Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/TToMxxOg9XxU1_d_LDe9_LAoPjs.roa
File: TToMxxOg9XxU1_d_LDe9_LAoPjs.roa (raw, json)
Hash identifier: Ig6KBXDv+aZCZGCeU9otCM8U+SjDT1gcB0zpc4KpTCk=
Subject key identifier: 4D:3A:0C:C7:13:A0:F5:7C:54:D7:F7:7F:2C:37:BD:FC:B0:28:3E:3B
Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial: 018964895B70B55A29BDE62EBE7350DC9A3D
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/TToMxxOg9XxU1_d_LDe9_LAoPjs.roa
Signing time: Mon 17 Jul 2023 15:47:50 +0000
ROA not before: Mon 17 Jul 2023 15:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 45.142.254.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:89:5b:70:b5:5a:29:bd:e6:2e:be:73:50:dc:9a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Validity
Not Before: Jul 17 15:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d3a0cc713a0f57c54d7f77f2c37bdfcb0283e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5d:02:3a:bd:84:47:df:f3:87:f7:e9:86:e0:
2c:7f:31:72:cd:f3:f1:2a:0c:85:3a:36:39:59:0c:
4e:c2:94:03:3b:33:5e:f1:20:b7:76:74:72:a6:b3:
56:a6:0f:1f:08:9d:29:40:91:8f:e8:8c:92:0d:1c:
bc:bf:6a:67:6b:b9:a2:44:66:e7:11:22:6a:91:09:
4a:35:9c:34:e6:20:f1:1c:01:26:35:ca:69:9d:5c:
76:c9:0a:27:49:bd:86:a5:64:39:3f:84:aa:29:ef:
a0:94:27:01:bc:00:f5:51:4c:e0:fe:4f:a9:de:4e:
4b:5a:e8:3f:6d:8d:6d:cb:29:01:72:4e:3d:c2:17:
79:3a:f7:48:ec:04:df:5a:0b:35:27:d2:77:ec:92:
0a:ad:3b:dd:d9:a4:9a:36:1d:3c:df:b6:d6:8b:c2:
75:95:87:94:54:e0:9e:98:33:13:7d:0a:8b:b8:6c:
4c:5e:de:f3:0a:cd:bc:c2:5f:64:2a:5e:5e:95:ba:
72:e8:a5:7f:ab:3f:f9:ab:a4:63:3e:93:32:c1:5e:
60:0c:70:1f:66:7e:d7:0e:32:6f:b2:db:ef:75:26:
c1:8b:d2:28:fd:99:02:ae:3d:0d:e0:71:a4:9b:b6:
51:1b:2f:4f:25:56:6c:2d:6c:38:8e:d1:22:b0:51:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3A:0C:C7:13:A0:F5:7C:54:D7:F7:7F:2C:37:BD:FC:B0:28:3E:3B
X509v3 Authority Key Identifier:
keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/TToMxxOg9XxU1_d_LDe9_LAoPjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.254.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b3:f0:f4:0b:26:92:03:90:88:f9:39:16:c2:3f:44:cf:62:
8c:88:19:9a:96:54:d1:9e:8a:a6:4d:2a:d8:47:8b:f4:68:5e:
82:35:21:bc:c9:a2:62:37:d5:47:07:71:ca:8d:8d:2f:56:e8:
49:02:cc:7e:8f:d8:b9:74:a3:b2:1a:a8:87:dc:d1:49:f2:93:
35:99:ad:57:d6:b8:2b:f7:02:86:ba:e3:96:90:c7:a2:e6:74:
b1:3a:8a:03:e1:5b:bc:c7:a5:08:b5:b1:58:9e:e1:0e:b6:fa:
47:90:c2:56:09:f0:21:89:08:31:38:f2:61:e5:c5:5a:c2:22:
2d:95:90:41:e4:a8:d6:32:aa:d5:8b:43:ed:a6:8e:b7:6a:3b:
fa:8f:ea:19:47:6f:d8:db:21:f3:3d:67:a4:f8:8e:34:35:81:
ce:93:a3:99:03:25:08:6d:19:54:98:f4:bb:c9:a4:d2:c5:ed:
4b:3b:62:b5:e3:c5:fb:db:20:02:f1:07:1c:82:7d:88:b3:a1:
2f:f6:31:f4:b1:b1:31:44:92:ea:eb:40:24:37:13:b2:99:86:
9e:19:b8:74:e4:1c:b8:55:64:96:6c:65:2e:e0:13:57:94:24:
b0:93:c4:74:de:71:fb:71:71:f3:98:70:d3:a1:25:bf:3b:3f:
8d:60:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:13:41 2025 by rpki-client