Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/3cx0tsNcYmB5Yc0CXCfauZsKPdM.roa
File: 3cx0tsNcYmB5Yc0CXCfauZsKPdM.roa (raw, json)
Hash identifier: CWpzx1bU01tGU+YtzUWXfRlqv/qMsV8Hbw+5+971UEE=
Subject key identifier: DD:CC:74:B6:C3:5C:62:60:79:61:CD:02:5C:27:DA:B9:9B:0A:3D:D3
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 0193FD22899D4B70F58FFB7599EC9B5EE164
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/3cx0tsNcYmB5Yc0CXCfauZsKPdM.roa
Signing time: Wed 25 Dec 2024 09:25:19 +0000
ROA not before: Wed 25 Dec 2024 09:25:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6700
IP address blocks: 62.108.96.0/19 maxlen: 24
62.193.128.0/19 maxlen: 24
85.222.160.0/23 maxlen: 24
91.148.64.0/18 maxlen: 24
91.223.162.0/24 maxlen: 24
178.20.205.0/24 maxlen: 24
178.20.207.0/24 maxlen: 24
185.47.208.0/22 maxlen: 24
194.106.160.0/19 maxlen: 24
195.252.64.0/18 maxlen: 24
213.244.224.0/20 maxlen: 24
213.244.228.0/22 maxlen: 24
213.244.232.0/21 maxlen: 24
217.26.64.0/20 maxlen: 24
2001:8c8::/32 maxlen: 32
2a02:e40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fd:22:89:9d:4b:70:f5:8f:fb:75:99:ec:9b:5e:e1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Dec 25 09:25:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddcc74b6c35c62607961cd025c27dab99b0a3dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:95:89:b4:99:83:a4:03:a0:dc:0f:ea:e5:
fc:fb:c5:ce:5e:31:e6:dc:45:8b:34:ed:a7:52:e5:
69:65:26:44:fb:d7:a0:07:9f:4b:10:78:d3:9a:78:
d6:a8:ca:f7:b3:40:53:60:a4:a8:87:34:f8:31:d9:
7f:43:63:d6:d1:56:f3:af:de:95:9a:de:c8:fa:b7:
6e:f3:45:51:89:c5:d0:09:3d:1d:55:88:11:3f:05:
ed:cb:2c:ce:a9:0b:e7:a1:49:40:5e:05:2d:c5:4d:
c3:46:35:38:9d:ee:61:86:4a:40:6f:2c:cb:00:e5:
a9:40:d5:a5:e4:7e:2d:2d:6e:2a:e1:78:40:d1:e7:
6f:6f:fc:58:f8:fa:df:6f:8f:9c:c7:2e:ab:59:1d:
74:65:71:44:72:ae:76:cc:2c:b4:0a:8d:ab:4b:05:
ae:c2:f1:f1:93:d6:71:eb:f4:be:f1:d7:e5:d5:e3:
76:e6:e3:51:4a:b8:eb:d8:95:2f:ca:c6:b7:c5:4a:
8d:37:68:58:69:b2:25:98:d6:10:fe:d4:f9:f0:cd:
f1:78:64:d9:4d:3b:ea:9e:db:c3:d3:a1:d5:18:fe:
10:f3:3f:d1:9b:81:be:51:3d:d7:6f:20:8f:ed:67:
b9:92:3a:e0:0d:2c:6e:19:dc:c9:e1:53:45:1d:c0:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CC:74:B6:C3:5C:62:60:79:61:CD:02:5C:27:DA:B9:9B:0A:3D:D3
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/3cx0tsNcYmB5Yc0CXCfauZsKPdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.96.0/19
62.193.128.0/19
85.222.160.0/23
91.148.64.0/18
91.223.162.0/24
178.20.205.0/24
178.20.207.0/24
185.47.208.0/22
194.106.160.0/19
195.252.64.0/18
213.244.224.0/20
217.26.64.0/20
IPv6:
2001:8c8::/32
2a02:e40::/32
Signature Algorithm: sha256WithRSAEncryption
