Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/U5YIBU7H1rWrw0UTQ23JAoI3BoA.roa
File: U5YIBU7H1rWrw0UTQ23JAoI3BoA.roa (raw, json)
Hash identifier: hqr2TUT74UqzEEqht/R2g5EJEg762idXfXGdTyrb+8M=
Subject key identifier: 53:96:08:05:4E:C7:D6:B5:AB:C3:45:13:43:6D:C9:02:82:37:06:80
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 0194236A40136FE6D771728CFD56DCEC68FC
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/U5YIBU7H1rWrw0UTQ23JAoI3BoA.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6700
IP address blocks: 62.108.96.0/19 maxlen: 24
62.193.128.0/19 maxlen: 24
85.222.160.0/23 maxlen: 24
91.148.64.0/18 maxlen: 24
91.223.162.0/24 maxlen: 24
178.20.205.0/24 maxlen: 24
178.20.207.0/24 maxlen: 24
185.47.208.0/22 maxlen: 24
194.106.160.0/19 maxlen: 24
195.252.64.0/18 maxlen: 24
213.244.224.0/20 maxlen: 24
213.244.228.0/22 maxlen: 24
213.244.232.0/21 maxlen: 24
217.26.64.0/20 maxlen: 24
2001:8c8::/32 maxlen: 32
2a02:e40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:40:13:6f:e6:d7:71:72:8c:fd:56:dc:ec:68:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=539608054ec7d6b5abc34513436dc90282370680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:98:d1:54:b8:a4:ea:8d:be:de:f6:af:26:
a5:3c:87:6f:74:23:d8:7e:34:1b:80:76:4d:e7:1e:
98:2d:a9:f8:4f:87:b3:d4:1d:ad:f4:b4:0f:5b:b3:
f4:8b:b8:0c:d6:b9:12:20:3b:56:33:c4:3d:e0:7f:
99:e0:98:2c:89:bf:81:b3:d9:e3:a8:ee:9e:eb:9f:
ce:82:81:96:f5:67:07:e2:fe:3b:1c:c8:a5:81:9b:
fe:1d:35:26:6d:eb:a1:d6:fa:35:7a:2f:9f:76:c4:
b3:43:02:11:ac:e1:cb:5d:97:05:27:94:6c:9b:30:
64:c5:38:7f:60:a2:b8:80:bd:5b:af:b9:ed:8c:b4:
a4:54:66:6f:2c:a1:27:4b:ab:3a:41:00:7d:c4:9e:
bc:f6:4e:e9:3c:7c:cf:d0:6f:70:a6:6e:4d:cb:b6:
cf:3e:06:36:a8:0b:6f:f1:00:3e:9c:4d:59:4f:db:
46:96:93:50:0f:04:b3:06:3f:84:c6:66:2b:89:ed:
80:ed:31:76:92:46:a5:e9:0d:84:90:88:10:80:5d:
8a:c9:3f:5f:33:e9:7b:99:6c:04:7d:ce:97:5d:02:
41:c2:39:0f:b3:da:d8:e3:f4:c6:2f:83:13:40:ca:
bb:f8:d3:02:c9:4c:1d:93:53:0d:b8:c3:db:4a:82:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:96:08:05:4E:C7:D6:B5:AB:C3:45:13:43:6D:C9:02:82:37:06:80
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/U5YIBU7H1rWrw0UTQ23JAoI3BoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.96.0/19
62.193.128.0/19
85.222.160.0/23
91.148.64.0/18
91.223.162.0/24
178.20.205.0/24
178.20.207.0/24
185.47.208.0/22
194.106.160.0/19
195.252.64.0/18
213.244.224.0/20
217.26.64.0/20
IPv6:
2001:8c8::/32
2a02:e40::/32
Signature Algorithm: sha256WithRSAEncryption
91:ad:94:ff:d4:e1:d4:f0:6e:ba:fc:b5:5e:30:38:ee:08:29:
b4:6b:76:14:41:73:df:85:68:ef:90:4a:26:4a:a6:84:bc:5b:
30:28:19:c7:40:cf:06:4a:ae:e8:dd:b8:1d:da:c8:94:ab:c4:
0b:54:cb:34:ee:45:37:2e:12:09:b4:31:2f:e1:cc:a5:24:c4:
18:90:1a:ce:2f:6c:4d:84:a3:b1:0d:6b:77:ed:0f:79:3b:18:
7c:36:1f:7f:8d:a2:d6:7b:67:13:0b:4d:70:99:71:f0:cf:4c:
0e:b6:1b:0c:d6:12:fc:dd:ad:f0:8f:6e:ba:ec:79:89:d8:90:
17:2a:ca:83:07:1f:86:88:0b:11:af:c9:6f:73:19:49:c1:01:
d8:70:27:df:d0:2b:56:19:bf:96:dd:43:63:ee:31:de:c3:e0:
6a:7c:2a:24:40:48:2b:ae:43:a8:9c:89:47:ff:a1:2f:74:9a:
4e:3c:9d:6f:df:d7:f4:a0:7f:2e:b2:2a:a7:9b:6a:7a:06:16:
e5:97:ea:5c:65:e3:42:15:27:87:68:e4:b2:79:6f:ef:b7:b3:
b8:fa:42:6b:e2:c1:ae:0e:89:a8:51:66:43:d3:c2:b5:26:9e:
63:75:82:f8:f3:a9:fc:9a:eb:06:33:ad:6e:c8:4a:e3:34:8f:
cf:1e:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:02:18 2025 by rpki-client