Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/fxD0KlZ2o7OvKp6H6aAkiR22LX0.roa
File: fxD0KlZ2o7OvKp6H6aAkiR22LX0.roa (raw, json)
Hash identifier: hrYIfkOIjNgkw3cPbfwXXR4ZL9MfSBKr26H504DVHGA=
Subject key identifier: 7F:10:F4:2A:56:76:A3:B3:AF:2A:9E:87:E9:A0:24:89:1D:B6:2D:7D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 01956684FAE9C08B0A42658C3192B652791E
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/fxD0KlZ2o7OvKp6H6aAkiR22LX0.roa
Signing time: Wed 05 Mar 2025 13:35:45 +0000
ROA not before: Wed 05 Mar 2025 13:35:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213020
IP address blocks: 151.216.32.0/24 maxlen: 24
2001:7fc:1::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:84:fa:e9:c0:8b:0a:42:65:8c:31:92:b6:52:79:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Mar 5 13:35:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f10f42a5676a3b3af2a9e87e9a024891db62d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:43:6d:da:eb:4f:44:7f:31:a3:92:0b:34:
8d:22:5f:d3:4e:a5:48:36:17:88:7c:f3:1e:f5:46:
15:0a:27:1b:a0:3c:a6:47:77:a3:b2:66:50:c6:1b:
28:45:8c:0a:8b:a6:0f:4e:63:59:d1:52:7c:77:44:
d7:d7:7b:eb:64:fd:9b:6e:52:89:f9:1f:bd:bb:b4:
fd:e5:05:32:71:be:83:5b:7f:24:b0:92:18:7b:d4:
70:a5:1e:7d:fa:57:10:28:5c:05:87:9e:17:02:18:
a4:a9:75:1d:eb:82:1d:1a:7b:7c:e5:9a:59:05:42:
af:04:6b:b5:82:8a:62:0e:e5:fa:13:19:47:0d:db:
6f:da:b3:33:dc:30:c8:e4:2a:57:7b:28:e2:1d:06:
17:96:58:45:e3:8b:f4:fa:13:76:f5:c6:7d:a0:ae:
61:d7:a5:ca:57:e4:b7:9e:e0:f9:c0:09:80:91:be:
08:c8:e7:7a:9c:42:80:0c:a5:d5:f6:6e:39:66:5d:
71:c6:9a:52:9d:f9:5f:d8:e5:c1:f3:35:34:0f:e4:
7d:50:40:3d:80:85:ba:c8:65:5d:74:ad:1d:7c:1b:
fb:72:dc:ef:6f:58:90:cc:ac:2f:1c:30:d3:a4:ba:
51:f2:d4:ea:eb:92:eb:2b:c8:bb:b0:84:7c:8e:ad:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:10:F4:2A:56:76:A3:B3:AF:2A:9E:87:E9:A0:24:89:1D:B6:2D:7D
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/fxD0KlZ2o7OvKp6H6aAkiR22LX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
IPv6:
2001:7fc:1::/48
Signature Algorithm: sha256WithRSAEncryption
4e:71:1e:07:43:dc:ed:6f:3f:fd:5e:44:ee:07:22:35:9f:d1:
4a:54:fe:00:b6:81:8c:03:42:0b:50:9f:9c:1f:2d:49:6f:33:
d9:06:14:28:8b:14:a4:f0:73:dc:7d:d9:dd:e1:bc:cb:bf:e3:
ae:1e:aa:95:8d:15:1e:cd:22:61:51:fe:c8:6a:01:16:73:99:
52:8e:17:2f:67:f3:19:3b:f9:22:ac:aa:6a:9f:09:7f:f6:b5:
70:d2:6c:4b:4d:2f:89:f6:8b:ab:76:88:0d:4b:50:73:fe:ad:
6e:32:73:c4:8c:8a:02:42:20:b3:df:13:9b:e2:98:6e:d3:fc:
1a:70:d5:01:48:31:87:1f:cb:b2:8f:b6:36:15:02:64:55:8d:
bf:91:e8:a4:f3:b6:15:82:6a:1b:69:09:f8:bf:be:75:b4:60:
9f:ab:1f:76:53:a3:0f:9c:02:47:ed:b6:b8:b2:3a:16:97:5f:
23:f5:97:84:a9:24:f3:04:56:45:6f:fc:bc:cc:ec:07:18:91:
06:c3:c4:cb:34:e0:9a:23:22:de:b5:c7:91:ae:97:b1:b1:0c:
af:07:63:4c:b3:f3:f0:8b:9a:eb:51:82:3b:bd:d6:ea:29:1e:
da:9f:35:d3:e4:2b:e2:69:1d:73:b2:d3:e1:a6:8b:50:8f:b2:
aa:0b:1f:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZVmhPrpwIsKQmWMMZK2UnkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi
ZjQ3NWQwHhcNMjUwMzA1MTMzNTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjEwZjQyYTU2NzZhM2IzYWYyYTllODdlOWEwMjQ4OTFkYjYyZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpBDbdrrT0R/MaOSCzSNIl/TTqVI
NheIfPMe9UYVCicboDymR3ejsmZQxhsoRYwKi6YPTmNZ0VJ8d0TX13vrZP2bblKJ
+R+9u7T95QUycb6DW38ksJIYe9RwpR59+lcQKFwFh54XAhikqXUd64IdGnt85ZpZ
BUKvBGu1gopiDuX6ExlHDdtv2rMz3DDI5CpXeyjiHQYXllhF44v0+hN29cZ9oK5h
16XKV+S3nuD5wAmAkb4IyOd6nEKADKXV9m45Zl1xxppSnflf2OXB8zU0D+R9UEA9
gIW6yGVddK0dfBv7ctzvb1iQzKwvHDDTpLpR8tTq65LrK8i7sIR8jq1B9QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH8Q9CpWdqOzryqeh+mgJIkdti19MB8GA1UdIwQY
MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt
YmNmNzcwMjY5MzlkLzEvZnhEMEtsWjJvN092S3A2SDZhQWtpUjIyTFgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk
LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAl9ggMA8E
AgACMAkDBwAgAQf8AAEwDQYJKoZIhvcNAQELBQADggEBAE5xHgdD3O1vP/1eRO4H
IjWf0UpU/gC2gYwDQgtQn5wfLUlvM9kGFCiLFKTwc9x92d3hvMu/464eqpWNFR7N
ImFR/shqARZzmVKOFy9n8xk7+SKsqmqfCX/2tXDSbEtNL4n2i6t2iA1LUHP+rW4y
c8SMigJCILPfE5vimG7T/Bpw1QFIMYcfy7KPtjYVAmRVjb+R6KTzthWCahtpCfi/
vnW0YJ+rH3ZTow+cAkfttriyOhaXXyP1l4SpJPMEVkVv/LzM7AcYkQbDxMs04Joj
It61x5Gul7GxDK8HY0yz8/CLmutRgju91uopHtqfNdPkK+JpHXOy0+Gmi1CPsqoL
H70=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:09:20 2025 by rpki-client