Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/QUJMI6T079vAnH3l9zwXw928ZmQ.roa
File: QUJMI6T079vAnH3l9zwXw928ZmQ.roa (raw, json)
Hash identifier: Wdajzz8utqMZf2whyZzSa47zjjJBFXpoivuCqDwCnOI=
Subject key identifier: 41:42:4C:23:A4:F4:EF:DB:C0:9C:7D:E5:F7:3C:17:C3:DD:BC:66:64
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019423D722CB24B1AFA6029891BD8FBB5C0A
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/QUJMI6T079vAnH3l9zwXw928ZmQ.roa
Signing time: Wed 01 Jan 2025 21:48:09 +0000
ROA not before: Wed 01 Jan 2025 21:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216125
IP address blocks: 77.237.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:22:cb:24:b1:af:a6:02:98:91:bd:8f:bb:5c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41424c23a4f4efdbc09c7de5f73c17c3ddbc6664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:ad:7d:0e:c4:0c:54:c0:f0:c6:9e:3b:06:
59:2a:5e:61:80:21:57:5e:1d:07:70:d6:f1:bd:ac:
3d:de:a4:6c:d3:0c:8b:23:3b:06:88:a0:2b:d2:1d:
e5:5a:c2:78:1b:d5:cb:c1:33:e6:56:b3:ac:e0:89:
ed:82:77:fe:2d:10:3c:80:18:25:02:b2:3e:45:cb:
32:b5:33:6f:4a:93:12:7e:6c:6b:f8:64:49:a9:50:
7e:1d:a4:17:bf:c9:6f:d7:06:cc:97:6d:7b:fa:39:
aa:a7:ed:a0:58:21:7a:00:04:f0:86:c6:6b:1a:ae:
1e:5c:85:53:56:dd:55:7a:1a:b2:57:0b:c2:b1:3c:
05:6d:af:97:49:4e:6a:8e:bb:5a:ca:7a:a0:e6:5b:
5e:fc:f8:8e:d2:23:f7:ee:14:23:45:96:93:59:75:
99:6e:03:52:3d:fa:6a:80:61:eb:f5:e1:3e:c5:0b:
32:a7:b7:0d:59:ef:88:7a:a8:7f:ff:65:06:c5:c8:
b5:51:50:8f:95:25:28:a2:98:54:17:6c:23:d4:37:
9a:ef:51:83:11:83:0e:c7:f6:77:ca:06:26:c6:13:
2d:7b:03:78:eb:06:69:19:8e:6f:ca:0a:c9:03:cd:
98:1a:dd:30:69:86:6b:4e:53:9b:64:02:aa:1b:83:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:4C:23:A4:F4:EF:DB:C0:9C:7D:E5:F7:3C:17:C3:DD:BC:66:64
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/QUJMI6T079vAnH3l9zwXw928ZmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.64.0/24
Signature Algorithm: sha256WithRSAEncryption
90:61:05:08:67:c6:5d:c7:63:12:8b:25:a2:ef:e3:eb:86:b6:
47:5e:56:81:15:a2:ce:24:9a:cc:9e:8d:f9:2f:49:e7:32:a2:
ea:39:a2:6a:a4:a0:04:15:b1:48:2f:8d:ab:b7:b9:09:54:56:
c4:fb:36:b4:12:14:1a:f6:4e:f2:f0:44:dc:9f:b1:dc:ec:4d:
c1:4c:49:cc:31:2d:c3:00:5f:d6:0e:ff:1a:f6:81:86:e3:52:
32:e1:43:84:63:b9:88:e6:40:0f:aa:8b:eb:6d:e2:de:67:dd:
2d:7c:6d:78:58:62:b2:f6:64:d6:68:05:94:e6:75:11:05:f8:
c1:11:d7:dd:aa:1c:38:70:05:93:e5:22:a4:f3:8e:b1:b6:b3:
40:dc:e7:c7:94:36:19:ef:e1:fd:26:38:b6:8e:7c:71:97:a9:
d6:ca:87:c8:ed:1b:8b:d1:95:db:1f:09:0f:e6:40:2c:e5:4e:
fe:26:34:22:f1:8a:7c:7a:fb:fe:36:92:5f:d8:3f:e4:96:f5:
60:c2:76:2f:8e:f9:41:2c:0b:d4:b8:3b:44:8d:e6:b8:5d:6e:
18:3f:aa:91:1c:fa:09:fb:cc:06:01:9e:20:9c:77:e9:c3:b2:
3f:d3:e9:01:51:6b:ab:17:ac:c7:82:1f:18:4e:85:2e:84:96:
4a:90:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:45 2025 by rpki-client