31:23:2e:1c:eb:ff:59:37:55:32:eb:1b:f6:7b:72:38:2a:e5:
f6:12:02:83:5a:f2:1c:68:c7:d5:64:69:ad:5e:b6:ff:f4:2a:
1a:40:fe:3d:b3:dc:f3:7e:03:1c:9e:d7:29:ef:d5:f3:ca:8d:
b9:da:59:b8:50:dc:79:01:01:33:f7:ea:e2:57:6e:70:97:77:
4d:1d:e0:46:f1:23:5a:38:ab:2c:56:36:6b:0e:f5:85:81:7e:
ba:01:00:8e:11:2f:6e:27:0d:13:3e:12:a5:0c:c1:40:dc:96:
7a:ff:64:77:fa:2b:41:fe:65:e0:12:92:d6:bc:2f:c1:da:fd:
30:13:76:7b:35:5d:d4:dc:dd:f2:a0:67:33:23:c1:7f:a7:2a:
b2:4c:0b:12:a0:03:3f:c8:88:fa:5f:03:8f:1e:7f:93:f1:57:
98:20:f8:1d:e8:6e:62:c1:8c:46:6a:ed:3a:84:da:40:3c:e9:
8e:e2:65:6a:46:d9:04:c2:9c:75:da:c4:3c:11:c9:70:63:ba:
77:33:6c:bc:a8:18:a6:00:0e:25:46:4b:d0:01:f5:f8:7b:7f:
54:b8:88:42:7c:ad:21:0b:c6:4d:44:b7:c9:ce:db:e0:41:35:
b3:64:0e:31:70:fc:97:5c:91:64:2c:7d:08:c2:d2:1f:b8:bb:
b6:09:42:46
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZP9IomdS3D1j/t1meybXuFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzhhNzY4YzkxMGJhZGNkNWM0YWVmN2MxNzJhOWYwNjE1
NDdlOGMwHhcNMjQxMjI1MDkyNTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGNjNzRiNmMzNWM2MjYwNzk2MWNkMDI1YzI3ZGFiOTliMGEzZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD+VibSZg6QDoNwP6uX8+8XOXjHm
3EWLNO2nUuVpZSZE+9egB59LEHjTmnjWqMr3s0BTYKSohzT4Mdl/Q2PW0Vbzr96V
mt7I+rdu80VRicXQCT0dVYgRPwXtyyzOqQvnoUlAXgUtxU3DRjU4ne5hhkpAbyzL
AOWpQNWl5H4tLW4q4XhA0edvb/xY+Prfb4+cxy6rWR10ZXFEcq52zCy0Co2rSwWu
wvHxk9Zx6/S+8dfl1eN25uNRSrjr2JUvysa3xUqNN2hYabIlmNYQ/tT58M3xeGTZ
TTvqntvD06HVGP4Q8z/Rm4G+UT3XbyCP7We5kjrgDSxuGdzJ4VNFHcC4dQIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFN3MdLbDXGJgeWHNAlwn2rmbCj3TMB8GA1UdIwQY
MBaAFGJ4p2jJELrc1cSu98FyqfBhVH6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5pbmFNa1F1dHpWeEs3M3dYS3A4R0ZVZm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80MmRmYzAtYTc2NC00ZDVkLWE2MzQt
MzQ1NGY0OTBmZDk2LzEvM2N4MHRzTmNZbUI1WWMwQ1hDZmF1WnNLUGRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80MmRmYzAtYTc2NC00ZDVkLWE2MzQtMzQ1NGY0OTBmZDk2
LzEvWW5pbmFNa1F1dHpWeEs3M3dYS3A4R0ZVZm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBOBAIAATBIAwQFPmxgAwQF
PsGAAwQBVd6gAwQGW5RAAwQAW9+iAwQAshTNAwQAshTPAwQCuS/QAwQFwmqgAwQG
w/xAAwQE1fTgAwQE2RpAMBQEAgACMA4DBQAgAQjIAwUAKgIOQDANBgkqhkiG9w0B
AQsFAAOCAQEAMSMuHOv/WTdVMusb9ntyOCrl9hICg1ryHGjH1WRprV62//QqGkD+
PbPc834DHJ7XKe/V88qNudpZuFDceQEBM/fq4lducJd3TR3gRvEjWjirLFY2aw71
hYF+ugEAjhEvbicNEz4SpQzBQNyWev9kd/orQf5l4BKS1rwvwdr9MBN2ezVd1Nzd
8qBnMyPBf6cqskwLEqADP8iI+l8Djx5/k/FXmCD4HehuYsGMRmrtOoTaQDzpjuJl
akbZBMKcddrEPBHJcGO6dzNsvKgYpgAOJUZL0AH1+Ht/VLiIQnytIQvGTUS3yc7b
4EE1s2QOMXD8l1yRZCx9CMLSH7i7tglCRg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:53:44 2025 by rpki-client