Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/lFluUa8idFUwpgnGz_6H1UuZEqU.roa
File: lFluUa8idFUwpgnGz_6H1UuZEqU.roa (raw, json)
Hash identifier: yweX4XpowZWVHnJ91yVXWQjq7l9s6H6KW5E99O1RJRY=
Subject key identifier: 94:59:6E:51:AF:22:74:55:30:A6:09:C6:CF:FE:87:D5:4B:99:12:A5
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018A38BE7197A4B136C51B88A07CC067B0FB
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/lFluUa8idFUwpgnGz_6H1UuZEqU.roa
Signing time: Sun 27 Aug 2023 20:45:19 +0000
ROA not before: Sun 27 Aug 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 94.241.168.0/24 maxlen: 24
94.241.169.0/24 maxlen: 24
94.241.170.0/24 maxlen: 24
94.241.171.0/24 maxlen: 24
178.253.40.0/24 maxlen: 24
178.253.41.0/24 maxlen: 24
178.253.42.0/24 maxlen: 24
178.253.43.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:38:be:71:97:a4:b1:36:c5:1b:88:a0:7c:c0:67:b0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 27 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94596e51af22745530a609c6cffe87d54b9912a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:e8:53:af:c2:fa:51:6a:66:d1:ce:fe:0b:
12:1e:dd:43:77:a5:11:fa:87:48:5a:0a:f0:7f:59:
80:ef:80:47:f6:4f:63:40:98:7c:9c:73:24:40:a8:
75:b0:42:ab:80:c8:cb:97:77:ac:bf:fd:44:a2:51:
27:ec:7b:11:aa:80:75:92:e0:e0:98:d0:3c:e9:24:
3e:0b:6c:33:dd:3a:40:52:ae:64:d8:82:ce:6f:bf:
f9:e3:04:f5:57:9c:56:93:52:7a:f2:8c:42:be:3f:
83:64:3a:79:94:ba:f5:ae:81:a4:d9:3e:01:ab:a0:
c9:0b:e7:88:a5:da:af:4d:4e:11:54:56:7e:0c:e3:
6e:df:37:b3:df:98:73:44:60:53:9e:d3:64:06:83:
2f:da:e6:f8:09:d2:8b:58:d5:a5:59:a6:1d:9b:3d:
ca:7f:6a:48:06:c9:79:6f:77:a0:45:a5:ff:14:e5:
22:bd:67:be:d7:82:e8:d1:f2:54:bf:d3:c0:3d:55:
0f:57:6e:41:99:fc:6e:69:ea:07:58:9c:5d:3a:56:
c2:fd:3c:e6:b2:d9:d7:17:b9:45:ba:d0:31:07:da:
77:06:d3:b6:7b:15:7f:51:54:75:c4:7e:c2:90:a6:
5f:af:17:93:3c:80:c1:dd:35:99:af:04:37:36:1b:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:59:6E:51:AF:22:74:55:30:A6:09:C6:CF:FE:87:D5:4B:99:12:A5
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/lFluUa8idFUwpgnGz_6H1UuZEqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.168.0/22
178.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
98:3a:03:61:a2:b2:2a:b3:f1:bc:2e:f5:d2:1b:cb:7b:4e:e7:
50:84:d6:22:63:80:1b:20:5d:bc:ac:99:51:3e:7e:11:7e:50:
4d:ff:df:27:53:21:35:d2:bd:08:63:d4:79:27:0f:f7:4a:e8:
87:17:16:53:02:94:de:ea:f4:34:b5:57:18:07:1c:44:d5:37:
ef:b0:d5:4e:f3:ef:4d:0a:ce:21:83:67:46:82:b2:41:6a:57:
06:62:b2:27:d1:3e:a3:8e:13:e8:9a:03:e3:3b:48:50:38:61:
88:59:c8:2c:69:ac:63:21:e2:5f:55:44:34:99:be:37:18:23:
1b:87:00:f4:f5:43:c1:8a:1e:de:7d:bb:7c:e5:b8:4a:a4:0f:
87:dc:f0:84:7b:78:95:bc:c8:c2:09:02:fd:80:3f:03:1a:06:
1f:ca:82:22:1f:0e:4f:46:2a:e1:4e:32:75:5d:1c:cd:59:bb:
7c:fd:d9:cb:9d:6b:8a:b6:59:48:1f:09:32:c2:37:e4:c7:ab:
57:40:a5:24:b4:a4:c3:ae:ee:5e:68:ba:6b:b9:24:c1:e4:81:
b6:0c:b4:e8:a5:4d:75:d6:c8:d2:26:dd:05:dd:c3:05:70:df:
0f:1e:33:6d:f3:c0:d3:db:ee:fd:6a:04:bf:fb:a0:c9:4c:33:
ef:f6:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:11:26 2025 by rpki-client