Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/vWVSSH1CGHkQJxEZjqNStO3HBSQ.roa
File: vWVSSH1CGHkQJxEZjqNStO3HBSQ.roa (raw, json)
Hash identifier: N+4dEohs5/FyiDJLAHrNbgO6v8OlO1uW9KupgFkja/Y=
Subject key identifier: BD:65:52:48:7D:42:18:79:10:27:11:19:8E:A3:52:B4:ED:C7:05:24
Certificate issuer: /CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Certificate serial: 01942521CE439F8E52D7242CBFD4E07978FA
Authority key identifier: F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/vWVSSH1CGHkQJxEZjqNStO3HBSQ.roa
Signing time: Thu 02 Jan 2025 03:49:19 +0000
ROA not before: Thu 02 Jan 2025 03:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205368
IP address blocks: 91.237.150.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ce:43:9f:8e:52:d7:24:2c:bf:d4:e0:79:78:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Validity
Not Before: Jan 2 03:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd6552487d421879102711198ea352b4edc70524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:d2:ad:41:2f:29:81:a1:b4:7e:dc:2e:3e:
67:9e:d0:aa:3c:f2:e9:f1:54:e2:cf:0e:21:47:cb:
51:6b:1b:4c:4a:f4:72:7b:c9:ca:3b:da:e9:83:ce:
ab:df:a3:d5:a4:14:42:52:6b:99:f2:38:84:e8:e2:
49:7b:2f:47:5a:a0:01:b7:56:55:c6:bd:96:ff:c2:
d9:a5:d4:2d:c8:ad:e5:77:00:66:af:92:51:c3:80:
1e:58:d5:da:74:8e:9d:40:69:0b:32:e9:f0:01:95:
81:56:40:46:e5:97:df:d1:d9:2f:95:82:14:3b:a7:
6d:39:6d:c3:6f:0f:f9:c7:3b:93:a8:54:6a:af:71:
0b:b9:20:d1:53:0b:98:1f:c0:6a:81:5a:d5:fb:df:
87:19:35:df:0c:a4:ac:13:70:2b:f4:7d:99:c4:70:
53:90:a4:be:91:35:cc:10:4b:96:cb:0c:62:15:01:
ba:2c:f0:4d:52:26:1c:f5:c4:f9:a2:72:88:92:ae:
b4:b5:04:65:7a:df:55:6f:50:8c:8b:a2:64:ec:75:
d2:0c:8e:59:82:11:92:94:4b:ba:68:ff:e4:d5:7c:
16:10:bf:17:a5:2f:82:d8:e4:1e:3b:c6:57:a5:f4:
27:33:9a:6e:df:a8:5e:c3:f2:50:76:68:50:aa:98:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:52:48:7D:42:18:79:10:27:11:19:8E:A3:52:B4:ED:C7:05:24
X509v3 Authority Key Identifier:
keyid:F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/vWVSSH1CGHkQJxEZjqNStO3HBSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.150.0/24
Signature Algorithm: sha256WithRSAEncryption
30:47:30:81:73:b8:d2:56:17:e4:e9:81:e7:46:00:49:b7:37:
53:4a:0d:b9:fb:90:f3:25:b6:09:fb:ef:5a:cd:67:e3:fb:67:
3c:eb:f2:3b:09:ed:91:2a:c5:37:01:00:c6:66:be:75:4d:df:
cb:3b:21:7a:a5:80:91:28:9a:3e:d7:c7:af:31:6b:73:4e:0f:
39:f8:53:6d:09:2b:c5:30:94:60:68:41:47:61:d6:44:17:2f:
1f:9b:21:03:2e:46:76:67:c4:dd:4c:35:fa:20:22:02:46:81:
2a:b8:51:b0:70:3f:e7:73:d6:ab:4d:39:90:e9:a3:2d:5e:c0:
b6:d8:1c:f7:c0:a3:28:c4:db:f7:ba:11:df:db:65:ff:7c:36:
65:c2:05:fe:3c:fb:57:a1:4f:98:08:fe:51:4b:9c:53:42:ef:
fa:ef:9a:a4:cd:33:59:6a:6c:ef:99:c5:6c:ae:4a:44:f5:a6:
58:1d:7a:2a:88:86:90:41:95:61:72:93:4a:4c:60:8d:b6:d5:
ae:64:19:27:12:4a:96:58:a5:35:d5:ab:c3:a8:f0:d6:67:5f:
e6:95:51:4f:5f:8b:07:27:53:38:c7:3e:c6:84:16:49:c1:9e:
18:f4:44:81:01:61:da:58:31:90:cb:f8:14:a4:e0:e7:8b:60:
bc:a5:55:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:23 2025 by rpki-client