Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/lPQTdUyUZaUfidF1vKidJyay0y4.roa
File: lPQTdUyUZaUfidF1vKidJyay0y4.roa (raw, json)
Hash identifier: //gSiU/MXE16G1HTORgCiftxUAsPR7ieRHhd/3XDC8c=
Subject key identifier: 94:F4:13:75:4C:94:65:A5:1F:89:D1:75:BC:A8:9D:27:26:B2:D3:2E
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 0787B585
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/lPQTdUyUZaUfidF1vKidJyay0y4.roa
Signing time: Mon 31 Jan 2022 17:57:19 +0000
ROA not before: Mon 31 Jan 2022 17:57:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 80521
IP address blocks: 209.221.192.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126334341 (0x787b585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Jan 31 17:57:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94f413754c9465a51f89d175bca89d2726b2d32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:ea:ff:6a:ec:83:27:ca:19:c9:81:9e:61:
54:30:93:b2:2a:f3:aa:9d:97:5c:6a:85:aa:4f:d7:
b4:08:6c:ee:d4:27:f0:a6:a4:3a:8d:92:47:56:de:
ca:a4:f7:5d:56:e5:e5:73:bf:cc:3f:5e:47:7d:f0:
e4:73:a1:df:74:9a:40:61:c6:b1:35:77:ca:46:d8:
d8:58:37:87:a9:c4:6a:18:cc:05:23:f3:cc:69:d3:
a1:6c:bc:5c:76:44:7e:30:fd:b7:08:96:74:c3:8c:
c2:25:6b:ef:1f:3f:c6:98:79:97:a5:a7:33:30:69:
cb:6f:59:94:d9:d3:d5:45:22:b7:8e:ca:23:31:08:
65:04:c6:bc:cc:21:f3:af:41:f0:5c:7c:c7:f2:49:
09:ce:6f:cd:35:be:a2:cf:0e:32:36:94:1d:a7:b9:
29:2f:1a:69:11:84:35:3f:3e:b5:0b:53:7b:b3:b1:
ee:4c:0d:61:49:98:6d:61:9c:e2:cd:ea:fb:e6:69:
6d:0c:da:5b:74:2a:cd:8f:28:a7:1e:82:35:ba:87:
19:b7:79:c6:75:e9:fe:fb:d9:b3:4a:fd:a7:9c:cb:
41:e7:bf:e9:fc:ed:ad:d4:9a:2b:50:a3:49:8c:fb:
cf:0e:1d:ff:8d:37:db:29:74:e4:13:96:ef:88:d9:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F4:13:75:4C:94:65:A5:1F:89:D1:75:BC:A8:9D:27:26:B2:D3:2E
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/lPQTdUyUZaUfidF1vKidJyay0y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.221.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a6:26:4f:93:54:f4:45:dc:57:07:9f:92:f8:42:65:49:16:26:
3e:30:2a:31:32:65:8b:56:b6:6b:20:d5:60:5d:0d:22:11:e1:
a4:b4:7c:76:d7:68:71:41:8d:3c:32:70:d0:a6:66:06:6c:37:
a0:6a:e7:71:f7:f2:dc:ab:0e:b1:e5:89:7d:40:74:30:14:53:
9c:9f:65:14:63:1f:9d:e3:20:52:cf:e8:50:ed:67:21:07:76:
cd:44:83:c8:a2:f3:8e:0c:d0:6c:97:4b:eb:a2:6b:55:ba:c3:
e5:30:38:11:8d:f8:be:2d:15:75:cd:c8:95:db:94:bd:b5:71:
43:b0:3e:bc:1c:7c:69:bb:37:12:46:a3:a3:9a:65:f5:85:c4:
02:ad:b9:0c:16:05:26:c2:0e:98:08:43:d7:a8:76:d6:b9:97:
31:7d:46:68:b4:d9:39:32:88:3f:c2:da:18:36:0a:91:c3:43:
84:7f:f4:6e:c9:e5:f7:42:89:36:07:32:ce:cb:1d:11:b5:92:
fb:1c:ff:51:0a:57:4b:59:c0:75:6f:a4:63:d7:66:1e:32:38:
5e:d0:f3:83:98:8b:16:ba:fe:78:e6:51:6b:e8:71:bc:05:b9:
ff:6a:be:de:08:6b:ab:f3:40:47:8f:8f:bd:bd:3b:b1:14:f2:
c6:06:07:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:12:10 2025 by rpki-client