Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/6dcs9XCmJdB19KenNxfQrwAyXp8.roa
File: 6dcs9XCmJdB19KenNxfQrwAyXp8.roa (raw, json)
Hash identifier: Bxoa+Pqgu+eQnNYBrE3SzkiaN/70VmuMRXR6vZPhGcQ=
Subject key identifier: E9:D7:2C:F5:70:A6:25:D0:75:F4:A7:A7:37:17:D0:AF:00:32:5E:9F
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 0189D4AE9416184406F62DD039C5F6ABC24E
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/6dcs9XCmJdB19KenNxfQrwAyXp8.roa
Signing time: Tue 08 Aug 2023 10:25:58 +0000
ROA not before: Tue 08 Aug 2023 10:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136933
IP address blocks: 85.8.180.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:ae:94:16:18:44:06:f6:2d:d0:39:c5:f6:ab:c2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Aug 8 10:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9d72cf570a625d075f4a7a73717d0af00325e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:6f:f9:8a:89:33:20:84:6d:11:70:c3:46:
dc:f1:f4:39:dd:73:87:27:ac:65:85:61:c1:5c:7c:
91:56:f1:68:18:a3:c7:4a:47:0c:af:92:e5:57:7a:
f5:30:18:4b:af:b9:5c:50:07:88:38:21:00:12:ee:
be:ff:24:56:84:52:2e:ce:89:43:eb:64:f3:2b:fb:
36:6b:5c:03:b4:e4:b7:7a:8c:35:68:8a:97:ad:fb:
3b:dc:6c:36:11:31:b6:ec:99:90:13:d4:85:14:56:
35:1a:04:a9:f5:00:30:df:f0:33:5c:a5:e3:ba:d5:
0c:da:e5:f8:a2:56:37:73:76:cc:e0:18:95:63:af:
9f:11:bc:1d:77:a6:3b:fd:37:b9:84:bc:24:d1:5b:
ab:53:78:45:d4:a4:31:c2:6c:37:3d:d4:1c:ea:24:
f3:99:1d:d7:18:0c:3e:9c:37:37:b1:43:07:9f:06:
df:05:6d:c6:95:54:cb:ae:e1:7c:43:7d:c1:c2:32:
f7:80:69:68:28:1f:cc:25:76:64:92:09:72:45:01:
91:b0:e5:64:75:63:82:5a:a5:a9:54:cb:a0:c9:24:
0b:9a:ca:c9:f0:e3:a8:81:1f:85:c0:fe:b8:91:0b:
4a:b5:c8:67:18:1a:5d:a5:91:34:71:83:a9:12:98:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D7:2C:F5:70:A6:25:D0:75:F4:A7:A7:37:17:D0:AF:00:32:5E:9F
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/6dcs9XCmJdB19KenNxfQrwAyXp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.180.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:3b:9f:40:96:ea:fd:18:72:38:bf:bc:45:99:d0:4e:34:2c:
08:e3:20:2a:c8:88:9b:37:27:69:c7:5d:3c:81:62:21:21:50:
80:16:7f:96:48:68:60:9a:f9:20:99:f2:c4:50:0f:f4:a1:19:
0f:a1:ea:98:91:03:f5:11:aa:d6:0b:6e:01:96:74:12:f1:f5:
f1:0a:21:be:3b:fb:bb:94:45:9d:e7:08:50:53:3f:63:cd:4e:
75:60:00:b9:ca:4b:11:01:a9:44:07:33:b2:fc:02:c1:3a:12:
a1:35:49:bd:15:b4:69:d0:61:bf:7a:6a:36:40:b7:e2:4c:1e:
ad:e0:a4:d2:51:3d:39:c7:59:96:02:c5:dc:48:0e:a3:6b:a8:
39:da:0d:c1:50:b8:93:71:55:8c:eb:14:05:94:9b:e1:67:88:
18:d9:4e:3f:a6:ac:63:56:df:fd:f2:b4:a8:d3:a9:09:37:69:
51:00:56:83:0d:7c:91:42:1e:86:5f:14:f4:fd:dd:52:49:6e:
a9:52:09:f8:3e:dc:4c:a3:20:f8:7d:76:8b:0a:ad:7f:8d:86:
3e:1a:a3:68:75:cd:46:56:68:4d:75:cb:24:ff:63:65:c9:f9:
2a:ef:e9:5c:b4:0d:70:58:08:5e:c1:bd:fb:71:a0:bc:83:c1:
e6:d0:b2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:36 2025 by rpki-client