Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/kr8COA9CwcnIpAh5Y02uTqrHrd4.roa
File: kr8COA9CwcnIpAh5Y02uTqrHrd4.roa (raw, json)
Hash identifier: 2jcGJ9tB1xcIn+bB4MQe+vQORkyeVUmtCNYLAKpBd+s=
Subject key identifier: 92:BF:02:38:0F:42:C1:C9:C8:A4:08:79:63:4D:AE:4E:AA:C7:AD:DE
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0197CBB53F7C9E6FC9492026FDD2B774D57F
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/kr8COA9CwcnIpAh5Y02uTqrHrd4.roa
Signing time: Wed 02 Jul 2025 15:15:42 +0000
ROA not before: Wed 02 Jul 2025 15:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44436
IP address blocks: 94.183.160.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:b5:3f:7c:9e:6f:c9:49:20:26:fd:d2:b7:74:d5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 2 15:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92bf02380f42c1c9c8a40879634dae4eaac7adde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:23:3c:85:20:7d:40:65:3b:fe:15:fe:7a:
56:f2:19:60:ee:f5:47:de:0e:88:69:f1:83:49:38:
20:d4:6e:5d:f4:93:b4:7b:0b:5c:34:b3:20:55:11:
bb:ac:15:9e:61:5e:c7:3e:a9:ad:2f:f0:dc:f0:01:
46:d2:b7:20:56:57:d6:91:e5:84:ee:6f:fc:24:51:
15:f7:39:11:82:0f:16:6f:0e:f3:0d:02:58:ef:dd:
e1:4a:78:4f:cf:58:82:b1:14:89:d0:ed:f1:46:89:
e3:a0:2d:1c:d8:81:c5:24:5a:eb:c7:a0:2c:52:ed:
9d:22:09:a7:bb:d3:1d:47:8b:68:1e:93:05:46:22:
8b:90:d4:94:fa:e2:c1:d8:29:f7:cc:a2:be:13:6d:
d8:66:a9:83:c6:5e:57:fd:7a:d6:fb:3b:6c:7c:bb:
65:dc:f5:85:a9:19:cc:b1:c7:dd:a0:59:ba:9e:6d:
b4:62:4b:0a:40:65:aa:a5:80:d5:70:74:41:3a:5b:
5d:08:11:34:db:3c:e0:39:5c:a9:e9:2f:32:96:15:
b4:e7:ec:85:e7:20:b8:25:89:3c:73:1f:17:54:ab:
08:8b:d6:1e:07:a8:2a:13:7d:af:92:49:dd:d5:d0:
d4:35:96:90:29:66:a9:ae:a7:61:df:0b:57:e7:52:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BF:02:38:0F:42:C1:C9:C8:A4:08:79:63:4D:AE:4E:AA:C7:AD:DE
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/kr8COA9CwcnIpAh5Y02uTqrHrd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4b:de:4d:c8:57:db:e6:b3:e9:08:ed:e2:2e:19:56:90:44:
78:40:b7:9c:78:73:e3:c1:90:5d:f8:b4:bc:9e:70:cf:33:17:
17:6e:b3:76:30:66:76:a0:e3:3d:27:b6:c7:d2:d4:cd:3c:f3:
69:73:72:f8:75:4e:d2:9e:fb:ac:7f:2f:77:3a:cb:88:b0:be:
f4:ba:71:9b:57:81:ec:12:06:41:aa:d9:2c:ee:41:b4:b2:4b:
13:17:b9:b4:25:8c:26:10:37:79:3f:0c:a1:83:e3:de:8b:c2:
d9:40:85:bd:8a:e9:0c:be:06:36:f8:d2:7e:1d:f2:5a:e6:1b:
53:ed:df:6d:af:10:b0:ef:b2:d6:de:c6:2c:0b:24:d9:14:b2:
25:1b:25:cd:1e:97:76:ab:07:87:0f:76:07:ef:bd:1d:b6:ac:
af:4b:14:00:89:7c:1f:f0:c7:22:90:06:a7:e9:d6:1a:d3:29:
a5:bd:9f:c5:72:e5:da:c8:5f:5e:98:dc:3e:eb:cf:6b:46:9b:
1f:4e:b9:e1:3d:80:8b:e7:46:4a:31:89:ef:90:73:b4:ab:ab:
1f:90:ee:b6:35:8a:45:91:02:fe:a3:61:9f:27:0d:a4:09:7a:
a2:0e:58:58:b3:69:79:e2:fb:13:6f:28:46:75:d1:dd:c2:63:
1d:a0:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:34:29 2025 by rpki-client