Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/TxLWOcqy_INbH0teAxpX7HQy3Vg.roa
File: TxLWOcqy_INbH0teAxpX7HQy3Vg.roa (raw, json)
Hash identifier: duHln7728EDaBLF/G1UAR7V/BgRPoGcu8AxdPVh+bP0=
Subject key identifier: 4F:12:D6:39:CA:B2:FC:83:5B:1F:4B:5E:03:1A:57:EC:74:32:DD:58
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 01840FD78234C21DE0E719C6D3DAAE1A0291
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/TxLWOcqy_INbH0teAxpX7HQy3Vg.roa
Signing time: Tue 25 Oct 2022 15:51:32 +0000
ROA not before: Tue 25 Oct 2022 15:51:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207456
IP address blocks: 195.66.30.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:d7:82:34:c2:1d:e0:e7:19:c6:d3:da:ae:1a:02:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Oct 25 15:51:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f12d639cab2fc835b1f4b5e031a57ec7432dd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:a2:c2:f4:ea:94:d2:c3:27:d0:70:85:1b:
14:65:33:69:97:5b:f5:46:cd:1c:95:cf:ef:04:87:
7c:78:6b:58:49:f1:1f:a2:f7:f1:5f:01:f7:9c:6b:
c8:f8:15:cc:33:41:51:58:24:27:a1:a1:80:b3:2f:
30:85:50:56:5b:c3:6a:53:7a:86:cd:20:3e:cc:c6:
aa:03:89:17:cd:99:61:7b:aa:1f:b2:30:15:4c:1a:
ea:ed:b3:3c:5d:68:5b:dd:6f:17:0e:f8:5e:0f:9b:
bc:fb:05:28:38:42:8d:b7:ba:1a:90:36:b7:67:b9:
8f:50:37:43:72:db:b3:f6:15:52:4b:fb:14:fa:7a:
eb:d1:b7:c5:cc:0c:80:39:7a:ac:ff:8a:d1:24:76:
bd:a4:3e:90:55:ba:9e:a7:01:db:3a:87:ac:57:13:
73:a3:f0:cc:ad:e0:2e:a7:da:54:10:1a:d4:20:62:
04:89:b4:9f:81:1c:96:8f:43:24:74:0b:27:6b:41:
da:65:ca:08:fe:60:d0:36:31:d6:e8:96:0d:99:1d:
be:fb:9e:40:f6:47:3e:50:95:e5:ff:01:23:a3:d5:
aa:8c:2c:68:12:4a:d3:8b:3d:b0:88:fe:10:8a:2d:
42:26:87:89:86:2c:6a:d8:69:a0:62:e0:b8:d2:3e:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:12:D6:39:CA:B2:FC:83:5B:1F:4B:5E:03:1A:57:EC:74:32:DD:58
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/TxLWOcqy_INbH0teAxpX7HQy3Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.30.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6b:85:98:a2:78:99:29:a2:ad:0a:b9:8d:f5:d0:17:79:c3:
8d:0c:7e:3a:cf:d9:57:6c:35:c8:66:ab:5e:53:ec:5e:aa:ae:
89:e3:09:f8:ae:c0:7d:32:2f:89:6f:0d:19:9c:bd:27:6e:c3:
62:da:1c:63:66:10:df:a8:47:95:03:df:0a:8b:a9:d0:4b:15:
e6:c9:6c:ce:22:06:e6:f3:9c:da:d5:96:2d:b1:05:ce:1d:43:
d6:39:ba:ce:5d:e3:3f:ae:34:dd:30:b4:08:89:a8:73:82:ae:
75:00:d9:9f:e5:59:0b:d1:6b:8b:93:9f:9f:a1:c6:8c:a9:9b:
9f:41:37:0a:e0:e1:dc:8a:f7:4a:3d:d4:38:7a:af:69:54:ee:
f2:6c:37:8d:c5:73:8c:3e:95:8c:39:d8:a8:80:2e:63:55:ec:
96:b2:26:5a:f5:73:29:a5:8e:48:26:25:be:43:a2:08:4c:0a:
c0:4c:14:5c:28:f1:b7:68:67:eb:ce:6a:4a:47:cb:c6:bf:98:
17:82:dd:1a:3c:c6:c6:be:92:46:ae:70:a4:69:76:46:bb:02:
bc:31:ef:d8:b5:98:9d:a0:a7:56:57:82:44:f9:d4:c2:3d:2a:
cc:74:5c:83:db:8b:05:88:b5:75:a0:08:a7:ac:6d:05:30:cd:
4d:fc:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:02 2025 by rpki-client