Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/SVbSCqgOVS0nEwYKXKjAaUm2PiE.roa
File: SVbSCqgOVS0nEwYKXKjAaUm2PiE.roa (raw, json)
Hash identifier: NobVooJOPuIyYVi8WxwLJqnlg8c/Qn/TAvhmEjsSwh4=
Subject key identifier: 49:56:D2:0A:A8:0E:55:2D:27:13:06:0A:5C:A8:C0:69:49:B6:3E:21
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 0194221F809128F8AB4EE7EEAC15443767AA
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/SVbSCqgOVS0nEwYKXKjAaUm2PiE.roa
Signing time: Wed 01 Jan 2025 13:47:57 +0000
ROA not before: Wed 01 Jan 2025 13:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204004
IP address blocks: 92.246.80.0/24 maxlen: 24
92.246.81.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:80:91:28:f8:ab:4e:e7:ee:ac:15:44:37:67:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Jan 1 13:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4956d20aa80e552d2713060a5ca8c06949b63e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:46:2f:53:f8:42:81:ee:5f:ff:e0:04:69:
b3:d9:cf:51:3f:a6:5b:aa:3b:fc:41:d7:d9:77:aa:
0e:9a:ea:e6:fe:2a:84:84:27:f0:79:b4:1c:a3:fe:
af:39:b7:c6:7d:fa:bf:e4:1d:70:41:9a:a5:e5:91:
5a:1e:91:6b:e5:8c:58:9b:d5:be:13:db:24:34:55:
44:71:b8:36:24:95:68:87:27:19:9e:ea:8a:68:22:
be:19:6a:2b:3d:54:b8:c5:0c:3c:96:64:2a:00:67:
ec:59:57:ca:4e:d5:d2:4d:ee:1c:df:bc:16:e7:1a:
f0:1b:df:43:4e:5d:fa:8f:5e:3f:15:9e:4d:33:ea:
55:63:f5:05:8f:61:93:91:b3:3d:f4:ca:9e:a7:67:
b5:53:05:3b:ca:c7:92:6c:e4:2b:13:a7:11:59:cd:
24:2b:7d:a2:f8:be:6c:ea:05:02:36:d7:33:31:48:
74:09:ef:a5:71:ff:0c:40:10:57:54:53:cd:d0:ed:
d0:7a:a8:29:6b:2f:2e:1d:09:e4:3d:e2:0c:90:a0:
3f:e2:b5:2d:43:bc:e9:b3:8c:8d:3a:76:9a:d0:b4:
18:26:87:8f:d8:80:b2:7d:29:7a:af:92:11:93:bd:
36:be:68:83:80:57:6f:7f:be:e6:de:ee:98:6f:f0:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:D2:0A:A8:0E:55:2D:27:13:06:0A:5C:A8:C0:69:49:B6:3E:21
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/SVbSCqgOVS0nEwYKXKjAaUm2PiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.80.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:5e:3b:e1:2e:b7:7a:3d:e4:4e:95:b2:ae:9b:42:38:fc:2d:
b9:c6:66:9b:f9:a9:58:0a:53:3b:62:41:e8:9f:2f:bc:a7:a6:
bd:ff:a8:27:66:8b:34:c1:b6:0b:c9:c4:76:a3:99:f2:03:f5:
59:9e:05:75:93:55:9f:f1:14:04:1b:13:4c:77:f3:b5:1e:34:
1a:36:84:9f:45:cf:45:c4:74:3d:d4:0f:c9:40:8b:f8:c8:54:
95:76:02:a2:7d:b5:a8:c1:69:01:73:65:75:d9:91:67:c5:3f:
5a:6b:ab:4c:00:bd:14:52:1e:a5:56:c5:72:31:bd:e3:61:35:
ea:b0:80:2e:e6:56:74:ce:23:c5:90:d1:33:9f:14:6a:15:5b:
7b:6f:c4:4d:db:6d:b9:c7:11:80:7c:95:97:2a:ba:0d:f9:69:
ae:3f:90:29:5f:ef:30:af:c3:97:52:93:f8:07:e7:3b:5f:36:
e5:69:50:90:bb:68:16:3a:28:7b:32:26:ec:65:99:f1:5d:7a:
e2:39:39:a0:15:12:02:95:4d:c7:f8:85:f9:67:62:b3:43:ee:
5c:4b:33:33:ed:65:39:6b:cd:8e:29:fc:63:30:fc:2e:ab:77:
c7:df:8a:7a:d7:eb:1a:45:45:01:be:af:8a:b0:30:cf:40:2e:
c5:60:ca:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:19 2025 by rpki-client