Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/1izUEESqKvff_QBsh4AobzOALGk.roa
File: 1izUEESqKvff_QBsh4AobzOALGk.roa (raw, json)
Hash identifier: BdGxqukFwrh0ue6yz62zSSRgeEBo/k43o9/OuymAU/0=
Subject key identifier: D6:2C:D4:10:44:AA:2A:F7:DF:FD:00:6C:87:80:28:6F:33:80:2C:69
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019423D721192C767AB0FE09C21634E98D50
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/1izUEESqKvff_QBsh4AobzOALGk.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204834
IP address blocks: 92.242.201.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:21:19:2c:76:7a:b0:fe:09:c2:16:34:e9:8d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d62cd41044aa2af7dffd006c8780286f33802c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:dc:14:22:fc:37:0a:cd:6b:07:4c:19:42:
46:46:02:5a:a3:3f:fa:1b:62:96:1c:b5:60:4c:8d:
ec:7d:07:d5:56:1a:ce:b4:e5:dc:28:98:5b:15:dd:
0d:d5:d9:82:bd:d6:6e:54:45:d2:18:7f:de:06:0e:
cd:08:3f:7b:54:bf:36:13:17:40:79:3b:1a:b2:13:
65:b1:30:01:8c:93:9c:d0:3f:7a:ac:3b:66:65:2c:
66:64:06:85:22:99:1a:3e:51:f6:a3:78:d7:8e:1f:
62:c5:4e:f8:74:b1:f7:f1:0f:53:f6:5e:fc:52:7d:
9a:64:58:5d:55:e8:7c:60:72:37:04:de:31:68:44:
57:17:13:7c:70:0d:be:f8:38:6d:d6:c4:83:ef:0c:
20:9e:ee:74:54:35:2d:ba:9b:1e:0c:00:dd:39:82:
1d:86:84:17:79:82:15:97:96:43:1d:2d:7d:6d:80:
bb:56:5b:d4:9c:13:d3:99:47:35:c2:87:21:24:cb:
57:8d:fe:fb:23:a1:4f:34:a1:68:18:44:6e:0b:9a:
c2:5d:63:f3:32:ef:25:55:40:41:ff:81:69:d4:74:
15:b9:4a:f8:ed:79:85:47:78:ad:59:7d:32:a3:94:
a7:11:72:cb:11:64:07:da:8d:a1:8d:e7:c8:85:c9:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2C:D4:10:44:AA:2A:F7:DF:FD:00:6C:87:80:28:6F:33:80:2C:69
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/1izUEESqKvff_QBsh4AobzOALGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:66:f7:44:0a:5a:45:15:b9:09:4f:e2:e8:5b:c9:00:5c:90:
8c:ea:de:df:a1:ce:e9:97:46:fe:84:27:63:fa:73:94:e4:7c:
ef:60:85:3e:56:8e:90:f3:e6:82:be:ca:68:a8:2c:dc:f4:94:
26:71:2c:30:99:96:43:ee:ca:af:ee:51:86:20:14:75:1d:08:
4b:47:cc:11:eb:2a:3c:cd:e7:77:62:c0:b1:7b:ea:52:18:32:
c4:8a:8b:0d:6a:11:9c:2f:7f:96:b8:c3:30:29:62:64:13:93:
9c:72:4a:09:87:0e:e1:bd:f8:c6:a0:34:d6:3e:2a:61:1a:75:
60:37:59:9a:75:fd:e3:16:57:36:fe:a3:70:27:52:09:79:63:
c9:18:af:a2:b5:e1:ef:4a:c6:96:5b:2b:2d:2c:39:28:e1:55:
8e:8a:58:3d:1d:10:0a:2b:24:1d:03:0c:f5:a4:bc:ac:e3:e7:
eb:84:d9:79:3f:bf:16:a6:b3:44:b0:8a:d9:47:e9:b2:b7:25:
80:ed:8e:69:f2:a3:b8:df:da:a1:1c:97:be:a1:7c:59:51:67:
f4:01:58:f4:10:c1:3d:e7:03:39:62:3d:ec:0e:22:29:da:08:
b4:48:94:2b:1e:ad:68:eb:b6:6e:b0:67:c1:8d:98:61:66:60:
0f:45:63:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1yEZLHZ6sP4JwhY06Y1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjUwMTAxMjE0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjJjZDQxMDQ0YWEyYWY3ZGZmZDAwNmM4NzgwMjg2ZjMzODAyYzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2jcFCL8NwrNawdMGUJGRgJaoz/6
G2KWHLVgTI3sfQfVVhrOtOXcKJhbFd0N1dmCvdZuVEXSGH/eBg7NCD97VL82ExdA
eTsashNlsTABjJOc0D96rDtmZSxmZAaFIpkaPlH2o3jXjh9ixU74dLH38Q9T9l78
Un2aZFhdVeh8YHI3BN4xaERXFxN8cA2++Dht1sSD7wwgnu50VDUtupseDADdOYId
hoQXeYIVl5ZDHS19bYC7VlvUnBPTmUc1wochJMtXjf77I6FPNKFoGERuC5rCXWPz
Mu8lVUBB/4Fp1HQVuUr47XmFR3itWX0yo5SnEXLLEWQH2o2hjefIhcmVsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNYs1BBEqir33/0AbIeAKG8zgCxpMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvMWl6VUVFU3FLdmZmX1FCc2g0QW9iek9BTEdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPLJMA0G
CSqGSIb3DQEBCwUAA4IBAQBLZvdEClpFFbkJT+LoW8kAXJCM6t7foc7pl0b+hCdj
+nOU5HzvYIU+Vo6Q8+aCvspoqCzc9JQmcSwwmZZD7sqv7lGGIBR1HQhLR8wR6yo8
zed3YsCxe+pSGDLEiosNahGcL3+WuMMwKWJkE5OcckoJhw7hvfjGoDTWPiphGnVg
N1madf3jFlc2/qNwJ1IJeWPJGK+iteHvSsaWWystLDko4VWOilg9HRAKKyQdAwz1
pLys4+frhNl5P78WprNEsIrZR+mytyWA7Y5p8qO439qhHJe+oXxZUWf0AVj0EME9
5wM5Yj3sDiIp2gi0SJQrHq1o67ZusGfBjZhhZmAPRWNu
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:16:56 2025 by rpki-client