Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/dOxWsjwPgLkm6t797MIOBmGIl3E.roa
File: dOxWsjwPgLkm6t797MIOBmGIl3E.roa (raw, json)
Hash identifier: GWIAU1ADrwcQAz2ofQFWjhU7VaW315hH+1cnnqq8TFE=
Subject key identifier: 74:EC:56:B2:3C:0F:80:B9:26:EA:DE:FD:EC:C2:0E:06:61:88:97:71
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 018572B4131CED0727A5B33D1400F22D2970
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/dOxWsjwPgLkm6t797MIOBmGIl3E.roa
Signing time: Mon 02 Jan 2023 13:38:02 +0000
ROA not before: Mon 02 Jan 2023 13:38:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48434
IP address blocks: 94.232.168.0/21 maxlen: 27
185.162.218.0/23 maxlen: 27
185.37.52.0/22 maxlen: 27
185.78.20.0/22 maxlen: 27
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:13:1c:ed:07:27:a5:b3:3d:14:00:f2:2d:29:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jan 2 13:38:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74ec56b23c0f80b926eadefdecc20e0661889771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:40:4a:63:20:d1:2f:dd:f2:c8:29:83:d9:
56:04:60:e2:cc:b7:ce:4c:86:2c:b4:b8:14:19:af:
85:ef:64:45:ee:cc:77:b8:87:e3:ce:ff:21:4d:30:
e1:d1:96:96:f3:51:97:66:7e:fb:85:19:05:21:70:
fe:66:71:f5:64:00:7e:48:c6:d6:e0:e4:98:a1:fa:
e7:37:09:5d:8b:ee:44:dc:de:e6:9a:03:ab:ef:de:
a2:93:b8:ef:59:f5:a8:1e:9d:c9:17:ad:22:52:58:
b2:d6:1a:e5:67:5b:ee:06:b3:5a:27:29:72:bc:b5:
9a:67:ff:2f:d2:ad:bc:12:5a:07:d5:b5:e2:7b:86:
a9:8a:8c:e4:5d:4e:61:08:b8:f4:0c:d2:4f:d3:6b:
f1:8a:04:4d:83:83:ee:e0:40:8b:f7:f5:59:b6:83:
fd:47:cc:73:2b:ec:a5:f9:80:ee:d4:bf:c4:65:b2:
74:14:dc:dc:93:71:49:03:5b:9b:a9:47:8a:7d:58:
e7:d2:6a:01:b5:b8:83:fe:c0:78:76:9e:03:02:09:
8d:14:ca:f0:b4:b6:ee:62:76:77:28:98:20:3e:0e:
25:b7:6c:a9:b2:18:82:0c:3c:5a:75:bf:c0:ee:f5:
d7:49:f5:2f:6a:4a:20:b6:5f:5c:02:e5:de:61:68:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EC:56:B2:3C:0F:80:B9:26:EA:DE:FD:EC:C2:0E:06:61:88:97:71
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/dOxWsjwPgLkm6t797MIOBmGIl3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.168.0/21
185.37.52.0/22
185.78.20.0/22
185.162.218.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:5f:97:f2:05:ee:dd:08:1c:1d:fa:67:38:82:ae:69:48:9a:
e6:c5:b3:2b:2b:22:db:42:77:b1:b5:25:f3:e4:52:76:fd:5a:
f0:e9:cb:78:54:62:e7:38:8e:54:77:ba:77:40:63:88:81:23:
cd:9d:66:30:19:96:00:1b:95:74:df:2b:da:7c:57:9f:02:df:
f2:57:4c:85:9c:34:43:52:92:57:2c:21:e8:ea:ea:b3:02:96:
5c:8e:a3:67:95:27:16:7a:d8:d0:ed:24:f8:cb:c3:a7:be:6b:
e2:62:9d:2a:b6:01:69:f6:af:e6:2c:5c:f4:72:de:4f:78:9a:
ef:5e:2e:c2:fe:a4:c7:65:d2:3a:80:30:4d:54:e7:dc:5c:fd:
53:51:e5:d1:11:fa:26:0b:48:94:e2:6e:9c:d3:c1:69:ee:6f:
e2:cb:70:a1:50:dc:b2:b9:03:6b:70:17:39:d3:6e:52:31:c8:
82:ea:5f:7a:88:cb:81:80:c2:b7:f6:5b:2d:44:94:b2:78:80:
7d:f3:ed:be:95:4f:22:9f:89:53:d4:9f:42:90:c3:1c:76:0c:
19:17:95:b1:1c:a0:d3:da:0b:18:04:fa:e8:77:e9:33:4f:88:
d3:da:e1:00:94:55:4d:87:99:e1:0f:69:d3:11:59:05:fa:8a:
28:4e:43:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:41:08 2025 by rpki-client