Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Nziil2EMOeS89XcbyB663WJtgt0.roa
File: Nziil2EMOeS89XcbyB663WJtgt0.roa (raw, json)
Hash identifier: Z9cXO+UEpDtnrb/OhqJN1ybOLJyIF1nKqZ3W52IP8HY=
Subject key identifier: 37:38:A2:97:61:0C:39:E4:BC:F5:77:1B:C8:1E:BA:DD:62:6D:82:DD
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019423D71EE9FECA60BAE296098E4DC6CE64
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Nziil2EMOeS89XcbyB663WJtgt0.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51235
IP address blocks: 92.242.208.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1e:e9:fe:ca:60:ba:e2:96:09:8e:4d:c6:ce:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3738a297610c39e4bcf5771bc81ebadd626d82dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:34:1b:14:fb:68:f5:99:0b:81:04:96:89:
e3:c4:a3:3e:64:a6:be:00:de:b2:8a:6f:5b:aa:51:
9d:a3:66:6e:bb:97:e4:1f:93:34:9f:0f:71:a2:3d:
6b:9c:d3:79:84:6d:c8:36:d7:3a:ab:f1:65:22:eb:
f7:33:cf:06:1f:a6:db:f9:72:dc:c2:71:e6:a5:9c:
8c:6f:cb:98:fa:d9:9a:9b:6f:47:bf:f5:5f:68:69:
12:43:56:26:46:24:57:72:52:2d:77:ae:5b:02:87:
01:c4:02:b5:99:c1:79:f1:cb:02:85:9c:09:71:5f:
f6:14:bc:5b:ab:a0:ce:46:11:39:af:1e:4c:ec:96:
d6:da:1a:9b:4e:76:e3:1c:d2:0c:72:a7:c5:54:ec:
aa:a8:d5:6c:91:7a:4b:5f:69:48:01:63:67:3a:a0:
6f:d1:af:b1:e3:2d:0e:04:1c:00:2d:5a:97:92:0a:
51:1b:d4:f6:a1:16:d3:f6:02:5b:4a:b9:cd:71:1b:
00:26:b1:a8:36:8b:c6:97:34:74:a3:f1:d7:fa:0c:
59:67:33:f7:fe:00:0f:d5:be:36:db:97:0c:11:f7:
d6:b2:5a:ca:77:91:c5:13:6e:a7:a5:91:01:2c:67:
a1:5c:90:d3:d0:ce:76:d5:d3:3c:df:0d:2b:18:9e:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:38:A2:97:61:0C:39:E4:BC:F5:77:1B:C8:1E:BA:DD:62:6D:82:DD
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Nziil2EMOeS89XcbyB663WJtgt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b0:ab:03:57:d9:fa:33:01:4e:92:ea:73:6f:00:5f:4c:69:
1c:90:04:4a:67:a0:78:c3:99:28:66:5b:0a:76:d5:78:c7:67:
7a:d8:29:13:b6:ec:b1:ef:e6:41:14:85:5f:2b:5c:4a:ab:ba:
8a:11:7b:62:9a:91:40:f2:f1:3c:68:45:dd:0a:30:b8:1b:8e:
d1:16:ad:45:be:27:98:16:48:09:c6:00:6b:8d:a5:10:88:6b:
5e:68:b2:fa:05:3a:4f:9e:39:08:de:83:59:40:4d:89:ab:ac:
d0:aa:c0:35:80:c7:62:43:f2:8e:3b:84:b1:bc:2c:5c:6f:24:
9a:d4:4b:c4:cf:a0:26:de:23:03:e4:69:c4:f0:16:90:4b:87:
4e:f1:c9:15:4b:bd:60:4c:75:53:c9:3c:00:1c:b8:40:08:5f:
22:8a:a0:62:3f:f4:8e:10:a6:53:32:03:1b:b3:15:75:8c:4e:
d1:08:2e:69:21:c7:eb:e9:a5:e6:d1:b4:59:45:67:ff:ec:42:
bb:d2:48:64:7d:d7:29:f5:fe:bf:c7:7a:9a:09:f5:57:fa:e7:
88:ff:30:88:14:cf:5e:19:ce:8d:48:d0:1d:14:b9:02:c9:08:
40:b7:23:ae:03:82:bf:61:59:7a:cd:2d:3f:6b:03:10:df:96:
db:24:23:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:26 2025 by rpki-client