Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CkA2qLmgOxHuAGvB5pvZD3S9fRg.roa
File: CkA2qLmgOxHuAGvB5pvZD3S9fRg.roa (raw, json)
Hash identifier: VuWxGjNawPo9p9oaCM4i/lyWOWB5ZJeE1T9dyG+3GyE=
Subject key identifier: 0A:40:36:A8:B9:A0:3B:11:EE:00:6B:C1:E6:9B:D9:0F:74:BD:7D:18
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019423D6FDBAC1A9FD57A5D5CF43435975C0
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CkA2qLmgOxHuAGvB5pvZD3S9fRg.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41689
IP address blocks: 86.57.0.0/17 maxlen: 32
185.141.134.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fd:ba:c1:a9:fd:57:a5:d5:cf:43:43:59:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a4036a8b9a03b11ee006bc1e69bd90f74bd7d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:d0:c6:78:a7:a3:d7:41:e6:6f:82:d1:f1:
0f:57:e8:69:21:b0:70:07:a4:0e:b7:dc:fb:b3:3e:
84:0f:03:d1:ca:09:c2:5c:52:f0:83:49:ca:28:6c:
a2:bb:d2:8a:08:80:18:13:f1:49:4a:9a:e6:9e:2b:
a9:98:75:ef:bf:32:22:22:dd:67:7a:03:b3:a9:14:
76:f3:53:62:55:16:e5:e4:4c:8d:09:15:a2:21:8c:
0f:3c:b1:e8:13:b5:02:4f:1a:27:1c:9f:4b:d0:e9:
ab:fd:bd:15:80:1e:26:e8:ed:5b:e5:00:68:fc:09:
82:24:a9:77:9b:58:17:90:e1:c4:10:29:9a:9a:ab:
fe:f0:b8:75:01:f6:fd:43:38:67:2e:e4:ce:f2:0e:
73:be:c0:7d:52:65:0d:f8:26:3c:a7:7f:0c:64:f6:
e2:36:23:7b:a1:b3:60:9c:c3:88:f9:ab:98:d8:e1:
f0:ff:9d:7e:48:8a:af:7d:b7:e5:31:2a:ad:ba:16:
25:b4:bb:a0:94:e5:4a:be:a0:bc:ca:8d:12:5f:af:
d2:87:64:4d:9f:f5:cf:3f:c9:c8:81:d4:a7:8e:25:
7a:ca:8e:a8:ce:7a:61:27:ab:59:cd:58:7c:d9:dd:
6f:44:ed:1a:3a:a9:b1:a0:87:21:7e:14:8c:85:4b:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:40:36:A8:B9:A0:3B:11:EE:00:6B:C1:E6:9B:D9:0F:74:BD:7D:18
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CkA2qLmgOxHuAGvB5pvZD3S9fRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.57.0.0/17
185.141.134.0/24
Signature Algorithm: sha256WithRSAEncryption
88:44:aa:79:00:25:05:75:c5:eb:b6:c6:00:59:40:65:86:ff:
08:d1:9e:f1:62:68:7c:b8:4e:79:30:21:87:44:64:68:9a:2e:
7b:46:db:70:a5:9c:e2:0a:a1:d4:e0:4c:86:64:02:6a:59:e8:
d4:6f:bf:64:5b:21:63:b5:5d:c4:c0:10:1a:c1:d7:08:7b:57:
cd:a3:e5:7e:5c:73:bc:d9:30:eb:15:72:e0:79:64:b4:4f:f4:
8e:de:72:fc:b6:14:db:fb:ce:be:03:a1:91:30:02:d9:30:7b:
33:19:45:f4:01:9c:c6:3f:72:5c:4c:a1:c9:4e:1e:ff:f8:06:
9f:ed:45:6f:b9:04:9b:5e:88:c2:9c:b4:47:fb:4c:82:a3:8d:
2d:9f:91:06:e4:1b:46:ae:43:4d:ec:00:99:1d:bd:bf:ed:4a:
2f:0d:00:66:2e:4b:b1:7d:75:1b:ec:80:65:1a:b2:a2:46:0e:
f3:c3:60:78:ca:e0:1b:ef:66:30:69:ae:e5:35:92:52:1f:a7:
aa:9e:4e:7d:64:86:22:ce:6c:c9:c2:47:eb:28:94:ed:a2:94:
3f:6f:03:8d:62:29:69:7f:06:cd:28:53:64:ba:88:2b:b4:4a:
63:4b:09:2d:98:40:ec:2f:34:9c:fa:c7:49:14:01:91:31:5b:
11:d9:72:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1v26wan9V6XVz0NDWXXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk
OGYwNjUwHhcNMjUwMTAxMjE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTQwMzZhOGI5YTAzYjExZWUwMDZiYzFlNjliZDkwZjc0YmQ3ZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SjQxnino9dB5m+C0fEPV+hpIbBw
B6QOt9z7sz6EDwPRygnCXFLwg0nKKGyiu9KKCIAYE/FJSprmniupmHXvvzIiIt1n
egOzqRR281NiVRbl5EyNCRWiIYwPPLHoE7UCTxonHJ9L0Omr/b0VgB4m6O1b5QBo
/AmCJKl3m1gXkOHEECmamqv+8Lh1Afb9QzhnLuTO8g5zvsB9UmUN+CY8p38MZPbi
NiN7obNgnMOI+auY2OHw/51+SIqvfbflMSqtuhYltLuglOVKvqC8yo0SX6/Sh2RN
n/XPP8nIgdSnjiV6yo6oznphJ6tZzVh82d1vRO0aOqmxoIchfhSMhUvcywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFApANqi5oDsR7gBrweab2Q90vX0YMB8GA1UdIwQY
MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt
MDM2NzI2OGZmODcxLzEvQ2tBMnFMbWdPeEh1QUd2QjVwdlpEM1M5ZlJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx
LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHVjkAAwQA
uY2GMA0GCSqGSIb3DQEBCwUAA4IBAQCIRKp5ACUFdcXrtsYAWUBlhv8I0Z7xYmh8
uE55MCGHRGRomi57RttwpZziCqHU4EyGZAJqWejUb79kWyFjtV3EwBAawdcIe1fN
o+V+XHO82TDrFXLgeWS0T/SO3nL8thTb+86+A6GRMALZMHszGUX0AZzGP3JcTKHJ
Th7/+Aaf7UVvuQSbXojCnLRH+0yCo40tn5EG5BtGrkNN7ACZHb2/7UovDQBmLkux
fXUb7IBlGrKiRg7zw2B4yuAb72Ywaa7lNZJSH6eqnk59ZIYizmzJwkfrKJTtopQ/
bwONYilpfwbNKFNkuogrtEpjSwktmEDsLzSc+sdJFAGRMVsR2XIT
-----END CERTIFICATE-----
Generated at Sat May 17 02:15:04 2025 by rpki-client