Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/Z8JIVXruGQO4en9ZOtLQ4iLwk1k.roa
File: Z8JIVXruGQO4en9ZOtLQ4iLwk1k.roa (raw, json)
Hash identifier: n/njkMuL/3n91/6kPvAldrFo3x5BB6xadLn+YNjbFCE=
Subject key identifier: 67:C2:48:55:7A:EE:19:03:B8:7A:7F:59:3A:D2:D0:E2:22:F0:93:59
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 018CC871421A7C5FE039E5FD344D59921EBC
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/Z8JIVXruGQO4en9ZOtLQ4iLwk1k.roa
Signing time: Tue 02 Jan 2024 04:31:54 +0000
ROA not before: Tue 02 Jan 2024 04:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30781
IP address blocks: 91.232.99.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:42:1a:7c:5f:e0:39:e5:fd:34:4d:59:92:1e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Jan 2 04:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c248557aee1903b87a7f593ad2d0e222f09359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:e9:61:f8:bb:0a:b7:29:6f:fc:3d:b9:ff:
e6:a2:74:3c:46:70:76:9b:f8:47:fe:87:06:8e:e2:
ee:6c:77:4a:3c:47:ef:db:ff:bf:aa:22:56:40:c1:
29:e8:45:42:c3:81:6c:71:9a:76:bc:9b:bf:65:ef:
c9:d7:59:93:ce:5b:74:c3:1e:9a:41:8a:42:46:43:
01:71:cf:ce:d5:fc:fc:69:d3:f3:0c:6b:ce:2d:c3:
d2:b2:e1:8d:16:28:02:9b:c1:d4:22:c3:0f:3c:ae:
ed:ee:d2:67:8f:6c:81:f8:ff:de:be:55:9a:d6:f1:
4e:48:68:83:7e:31:1d:d3:a4:b1:0b:48:42:75:bf:
c2:b1:f7:10:f3:04:f6:d8:25:a3:33:ef:a4:c2:e8:
5b:05:de:e8:5b:66:2a:7e:77:28:60:35:25:9e:3b:
02:b1:e6:7b:5d:d6:fb:5e:b2:ae:7c:74:a4:17:1f:
df:4c:f0:48:48:61:31:89:91:73:42:72:70:3b:32:
bf:b6:56:87:0c:6c:ad:d3:aa:c0:0a:17:73:77:65:
9f:8c:cf:5d:82:eb:ad:5c:5f:e8:94:06:ba:87:54:
49:9e:05:4e:55:5f:b8:6c:e9:93:92:81:15:88:04:
a0:f1:28:cc:28:54:91:ad:0d:26:6c:a5:aa:c9:18:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C2:48:55:7A:EE:19:03:B8:7A:7F:59:3A:D2:D0:E2:22:F0:93:59
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/Z8JIVXruGQO4en9ZOtLQ4iLwk1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
23:35:c3:eb:a9:c0:2f:0a:58:d7:7a:4c:cf:83:75:10:43:ff:
98:3d:0b:68:27:22:e8:d2:64:97:96:75:50:3e:aa:d9:15:ba:
ed:e1:1b:03:dd:c0:59:d9:d6:fb:17:db:e9:84:43:e9:33:3d:
02:56:52:a7:74:7c:78:e8:f1:52:e3:f4:0f:d0:53:88:32:10:
a3:b5:3b:49:fc:90:87:7a:87:e9:8c:11:ce:d1:6f:0b:90:17:
1d:8b:a1:b7:c8:bd:bc:3b:c2:4c:1d:d4:85:8d:c3:40:10:78:
76:a8:4c:49:78:a6:84:22:84:d2:45:35:93:0e:95:3c:c8:86:
8b:70:fa:97:cd:8d:0e:eb:42:42:a1:4e:33:8a:b0:7a:ab:d0:
00:3e:59:93:07:d1:c3:6e:85:6b:f0:41:f1:36:be:a2:eb:0e:
bd:ed:07:47:11:d3:ee:3a:f3:4c:41:fd:59:69:5d:53:32:6b:
7b:de:ac:84:09:27:0a:3f:4a:6f:db:e1:70:3c:c5:f6:42:95:
89:e9:3a:2f:83:3a:48:91:1f:c5:c5:55:e2:5c:a1:c1:5d:11:
81:41:74:e0:01:48:61:22:86:48:87:1d:60:cc:3a:0d:ef:e4:
f2:d0:a3:78:0d:f1:69:9b:aa:1e:74:a4:f5:a2:c3:b5:55:02:
72:0e:d9:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcUIafF/gOeX9NE1Zkh68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTYzMTgyNDdkMjExODQxZjk2MjBhOWExMTMwMDEwZGRi
NDg2ZjIwHhcNMjQwMTAyMDQzMTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2MyNDg1NTdhZWUxOTAzYjg3YTdmNTkzYWQyZDBlMjIyZjA5MzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC3pYfi7Crcpb/w9uf/monQ8RnB2
m/hH/ocGjuLubHdKPEfv2/+/qiJWQMEp6EVCw4FscZp2vJu/Ze/J11mTzlt0wx6a
QYpCRkMBcc/O1fz8adPzDGvOLcPSsuGNFigCm8HUIsMPPK7t7tJnj2yB+P/evlWa
1vFOSGiDfjEd06SxC0hCdb/CsfcQ8wT22CWjM++kwuhbBd7oW2YqfncoYDUlnjsC
seZ7Xdb7XrKufHSkFx/fTPBISGExiZFzQnJwOzK/tlaHDGyt06rAChdzd2WfjM9d
guutXF/olAa6h1RJngVOVV+4bOmTkoEViASg8SjMKFSRrQ0mbKWqyRhPZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGfCSFV67hkDuHp/WTrS0OIi8JNZMB8GA1UdIwQY
MBaAFOMWMYJH0hGEH5YgqaETABDdtIbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYt
ZWMyODdlMWQzN2U1LzEvWjhKSVZYcnVHUU80ZW45Wk90TFE0aUx3azFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYtZWMyODdlMWQzN2U1
LzEvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+hjMA0G
CSqGSIb3DQEBCwUAA4IBAQAjNcPrqcAvCljXekzPg3UQQ/+YPQtoJyLo0mSXlnVQ
PqrZFbrt4RsD3cBZ2db7F9vphEPpMz0CVlKndHx46PFS4/QP0FOIMhCjtTtJ/JCH
eofpjBHO0W8LkBcdi6G3yL28O8JMHdSFjcNAEHh2qExJeKaEIoTSRTWTDpU8yIaL
cPqXzY0O60JCoU4zirB6q9AAPlmTB9HDboVr8EHxNr6i6w697QdHEdPuOvNMQf1Z
aV1TMmt73qyECScKP0pv2+FwPMX2QpWJ6TovgzpIkR/FxVXiXKHBXRGBQXTgAUhh
IoZIhx1gzDoN7+Ty0KN4DfFpm6oedKT1osO1VQJyDtnu
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:21:04 2025 by rpki-client