Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/W4vvQGdkE_j-DeOlNPOUlkr5O-U.roa
File: W4vvQGdkE_j-DeOlNPOUlkr5O-U.roa (raw, json)
Hash identifier: RXwkI1BzAqOQHZcM/THzxKZdAJVqSsaLp1Isb3CKxAg=
Subject key identifier: 5B:8B:EF:40:67:64:13:F8:FE:0D:E3:A5:34:F3:94:96:4A:F9:3B:E5
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 01864A104F35E6E0E5EEF795299AA6C01AE6
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/W4vvQGdkE_j-DeOlNPOUlkr5O-U.roa
Signing time: Mon 13 Feb 2023 09:17:08 +0000
ROA not before: Mon 13 Feb 2023 09:17:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44814
IP address blocks: 185.7.217.0/24 maxlen: 24
95.169.192.0/20 maxlen: 20
95.169.213.0/24 maxlen: 24
95.169.208.0/20 maxlen: 20
95.169.219.0/24 maxlen: 24
95.169.218.0/24 maxlen: 24
95.169.222.0/24 maxlen: 24
93.94.136.0/21 maxlen: 21
93.94.137.0/24 maxlen: 24
93.94.136.0/24 maxlen: 24
93.94.138.0/24 maxlen: 24
93.94.143.0/24 maxlen: 24
93.94.141.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
46.253.3.0/24 maxlen: 24
46.253.2.0/24 maxlen: 24
46.253.1.0/24 maxlen: 24
46.253.0.0/24 maxlen: 24
46.253.4.0/24 maxlen: 24
46.253.10.0/24 maxlen: 24
46.253.8.0/24 maxlen: 24
46.253.7.0/24 maxlen: 24
46.253.6.0/24 maxlen: 24
46.253.5.0/24 maxlen: 24
46.253.15.0/24 maxlen: 24
2a01:4a40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:10:4f:35:e6:e0:e5:ee:f7:95:29:9a:a6:c0:1a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Feb 13 09:17:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b8bef40676413f8fe0de3a534f394964af93be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:ef:bb:f3:e1:9a:b2:5a:de:a9:f4:ac:76:
e2:26:96:ff:43:82:07:eb:2e:ce:9c:e3:82:5b:b4:
b3:d6:29:9b:9b:2e:33:26:4b:01:b1:aa:2a:f8:83:
3b:9f:0d:60:f6:19:7b:c9:d8:64:ea:e4:f1:86:1a:
d6:6e:79:b0:fe:79:9d:d6:3f:c7:6b:30:ac:0a:c7:
c8:6c:10:7f:93:68:10:f5:61:1e:f3:ad:8d:8c:66:
c6:2f:0a:a4:93:1e:eb:c6:66:fe:95:e3:1f:55:80:
c9:b9:f0:8e:fe:5d:20:85:1d:77:5d:ac:b4:b6:ca:
77:ed:4a:db:e6:8b:2d:34:84:be:6f:a5:59:60:97:
b6:fc:ef:af:f0:50:9e:da:86:d8:53:33:55:2c:31:
7a:19:11:48:90:f8:c6:9e:4b:c5:6b:e1:04:e6:ec:
08:77:29:0a:aa:fc:77:ff:50:f0:f7:b5:e9:86:27:
47:3c:a0:da:e2:a2:b5:e6:55:1c:b2:51:68:5e:68:
ec:58:26:2c:da:0d:0b:d3:26:4d:3e:3a:7c:c7:43:
8f:13:d1:95:f3:49:62:59:92:70:e4:8f:08:59:f6:
22:df:92:be:48:6e:1b:c9:1f:60:f0:3f:90:82:30:
e9:db:11:8f:a1:e4:46:c8:88:05:59:93:88:a3:2b:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8B:EF:40:67:64:13:F8:FE:0D:E3:A5:34:F3:94:96:4A:F9:3B:E5
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/W4vvQGdkE_j-DeOlNPOUlkr5O-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.0.0-46.253.8.255
46.253.10.0/24
46.253.15.0/24
93.94.136.0/21
95.169.192.0/19
185.7.217.0/24
IPv6:
2a01:4a40::/32
Signature Algorithm: sha256WithRSAEncryption
07:42:f4:02:49:a7:0b:5e:cc:73:4e:69:2e:d1:ee:3e:8d:99:
bc:60:be:18:81:5b:e8:09:19:e4:47:a4:1e:90:56:63:ae:0c:
ec:33:83:40:3f:d7:f7:9b:8d:08:38:4d:95:f3:98:c5:eb:90:
0d:54:31:d6:d6:99:63:d1:75:68:bc:d0:8d:e8:24:93:72:a3:
80:c1:4d:17:f6:e7:84:90:83:c4:64:6b:f0:35:8b:33:f1:59:
11:38:5d:dc:a1:e1:3d:9f:56:54:68:80:42:08:c0:a6:47:78:
16:33:18:be:fd:de:0d:ad:19:64:2b:1c:76:76:03:24:f1:18:
ac:60:ff:29:7a:38:65:2b:b8:d7:62:68:cd:b8:f1:86:0c:e8:
d6:01:57:a4:9e:34:ec:84:5d:73:39:c3:bf:40:aa:2b:30:1e:
42:e4:11:e8:36:a7:d7:65:a5:52:b9:ae:cb:6d:ee:b0:15:44:
4f:4c:3e:08:fb:01:f2:0a:3b:63:44:a0:d6:9c:43:75:66:6a:
b9:a8:c0:77:f8:3a:90:72:00:1e:5e:9a:80:f5:a5:51:7f:fb:
b5:26:31:2f:2e:31:9c:4a:29:98:83:28:ea:bd:27:aa:11:e2:
5d:13:29:33:66:e0:17:d0:e5:75:07:c6:1d:96:05:99:c6:26:
d8:a4:ff:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:01:00 2025 by rpki-client