Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/cZ7XP0CPmH5uo3g1gIekQKozUSQ.roa
File: cZ7XP0CPmH5uo3g1gIekQKozUSQ.roa (raw, json)
Hash identifier: TdfglkbB5cWY1D9Xw71QGGQC8WebgHljmqzti7HsHBc=
Subject key identifier: 71:9E:D7:3F:40:8F:98:7E:6E:A3:78:35:80:87:A4:40:AA:33:51:24
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 018A7FECAEC3F9167F073F1AAD2755F42379
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/cZ7XP0CPmH5uo3g1gIekQKozUSQ.roa
Signing time: Sun 10 Sep 2023 16:28:52 +0000
ROA not before: Sun 10 Sep 2023 16:28:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204106
IP address blocks: 46.20.202.0/24 maxlen: 24
109.74.72.0/24 maxlen: 24
77.247.198.0/24 maxlen: 24
2a13:1b00:1::/48 maxlen: 48
2a13:1b00::/29 maxlen: 29
2a13:1b00:1000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7f:ec:ae:c3:f9:16:7f:07:3f:1a:ad:27:55:f4:23:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Sep 10 16:28:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=719ed73f408f987e6ea378358087a440aa335124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:ee:72:ac:b4:4f:38:11:ca:3d:39:75:d4:
66:9f:f7:1d:1e:43:9e:32:51:a1:93:76:de:c4:0b:
59:fc:10:96:18:47:6a:6c:52:78:80:2b:1f:25:89:
42:05:b9:c5:68:40:67:78:0d:2c:e0:2c:89:ae:48:
1a:c6:a9:bc:d5:4f:66:39:be:06:7f:4b:6a:cd:71:
f3:b9:a1:43:c4:e4:c0:54:24:05:c3:1d:86:e5:5f:
8f:b3:55:7d:ce:62:e2:b9:61:32:e1:49:85:bf:ad:
93:e7:55:8d:4e:b7:9c:0e:30:81:e2:b0:d5:e9:03:
a7:16:d7:f3:3e:a0:84:70:83:25:59:b5:70:59:85:
61:60:8f:75:9a:3c:1f:2b:b4:91:3f:fe:a8:7e:93:
a4:14:c0:0a:5b:9b:10:d9:cb:43:97:48:2b:a9:56:
1d:7d:e8:40:ba:5c:b2:b1:cc:83:6f:21:9a:8d:8c:
ea:be:a4:33:9c:85:42:d9:c8:37:2e:d3:9a:d4:21:
f9:f3:b1:32:e5:a9:c5:be:f7:27:64:4e:a4:d6:f6:
4e:bc:24:36:5a:28:43:18:22:0f:39:fd:f5:a5:69:
6c:e3:db:90:a1:3e:da:4b:24:dc:55:c7:ad:43:ff:
b8:e2:d5:78:4d:95:89:59:5e:74:f8:58:7f:f3:84:
46:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9E:D7:3F:40:8F:98:7E:6E:A3:78:35:80:87:A4:40:AA:33:51:24
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/cZ7XP0CPmH5uo3g1gIekQKozUSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.202.0/24
77.247.198.0/24
109.74.72.0/24
IPv6:
2a13:1b00::/29
Signature Algorithm: sha256WithRSAEncryption
1a:7c:d4:4f:4b:ea:1d:5b:93:5f:63:37:01:ba:5a:6b:ed:2b:
e8:ec:15:9a:9f:07:9a:4a:57:44:db:67:c4:7f:d4:63:99:60:
c4:d6:c9:d7:ff:57:75:90:07:54:cc:3d:5e:85:27:20:e3:9e:
2e:b5:5e:92:f4:8b:87:99:4e:1f:e5:40:9f:8c:bb:48:ea:54:
50:75:47:52:9a:60:c0:26:dc:22:87:5d:fb:20:89:90:7c:c0:
7a:a0:49:5b:5a:92:ec:7f:3b:d0:3a:ed:02:c2:8f:1b:b2:70:
8b:ce:1f:33:3f:1a:c4:07:d0:5f:d2:26:99:a1:0e:e8:fa:62:
47:05:e5:83:b7:12:7e:de:64:e8:12:71:b0:11:a9:6b:1a:8d:
42:17:8f:34:d6:81:78:f0:43:77:a6:27:78:a1:b6:0f:83:a5:
4b:bb:49:1d:3a:fe:5f:2d:c6:03:7d:e9:19:bc:35:b2:c4:0a:
d2:96:9f:4d:b2:4e:d8:fc:3f:b1:60:ea:6e:07:dd:c2:e9:10:
46:35:60:28:94:89:17:25:6e:5f:62:1f:3b:b7:e2:7f:0f:58:
0d:a3:ac:fe:df:b6:d9:22:cd:a7:88:f7:7b:9c:24:02:e2:b5:
82:c7:14:08:78:76:02:59:4d:d6:a7:b6:96:e1:8f:70:38:34:
cf:5b:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:18:31 2025 by rpki-client