvnD7RsOyr1t27c95S
LQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:39:55 2025 by rpki-client