Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/FXe7dszgdLVClHGE_dziXIrGNdQ.roa
File: FXe7dszgdLVClHGE_dziXIrGNdQ.roa (raw, json)
Hash identifier: sxiYZWZ2pwqob7ZqixwolQ2mOBVEwp029iWTqNqDufM=
Subject key identifier: 15:77:BB:76:CC:E0:74:B5:42:94:71:84:FD:DC:E2:5C:8A:C6:35:D4
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 0194E8FE3183FEF32CCD5BFE3AF3F32DF3D4
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/FXe7dszgdLVClHGE_dziXIrGNdQ.roa
Signing time: Sun 09 Feb 2025 04:36:00 +0000
ROA not before: Sun 09 Feb 2025 04:36:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31643
IP address blocks: 85.28.0.0/20 maxlen: 20
85.28.0.0/21 maxlen: 21
85.28.8.0/21 maxlen: 21
85.28.16.0/20 maxlen: 20
85.28.16.0/21 maxlen: 21
85.28.24.0/21 maxlen: 21
85.28.32.0/20 maxlen: 20
194.31.157.0/24 maxlen: 24
217.151.16.0/20 maxlen: 20
217.151.16.0/21 maxlen: 21
217.151.24.0/21 maxlen: 21
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e8:fe:31:83:fe:f3:2c:cd:5b:fe:3a:f3:f3:2d:f3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Feb 9 04:36:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1577bb76cce074b542947184fddce25c8ac635d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:9e:58:e4:2d:c8:c9:05:22:aa:32:43:f7:
9a:ad:93:08:00:39:c2:a4:38:6e:2e:66:1d:07:b7:
fa:f1:a8:b3:7e:76:b1:07:1c:2c:18:0f:97:eb:69:
fc:b8:03:c6:97:b1:bf:ec:b0:32:a2:a8:73:2b:30:
51:3f:32:fd:64:e4:ab:ec:06:23:42:61:d7:bf:cd:
65:49:05:fc:06:ef:ec:06:dc:c6:85:18:50:15:79:
23:55:ed:f5:e7:02:66:72:b1:cb:90:4c:9a:cd:65:
ad:e9:35:bc:33:c9:61:fe:6f:db:93:ee:bd:31:db:
46:93:e4:fc:54:8d:db:99:32:65:d0:b3:10:87:ad:
d2:2e:68:5d:22:6b:81:2e:29:4a:1d:ce:b8:53:fc:
0a:c7:61:72:fd:d2:93:4c:c6:78:cc:3f:2e:2d:a4:
3f:66:46:e3:4a:d3:c5:4c:a6:4a:7b:ba:e0:7a:7f:
c7:23:5a:b3:c1:b5:f7:02:29:5d:b3:30:e6:fd:53:
35:29:8a:be:90:49:17:f2:31:d1:0d:b2:f1:e0:c0:
ca:25:a2:30:0d:5d:ab:6b:75:e5:0b:c0:ca:4a:5e:
58:51:bc:4d:3f:c0:2a:3d:54:07:d7:b2:dd:6a:8b:
0c:3e:bc:e3:8c:10:98:7e:84:53:e0:c0:33:c3:b5:
91:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:77:BB:76:CC:E0:74:B5:42:94:71:84:FD:DC:E2:5C:8A:C6:35:D4
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/FXe7dszgdLVClHGE_dziXIrGNdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.0.0-85.28.47.255
194.31.157.0/24
217.151.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:ad:60:e7:a1:ec:11:7d:1f:66:2a:01:0e:45:c5:8b:9b:41:
c1:da:5d:a5:45:11:17:f5:89:d0:04:27:c3:a2:37:88:9d:ec:
d8:00:cb:f1:bc:9d:66:2f:b8:96:78:bf:a2:22:60:fc:94:32:
74:d1:fd:06:c3:6a:b5:6c:dd:fb:a9:91:0a:85:c0:f0:ed:4e:
4f:23:a7:09:6b:77:dd:0b:b9:c7:f3:84:56:d0:38:e0:35:0a:
41:2f:a2:a2:a4:75:98:e5:30:66:3a:e4:32:58:48:93:2c:16:
3f:74:a2:bc:88:c8:5f:e5:09:fa:8a:28:ba:5c:c7:63:67:61:
c5:b1:08:96:49:f6:a7:39:f9:08:e5:66:3c:d0:bd:e3:c1:e1:
91:e7:eb:97:01:11:c4:2b:b3:76:ad:21:2b:15:35:69:49:d5:
ea:d4:0d:29:85:fc:d7:24:dc:69:a7:fe:e9:55:f1:dc:54:9d:
8c:1a:6c:29:b3:7e:c6:e3:4b:51:0a:fe:f5:ab:5e:19:77:ac:
19:cf:a6:9a:18:c6:98:6d:2f:31:b6:3a:eb:0e:47:05:dc:70:
b3:70:57:74:27:ac:4f:03:1e:1d:9b:88:31:7f:f9:c0:13:01:
0a:fa:6b:67:0a:24:12:50:c9:0e:d6:31:dd:94:9f:31:e7:35:
75:27:cb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:22:49 2025 by rpki-client