Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/58E7-k3Tcu9wOM1aVHbGE5IwSZY.roa
File: 58E7-k3Tcu9wOM1aVHbGE5IwSZY.roa (raw, json)
Hash identifier: nMGChOetShxlfbl+F+uELbS44kQH0w1ozlFykgBVZHI=
Subject key identifier: E7:C1:3B:FA:4D:D3:72:EF:70:38:CD:5A:54:76:C6:13:92:30:49:96
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 018A03E9712D5FBD316850139DE0C7C7C3F7
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/58E7-k3Tcu9wOM1aVHbGE5IwSZY.roa
Signing time: Thu 17 Aug 2023 14:32:24 +0000
ROA not before: Thu 17 Aug 2023 14:32:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20640
IP address blocks: 82.206.32.0/19 maxlen: 19
217.173.128.0/19 maxlen: 23
217.140.72.0/21 maxlen: 21
217.140.80.0/21 maxlen: 21
2001:4b88::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:e9:71:2d:5f:bd:31:68:50:13:9d:e0:c7:c7:c3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Aug 17 14:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7c13bfa4dd372ef7038cd5a5476c61392304996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:94:08:d1:2f:a3:73:82:7d:91:99:b5:5d:c6:
49:f9:7c:28:7e:b6:49:cd:16:c7:43:e6:92:cf:6d:
93:a1:a2:bb:6d:56:18:9e:e6:ab:6c:81:e3:4a:ae:
07:35:8e:26:ff:ee:18:77:6a:fb:a8:d1:7a:e6:dd:
67:9b:cc:66:6b:86:bc:1b:70:a6:99:27:27:51:ab:
2f:d1:ae:71:cf:34:a9:b3:4f:7f:08:0b:a0:96:cd:
87:b1:ca:cd:70:b8:b8:d8:fc:1b:43:9f:c3:7b:b0:
93:bf:3d:b0:d5:1d:2a:f3:7f:61:b8:6a:16:b3:fa:
74:f3:ee:aa:7f:f2:81:9b:de:c4:29:05:c6:4f:98:
75:5e:82:7b:01:c0:42:51:f2:a7:7f:0c:3c:71:39:
c8:a8:8a:51:dc:1d:4f:a3:d7:8a:a5:2a:d4:75:5c:
89:6a:2b:a6:c3:b0:f6:5b:b8:23:54:96:da:fb:ef:
44:2a:c3:67:01:ac:8d:62:be:09:4f:01:a8:75:40:
1c:da:8c:c5:2f:a0:bf:99:7f:9e:80:ee:cf:de:79:
d9:6f:b7:0b:b4:2e:97:d0:d8:c4:f7:8f:77:08:b4:
42:6b:cd:d8:87:bd:e1:da:a7:ca:e6:67:02:0f:fb:
0b:26:b1:4b:6a:2a:6f:cf:be:93:d4:6a:9a:cc:95:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C1:3B:FA:4D:D3:72:EF:70:38:CD:5A:54:76:C6:13:92:30:49:96
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/58E7-k3Tcu9wOM1aVHbGE5IwSZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.32.0/19
217.140.72.0-217.140.87.255
217.173.128.0/19
IPv6:
2001:4b88::/32
Signature Algorithm: sha256WithRSAEncryption
37:35:2c:13:46:77:be:40:ca:17:0e:fd:bc:16:68:e1:53:dd:
ae:ea:98:9a:21:3d:c1:5b:3f:9d:94:3e:13:dd:7b:a8:5f:51:
da:08:97:2a:a4:8f:17:29:35:2c:f2:5a:a7:2c:d2:5e:2e:9c:
54:3c:02:5a:0b:5a:2a:2e:32:4a:46:57:ea:1a:73:a0:20:e8:
ed:01:8d:d6:11:82:56:49:be:e4:1b:14:06:bf:21:0d:e1:e8:
20:59:e7:5e:76:eb:62:9c:70:d4:2c:f2:26:98:22:1c:3e:8e:
dc:61:fa:ba:46:87:8a:bf:f6:24:e5:86:14:3a:4a:0a:b6:2e:
f3:96:19:42:70:bf:de:25:33:a5:50:5a:f1:cc:d4:de:49:52:
a9:6e:40:43:a5:07:65:7a:64:c7:2b:c4:c8:c2:d1:f6:dd:e1:
4a:29:83:bf:f4:5c:a2:33:c3:8f:f9:ee:aa:71:50:69:be:12:
7a:41:4d:61:cd:6c:28:c4:31:8f:1d:bb:1c:4d:a4:d7:95:d8:
91:1e:eb:03:04:bb:43:f7:67:6f:a4:e5:4c:17:fa:df:f4:c3:
9b:11:7c:38:d4:17:14:30:61:0f:4c:5c:d5:75:1d:7e:cd:b6:
51:15:09:b6:5b:ab:41:4c:16:d4:16:99:bc:f5:6e:35:63:81:
f3:fd:5b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:03:25 2025 by rpki-client